This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
File:                     8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft (raw, json)
Hash identifier:          cCyZutE9dM2AMnv4qKceqLiuZYEeGIWQy/bQegOwahE=
Subject key identifier:   B2:85:72:68:13:78:A4:7B:9D:0C:DD:15:A0:1A:2D:DA:4B:5F:56:09
Authority key identifier: 46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF
Certificate issuer:       /CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
Certificate serial:       010D0C9F4328584C402E8575194973A55E93EB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
Manifest number:          010D0C9F43285842EA6511F68AE8111CAA6098FC
Signing time:             Sat 20 Dec 2025 15:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 15:00:03 +0000
Manifest next update:     Tue 23 Dec 2025 15:00:00 +0000
Files and hashes:         1: 1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa (hash: K4hsRqCt+T+tee8uGTQgIBE1GmZDMwegPfChDm6qRbM=)
                          2: 23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa (hash: 2IjMeP3h0I92py98sxrobjNkflT/ryAVCJ+l+HLaG8c=)
                          3: 8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl (hash: wsmtsi/uDgXfq22ccuKF0rxcOZY6KmNtVBk/TMB40B4=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:2e:85:75:19:49:73:a5:5e:93:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
        Validity
            Not Before: Dec 20 15:00:03 2025 GMT
            Not After : Dec 23 15:00:00 2025 GMT
        Subject: CN=928157f7-7e73-43e3-af30-fbdf2b202a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:46:6a:83:5f:53:f0:3a:ad:e7:98:b0:80:
                    d3:08:b1:39:29:75:aa:db:31:d6:67:d4:fd:ee:23:
                    ce:11:a5:1f:d3:8d:46:b0:fa:4b:6f:f9:5a:33:4f:
                    51:c9:ed:13:8a:b2:71:13:df:a4:a6:52:9b:98:70:
                    d7:75:79:d9:3e:59:e1:94:fa:d2:3a:53:e5:1d:d5:
                    8d:2d:57:0b:7a:35:5c:54:ab:b3:eb:c8:70:d8:e0:
                    6f:3d:16:94:7e:1e:0e:bc:cc:a3:f1:c7:42:a6:43:
                    42:7b:4f:e2:3f:a5:56:21:00:6d:70:5f:74:10:79:
                    78:cb:d8:8d:e2:36:d7:28:55:0a:b6:50:18:f5:12:
                    6b:62:2d:11:57:fd:89:2a:14:97:0a:5e:4f:92:ba:
                    50:ef:0a:2e:96:8d:de:fe:c7:ba:d5:05:bd:f5:93:
                    04:93:2c:de:c9:da:1a:93:21:37:54:50:03:bb:77:
                    16:d8:ce:f1:a2:ad:0d:2a:e2:1a:e9:96:bc:7b:38:
                    27:a6:9d:3a:e6:5a:d5:47:8e:86:2f:cc:fb:d0:ce:
                    ce:d3:85:48:ee:56:ad:a8:ca:06:37:24:66:dc:17:
                    e8:5b:ef:50:73:c3:17:63:f9:86:77:ad:ca:e0:3c:
                    09:e2:8f:6f:f7:a8:95:69:81:f8:e2:44:24:4c:27:
                    68:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:85:72:68:13:78:A4:7B:9D:0C:DD:15:A0:1A:2D:DA:4B:5F:56:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:f0:8c:07:72:d5:e7:8f:18:69:fe:3a:55:48:ad:69:bc:7d:
         7c:c8:06:60:2c:d1:d5:1d:3a:80:96:96:5d:6c:5a:41:00:0c:
         1b:28:80:03:37:4f:de:00:a1:c2:89:0e:5a:a1:bd:6b:d5:05:
         e1:25:77:60:d0:a1:08:4d:cb:d6:47:d7:51:b8:a9:64:e3:75:
         59:ea:e9:ab:be:39:6d:5f:70:b7:a4:3d:bb:ef:ec:ac:01:d7:
         f6:bd:49:1c:e6:7e:63:8a:ca:6c:99:da:c2:06:07:64:36:5f:
         29:11:ac:83:90:73:48:29:79:c3:a0:48:fd:9b:99:23:a4:04:
         6a:88:52:f8:ca:4a:56:dd:62:4a:5f:26:60:fd:7b:ff:94:98:
         7b:f0:7c:bb:f8:8b:0d:da:6d:53:4e:ca:e6:3b:22:07:a2:f6:
         9a:91:a0:f3:c0:4b:8f:09:20:8d:c1:fa:a6:e3:92:7e:ae:f1:
         6d:6e:ab:b4:3b:39:96:eb:0f:ec:e1:94:be:25:af:3b:6f:a4:
         68:5b:36:70:bb:8c:b8:5e:59:8e:46:10:ea:94:88:aa:a9:30:
         ea:87:6f:68:82:09:74:d2:2d:7f:93:18:e7:31:4f:a6:c5:0b:
         b7:3b:45:c5:02:54:c7:3c:0d:9f:43:fa:49:f6:81:28:f0:b2:
         77:f4:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 06:43:12 2025 by rpki-client