This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
File:                     baebde37-2461-4409-96e1-a720edbe80a7.mft (raw, json)
Hash identifier:          9lDZRP+ZbCv8xFAiVTDiKwvRdq6IaMRMMwjoiaVqtdc=
Subject key identifier:   11:44:55:5B:62:8F:37:26:9A:8A:DD:18:09:E4:13:F8:1D:F4:23:BD
Authority key identifier: 50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1
Certificate issuer:       /CN=baebde37-2461-4409-96e1-a720edbe80a7
Certificate serial:       010D0C9F4328584C4B3B8EB88F387B61DEC72835
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
Manifest number:          010D0C9F4328584073A8576D717909DD91EFD8F5
Signing time:             Wed 24 Dec 2025 14:00:09 +0000
Manifest this update:     Wed 24 Dec 2025 14:00:09 +0000
Manifest next update:     Fri 26 Dec 2025 14:00:00 +0000
Files and hashes:         1: 03dc55df-9ce0-3afe-a7b3-21389792cc78.roa (hash: MXEBjld7+AD4SXNYLj+H37TEm4ZKWhIMrl61RqbHdnk=)
                          2: 2cda7570-a5a8-3633-a18c-92ee982e5a67.roa (hash: ET8wpmfzluHKrOD9zsNVnqrEzg44j+1fBF38f9FAwxM=)
                          3: 75ee1ecc-de7c-3a41-be3a-7f492006d956.roa (hash: UWd8e397dYYAl0aVoEVEYgIx28LsMpr/mnYz6c9GBFo=)
                          4: 9ed797f7-59a1-3eb3-a08c-95e891faa255.roa (hash: SNtbylOzNixkGGG9vNPagcw2zTJPXBsq1EjiuhFmdPI=)
                          5: a68e1441-cfae-31c8-8cce-bb15a7489f9c.roa (hash: +GuitCHo5T9FrnPqrU6aYz9o7PTVkCb7V1Zt9tMpmTY=)
                          6: a81edad8-f2ca-31db-b601-efd107d11bde.roa (hash: QGVaJhgpPbWOrYZ+QgqXKQAqQosmjvzcIJmn6/eJ4qo=)
                          7: baebde37-2461-4409-96e1-a720edbe80a7.crl (hash: LElvsLsaPpNRDmMLjwfgTCnhYmnxzGbSt3UfbG/NSh0=)
                          8: d215c1cd-afde-3025-9011-f5e36c53f7dd.roa (hash: wlUgXmxLVNDUBqlmC6k2mvD+faZ3aGe+L77GAm9W0NE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4b:3b:8e:b8:8f:38:7b:61:de:c7:28:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baebde37-2461-4409-96e1-a720edbe80a7
        Validity
            Not Before: Dec 24 14:00:09 2025 GMT
            Not After : Dec 26 14:00:00 2025 GMT
        Subject: CN=3378a93c-e2e6-461c-9e4d-9b53fe9310e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dc:d8:40:05:19:ef:f4:05:ed:93:b0:25:73:
                    63:af:96:36:8d:e6:77:e8:0f:49:af:33:2b:48:17:
                    83:8d:8e:7d:9f:d0:d8:2a:e7:94:69:9b:08:5c:0f:
                    9d:d3:66:36:14:ec:4c:2d:72:00:a2:cd:7a:ab:80:
                    c6:52:c4:17:1a:26:e1:0d:e2:d6:e6:ec:c5:0d:16:
                    8c:30:d6:5a:13:e1:99:ab:4b:3f:bb:06:96:f8:c6:
                    a6:a9:b9:21:4f:ed:19:80:80:e2:f7:27:2c:b8:76:
                    10:97:6d:45:6e:c4:17:e6:59:a8:ac:c0:e4:bb:ac:
                    e9:94:c1:98:dd:05:21:e5:75:31:36:8f:6c:52:9f:
                    e5:4d:4a:40:63:85:17:a8:87:64:f3:83:10:6b:c5:
                    71:81:6b:c9:b2:4c:48:26:38:d9:d4:12:4c:01:e5:
                    42:6d:d6:d1:ae:ea:26:03:4a:04:6c:c2:f7:8c:3f:
                    10:c3:4c:92:c2:47:d2:2b:3e:88:1e:8b:89:b6:81:
                    6e:66:16:7a:e8:52:97:2d:1d:36:41:1c:82:37:ff:
                    8f:03:b7:fc:52:24:a0:85:19:2e:ac:7f:10:18:18:
                    2c:aa:82:47:25:ae:1e:56:b0:c4:e4:2a:89:f6:a2:
                    06:7d:be:84:3f:84:6d:c4:b4:ac:46:0b:88:65:8a:
                    28:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:44:55:5B:62:8F:37:26:9A:8A:DD:18:09:E4:13:F8:1D:F4:23:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7/baebde37-2461-4409-96e1-a720edbe80a7.crl

            X509v3 Authority Key Identifier:
                keyid:50:36:4D:16:C4:B5:A8:76:68:76:28:FA:DD:FE:B2:14:F0:43:00:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/baebde37-2461-4409-96e1-a720edbe80a7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:6f:79:b2:d9:cf:63:be:72:d3:f5:70:8e:dc:79:27:46:72:
         28:d6:59:23:a6:ef:08:2e:d6:87:0b:9c:29:20:2d:32:e4:78:
         03:39:40:83:2d:1f:30:9b:13:84:2c:2b:be:bb:3e:17:7e:0b:
         2d:80:d9:ab:2d:f8:5a:30:9b:c4:fc:ee:65:4c:b4:4f:bc:24:
         e7:79:ea:4d:10:25:7d:16:db:85:18:1e:fd:59:ad:3e:d5:4b:
         ed:18:e1:40:48:39:6b:95:88:3d:a0:5e:7b:0b:a0:8a:97:ba:
         35:4b:d0:6b:8e:a8:a0:ce:80:2e:0b:b2:72:a7:35:de:63:36:
         28:15:1d:87:56:20:7c:d5:11:79:88:d3:3b:64:94:37:c0:cd:
         a8:d0:3b:e6:48:06:a2:72:24:8a:e2:f5:ca:fb:a5:91:e9:c9:
         ba:3d:5d:a4:eb:ea:db:f8:b1:cd:8e:6f:7c:47:e3:b5:a2:05:
         71:bb:f5:3a:48:7f:a2:3e:96:b1:ca:38:5a:4a:88:86:10:a2:
         a4:f2:01:c3:81:24:59:f0:97:78:b0:31:9a:5d:10:b4:88:d2:
         a3:6a:bd:71:d6:ba:57:13:76:b6:a8:a8:57:18:dc:af:83:42:
         4a:56:a6:38:51:06:65:56:6e:96:14:6d:cf:3d:39:c7:52:a6:
         8e:3e:41:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:29:39 2025 by rpki-client