This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft
File:                     3d21f741-fd91-4158-8853-7388dab3b3e3.mft (raw, json)
Hash identifier:          6u2cDwM/Ugq56jQnfE9tRapw+41Qk7q2VKh0yBSY3kc=
Subject key identifier:   82:CC:E3:EC:C9:01:99:D0:0F:15:0D:4A:46:D6:24:04:0C:78:34:F7
Authority key identifier: A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14
Certificate issuer:       /CN=3d21f741-fd91-4158-8853-7388dab3b3e3
Certificate serial:       010D0C9F4328584C58B9C8571DE538351E4D4E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft
Manifest number:          010D0C9F4328584073A84C34E2402761CF9DBB5D
Signing time:             Mon 29 Dec 2025 10:00:03 +0000
Manifest this update:     Mon 29 Dec 2025 10:00:03 +0000
Manifest next update:     Thu 01 Jan 2026 10:00:00 +0000
Files and hashes:         1: 3d21f741-fd91-4158-8853-7388dab3b3e3.crl (hash: ZtydNyn/He97mgxeeD2mN4TecTIWkB9eakg39JJfQps=)
                          2: 90ad5afb-11a5-3a7e-af84-85ae08f294f7.roa (hash: JiqjAlUYz5WYW8Rvwfdbt6xQLoh1fkQjrdsrrLhiFBg=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:58:b9:c8:57:1d:e5:38:35:1e:4d:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d21f741-fd91-4158-8853-7388dab3b3e3
        Validity
            Not Before: Dec 29 10:00:03 2025 GMT
            Not After : Jan  1 10:00:00 2026 GMT
        Subject: CN=59c29ebc-946d-46f7-820d-e5a84397977c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:81:cb:39:2f:4e:5e:d0:cb:00:01:cb:b7:1a:
                    ad:0d:e0:0c:54:55:28:c2:ae:d5:ec:42:20:b6:d1:
                    3a:bd:76:d9:89:8b:88:80:ec:87:08:39:73:58:8a:
                    33:94:d8:7d:2a:10:2d:a8:44:04:d0:a7:ab:5a:ac:
                    81:84:df:3e:ad:e1:13:b8:6a:dc:ae:b5:d6:78:28:
                    87:7d:e9:91:b1:07:b5:a4:8e:2e:fa:19:88:26:c3:
                    2d:eb:4d:0f:70:b1:81:1f:4b:17:6a:80:eb:92:a0:
                    85:11:82:be:c6:64:aa:db:6e:5c:da:30:61:bb:03:
                    56:b6:e9:00:4f:fc:eb:9c:d7:98:4f:5b:4e:33:38:
                    af:a3:41:c8:85:a7:b2:f3:42:ef:67:0f:13:22:6b:
                    8e:04:37:76:f2:62:16:4d:c2:38:18:75:9e:92:74:
                    d1:0f:2e:61:14:0b:d1:c4:54:3d:c6:c2:75:37:37:
                    05:17:c7:c8:bd:c4:68:8e:9b:17:88:cd:ed:93:b5:
                    31:88:16:88:50:e1:db:bc:2b:e5:23:27:12:98:8a:
                    d8:b4:b7:dc:17:6e:01:71:ad:e4:4a:51:9d:38:e1:
                    3e:4d:2b:34:42:c2:ab:8e:56:aa:e9:3c:79:0c:0f:
                    ef:4d:53:e1:f0:23:af:28:c8:bc:fb:16:16:f8:20:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:E3:EC:C9:01:99:D0:0F:15:0D:4A:46:D6:24:04:0C:78:34:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3/3d21f741-fd91-4158-8853-7388dab3b3e3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:AF:BF:E1:62:39:AF:97:9B:56:A5:07:BE:38:09:30:7F:F3:BE:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3d21f741-fd91-4158-8853-7388dab3b3e3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:cc:9b:a0:5a:b9:eb:0e:ef:2d:31:9c:7f:4f:39:da:80:81:
         c9:d5:f1:8b:49:29:a5:8c:37:96:ab:e0:11:28:30:35:c2:7e:
         10:9b:1c:e8:d1:ce:4d:2e:0e:fe:96:c3:bf:cc:20:79:60:32:
         87:92:af:19:2c:27:bc:87:71:61:6e:ed:b4:cd:9b:f3:27:c2:
         76:11:ec:ce:cf:e0:27:78:a9:7c:7a:b4:3f:c5:ad:a4:57:31:
         40:b9:32:9f:d7:1e:68:43:cb:27:7e:c7:d9:1a:0e:60:6c:91:
         7a:04:55:15:b2:9a:29:ba:35:b1:6b:df:84:9b:51:e6:f0:9a:
         ed:83:d4:19:2b:89:9b:ce:d1:f7:d0:bc:ea:66:2c:eb:69:f1:
         a4:e0:90:00:2e:97:fd:90:6a:37:a3:dc:a7:c8:61:58:52:69:
         c1:26:4e:ab:aa:32:c3:6b:9b:96:0e:56:53:3d:95:09:0f:91:
         fe:ab:50:c8:48:8f:5e:ee:33:64:dc:72:3b:93:26:eb:34:cc:
         7c:f9:4f:57:3a:60:17:00:d6:94:4a:2c:c0:04:a2:e8:09:d7:
         34:70:b5:52:4b:a9:67:94:0a:7f:9d:89:b8:47:f7:d1:8f:ae:
         d1:d7:a8:a7:e1:5b:d4:85:87:9c:fa:03:fa:0d:7c:77:d1:3c:
         c6:de:f7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 13:25:29 2025 by rpki-client