This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft
File:                     a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft (raw, json)
Hash identifier:          nVFVvrkEsB/XtwYREXb+GeZm2ZO7IVPSL06FcfGCwyk=
Subject key identifier:   04:C5:C8:BD:67:D7:D4:83:36:8A:7B:A9:64:A1:73:3A:EB:93:41:85
Authority key identifier: DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56
Certificate issuer:       /CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd
Certificate serial:       010D0C9F4328584C42BDB75D3B9E294E59076600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft
Manifest number:          010D0C9F4328584234D1D19DE3CDB1A5D85D2B37
Signing time:             Sun 21 Dec 2025 13:00:09 +0000
Manifest this update:     Sun 21 Dec 2025 13:00:09 +0000
Manifest next update:     Wed 24 Dec 2025 13:00:00 +0000
Files and hashes:         1: 19aa8e02-b9d8-353f-b661-4dbf4e73c897.roa (hash: wf3TANbs9lmbH2XQqyhxBLZeyKTCtI6R6LRDS2yrPsA=)
                          2: a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl (hash: Q/3WOwbdCAJz1LFqbgoht/VzFM7ZQRmU85ej0SxkJVo=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:bd:b7:5d:3b:9e:29:4e:59:07:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd
        Validity
            Not Before: Dec 21 13:00:09 2025 GMT
            Not After : Dec 24 13:00:00 2025 GMT
        Subject: CN=4d16a41a-2e4a-4957-92ce-3f7bba332a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:2a:86:e5:1a:9d:ee:34:a7:76:13:83:1d:
                    83:2c:20:92:59:12:82:ef:59:20:b7:e3:ed:24:78:
                    74:39:36:2a:5c:5c:08:8a:63:fc:2b:88:57:44:26:
                    1d:9c:aa:ad:1e:17:93:94:e8:e0:cb:ab:15:d7:22:
                    5f:82:10:a8:a8:76:53:a6:1a:2d:d8:f7:c3:36:fb:
                    b1:dd:40:35:b8:bf:17:06:08:25:31:80:b1:73:5d:
                    f6:0b:9e:4b:6c:73:ea:d5:2b:46:06:7c:84:85:9d:
                    82:4d:a5:65:cf:df:5e:60:14:7a:61:bb:5e:ee:b5:
                    5b:7e:a7:c4:7b:1d:f1:cc:98:08:0f:c0:57:39:e5:
                    ac:35:61:74:80:4b:17:5a:4c:af:df:d2:e2:68:26:
                    34:98:72:fa:d2:e4:44:03:1c:f9:10:36:98:68:4a:
                    5d:b1:22:50:5d:72:96:c2:5a:98:b3:55:1f:8d:38:
                    fc:b5:dc:b0:b4:55:ba:5e:72:d2:b0:ed:ca:3a:85:
                    48:5c:2c:6b:f2:3a:0c:27:7b:b1:5a:13:3f:50:55:
                    21:3f:52:67:80:83:a6:1f:1e:58:5a:92:4d:d8:5b:
                    28:f0:ba:d1:22:46:fb:6d:1b:e4:b9:9e:f5:9d:9f:
                    97:74:48:3d:3d:f0:0e:c7:c9:e8:fc:ba:ab:b3:1e:
                    ee:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C5:C8:BD:67:D7:D4:83:36:8A:7B:A9:64:A1:73:3A:EB:93:41:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.crl

            X509v3 Authority Key Identifier:
                keyid:DC:32:B3:93:D6:64:94:2D:8F:61:5D:79:FD:DD:54:FF:18:57:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9435a38-bb89-4fcf-9e5f-7a6e53b2d3bd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:53:01:d2:b6:b0:d7:15:8a:6b:a0:27:ac:46:c9:a1:7d:61:
         78:84:51:97:4f:dd:af:f4:70:e9:0e:00:91:af:c6:a3:83:88:
         10:7b:e2:4e:e8:97:fb:b9:94:cc:1d:79:62:51:16:be:4d:75:
         5c:64:30:77:fe:c5:82:22:47:62:fe:98:cc:5b:c5:00:42:81:
         1f:1c:b0:b7:dc:2b:2d:55:43:2e:26:b7:c8:5e:14:a8:d9:b6:
         de:64:41:c6:9e:17:3c:0a:e3:7a:55:22:2a:6d:e8:ea:e7:da:
         ad:61:34:6e:1a:10:8e:5b:31:f1:45:42:8b:b1:d2:0a:63:37:
         2d:6d:93:cf:66:31:ae:33:da:a1:42:5d:78:b8:12:ad:09:5b:
         32:a9:b6:b6:7e:a2:a3:3c:cd:8c:1e:f7:99:00:73:aa:28:79:
         01:47:a3:42:ad:e0:80:81:a4:ea:3f:9f:60:b5:90:62:8b:79:
         63:ec:e5:0b:b8:b5:f1:62:29:40:c1:e1:97:17:50:5a:3a:c3:
         d8:1b:de:4b:cf:ae:16:3c:05:bb:fa:71:8e:7a:d2:9e:5e:6d:
         d0:68:4d:1c:58:d5:03:c2:c7:ba:ab:e1:50:87:1b:ff:b4:a9:
         c4:f8:d9:6f:a8:15:84:9e:b4:3b:57:5e:00:fb:37:4d:58:76:
         d5:38:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----