This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.mft
File:                     65e9fec4-d05e-44ad-aff7-d6fce635c53a.mft (raw, json)
Hash identifier:          tk3LRg6CyYEERgJtz8jIGv9QwJ7Eurjr9fQdjBjI9KM=
Subject key identifier:   35:02:1E:ED:C8:F0:F1:38:C8:6A:1E:7E:75:B9:E0:7B:28:D2:65:A1
Authority key identifier: D5:1A:B7:88:B9:7E:57:08:7C:67:A5:47:7D:EC:D6:FB:AC:3C:5F:DE
Certificate issuer:       /CN=65e9fec4-d05e-44ad-aff7-d6fce635c53a
Certificate serial:       010D0C9F4328584C3D819EE4126D5B36168642C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.mft
Manifest number:          010D0C9F4328584765FDE4FC841597A8E018ED27
Signing time:             Fri 19 Dec 2025 16:00:03 +0000
Manifest this update:     Fri 19 Dec 2025 16:00:03 +0000
Manifest next update:     Mon 22 Dec 2025 16:00:00 +0000
Files and hashes:         1: 13b892ab-0f0c-3a53-ae1e-ed2bb67c2689.roa (hash: OzkVNZDkoF98IkesV4L89bav/oUfxbozFeRun2J+cUQ=)
                          2: 65e9fec4-d05e-44ad-aff7-d6fce635c53a.crl (hash: L7fO7+k71W5SjBXk093qo5VvMvbCzcAZnVKRLRPnzyk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3d:81:9e:e4:12:6d:5b:36:16:86:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65e9fec4-d05e-44ad-aff7-d6fce635c53a
        Validity
            Not Before: Dec 19 16:00:03 2025 GMT
            Not After : Dec 22 16:00:00 2025 GMT
        Subject: CN=ea2046e3-f5a3-423a-8a26-72e24554300a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:90:ce:5e:9d:3d:28:86:03:1d:68:af:b9:d9:
                    38:e0:7f:9b:f8:94:24:3e:be:df:4c:ad:5f:a8:de:
                    fe:41:53:1a:d0:50:5f:46:b0:86:17:97:f4:03:30:
                    27:0b:22:f4:00:b9:ca:5f:1c:c8:62:b3:ed:6d:7b:
                    57:83:25:93:5b:c8:ad:5d:86:2d:d3:79:db:63:48:
                    7f:54:29:de:b3:b6:17:5e:dc:9e:40:09:3a:74:ef:
                    30:5e:c9:d1:b2:e9:aa:98:2c:54:a9:82:03:87:59:
                    c8:37:4e:c1:29:96:e8:54:62:76:e1:82:a0:db:d0:
                    0a:56:67:fc:0c:5b:fa:21:5d:3d:df:0d:94:9b:0c:
                    64:0a:f1:f0:1d:02:ca:8b:d9:ac:07:fe:94:a9:f0:
                    e0:41:17:5a:9d:01:ee:8d:0d:65:2c:21:c3:d1:7d:
                    f8:6c:4d:f3:f7:ed:44:f0:bf:f0:80:7a:2b:bd:45:
                    0a:fa:02:b7:c7:4d:bd:21:3a:ee:02:eb:56:8a:31:
                    f1:af:e8:cf:24:3d:3c:51:8b:0b:ae:52:74:e4:68:
                    6e:72:40:cf:71:e6:50:14:9e:b3:cd:99:c1:36:1f:
                    26:76:74:3f:d5:2c:d9:7a:69:00:0e:c1:90:bd:33:
                    39:9d:2c:04:b6:da:71:f0:92:5f:04:34:e2:7e:0d:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:02:1E:ED:C8:F0:F1:38:C8:6A:1E:7E:75:B9:E0:7B:28:D2:65:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a/65e9fec4-d05e-44ad-aff7-d6fce635c53a.crl

            X509v3 Authority Key Identifier:
                keyid:D5:1A:B7:88:B9:7E:57:08:7C:67:A5:47:7D:EC:D6:FB:AC:3C:5F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/65e9fec4-d05e-44ad-aff7-d6fce635c53a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bc:26:c1:26:9d:22:88:81:37:21:c0:e6:65:f3:a7:cd:72:
         0f:dd:d1:dd:dc:db:54:53:0f:9f:46:63:60:a5:6c:c4:0f:e0:
         7c:db:8e:a4:58:3e:17:4c:35:70:16:ab:02:ab:60:60:f9:4f:
         d2:54:be:f9:cd:42:a9:45:0f:86:5d:d3:1f:64:b1:02:90:9b:
         7a:c8:00:a1:50:c6:ea:18:c9:65:2e:c9:ca:ce:b7:ff:b0:a5:
         47:c0:97:6d:3f:0a:81:7c:11:85:d9:cf:9e:d6:c7:c7:51:c5:
         1c:f3:49:02:4c:ea:43:c5:19:e3:bb:61:bd:2b:6c:fb:55:fe:
         6c:98:fc:c9:74:d9:28:56:27:a7:03:95:11:92:b4:6f:5f:31:
         15:32:d0:e8:3b:be:64:d0:76:32:5a:14:05:32:b6:e0:f8:f2:
         47:48:50:fa:f2:ba:4a:b5:b8:0c:b3:dc:7b:ba:19:f7:ce:9d:
         cf:83:39:80:ab:43:89:68:21:2e:91:46:eb:7e:ff:d9:21:4d:
         53:1a:49:5b:2b:f1:e6:24:0f:67:78:26:bf:32:78:fa:66:94:
         e3:d4:b5:68:43:59:2d:55:5e:b7:a6:2c:9b:e7:72:18:a1:bf:
         8b:f8:cd:54:39:eb:cc:2b:54:6d:f9:e4:38:33:d0:a0:16:61:
         b5:4c:da:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----