This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft
File:                     bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft (raw, json)
Hash identifier:          +rDZQfSP09dfwMZGldGEiALBY+u1cYgGfeTCLEXqcJY=
Subject key identifier:   4A:2F:CC:13:61:C1:CF:B0:FA:A9:91:46:6C:DD:BA:2A:E2:5C:C9:37
Authority key identifier: BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01
Certificate issuer:       /CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
Certificate serial:       010D0C9F4328584C4334CFCAC63893689CE3D280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft
Manifest number:          010D0C9F43285842ED8224AF59A78D58A1C61AF3
Signing time:             Sun 21 Dec 2025 17:00:08 +0000
Manifest this update:     Sun 21 Dec 2025 17:00:08 +0000
Manifest next update:     Wed 24 Dec 2025 17:00:00 +0000
Files and hashes:         1: bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl (hash: oJjzQ67lRYOfKlB769DrDZi5uhZbDEjnJPmEauU0GTA=)
                          2: ec4f0c2f-b502-3cac-8565-6782cedc472f.roa (hash: FsvcUK6jJrNYq2Cpokr8VxKX9R825qqar5UpCIe7IUQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:43:34:cf:ca:c6:38:93:68:9c:e3:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe5a38f-5ff4-4b97-a459-e25cfc9caa71
        Validity
            Not Before: Dec 21 17:00:08 2025 GMT
            Not After : Dec 24 17:00:00 2025 GMT
        Subject: CN=ff946810-ba6b-4754-96e8-829c12a7fc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ee:30:b8:ba:34:c3:2d:9f:7c:16:33:c9:30:
                    63:96:3f:b8:1e:fd:f5:26:81:09:20:c9:20:f5:47:
                    0e:21:6b:93:2d:1e:70:cd:88:42:f8:21:c8:36:1b:
                    f8:4a:ea:da:1d:60:cb:92:6a:82:92:91:a0:0a:f1:
                    7a:d3:6d:49:65:64:1e:18:e9:bc:74:e2:90:a4:1f:
                    3a:c4:1c:32:45:76:47:ad:f0:ea:64:07:8b:48:ba:
                    c7:80:0a:5e:56:12:82:33:4f:03:34:49:5b:78:42:
                    04:3d:ae:b0:fd:9a:ca:cf:fe:01:af:03:be:87:1e:
                    a9:9e:ea:66:3e:83:12:4c:5d:75:ad:a0:e8:ad:df:
                    d3:3b:b7:0d:9d:1f:0d:9c:d7:44:be:06:ce:8e:8d:
                    57:aa:c3:b2:f7:dc:1f:24:1a:f3:e4:1c:44:0f:37:
                    df:b1:e4:bc:98:a9:0f:d5:45:02:1b:92:e1:0c:c5:
                    0a:68:46:dd:63:14:c8:01:0c:0d:81:42:cb:e4:a4:
                    13:69:ee:7b:5c:51:48:5f:ca:4d:ac:5b:d1:43:b9:
                    39:bf:57:fd:24:07:fc:20:f3:b4:84:65:fc:8d:cf:
                    e7:c7:ba:c6:2a:f3:ba:ef:3d:3e:58:e5:ef:f7:56:
                    6f:fb:62:7c:be:23:e8:7c:e6:a8:c6:a6:95:02:68:
                    72:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2F:CC:13:61:C1:CF:B0:FA:A9:91:46:6C:DD:BA:2A:E2:5C:C9:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.crl

            X509v3 Authority Key Identifier:
                keyid:BC:36:F0:C3:90:91:7B:B8:CB:F7:FE:00:75:72:5B:AF:FB:59:8B:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bfe5a38f-5ff4-4b97-a459-e25cfc9caa71.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f1:85:07:4b:83:7f:29:38:6c:e4:c0:66:83:c5:7a:0d:e4:
         b6:a2:68:9c:1c:14:b6:f6:9f:6c:53:70:64:8e:78:fa:74:63:
         6f:9b:4a:49:13:f2:1b:0c:25:b2:97:bc:96:26:9f:7d:c8:44:
         43:a3:71:f5:11:c6:bf:14:58:a3:62:64:d8:db:fc:2e:2f:43:
         ee:2a:98:2a:42:74:5d:3c:a9:35:77:5c:5c:e6:c8:9a:5d:73:
         b9:cb:cc:92:4f:bc:ba:69:e1:a7:ce:44:56:9b:e5:50:fb:58:
         b1:95:dd:da:06:91:27:f7:01:a8:30:63:2e:1f:ad:fc:ba:36:
         4a:4b:73:2f:f8:10:0f:7c:42:3b:71:e6:84:77:2e:89:af:c2:
         d9:1d:32:8a:33:e5:19:18:cf:c4:72:4a:47:cc:dd:42:17:5c:
         0a:b5:09:f1:35:cf:08:6c:89:0a:c9:67:74:89:31:6a:5d:a8:
         ad:4c:d6:e5:dc:96:5c:e4:b8:23:40:30:bb:f1:07:b8:d0:d2:
         fc:80:ce:14:cc:e9:9e:36:dc:e0:21:c1:f0:ce:c8:a8:36:4c:
         ba:a4:7c:30:84:30:0f:41:03:50:f0:fe:90:b7:e7:ff:fc:17:
         41:c4:d1:a2:ae:f0:be:7e:82:56:54:a0:94:a8:76:40:c6:8d:
         eb:89:f9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 09:29:56 2025 by rpki-client