This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
File:                     acfb2995-9ee5-423c-a521-8d6490303e2d.mft (raw, json)
Hash identifier:          56iCIxemv33I4xa55FNOp54ZwBdS7pJ4RujoGcRuuUQ=
Subject key identifier:   F9:4B:46:2B:E1:08:63:F8:AF:7B:17:AD:0A:57:1D:BE:72:41:41:9B
Authority key identifier: 7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91
Certificate issuer:       /CN=acfb2995-9ee5-423c-a521-8d6490303e2d
Certificate serial:       010D0C9F4328584C35B6759E017AC24A41369880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
Manifest number:          010D0C9F432858423DFB5F50303DB869D588F94D
Signing time:             Tue 16 Dec 2025 21:00:04 +0000
Manifest this update:     Tue 16 Dec 2025 21:00:04 +0000
Manifest next update:     Fri 19 Dec 2025 21:00:00 +0000
Files and hashes:         1: 051f4978-4462-3594-b498-d1661d170315.roa (hash: HzFdErCl4maJVPyJc3O+mRvy6ux2tzRSwI22ol6rkXE=)
                          2: 1ac70efc-7226-3fd3-8135-b2bc19989620.roa (hash: JWKOpvQmFsEhcqmQfzGECHHCI3tT6kr2PUAQSssThtw=)
                          3: 37a7ffc2-880e-3b67-8846-14d4faa2a82a.roa (hash: vcyYlBykTZijNrwTCE4UJ+21LvekfssbgCn1YOMyqxY=)
                          4: 4484c7ba-6c82-3302-b1ed-f3ffa9fd750a.roa (hash: mYoHwI1tzLRXjDd7+/Pm0bmypQjGauMcSJ8gn3/lunY=)
                          5: 61f92826-ffe7-3995-97b5-5664e2a3321e.roa (hash: DQJcgJrIe7XQPBBabI6PjGN6B08fHNxIIpzq91v8C/I=)
                          6: 71574c49-140e-3504-808b-fa9648d30265.roa (hash: s1ItW0dksOAgllKc+AZyfjoBnjqaeS9sUbbMmjB7xWg=)
                          7: 772bfdfb-433d-3573-add3-cc99aa19c741.roa (hash: 2Oc7oIWig4H0WGM5C8EbbqvcO0V/HPjik7pB9Np4IPw=)
                          8: 880d6e44-6ddb-3e06-b156-9680c5173b8f.roa (hash: Mwd/rN6wQwFKVhy/MJXIgZ3ecLwIsQ3ucxBo0etewjE=)
                          9: 8c676acb-c942-381b-ba43-78f9a557e6b2.roa (hash: 2AIbA8IiCpO7yWYUyCm2BsK4FnTaVVTEL+HHTaUbaPo=)
                          10: a031a335-202c-3e0f-a19e-83ef1e77886a.roa (hash: JYzfYXSrXoul4cGPwboMASfZs3dfKPEFRngVoInn0Dc=)
                          11: acfb2995-9ee5-423c-a521-8d6490303e2d.crl (hash: 0yQB1ynXqsxyIib9Ix/wE1w96P80me3l2ZwHGcYezUk=)
                          12: b3842d34-f638-3a85-99e9-9c2e2f3422d8.roa (hash: 0Pz3LS/kaq/95iKWV/5C3jP5a7y/+yq0AN74Ckkk2aU=)
                          13: c7154dd3-30b5-3358-ba6e-ec14811a4892.roa (hash: uImMMUQOTmfDVLbgUtUn8qAYFTb7QZLPYWjv2nWR/SY=)
                          14: cb1cf518-1add-3c7b-8bf6-803c23c623ee.roa (hash: W41j5BWgMSBBKjd5woECsuUt6TKsLN99oakOfp6YZo8=)
                          15: cc46af26-a8f4-31f1-a878-84ce51c855cc.roa (hash: Hhrp5aRgm3TsYsxUU2wCxawBkQaId8EhrdjmpxTB8Wk=)
                          16: d3ebc08b-a6eb-3df3-bb70-a864a2584a63.roa (hash: b4rHV8UMhOmppA1d+15xo+6kzwzueDCfZNBU+sovzOM=)
                          17: d72a9570-1471-376b-ab21-ae1ce32b9ec1.roa (hash: aJ6gukdORMN2T6J15J+c7Zp4rWjrbtxe3t1ZK6iyisc=)
                          18: e3042ad4-5abb-32fe-8f95-6c45f821f794.roa (hash: roTu/t1a5dnXPzxQDsxnH479DHpbPFHBY5p12TIYwSk=)
                          19: f6772905-9e78-3f55-87a4-e8da870aa987.roa (hash: KvAwELbZcV7d6l06fVZCCfpZB92jlidE2gwqMtf+lEk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:35:b6:75:9e:01:7a:c2:4a:41:36:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acfb2995-9ee5-423c-a521-8d6490303e2d
        Validity
            Not Before: Dec 16 21:00:04 2025 GMT
            Not After : Dec 19 21:00:00 2025 GMT
        Subject: CN=6d0891f7-f285-4933-afb5-1e9053524afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:ae:cd:fd:5e:c2:f3:a5:83:85:71:a7:92:
                    2a:60:a2:c6:99:e0:2f:25:b0:98:37:4a:95:3d:95:
                    8d:56:2d:84:ff:a8:6e:d1:20:bd:28:fb:90:5f:cc:
                    db:d9:5a:f2:f2:60:a8:47:8c:4c:21:9d:af:8e:ee:
                    85:b1:69:bf:89:ea:3d:83:7b:4f:b6:b2:ab:5e:7b:
                    46:4d:9a:b0:a8:9c:30:92:13:8c:b0:23:90:93:fd:
                    fb:86:45:b2:b1:c5:72:72:f0:f8:47:09:1c:65:68:
                    c7:8c:79:b8:2d:c3:62:ab:c9:ae:a5:f6:ea:78:6a:
                    96:78:65:ca:00:a2:fa:d9:49:32:bd:60:5e:ed:fc:
                    17:cd:15:83:ea:2b:1d:5c:26:71:4d:f2:4d:c7:e7:
                    cb:6f:72:d4:69:e6:2b:01:35:db:a8:88:8d:fe:e9:
                    e2:1a:87:1c:51:dd:53:ee:3d:58:18:97:13:cb:c5:
                    01:ae:e0:d9:6f:e8:31:3a:9f:67:ec:1a:c8:ce:30:
                    59:34:52:a3:99:18:2e:e0:35:eb:a8:94:25:9d:b1:
                    4c:a8:f1:2b:54:a7:28:ce:35:0a:2f:86:95:ef:38:
                    3f:df:33:33:7e:3a:4b:5d:0f:92:64:4a:a9:b9:d1:
                    44:09:d2:27:13:00:db:30:75:6b:89:d1:85:11:24:
                    14:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4B:46:2B:E1:08:63:F8:AF:7B:17:AD:0A:57:1D:BE:72:41:41:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d/acfb2995-9ee5-423c-a521-8d6490303e2d.crl

            X509v3 Authority Key Identifier:
                keyid:7A:14:A8:2A:46:38:BF:39:C0:FE:45:0A:C6:FA:8A:B6:9F:F0:A7:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/acfb2995-9ee5-423c-a521-8d6490303e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:41:c6:ed:0b:45:44:c2:d9:23:6b:93:d3:2b:d9:bf:bd:
         01:9d:90:d6:27:64:fb:9b:41:77:02:cf:3d:47:d7:a8:71:44:
         01:17:7a:8f:00:17:24:31:7d:3f:43:be:55:e1:72:65:a5:d0:
         69:90:08:71:d8:8d:ae:03:54:10:8e:6c:e3:11:7f:28:d8:ab:
         9d:d8:6c:5d:91:0a:14:64:ae:d0:46:c7:f0:74:01:d8:17:05:
         c6:9d:c2:97:91:a7:8c:2c:47:7c:ae:ca:1b:74:9c:bd:8f:f0:
         1a:ca:d3:41:a6:88:ef:1d:ad:a2:ea:eb:28:4c:23:00:c4:01:
         39:b0:97:43:6c:ab:66:c0:d3:5c:b7:d8:99:03:4a:d4:d2:08:
         4b:2a:e6:c9:64:ba:84:43:9e:12:38:6a:9d:51:20:21:4c:b0:
         50:cc:57:99:66:4a:21:90:0f:a6:07:d9:57:b1:36:ac:26:e7:
         2e:98:87:67:ec:ed:80:ff:a0:83:53:2f:ae:51:63:95:5b:a6:
         c9:c7:fe:c9:09:11:09:62:d2:26:99:cb:2b:a9:f6:78:27:a7:
         0f:64:95:89:8d:99:bd:a2:ef:15:2e:6e:a2:fd:95:6f:89:54:
         80:13:a7:d5:fb:60:90:91:86:91:17:42:68:d8:52:53:80:07:
         e2:d2:e6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:46:37 2025 by rpki-client