This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
File:                     d3bf28f7-eba5-4254-a572-761a872427b5.mft (raw, json)
Hash identifier:          m9w3scVpsN47A9mL4pN9w2w8t0b4bu+n0SJEnfdb+dk=
Subject key identifier:   21:F8:CC:7B:A0:E4:C4:FF:6D:E8:E5:CB:83:25:25:DD:B7:46:CF:5C
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584C43705E8325973B8567723600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
Manifest number:          010D0C9F432858428C0BBA437144D71ED8B54DD7
Signing time:             Sun 21 Dec 2025 19:00:08 +0000
Manifest this update:     Sun 21 Dec 2025 19:00:08 +0000
Manifest next update:     Tue 23 Dec 2025 19:00:00 +0000
Files and hashes:         1: 1bea0700-2bfc-3937-9a52-46b59459456c.roa (hash: fnyU5f0MljFCss5SapzQChstsmUjqtQHLPTdixuwlOc=)
                          2: 2d512d2b-840f-30cb-88f8-f79128126588.roa (hash: zV4UFS2sKRaKsHxgB2a4c8boGh3ShhQIZt2ytL/+rMY=)
                          3: 38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa (hash: qSsi/362OuWZVwtdP6pk5DlRIvk8fQmqOMWZSzPsHSs=)
                          4: 8eb6de6b-8c71-3506-8c2b-efa177569f89.roa (hash: QhHo8Wg2mBTRHw10vrZXV/LqEZ2PZbZp3HcC2gXLHZQ=)
                          5: d3bf28f7-eba5-4254-a572-761a872427b5.crl (hash: Bexmrd/FO/BGoq9Mqq+CsJQR+yDuz7E1/IYhT+95bxY=)
                          6: ea93ae24-34e7-3c83-9477-44557229880c.roa (hash: eFiq7od6/9vubyyQwGWG+h8iOqRgDdVJ1XmbSarZ5sg=)
                          7: f315e10e-f697-32b0-97e5-9bcb2cc83dcb.roa (hash: Hg42xWfpzlWGmiBzGcTfUm47p4Y8KLrJ1ZN4c+K9wOE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:43:70:5e:83:25:97:3b:85:67:72:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Dec 21 19:00:08 2025 GMT
            Not After : Dec 23 19:00:00 2025 GMT
        Subject: CN=f910b86d-5492-40a0-b613-4218a31ae308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a0:93:fc:76:c7:e8:79:85:e7:3b:58:0f:5c:
                    91:91:95:d9:1b:c6:b6:fe:0e:d0:c0:71:cd:90:1b:
                    0f:60:fd:ad:8f:b3:fc:f3:93:c4:32:9b:29:0f:3f:
                    92:60:11:b4:67:76:9b:17:5f:35:bc:38:0b:dd:0e:
                    a5:87:ff:68:75:31:06:99:19:70:8c:22:14:30:59:
                    30:6f:7a:2f:47:33:c6:8a:e9:af:a6:14:92:12:bd:
                    d9:4e:1d:e2:5e:23:a0:14:48:f1:5f:f5:50:7b:6b:
                    c6:98:f9:82:d9:af:a7:82:48:d2:09:a1:74:9a:ed:
                    8a:4d:05:ec:51:24:03:15:79:b3:4c:e6:bb:39:43:
                    e6:e2:0f:a6:67:fd:c3:41:6b:77:05:92:a9:f6:62:
                    28:ce:40:e1:78:4b:87:49:25:e2:f9:83:e9:7e:e3:
                    de:b0:24:a1:20:94:f4:81:bf:bc:f0:2d:07:73:40:
                    e0:92:04:fe:21:3e:dc:eb:8f:90:c7:20:8f:25:53:
                    1a:59:45:b4:67:7d:3b:1f:0f:dd:84:c6:2c:f0:bb:
                    fb:7c:08:20:20:93:8a:97:41:cd:b7:00:f1:36:22:
                    91:10:39:97:cf:a7:82:d6:ea:98:7f:92:a1:bc:d3:
                    c9:b7:77:56:a7:7c:00:e4:80:e9:19:e3:9b:a0:9a:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F8:CC:7B:A0:E4:C4:FF:6D:E8:E5:CB:83:25:25:DD:B7:46:CF:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:53:2a:5e:31:ac:69:81:2a:11:d8:91:4c:f3:d6:1a:af:
         f4:fb:73:e8:d0:1d:08:22:d3:e7:43:29:25:6a:77:0f:6c:0d:
         de:d4:73:43:93:7d:67:31:bf:34:50:e8:42:08:ee:a8:f4:1d:
         ac:02:d8:4e:ca:3c:4d:a3:a3:80:41:59:27:ac:5a:8f:fb:79:
         19:f2:eb:da:de:88:2b:99:33:d5:cb:b3:34:7c:96:c1:d3:f6:
         b4:24:f4:52:2c:98:9c:58:f1:6f:70:c3:01:97:15:1b:ed:91:
         f1:c2:46:8e:a7:ae:ee:13:0c:bc:e2:3f:d1:21:05:7c:0f:93:
         16:a4:7c:ab:b5:c8:06:c9:42:8a:c7:bf:a7:7d:19:a4:97:38:
         59:75:44:5a:23:e3:09:53:53:73:36:48:13:53:99:94:93:59:
         72:3e:ec:95:39:f0:19:97:31:dd:1a:7f:58:ab:0a:21:8f:00:
         7d:e3:a1:51:6f:ef:85:aa:2b:62:78:4b:30:85:db:84:62:b7:
         b9:b9:01:c3:71:ea:74:12:d4:4d:2a:48:d9:c2:83:d8:a0:e9:
         a4:aa:f6:8d:c4:09:80:36:f9:3c:f9:6c:15:90:0d:b0:01:c2:
         49:90:62:43:e5:58:3c:68:18:74:1e:59:ee:b9:71:7a:62:fb:
         0c:eb:e3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:21:13 2025 by rpki-client