This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft
File:                     ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft (raw, json)
Hash identifier:          mNbg1xflqAapmHy6x9CG2xZnDziXgjSPUUc14N99fBM=
Subject key identifier:   6F:D3:8B:46:FE:1B:BC:EE:38:92:7A:C5:5A:F3:A5:2C:F8:DC:5C:9C
Authority key identifier: 88:93:B7:98:DC:F4:AB:C3:B0:AB:85:11:37:4D:66:45:90:71:DA:D0
Certificate issuer:       /CN=ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2
Certificate serial:       010D0C9F4328584C4658CD8D486E887F12691EC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft
Manifest number:          010D0C9F4328584C2219CCB3EFA69135A0A1C110
Signing time:             Mon 22 Dec 2025 20:00:03 +0000
Manifest this update:     Mon 22 Dec 2025 20:00:03 +0000
Manifest next update:     Wed 24 Dec 2025 20:00:00 +0000
Files and hashes:         1: 1d37bc0d-5afa-3299-8220-315f6e81a335.roa (hash: nbAaTxhKZQl8xZSPQujsndqdIKxDAIgXvZOgQd5db0s=)
                          2: 449b177a-b3f4-37ea-949e-453399472d83.roa (hash: UMRX3D/n+5EqcbJj34vapm42NO88dfVtvz48fQcMmww=)
                          3: ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.crl (hash: T5TbjlJI4fWWqLvbgZEHhkzq/8+cjHYFxuQ4jJjAa5s=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:46:58:cd:8d:48:6e:88:7f:12:69:1e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2
        Validity
            Not Before: Dec 22 20:00:03 2025 GMT
            Not After : Dec 24 20:00:00 2025 GMT
        Subject: CN=2195ef78-2b1a-4eb3-9a27-a08e7782e0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:b5:45:94:ab:6d:46:ee:16:e6:cb:62:b7:
                    83:a1:ed:ca:03:6a:34:61:4e:be:98:3b:22:a7:a4:
                    6c:39:c0:8c:90:59:87:b1:63:48:72:9d:1a:00:d4:
                    3a:9f:47:87:14:94:6e:9a:e1:c9:31:9f:a1:3f:9c:
                    a3:64:3c:f5:97:0b:65:96:a4:bb:52:c3:db:e9:00:
                    4e:cf:ff:84:25:33:a1:f1:9f:9f:84:ed:35:92:c8:
                    87:70:80:30:a3:7d:43:fa:3b:92:91:d4:d7:b6:a4:
                    2d:54:f1:a4:3f:ab:f7:26:e5:5f:64:15:de:fd:a4:
                    7d:54:7f:21:84:53:93:a0:2c:fe:5e:50:b0:22:9f:
                    0c:aa:aa:fc:b4:e8:61:cd:38:0f:14:d1:fd:57:5c:
                    66:0a:5f:50:78:6b:18:69:62:47:db:89:f4:10:05:
                    62:cc:72:68:78:5b:16:9a:17:1b:39:be:78:ae:66:
                    06:df:17:9b:04:d3:6b:c6:07:64:15:3d:c5:31:53:
                    53:81:a4:63:cd:be:39:f6:cd:51:62:98:6a:13:c4:
                    a0:d3:da:9f:52:6a:62:98:fc:8e:f2:6a:57:c5:08:
                    f7:91:23:0a:36:97:5c:de:dc:af:25:4c:57:c6:86:
                    b5:62:c6:3f:3a:fb:6f:98:ae:04:c7:5b:3c:9b:c7:
                    41:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D3:8B:46:FE:1B:BC:EE:38:92:7A:C5:5A:F3:A5:2C:F8:DC:5C:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.crl

            X509v3 Authority Key Identifier:
                keyid:88:93:B7:98:DC:F4:AB:C3:B0:AB:85:11:37:4D:66:45:90:71:DA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ac0cfbf4-b6ad-4f3a-8eec-e382df2938c2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:34:d2:66:76:76:c3:80:cf:83:ff:6f:65:db:ca:d6:08:65:
         9e:05:9a:f2:f2:5a:f3:87:f1:81:62:42:ab:86:17:b5:92:b6:
         be:d1:db:0b:a3:86:3f:73:21:c0:ac:ca:d1:a3:a6:c0:8c:56:
         36:6e:79:b7:2a:9b:6c:2a:b9:fd:9c:b0:67:40:31:2d:88:0f:
         55:45:e3:3a:df:33:fc:63:b9:2b:86:7a:a8:da:46:dc:59:1a:
         03:d4:b3:43:c2:be:8c:4a:80:75:ad:61:54:51:88:84:a1:46:
         9c:07:e3:ab:c1:b2:45:fe:68:91:af:1f:0f:d0:83:de:8d:d2:
         01:a3:d5:0e:aa:fe:0d:88:7d:40:a6:e4:4a:6c:6b:e0:bf:1c:
         d5:1c:21:a8:51:6e:9d:c2:bb:5b:68:2a:fa:83:48:36:8f:d1:
         52:65:ab:24:f8:13:64:81:6b:d3:94:0d:9b:85:41:07:87:c2:
         c0:30:aa:d8:a1:59:34:e4:e4:d4:b5:2a:cd:d9:42:72:9e:ce:
         84:f8:df:5f:2f:58:14:f7:d5:5b:d6:24:c1:c1:23:e5:38:b7:
         1e:59:d4:ed:2a:39:dd:01:3a:00:53:a2:23:c6:99:8b:ec:91:
         a9:b9:f1:55:92:30:b6:93:ef:f2:a8:e5:97:09:ac:69:5f:ff:
         8c:8b:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 21:42:51 2025 by rpki-client