This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft
File:                     89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft (raw, json)
Hash identifier:          5d+SDipNEtdNA/9md5dA7yfiPZbgtUg9O2BTpm+q8PM=
Subject key identifier:   E9:97:E6:F6:78:45:B8:87:47:6A:3F:61:39:F6:F8:B7:F5:17:6C:2A
Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A
Certificate issuer:       /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d
Certificate serial:       010D0C9F4328584C3D461A2B826C990FF8E7AF70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft
Manifest number:          010D0C9F4328584BC280D5C678E41C6D5255F4AC
Signing time:             Fri 19 Dec 2025 14:00:08 +0000
Manifest this update:     Fri 19 Dec 2025 14:00:08 +0000
Manifest next update:     Mon 22 Dec 2025 14:00:00 +0000
Files and hashes:         1: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl (hash: ABRl90Dkt0KQ5pXg7kYC36YxxVPr7VIebnSh8v/hAJ4=)
                          2: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (hash: EFRpkIThgt4Ym6uet7Z7YYdiO8dCZKqpH6QFzu4p3kI=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3d:46:1a:2b:82:6c:99:0f:f8:e7:af:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d
        Validity
            Not Before: Dec 19 14:00:08 2025 GMT
            Not After : Dec 22 14:00:00 2025 GMT
        Subject: CN=c5102307-5e35-47b5-8d3a-28141da0355d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:9e:a9:74:3d:86:38:7c:49:06:bb:db:62:
                    f8:ec:46:42:54:5f:df:a9:6f:78:96:92:98:b8:74:
                    4a:4e:f7:0e:4c:e9:73:0f:8e:0a:dd:c6:f2:a3:ab:
                    63:49:72:b6:1d:a8:50:0f:2b:c5:fa:d2:d8:cb:d1:
                    81:6a:bd:3c:b9:c4:f3:8f:83:0c:08:35:73:d3:f1:
                    f5:e2:99:3b:83:ac:9e:bf:6b:d9:51:71:43:c6:68:
                    aa:59:65:33:4e:21:73:a1:cb:a5:35:2e:f5:04:13:
                    05:a5:ac:a6:05:48:15:4c:90:f6:4e:95:54:77:28:
                    a7:d7:70:0b:49:a8:d1:c6:25:69:79:50:57:62:b9:
                    46:77:ee:38:d8:1f:59:19:00:c2:12:91:1a:67:43:
                    d0:28:40:75:1b:96:53:ff:df:3f:72:93:2b:64:bc:
                    22:4c:07:d8:f5:03:fe:64:ff:73:5b:d8:03:0d:71:
                    80:06:4e:1b:50:aa:ed:fe:6f:94:5d:d5:23:db:96:
                    53:f6:d3:59:c4:6f:aa:66:5e:01:1a:54:23:af:e6:
                    3e:a0:b2:2f:32:4f:2c:a1:74:a8:a4:76:e7:d3:c9:
                    0b:c1:ab:fd:45:7a:f3:47:c0:d8:3c:48:f0:e8:10:
                    0f:12:de:57:9e:0f:05:67:da:bd:15:1f:3e:0d:fe:
                    a6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:97:E6:F6:78:45:B8:87:47:6A:3F:61:39:F6:F8:B7:F5:17:6C:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl

            X509v3 Authority Key Identifier:
                keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:3e:42:e5:99:68:34:7b:cb:67:04:b1:4c:01:71:b8:c4:6d:
         6b:14:40:db:47:95:f1:23:a4:4e:2c:3b:7b:b5:b2:c4:6a:af:
         12:a0:93:31:62:cf:d7:08:3e:bc:d9:d0:f6:32:c7:58:ea:f0:
         0f:d0:c0:77:49:87:3d:b4:b6:4a:9a:ef:f8:4b:88:d2:d5:66:
         56:01:10:45:9c:eb:ef:87:02:ee:71:e5:70:26:d0:67:0e:21:
         e3:cc:40:89:23:d0:4d:c2:73:27:c5:34:f5:1a:e4:10:0c:e6:
         42:03:5a:e0:ee:21:9c:78:5f:89:37:cb:28:06:f7:97:eb:40:
         ce:62:8e:f9:a7:e4:ac:10:69:c5:c2:a5:99:05:3b:d7:f4:2d:
         e7:2e:69:57:3f:c9:49:4e:39:41:69:62:fe:53:b5:df:d3:2f:
         7c:11:a3:10:18:7d:cc:c8:0c:93:bd:50:66:37:b0:ce:9b:34:
         1b:7b:56:5e:5a:d0:d4:1d:09:ae:ed:d9:6f:c2:00:85:0e:40:
         88:0c:64:16:01:46:dc:bd:dc:3d:98:86:5d:83:c4:42:83:64:
         26:ed:d4:f8:b5:7f:85:5e:0e:95:b6:f7:8d:3d:24:f3:5f:af:
         43:94:f6:16:46:60:d2:47:d5:92:b3:31:a7:99:af:78:33:00:
         e6:d2:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:20 2025 by rpki-client