This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft
File:                     1af0a650-f612-4b2a-9af3-b8090917fefd.mft (raw, json)
Hash identifier:          jVJeHEKHjgV0EfFlghaR1rXFWTgXrLJzNkDQCoOzOeQ=
Subject key identifier:   07:0A:C6:8F:AD:BE:68:EC:55:9C:C5:E0:3B:EB:3A:19:B4:F4:1E:30
Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D
Certificate issuer:       /CN=1af0a650-f612-4b2a-9af3-b8090917fefd
Certificate serial:       010D0C9F4328584C3D0A7E80CBFDC38B9DCE8A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft
Manifest number:          010D0C9F4328584BE67F5BDBA8BBD49634FD1920
Signing time:             Fri 19 Dec 2025 12:00:03 +0000
Manifest this update:     Fri 19 Dec 2025 12:00:03 +0000
Manifest next update:     Sun 21 Dec 2025 12:00:00 +0000
Files and hashes:         1: 1af0a650-f612-4b2a-9af3-b8090917fefd.crl (hash: El671rmxjef5saCXp9cNOp+WASLN9x9x7umfMpEBC5c=)
                          2: a163ff4c-23b6-3304-be68-6017eeb9e220.roa (hash: Pf/B365zT6MABXsqQnlXoHX+HpGvmh5X1VsjGm24c+Y=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3d:0a:7e:80:cb:fd:c3:8b:9d:ce:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd
        Validity
            Not Before: Dec 19 12:00:03 2025 GMT
            Not After : Dec 21 12:00:00 2025 GMT
        Subject: CN=3d46e72a-f04e-4542-a733-a5c70c111006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e9:20:0d:7f:f6:d8:25:12:9a:90:a7:a2:c7:
                    d3:1b:3c:06:d0:a7:aa:13:9b:9f:82:79:b3:e7:21:
                    90:b6:31:34:19:0d:ec:06:e4:27:17:f2:81:4e:22:
                    dc:6a:cb:1b:18:20:0c:1b:65:96:a0:01:23:d3:46:
                    ec:81:ea:97:b0:ad:c2:2c:bf:fb:3e:20:86:0f:a8:
                    72:ff:9b:c4:df:3e:36:0f:98:90:d0:6a:3f:16:18:
                    a4:c8:9c:ed:4e:d5:59:38:82:bb:15:e4:f7:93:65:
                    e9:60:d1:5b:13:c5:db:03:00:d5:44:94:f1:5d:88:
                    fe:f3:46:2c:a7:c1:8c:36:d8:fb:03:99:8f:f1:51:
                    0b:8d:4e:42:25:ea:81:de:ed:ab:bb:2f:ca:c4:b8:
                    4a:aa:85:b0:e4:8e:12:22:92:93:94:70:85:82:bf:
                    2a:b1:cf:45:1a:cb:91:76:30:ea:55:c3:96:15:a9:
                    9c:78:33:09:d8:1d:6c:8f:d5:c7:67:63:62:5f:04:
                    b5:cc:30:c8:ff:50:1d:96:99:86:f0:09:22:7e:2d:
                    4e:f1:e8:8b:97:44:27:70:dc:b6:d1:68:de:31:54:
                    7f:a8:4d:87:d5:da:97:40:30:b0:7a:9e:af:e4:97:
                    ac:e8:27:6d:38:36:d6:a1:5a:3d:7c:54:d0:1a:96:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0A:C6:8F:AD:BE:68:EC:55:9C:C5:E0:3B:EB:3A:19:B4:F4:1E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl

            X509v3 Authority Key Identifier:
                keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d4:92:72:84:d9:1b:60:8f:eb:0b:94:be:56:13:e8:94:87:
         28:68:9c:27:5f:44:0a:31:6b:85:1e:14:3e:05:c5:fb:85:35:
         27:ea:35:ad:d2:99:be:c5:64:8a:c4:8d:47:d4:57:44:fe:61:
         f5:99:55:d1:e7:b9:ae:ef:e3:2e:af:97:1e:27:ad:c4:9b:30:
         79:7b:db:31:1a:cc:35:65:cb:d7:ff:82:ec:ee:2c:27:dd:a5:
         17:e9:07:10:c1:17:cc:92:f1:34:fd:e2:b1:03:56:63:c4:a8:
         98:9f:5b:98:1e:b3:2b:94:65:32:2a:aa:29:d5:41:6f:6a:cd:
         ff:70:2c:7c:4d:44:a1:42:ea:ca:ec:c4:37:c0:b9:29:cf:b3:
         e3:d1:c9:05:14:06:26:44:3c:c4:ca:9c:ae:dc:bb:e6:ef:fb:
         76:47:e3:8a:b4:ca:ab:0a:0a:00:d1:c3:74:23:2b:d3:bd:e8:
         c6:33:33:e0:e6:fb:8a:1f:53:68:86:43:d4:1c:1a:93:51:fa:
         ed:a4:28:68:fa:bd:b2:e7:8f:b9:a0:5c:ee:bf:73:3c:4d:7c:
         bd:a1:c9:ff:db:83:d4:1f:fd:7f:df:2f:ce:2f:ff:b9:e5:b7:
         8f:4f:58:85:a9:46:5d:d5:88:ce:c8:36:e4:74:7a:9b:22:29:
         c2:49:3f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----