This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.mft
File:                     b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.mft (raw, json)
Hash identifier:          3QTLayeS6KP83yFLsO/0+gK83qViT2dVxAOCYKEOOig=
Subject key identifier:   FF:1A:D0:D3:4A:DB:2A:76:BF:75:0F:81:27:41:20:42:F1:71:68:D3
Authority key identifier: 35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41
Certificate issuer:       /CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
Certificate serial:       010D0C9F4328584C40FF054A1B2BC91CE1B5D400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.mft
Manifest number:          010D0C9F4328584073A82B7E7A1909089F20526C
Signing time:             Sat 20 Dec 2025 22:00:08 +0000
Manifest this update:     Sat 20 Dec 2025 22:00:08 +0000
Manifest next update:     Tue 23 Dec 2025 22:00:00 +0000
Files and hashes:         1: 13c134c1-3dbc-33de-aa95-3cfbfa9a9be1.roa (hash: Yof4rdikRvt2bBp/X6RU/EhPlMOIIqPz4ocB9rtVJSw=)
                          2: 70b8f7c6-0c20-3009-98e6-185bb036b6d8.roa (hash: PIhe+3x86LDjGLMYO0NrCWpnhp73gnTmfAe4WUVjZjM=)
                          3: b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl (hash: Q6JgCxB4yKBi8xLuwiuhK83/2fMXcfO7dBQ00p/bU/k=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:ff:05:4a:1b:2b:c9:1c:e1:b5:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b50a2dec-1d8f-47d7-b523-5a2ca365f5c3
        Validity
            Not Before: Dec 20 22:00:08 2025 GMT
            Not After : Dec 23 22:00:00 2025 GMT
        Subject: CN=1538d2e3-5c04-4687-85ac-e3bad13c33df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cc:b3:f4:7f:5c:01:67:49:73:53:68:73:34:
                    4f:59:d9:80:cf:57:61:22:f4:52:36:39:a4:00:1e:
                    0d:95:5a:99:79:dc:9b:1f:f1:6a:b4:52:a0:e0:e0:
                    ec:11:79:04:8f:37:8a:e8:9e:79:c8:8c:6d:59:2a:
                    81:ca:af:84:ac:b0:b5:5d:2b:be:ec:72:9d:df:b9:
                    f4:22:0f:ba:7f:72:44:e9:0b:f9:41:40:45:2b:37:
                    30:87:16:8a:52:3e:29:d3:de:a4:74:01:a8:4c:f3:
                    e5:61:18:7a:c7:dc:b8:74:ef:2b:a3:c3:a6:27:6f:
                    39:57:bc:93:a8:e7:a5:ff:0b:81:64:7c:93:af:8f:
                    76:24:9f:d3:22:93:37:97:db:8e:57:46:3c:4f:70:
                    c3:38:e3:11:84:e2:e0:2c:df:c0:89:5f:ed:a2:f4:
                    06:28:1b:93:b7:ae:fc:1f:52:e2:c4:4b:d1:67:de:
                    f8:11:a6:b2:0e:17:1e:a7:b4:f0:54:c0:03:fe:e6:
                    92:d5:72:64:df:7a:ad:40:50:61:4a:f8:01:f7:f7:
                    d0:9f:ac:a8:63:a3:bb:ca:bb:f5:3d:ca:cd:00:4e:
                    75:45:fd:25:cc:ba:91:0f:41:5a:e3:9a:81:9b:c5:
                    82:ea:ff:d9:d1:47:d4:8d:e1:32:4b:b4:eb:80:5b:
                    32:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1A:D0:D3:4A:DB:2A:76:BF:75:0F:81:27:41:20:42:F1:71:68:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.crl

            X509v3 Authority Key Identifier:
                keyid:35:60:12:FD:7A:D5:B1:82:94:7A:A1:8E:8C:62:72:51:0E:7D:25:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b50a2dec-1d8f-47d7-b523-5a2ca365f5c3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a9:9a:06:d4:85:2a:99:18:fd:be:6d:78:cd:5b:16:cf:7e:
         c2:ac:d3:24:33:5e:ed:6e:02:74:f0:9c:ff:af:ae:26:f8:ba:
         26:63:f9:74:b2:0e:1a:6d:3b:ef:26:4e:c7:a1:90:53:86:1a:
         cf:c7:6f:06:49:b2:02:ca:f2:ff:d5:81:8b:d2:4c:0e:ee:7a:
         c4:a2:ac:a4:ee:63:8e:f0:91:41:4a:5b:c9:19:01:68:87:94:
         ad:d6:29:63:59:58:92:bc:83:2a:c7:30:17:fa:6d:77:bb:20:
         90:a2:e6:77:6e:b2:09:39:50:35:51:ac:79:ca:68:28:cf:6f:
         ef:b4:a9:f2:42:66:b7:77:b8:f9:87:87:3b:8a:58:14:f9:b4:
         32:fa:2e:85:6b:08:56:72:0a:a9:7e:0f:f9:c4:02:41:70:d3:
         5e:08:74:74:95:8f:12:b3:f5:e3:6b:24:f9:d2:68:15:e5:cb:
         41:3e:6a:b0:8a:76:2d:6b:18:3b:1f:59:eb:b7:ab:14:72:fb:
         48:3f:ce:41:88:6e:ab:7f:b4:ff:44:84:0b:dc:28:f9:d3:ba:
         c4:31:ed:f1:37:e6:9a:bc:8c:76:d5:58:cb:24:96:2b:74:44:
         ae:79:04:cc:4d:99:1b:03:d9:63:81:45:14:ce:e3:06:0b:00:
         84:13:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 00:53:15 2025 by rpki-client