This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft
File:                     954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft (raw, json)
Hash identifier:          oLnwq1kiF4J97KHwqV6oAktAqruiv2zESYc8eNYjXkg=
Subject key identifier:   6C:D8:3D:B3:E1:41:6F:95:46:E2:2F:1E:A3:99:88:21:99:82:2B:7C
Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC
Certificate issuer:       /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d
Certificate serial:       010D0C9F4328584C3DE5F159F0CFC4BFBDFD5580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft
Manifest number:          010D0C9F4328584C112324F43AA2908752839A13
Signing time:             Fri 19 Dec 2025 19:22:11 +0000
Manifest this update:     Fri 19 Dec 2025 19:22:11 +0000
Manifest next update:     Mon 22 Dec 2025 18:00:00 +0000
Files and hashes:         1: 3c531f86-93ab-3895-9a5b-924845a382d9.roa (hash: DJBCysrj1wTXmtVjVKdxiGEhNUCkqkFMdEU1+/Ky7Ko=)
                          2: 7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa (hash: Tglr5Xmqq96HOTy2USQMJKMiRYt1+ZuXcB1Md8SgQvw=)
                          3: 954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl (hash: mpijHYud+DBErQu3Y8JfcX7JYh/4BNEBYPmCP4zay7k=)
                          4: b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa (hash: 49MYpcoifKRR+5crRvJRw2ghYbJUkMAt1bct33y3RSE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3d:e5:f1:59:f0:cf:c4:bf:bd:fd:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d
        Validity
            Not Before: Dec 19 19:22:11 2025 GMT
            Not After : Dec 22 18:00:00 2025 GMT
        Subject: CN=3e3e3c87-9783-4ab1-ba65-f229a337c47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:c1:30:a0:eb:99:ee:bd:0e:04:de:83:c9:
                    20:fb:81:93:f6:17:79:59:b9:ce:cc:c5:75:0f:8f:
                    ce:8e:db:e7:09:18:c7:eb:56:31:c4:7a:e9:cd:d9:
                    9e:63:0f:10:ee:47:ab:60:12:6b:01:ec:87:96:14:
                    35:47:0e:91:ec:7d:24:0d:3c:dd:2f:c1:1a:b3:5e:
                    c5:66:47:97:ad:05:69:be:e8:12:78:7f:0b:d8:2d:
                    6b:a0:0d:87:fa:eb:4a:33:7e:f6:ab:a9:82:f0:9a:
                    17:2b:a2:9a:5b:f2:06:ec:10:aa:d3:19:e8:a3:07:
                    64:ba:46:ec:e8:55:6d:6e:a6:a4:c9:0e:76:32:ec:
                    4f:83:8f:1e:7c:2d:83:42:45:61:3a:3b:1f:9d:73:
                    eb:99:ef:2a:f6:b8:f2:9f:37:9d:6c:73:6e:af:07:
                    9e:5f:28:10:0d:70:d4:37:08:ce:dd:c9:df:87:4b:
                    4e:73:fa:4b:53:66:c0:e7:40:5d:a2:33:10:e2:de:
                    72:38:65:ac:25:cc:3e:bf:a6:9a:3f:f4:97:cc:ba:
                    d4:f9:f0:f5:7e:94:37:96:31:63:f1:dc:6a:08:bd:
                    e5:43:ea:fb:9e:22:1a:2c:b8:2a:39:36:e3:b0:86:
                    77:76:f5:b6:9b:c5:11:69:5b:a8:ec:c7:fd:8e:71:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D8:3D:B3:E1:41:6F:95:46:E2:2F:1E:A3:99:88:21:99:82:2B:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl

            X509v3 Authority Key Identifier:
                keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:04:d0:dc:80:56:a5:02:6c:db:50:16:64:ef:1f:1b:7c:1b:
         5a:29:5c:1c:ca:6d:01:84:ff:86:51:02:1a:ca:f3:33:92:b4:
         4d:6b:12:c8:05:e5:03:99:2e:75:2d:ef:a1:30:0c:31:b0:2a:
         63:b4:46:05:8c:24:a5:e0:c3:a7:95:bc:cb:29:e3:c5:e2:12:
         f8:06:65:96:30:cf:e5:a3:33:89:a3:30:e5:6c:c2:a3:a0:06:
         ba:32:7a:13:38:0b:49:a5:cb:82:52:f1:7b:55:7c:66:e3:5d:
         79:9e:a9:e9:f5:5c:96:d5:cf:dc:23:26:ff:e0:f2:bd:44:78:
         d0:cb:5f:8c:08:c2:41:af:ea:93:a2:17:8a:75:c9:c0:8a:68:
         cd:aa:54:d2:79:08:e9:f4:c3:4d:a8:a6:46:1e:be:bb:c0:e3:
         36:89:c5:fa:5f:4b:0e:3f:77:a7:13:87:3c:5f:3a:a3:1b:29:
         4d:f5:2b:cc:1e:ee:83:4a:9c:1c:64:5c:1f:c5:87:82:05:4b:
         1e:4a:aa:06:b9:53:b9:e5:99:f2:47:a0:52:35:ef:56:95:5b:
         ca:ee:35:1c:3a:44:f7:ee:b8:1c:99:4e:ad:5d:02:4d:d3:b5:
         68:d8:12:e5:ee:e5:10:8c:fb:dc:ba:91:e5:af:51:81:d4:c9:
         04:d1:3e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:02:47 2025 by rpki-client