This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft
File:                     3bfea78e-552c-46d0-a7b4-60f999223238.mft (raw, json)
Hash identifier:          pdY2mievigftpfYezYFk4z/ce8cSFgENSyW/IQzaFc4=
Subject key identifier:   D6:6F:6F:70:18:61:AE:79:5F:18:CA:1F:84:F1:44:E3:2D:5D:4B:E6
Authority key identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96
Certificate issuer:       /CN=3bfea78e-552c-46d0-a7b4-60f999223238
Certificate serial:       010D0C9F4328584C406A20D9EAC1B64742159040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft
Manifest number:          010D0C9F43285845DC7F251890046E2B090F5648
Signing time:             Sat 20 Dec 2025 17:00:09 +0000
Manifest this update:     Sat 20 Dec 2025 17:00:09 +0000
Manifest next update:     Tue 23 Dec 2025 17:00:00 +0000
Files and hashes:         1: 3bfea78e-552c-46d0-a7b4-60f999223238.crl (hash: YEheYDvwO1gyOjCwjZg39v/YIwD+sxSJ8wbtx+7qYh4=)
                          2: b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa (hash: QdDR0FbjOAgnIfWtMY+x+Mnlptsixr/N4yCkPTrh3SQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:6a:20:d9:ea:c1:b6:47:42:15:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfea78e-552c-46d0-a7b4-60f999223238
        Validity
            Not Before: Dec 20 17:00:09 2025 GMT
            Not After : Dec 23 17:00:00 2025 GMT
        Subject: CN=bc132ea2-0344-43c8-a291-e63ca4a79553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c6:61:dc:f0:2c:c1:7a:59:fa:d4:fb:9e:fa:
                    82:fb:88:92:83:d9:8c:cb:bf:2d:f4:15:0b:88:1c:
                    91:97:76:c1:83:98:e2:04:0f:32:26:31:e7:f9:3b:
                    36:e0:eb:6d:c6:c8:3e:67:df:31:2f:aa:de:c8:44:
                    69:04:b0:79:ee:fe:8d:16:d2:c9:0b:69:b0:5d:72:
                    ef:11:60:48:0f:78:42:fa:7e:25:6a:bd:3b:b5:7e:
                    0d:5d:72:9f:93:76:d5:a9:94:3e:b2:d4:96:cb:0e:
                    8e:c9:78:a8:f1:50:34:dc:ca:2f:fa:f7:9e:f5:a2:
                    3d:b0:39:cd:25:ee:9c:f4:3b:d8:9e:16:da:40:db:
                    d0:b0:65:7a:a4:2e:72:2f:c9:7e:3a:95:b4:3a:28:
                    53:4d:72:b3:19:b6:c2:f2:58:f8:8d:48:36:e0:2c:
                    82:b6:94:af:fa:80:99:9c:b1:e1:fb:10:96:b0:7a:
                    49:84:94:d0:63:98:13:76:21:5c:15:b3:f4:70:b9:
                    1f:92:0c:43:3f:80:76:90:5c:0a:6e:b0:84:1b:ef:
                    27:bc:e0:13:ca:ad:8a:8e:94:98:b6:90:5b:01:4b:
                    e3:ae:2d:e3:9e:68:b0:75:d2:d2:4f:c2:53:13:f8:
                    ae:d8:67:d7:44:03:cf:93:e9:88:8c:e8:de:a4:e7:
                    51:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6F:6F:70:18:61:AE:79:5F:18:CA:1F:84:F1:44:E3:2D:5D:4B:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl

            X509v3 Authority Key Identifier:
                keyid:D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:75:51:ad:a6:6a:d1:6b:5a:95:83:b1:ab:33:16:dc:f7:25:
         9c:e7:98:61:04:c2:7e:25:04:c1:fd:6e:74:78:2c:1d:4b:82:
         86:66:19:17:b8:9b:c9:4c:8a:f0:9b:19:ed:4e:49:6d:c6:b4:
         79:91:6b:4f:19:05:42:11:3d:9b:1a:13:e5:b3:d9:a8:35:29:
         d0:54:4a:db:7b:bc:83:69:19:b4:92:fd:b5:8b:e4:03:91:72:
         90:f9:23:48:74:c7:73:8d:b5:07:86:3d:dc:e3:28:4b:f0:d8:
         96:5a:0c:0f:65:2a:31:2c:05:d9:c4:82:11:9c:5f:a7:4d:e5:
         f6:ef:6b:32:9d:68:2e:b0:0c:0f:b3:a8:a5:01:e0:75:ef:d5:
         0c:db:f8:f6:fb:c2:92:64:09:8c:cc:7f:86:e5:12:fd:c4:6e:
         0e:c5:96:83:1b:cd:d5:07:f7:3b:b6:9d:d7:69:4c:d0:db:f7:
         5a:9e:5a:f1:e5:ca:2a:bd:1d:35:7b:fe:69:38:8c:99:13:6f:
         e0:8b:7c:09:89:1a:e4:f6:07:df:82:9d:b9:c2:bd:49:fb:41:
         85:db:47:49:a6:f2:f3:1b:50:cb:ed:de:65:9f:e2:15:e6:40:
         d0:6d:40:eb:61:13:e4:c7:1a:ec:a0:03:92:20:7e:e1:de:14:
         44:94:a9:a3
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExAaiDZ6sG2R0IVkEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2JmZWE3OGUtNTUyYy00NmQwLWE3YjQtNjBmOTk5MjIz
MjM4MB4XDTI1MTIyMDE3MDAwOVoXDTI1MTIyMzE3MDAwMFowLzEtMCsGA1UEAxMk
YmMxMzJlYTItMDM0NC00M2M4LWEyOTEtZTYzY2E0YTc5NTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsZh3PAswXpZ+tT7nvqC+4iSg9mMy78t9BUL
iByRl3bBg5jiBA8yJjHn+Ts24Ottxsg+Z98xL6reyERpBLB57v6NFtLJC2mwXXLv
EWBID3hC+n4lar07tX4NXXKfk3bVqZQ+stSWyw6OyXio8VA03Mov+vee9aI9sDnN
Je6c9DvYnhbaQNvQsGV6pC5yL8l+OpW0OihTTXKzGbbC8lj4jUg24CyCtpSv+oCZ
nLHh+xCWsHpJhJTQY5gTdiFcFbP0cLkfkgxDP4B2kFwKbrCEG+8nvOATyq2KjpSY
tpBbAUvjri3jnmiwddLST8JTE/iu2GfXRAPPk+mIjOjepOdRMQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFNZvb3AYYa55XxjKH4TxROMtXUvmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYmZl
YTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5OTkyMjMyMzgvM2JmZWE3OGUtNTUyYy00
NmQwLWE3YjQtNjBmOTk5MjIzMjM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2JmZWE3OGUtNTUyYy00NmQwLWE3
YjQtNjBmOTk5MjIzMjM4LzNiZmVhNzhlLTU1MmMtNDZkMC1hN2I0LTYwZjk5OTIy
MzIzOC5jcmwwHwYDVR0jBBgwFoAU16npX7iFJrs8V4jNByq/t2suipYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zYmZlYTc4ZS01NTJjLTQ2ZDAtYTdiNC02MGY5
OTkyMjMyMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEdVGtpmrRa1qVg7GrMxbc
9yWc55hhBMJ+JQTB/W50eCwdS4KGZhkXuJvJTIrwmxntTkltxrR5kWtPGQVCET2b
GhPls9moNSnQVErbe7yDaRm0kv21i+QDkXKQ+SNIdMdzjbUHhj3c4yhL8NiWWgwP
ZSoxLAXZxIIRnF+nTeX272synWgusAwPs6ilAeB179UM2/j2+8KSZAmMzH+G5RL9
xG4OxZaDG83VB/c7tp3XaUzQ2/danlrx5coqvR01e/5pOIyZE2/gi3wJiRrk9gff
gp25wr1J+0GF20dJpvLzG1DL7d5ln+IV5kDQbUDrYRPkxxrsoAOSIH7h3hRElKmj
-----END CERTIFICATE-----
Generated at Sun Dec 21 09:15:00 2025 by rpki-client