This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft
File:                     f7f8499b-2456-4be8-bad9-ced434198fa0.mft (raw, json)
Hash identifier:          O+vnyEKIYJiMZeYzfveQM+Mqz54q7zsqr9YO7T50eVU=
Subject key identifier:   07:DD:59:6C:6F:35:F8:5C:AC:59:52:8A:16:DE:0E:70:C6:A3:7E:93
Authority key identifier: 35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A
Certificate issuer:       /CN=f7f8499b-2456-4be8-bad9-ced434198fa0
Certificate serial:       010D0C9F4328584C404C5BF5DB78E509A7196B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft
Manifest number:          010D0C9F43285845F85B198759DAA436B31B74D3
Signing time:             Sat 20 Dec 2025 16:00:09 +0000
Manifest this update:     Sat 20 Dec 2025 16:00:09 +0000
Manifest next update:     Tue 23 Dec 2025 16:00:00 +0000
Files and hashes:         1: 1905bf21-ee68-3188-bef3-4a4a821e314f.roa (hash: /m7HS9fRyI7xRiUYPGE1INl4cLn7qeTcSulZVq2VKUE=)
                          2: 20e88352-3861-3495-97d6-3a5e655c6113.roa (hash: OHJGi3gpmQihyaN7J48Lt5BUBl+Ke7GOdRwDOnLb+aU=)
                          3: 9deafa7c-e974-3fcb-bd6b-14f2a0b66b2a.roa (hash: l3nOAWe4Ad5QALM8aSK9FdtSVb6y8SDRHJLCKPXVwFM=)
                          4: e27c9ede-b44a-3f68-a2fc-2ace50732c56.roa (hash: 96PvipB38LLpybzNsjIxpG9Pnb2xSNouPGIMWaFEeBs=)
                          5: f7f8499b-2456-4be8-bad9-ced434198fa0.crl (hash: /QKTWCF+fBt3ZR77SBMABLvXocqI50IjZGx6F/PviDU=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:4c:5b:f5:db:78:e5:09:a7:19:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7f8499b-2456-4be8-bad9-ced434198fa0
        Validity
            Not Before: Dec 20 16:00:09 2025 GMT
            Not After : Dec 23 16:00:00 2025 GMT
        Subject: CN=fa30911c-5325-44ac-95f5-768912bcb2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d9:10:f3:a5:98:7f:41:2c:af:28:88:b1:e6:
                    3d:26:0e:a6:e6:96:d5:d0:4b:8b:14:f7:fe:8a:c0:
                    8e:bc:8b:bb:28:80:6d:48:a2:4f:6b:76:c4:66:da:
                    3e:81:a8:bd:9a:66:f6:00:a8:ff:b8:da:26:03:f9:
                    3b:d1:b6:11:92:ca:6b:2b:21:48:ed:5f:42:cd:d2:
                    b8:92:98:64:74:e8:aa:65:04:bb:b2:15:10:83:65:
                    c1:43:5e:92:67:8f:ba:88:2c:32:8e:3b:a4:b7:c9:
                    be:05:02:df:27:e9:59:4e:db:66:f8:51:55:c0:54:
                    d9:16:80:76:f1:49:5b:70:01:31:d1:58:dc:1e:c8:
                    29:df:cf:a4:e1:fa:44:65:8e:0a:80:c7:be:44:f7:
                    0f:b2:78:fd:74:4d:d9:99:9b:d5:17:79:33:16:de:
                    02:fc:43:db:ee:64:cd:a1:cf:26:2c:a0:a4:c4:b8:
                    3f:6e:e7:8b:5c:73:b5:53:39:2a:f1:65:5c:70:24:
                    0b:c3:3b:2c:3b:b7:be:ff:41:84:d5:ad:b3:0f:a5:
                    2a:23:15:39:fb:7e:7e:64:5e:08:e5:67:a6:66:14:
                    73:06:ec:3a:67:f5:3b:80:29:92:f7:68:b0:9a:9b:
                    59:2b:5c:7b:09:32:37:b5:0f:f1:bc:73:94:86:7d:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DD:59:6C:6F:35:F8:5C:AC:59:52:8A:16:DE:0E:70:C6:A3:7E:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0/f7f8499b-2456-4be8-bad9-ced434198fa0.crl

            X509v3 Authority Key Identifier:
                keyid:35:8D:3C:5F:8A:73:96:74:42:F1:60:4D:65:57:DA:20:F8:A5:64:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7f8499b-2456-4be8-bad9-ced434198fa0.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:43:8d:e3:6f:b4:66:e9:a3:8b:f6:3e:92:c7:4b:17:b1:73:
         6b:48:c2:64:74:80:6c:98:2c:6e:29:a1:82:f0:3d:56:0f:40:
         7a:f3:01:3c:57:bc:99:95:ee:35:ce:ac:3f:50:f6:16:bf:4e:
         2c:36:42:27:71:39:4c:48:fd:86:2f:08:82:ca:01:fb:ef:e0:
         e4:f3:47:d2:c6:6d:7a:68:3b:91:99:b7:66:9d:0c:38:c1:cd:
         14:28:ca:7e:30:e7:e6:49:1a:a1:d0:31:b8:8a:5f:80:ad:20:
         20:3e:d3:95:90:9d:6b:49:92:bd:da:3b:e4:39:28:a5:f3:69:
         2f:21:e4:d1:2d:cf:ae:ac:03:45:a0:b0:99:e1:8e:0d:70:cb:
         a9:6c:05:84:00:94:e5:28:34:58:35:14:ce:6e:3f:d4:66:06:
         de:d5:07:9c:23:99:3b:78:a1:fd:88:10:df:a8:89:5a:98:35:
         e0:a6:1e:1d:77:55:5f:40:7b:7d:62:ba:4a:b6:86:ce:04:83:
         09:3a:e0:73:8d:08:1c:7f:26:d6:f6:bd:bc:24:92:cb:2f:5f:
         38:9d:21:e3:b2:7d:76:30:ba:54:61:d6:f8:56:6c:e3:36:77:
         9f:57:50:08:be:15:c6:1c:14:df:99:48:6d:93:b4:56:c7:94:
         da:c3:87:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:42:23 2025 by rpki-client