This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
File:                     95e29289-6f1c-4c2f-84f4-c944e9e54940.mft (raw, json)
Hash identifier:          l4X4Qxy6k6P7MgMTR58zc/xh5whuTCod38lVZ4SeC9o=
Subject key identifier:   34:FA:F4:70:7B:1E:3B:D2:DE:73:47:C6:E2:08:FC:5D:A2:1D:E5:C2
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Certificate issuer:       /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial:       010D0C9F4328584C3EAB64C6FC7B68CB3DF1CC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
Manifest number:          010D0C9F4328584073A8378ED965A26DC80B7CB9
Signing time:             Sat 20 Dec 2025 02:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 02:00:03 +0000
Manifest next update:     Mon 22 Dec 2025 02:00:00 +0000
Files and hashes:         1: 13c7705c-5068-3193-a68c-a2e387dab614.roa (hash: dEgT2Qs3B7Q+6fCox0OwGNhJBBqPHCazZ0qx/6DXCbw=)
                          2: 20e21523-7867-3e6d-bd2a-f4ba5558ced0.roa (hash: dTo9hlnoRsMKjXesfRSXI9aGEpPE++qLNbqgmUvVJlo=)
                          3: 42017b9c-7ea7-3f9a-8686-04d01900fd20.roa (hash: Ag5HKlcDq9bdJvM8rV1SSYl8sSdWuIMfK4oKAM68XmQ=)
                          4: 650dd2fc-99af-35a3-81ca-030219a24999.roa (hash: Ci2+Yn+yIcUyyEIfuXF8LGHYRoM5pklW5XkeWFmomxg=)
                          5: 95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa (hash: BtTI1QDfbyWoUrju/aVLwOZkIbbJMZ8oBOeRIlq2NsQ=)
                          6: 95e29289-6f1c-4c2f-84f4-c944e9e54940.crl (hash: nZy2iL91815LNMAmQEVfndJ2wkRhvqQVq8H7hRvsExk=)
                          7: eb6fc912-909b-3236-8ac8-46c73ef2bbbe.roa (hash: ng9d83CTAtk39qpEnZbDisml2NEsDhz4xWnT/RxTEOw=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3e:ab:64:c6:fc:7b:68:cb:3d:f1:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
        Validity
            Not Before: Dec 20 02:00:03 2025 GMT
            Not After : Dec 22 02:00:00 2025 GMT
        Subject: CN=470e0baa-c3b0-4d0b-b797-982668152e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:74:ff:97:4a:22:c2:c2:de:07:0b:94:62:
                    9e:f6:ba:65:68:87:a1:ee:85:ce:55:2d:2c:52:64:
                    63:9e:33:48:6b:29:36:a0:4f:83:4f:d6:0f:ce:7e:
                    a3:bc:58:7e:ee:b0:13:8c:8c:ed:ad:be:32:b0:7c:
                    a1:ae:70:49:55:a7:0f:4b:35:31:8f:e9:95:c0:00:
                    14:d3:e0:50:c6:95:90:38:24:b3:e2:8b:64:6c:60:
                    c2:1e:2d:f8:88:04:1a:f3:df:a7:5d:93:71:72:1f:
                    85:95:b6:70:08:be:b7:61:52:2c:9e:a0:8f:86:09:
                    f0:a9:c0:82:d7:e8:43:c7:5f:ad:d9:e4:55:2c:84:
                    73:62:e9:d7:db:14:44:67:06:b5:ca:89:32:85:46:
                    ac:25:13:0d:c1:68:e5:39:b8:30:93:9d:67:33:a8:
                    f6:c7:ff:68:96:b3:bd:2b:a8:25:4c:7a:d3:ae:70:
                    c2:06:f3:fb:cf:45:fb:ba:c1:f0:7d:90:c0:c6:95:
                    f9:ae:51:2b:65:e0:14:03:1b:a6:f1:76:1a:34:e3:
                    2a:db:b3:00:61:67:9b:06:f6:25:4a:24:89:22:54:
                    64:f3:a2:99:f3:86:d8:2f:9e:a3:64:f2:a6:3a:db:
                    de:f9:d0:4d:3a:79:54:07:58:a4:71:7e:e4:a3:c2:
                    f2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FA:F4:70:7B:1E:3B:D2:DE:73:47:C6:E2:08:FC:5D:A2:1D:E5:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:17:8b:97:7c:e0:c9:d4:be:1a:58:d8:a1:6b:7b:96:39:fd:
         89:ff:b3:34:fc:8e:63:92:a4:e7:b0:7c:96:a2:0b:8a:b9:88:
         87:98:f3:44:82:3c:4f:91:b8:75:fc:6d:10:e7:bb:d9:1f:41:
         bc:a5:7d:e3:23:e8:ca:ca:03:fe:36:28:1c:99:dd:7e:2c:67:
         f8:cc:a6:3b:93:62:da:d4:4e:98:5e:26:2b:0a:95:be:22:47:
         1f:c5:68:22:e7:4e:bf:8a:3f:7a:69:7a:b1:14:74:6d:38:7f:
         74:87:3b:5c:bc:0d:b0:8a:71:1b:87:78:df:12:11:20:0d:ab:
         01:2a:99:89:e9:f2:5c:ad:d7:e0:c1:26:03:93:3e:23:e9:5d:
         70:c3:12:ec:24:a2:ae:cb:72:8e:7f:cd:b3:c7:7e:65:d6:e3:
         c8:52:45:48:0e:16:3f:8f:af:77:56:14:ef:9b:dc:31:9c:9a:
         b6:e1:76:bf:15:07:e4:70:8a:b5:07:3c:4a:e8:6d:53:5d:7d:
         35:95:37:45:8f:50:34:1b:46:7b:80:6b:85:95:14:0b:02:b2:
         64:c3:ea:b3:8e:dd:6a:08:60:64:ae:e6:d5:43:18:f5:bc:3a:
         ed:b4:a5:0b:bb:5a:aa:b0:56:cb:d6:ea:b5:66:52:8a:88:97:
         1f:1e:09:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 12:34:38 2025 by rpki-client