This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
File:                     4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft (raw, json)
Hash identifier:          WIa55eY05lcGeKLofs45Zr67dPrUzhssL2zQqSCX6QE=
Subject key identifier:   20:E0:7C:2D:50:96:78:37:D7:AF:03:9F:77:37:04:87:52:82:8B:CD
Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
Certificate issuer:       /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Certificate serial:       010D0C9F4328584C3F04BBBC79391F54E1C6F280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
Manifest number:          010D0C9F4328584073A83F345BA4F4215AAAD7BA
Signing time:             Sat 20 Dec 2025 05:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 05:00:03 +0000
Manifest next update:     Mon 22 Dec 2025 05:00:00 +0000
Files and hashes:         1: 249ec9c1-aae0-3b16-a897-6f80b435a876.roa (hash: B9jO8jkrtEy1c2c4D/8wVatwXcrWG0rla3yGMvMbJCQ=)
                          2: 2ed801f0-0a9a-3ab3-9e51-34c5c80585e6.roa (hash: Y+CHBZnEdgY/Kxep33uRyLxJp9NzMmhFO1c2v35Ha0E=)
                          3: 37c1cf0b-3fed-37d6-a145-a63cec7302e4.roa (hash: 8/d/nlaHb69YkCJtMO3ZjPDE9XHUvlhI4LBFgzay1cw=)
                          4: 4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl (hash: 7mYOy0BT8PF20x6TwuR8ycTPLrhDeklk2WDu9JB20r4=)
                          5: fbbccb53-1fb8-3043-81bc-0c04dc456033.roa (hash: 5inPRkRFWfa1CukZHXOCJKhj/wF4sdh/GjYQGy2hH2U=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3f:04:bb:bc:79:39:1f:54:e1:c6:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
        Validity
            Not Before: Dec 20 05:00:03 2025 GMT
            Not After : Dec 22 05:00:00 2025 GMT
        Subject: CN=d8c273ec-de1e-4acd-95d9-612a2fd9cfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:10:99:f0:5c:fd:a7:df:d1:34:56:a5:7f:
                    1f:25:cf:0d:80:0d:1a:cb:88:fc:63:ce:8d:02:be:
                    60:32:d5:f3:67:9d:17:09:54:43:3b:e2:c9:46:2b:
                    90:59:c3:11:95:66:03:20:75:95:3d:d1:45:04:bb:
                    ba:1d:11:1b:e9:7c:1e:a2:db:1e:01:7e:dc:ac:53:
                    27:be:7b:f3:2e:77:fb:da:8b:e3:52:33:0b:ff:e7:
                    69:47:c9:1c:37:56:37:dc:c4:23:51:62:1e:ad:f5:
                    61:51:e1:b4:83:58:74:3e:f1:f7:30:52:8b:e7:af:
                    d7:36:5c:d3:9e:b0:78:7a:db:75:d3:e9:e4:33:d2:
                    4f:f1:61:27:ed:db:14:44:00:54:37:c6:03:29:93:
                    07:9c:a5:02:c2:c8:21:cd:b3:ad:4d:8c:0f:57:3a:
                    d1:48:29:7e:47:46:47:2c:ec:3c:41:18:8f:39:79:
                    13:d3:84:71:99:d7:f5:03:82:9c:5f:08:77:1d:24:
                    f2:0f:38:8a:76:c7:d9:85:4e:b7:e9:42:0f:47:4c:
                    0a:17:23:4a:3c:03:fa:12:b3:a9:aa:5f:24:bb:67:
                    29:28:f7:71:ad:6a:28:97:6a:2f:45:ab:be:e2:21:
                    d3:d3:98:42:db:62:44:95:41:87:2d:e3:95:4e:c8:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E0:7C:2D:50:96:78:37:D7:AF:03:9F:77:37:04:87:52:82:8B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl

            X509v3 Authority Key Identifier:
                keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:02:ff:39:d1:7e:ee:4a:ad:bc:37:33:43:66:d0:53:dd:1a:
         37:01:ac:6a:a3:c7:fb:bf:23:c8:77:d2:dd:6b:fc:8d:c3:ab:
         4d:04:05:b8:0c:e6:c0:02:67:36:ef:52:e3:39:4c:d0:fd:ec:
         8f:57:a7:fd:99:c4:a3:ed:1e:de:1f:fe:cf:8f:02:8e:be:9f:
         51:b7:9f:3c:2b:35:2f:dc:a7:e6:93:0d:b4:0b:35:d3:5a:86:
         6c:7d:08:ee:eb:50:57:b1:9a:78:65:d8:b2:41:8d:39:62:47:
         d4:0f:6a:c9:3a:99:07:e5:e8:04:eb:c1:e2:7c:a4:b8:95:2f:
         79:55:c4:41:6c:2c:f4:50:76:0c:08:3e:0e:36:8a:ea:c7:76:
         c7:bd:a2:b1:bf:ac:53:d5:f1:0c:8c:c2:69:0f:7d:f2:d9:a8:
         57:7e:be:ed:aa:48:9a:d9:ac:44:e7:41:ff:29:9c:59:48:b4:
         b9:b8:f3:5c:a7:bd:9b:53:b4:1f:f5:33:4f:d6:5b:c7:96:10:
         84:6f:59:66:76:01:c6:14:57:17:18:1d:ed:c1:33:71:a8:2f:
         51:0a:de:a5:71:b3:9e:ff:65:5e:02:aa:ad:24:0e:ca:a2:67:
         34:dd:2b:01:ca:00:ab:e5:28:3c:d8:5f:cb:9b:d4:63:76:d5:
         9a:fa:05:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:35:10 2025 by rpki-client