This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft
File:                     8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft (raw, json)
Hash identifier:          PzLFS51uZYpwoHX70FqKT8gAWN+R69BS+X97NPjidtk=
Subject key identifier:   E5:B1:BC:60:E1:6F:A8:8C:B2:AC:E5:C7:3D:72:86:AD:D5:D7:BA:4F
Authority key identifier: D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65
Certificate issuer:       /CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
Certificate serial:       010D0C9F4328584C402E89DC1A102A6E6EACD290
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft
Manifest number:          010D0C9F432858473ECE7FE617DC03EB7A230E56
Signing time:             Sat 20 Dec 2025 15:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 15:00:03 +0000
Manifest next update:     Mon 22 Dec 2025 15:00:00 +0000
Files and hashes:         1: 176ba803-b4f1-3a57-804d-e734d0c025da.roa (hash: aO2/bOzgkcY1yJyxpI2S7r6gSOOwKWcZdMpTtuUWB6s=)
                          2: 3115dfd7-974d-3faa-a564-738077a10f40.roa (hash: PaCnlKLSAoD1Tvg1XUiVQ2mg72ihkHHjLkuMO+QP0GA=)
                          3: 8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl (hash: g8hN5Cb+bzyeHAIq7bPslciBmjyX5EZN8il6isEumaQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:2e:89:dc:1a:10:2a:6e:6e:ac:d2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
        Validity
            Not Before: Dec 20 15:00:03 2025 GMT
            Not After : Dec 22 15:00:00 2025 GMT
        Subject: CN=40791583-c3e8-4002-bcce-4c08eab9a03c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0d:3c:3c:05:0f:42:d4:be:22:03:47:cc:71:
                    fe:b1:78:64:d6:1a:98:f5:a0:4e:1b:3d:81:4d:f2:
                    28:c8:d4:cd:47:da:59:43:f1:4a:85:c7:e5:47:76:
                    3b:ae:e2:8d:0f:5a:db:3a:12:38:78:7d:90:7a:1e:
                    1e:1b:6f:dd:ba:0f:10:23:71:ff:08:ae:aa:c4:35:
                    09:7c:07:96:8a:a0:2b:3e:be:8c:3a:12:78:7f:a3:
                    88:05:67:ac:49:67:89:43:bd:79:26:78:94:4a:9d:
                    91:d9:4d:e6:de:e7:d7:11:26:b5:0b:c5:c8:5f:cf:
                    65:91:cb:e8:79:d1:24:5e:fc:3e:9a:57:87:84:eb:
                    f6:3f:01:e6:22:17:c2:1a:2e:49:3a:c3:20:06:08:
                    d8:9c:59:f3:ca:c9:7c:f7:ae:0b:88:3f:88:e4:e0:
                    7b:ed:85:72:1b:cc:c5:3a:00:91:58:c5:11:3f:53:
                    cd:1f:64:e6:cb:57:53:3e:99:c9:c1:cc:e9:ca:a7:
                    65:e8:52:b1:cf:ac:b8:9c:8a:b7:57:03:4f:a1:90:
                    ca:04:e1:0e:39:3c:67:3f:e2:48:c8:c1:4d:e1:c3:
                    29:2d:45:59:57:01:07:b2:3a:83:3d:9d:49:0c:6e:
                    ca:9d:e9:1a:3b:98:90:b9:bd:78:a7:cb:25:19:2c:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B1:BC:60:E1:6F:A8:8C:B2:AC:E5:C7:3D:72:86:AD:D5:D7:BA:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl

            X509v3 Authority Key Identifier:
                keyid:D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:db:bc:f7:fe:be:95:95:9e:06:0f:3a:fa:43:41:11:3b:56:
         f3:9a:6f:01:31:d9:9c:80:8f:57:6a:66:e1:1d:37:48:d5:45:
         fe:0f:3e:5b:57:f6:79:6b:42:6b:80:35:72:9c:1f:77:08:f0:
         17:cf:b4:34:f2:db:b9:04:bc:a0:25:ce:da:60:05:c5:12:66:
         e4:1c:a3:62:ad:2b:a7:9e:98:f7:dd:19:65:c5:84:95:a6:1b:
         5a:68:01:df:f1:44:f2:c2:f5:12:b7:7b:7c:99:50:fe:15:f8:
         33:46:f7:e5:85:3c:bf:33:f8:9e:ce:1e:94:91:19:3f:ed:5f:
         72:70:e0:20:0d:b2:28:a6:07:ab:45:ed:be:04:70:09:06:92:
         51:86:2d:a8:c1:ab:39:55:89:e8:25:c9:01:99:8e:09:d6:14:
         48:80:40:52:41:0b:47:1e:b4:59:c2:7c:45:75:94:bd:e2:16:
         5d:5b:17:26:a2:a5:c1:c1:9c:c8:60:1f:3b:d3:02:0b:ce:de:
         87:68:b3:41:2e:87:36:0a:b6:65:8e:59:56:ba:5c:52:3d:5e:
         a2:cf:9e:a7:9a:7d:6a:b0:e0:a8:4b:c0:eb:01:27:0e:06:7a:
         b6:5c:10:1d:58:b0:ec:77:91:0d:63:1d:8a:c2:4d:0a:23:f4:
         5e:6d:4b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:33:04 2025 by rpki-client