This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
File:                     023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft (raw, json)
Hash identifier:          +LWOktmf6cJsTV7zi9SGX08Lyt4Rqeupc9IXdRdKPKg=
Subject key identifier:   E8:28:D6:9A:FA:10:5C:9E:C0:CD:6D:3D:26:0A:5C:FB:72:9B:6E:18
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Certificate issuer:       /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial:       010D0C9F4328584C4087E647217C0C13D637E210
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
Manifest number:          010D0C9F4328584670942F3E020B1F44173F1F2F
Signing time:             Sat 20 Dec 2025 18:00:08 +0000
Manifest this update:     Sat 20 Dec 2025 18:00:08 +0000
Manifest next update:     Mon 22 Dec 2025 18:00:00 +0000
Files and hashes:         1: 023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl (hash: wp2Q3EAjQir2/XHe4nwznjolUzAXdwLjkSEoChhCLUI=)
                          2: 771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa (hash: aSVmq+U0wwdGR0t1CtLmgXx+T3vCXYkL4/xRIwCUEmU=)
                          3: f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa (hash: bEiNBSfBtP6GCpagpqz1UNp4cLDTjMtZuCvg/X0N7w8=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:87:e6:47:21:7c:0c:13:d6:37:e2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
        Validity
            Not Before: Dec 20 18:00:08 2025 GMT
            Not After : Dec 22 18:00:00 2025 GMT
        Subject: CN=96de230a-4737-4a10-9ff5-14ce7838f789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:10:bf:17:1f:ed:30:95:a1:dd:65:78:63:eb:
                    cf:5f:10:1d:b1:2a:3f:01:0e:8b:3c:fe:9f:49:0b:
                    7f:ce:06:3d:b7:16:9e:24:7b:f2:85:1b:09:f3:fb:
                    29:08:d2:f1:d9:8a:18:32:21:50:ff:00:8c:a0:be:
                    dd:78:3b:90:2b:62:58:93:2f:22:2c:19:7e:de:7e:
                    9d:22:9b:3b:3b:4c:b1:bf:ab:11:47:51:67:0b:c9:
                    0d:15:6a:88:cb:39:75:0a:7f:82:2f:09:4b:96:8c:
                    c6:af:50:ce:04:13:3c:5e:89:0c:42:a0:69:61:d1:
                    28:e9:64:f3:ad:7c:84:7e:dd:8e:d2:74:5a:ea:1a:
                    57:fa:19:ac:62:5f:5c:d9:96:75:5d:e0:66:9f:b0:
                    fb:a8:5b:d2:63:e1:8e:27:58:9d:fc:28:59:63:ec:
                    22:69:7c:c6:64:98:f3:07:0c:b3:71:fc:76:05:e2:
                    92:22:46:85:67:d2:82:47:e5:de:f5:26:15:88:45:
                    73:31:66:a5:45:e7:13:83:13:0d:55:23:b3:04:9c:
                    e0:8a:96:1f:9e:2f:5d:ab:f2:6e:81:1c:e6:0e:22:
                    69:a1:1a:5e:92:74:d0:b3:0f:9a:c4:ff:d4:74:b5:
                    65:9b:c6:2d:00:f0:f7:53:3f:26:22:9a:b2:78:19:
                    78:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:28:D6:9A:FA:10:5C:9E:C0:CD:6D:3D:26:0A:5C:FB:72:9B:6E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:d7:55:a0:2a:d0:15:63:75:b8:00:75:48:e4:76:75:aa:24:
         1c:15:c5:17:64:31:3e:7b:9f:df:e3:b1:18:48:a1:32:35:d8:
         68:a0:97:17:d0:d3:36:65:96:b2:ec:d0:49:29:51:f2:50:1c:
         f1:36:d0:05:fc:60:4b:a2:08:fc:f4:6f:87:2d:e3:46:70:48:
         df:49:09:1b:8c:d0:9b:4a:ae:c7:65:50:f3:1c:6a:49:4b:d0:
         d9:9a:b6:5f:58:bb:5b:77:cb:36:9b:5a:26:39:4f:0e:21:7a:
         a7:ac:25:db:f1:c3:67:a6:bc:59:98:6e:c2:42:e9:45:a4:8d:
         e7:8d:b8:3e:c3:76:fb:e5:8d:d5:32:28:0d:29:ff:c7:c0:2c:
         f4:4c:43:e8:f7:58:de:a5:f8:6a:23:4d:77:b8:a1:74:16:28:
         ea:4c:5e:35:29:bb:7e:c4:2a:41:b2:47:07:6a:b6:15:64:64:
         ec:e3:9e:3a:43:7b:5c:df:18:36:1b:b2:ce:90:3a:3d:ac:e0:
         74:ad:f0:b2:35:a8:60:f4:21:09:cb:cc:18:ae:98:7c:08:b1:
         6c:ed:72:7e:9c:ca:2a:f7:4e:77:a2:3e:65:ab:d5:d4:f3:c0:
         34:12:a2:b7:15:ba:d8:ce:99:c5:cf:b1:04:31:af:b4:a5:40:
         e7:df:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:18:28 2025 by rpki-client