This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.mft
File:                     db34d8ad-c64f-4fe0-a095-112a8e656514.mft (raw, json)
Hash identifier:          5EXmGqzBRF7wjzTujZpn4VxAckERQwvWPPGvgZkafVs=
Subject key identifier:   64:83:F5:2E:2A:C8:F0:2F:AC:73:72:71:C9:01:55:E6:9A:BF:FD:27
Authority key identifier: 2F:94:8F:1F:6D:4C:10:90:33:EB:5D:AB:DF:F1:94:4E:78:3F:FF:53
Certificate issuer:       /CN=db34d8ad-c64f-4fe0-a095-112a8e656514
Certificate serial:       010D0C9F4328584C3CCEF0B77DF8F0A0C95F5FC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.mft
Manifest number:          010D0C9F4328584BF70ECE8330691C9FCABC288B
Signing time:             Fri 19 Dec 2025 10:00:03 +0000
Manifest this update:     Fri 19 Dec 2025 10:00:03 +0000
Manifest next update:     Sun 21 Dec 2025 10:00:00 +0000
Files and hashes:         1: 7506543d-1ee0-37ed-8919-e21e6d76d916.roa (hash: USRXTjwgjotDSitNEtJf5IfzP/5kXWiHqOHxJTYUvgk=)
                          2: 9f62cdd9-9e81-3d1d-baef-b8d357fb6011.roa (hash: xwvUbClpLWjPX+zBtGMEJtJa5T8Oqini75O6IFnqHO4=)
                          3: db34d8ad-c64f-4fe0-a095-112a8e656514.crl (hash: fzETu2neFTk4blvSPhjgaSOBBtYxCinMJmT7998WGWE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3c:ce:f0:b7:7d:f8:f0:a0:c9:5f:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db34d8ad-c64f-4fe0-a095-112a8e656514
        Validity
            Not Before: Dec 19 10:00:03 2025 GMT
            Not After : Dec 21 10:00:00 2025 GMT
        Subject: CN=b12fe5e9-198e-4c69-bca1-beecc0736c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:ef:11:1e:71:6c:d4:4f:65:b4:28:24:c3:
                    3b:07:17:4d:35:92:c5:8c:dc:8a:a1:8d:f8:2d:ce:
                    8b:9a:79:a9:9b:4e:e2:94:ee:5e:f6:42:64:fa:65:
                    55:01:cd:3f:a1:39:15:09:09:24:bd:0d:1c:e3:38:
                    d4:8d:1f:68:a8:89:b6:03:37:f1:3b:a1:50:a0:b1:
                    d0:d0:50:58:bf:d7:ef:04:69:28:f2:d2:12:72:0c:
                    c0:ca:da:0d:88:44:32:f1:85:d9:47:31:9c:2c:d9:
                    7a:31:a3:2b:60:91:a7:3b:97:45:45:1f:fc:14:53:
                    14:74:1f:8b:98:87:73:88:5a:07:54:0c:4c:79:e2:
                    62:13:16:37:23:a6:9b:0f:46:5a:ca:1a:6a:f6:a7:
                    45:c6:ef:52:74:19:e9:31:f8:60:b7:88:6b:a6:5b:
                    f1:09:1c:22:8d:a9:c3:cd:77:8d:5c:5e:fb:67:0f:
                    37:fd:89:57:28:ef:ae:c5:ff:5d:1c:71:c4:2a:f2:
                    3d:f0:78:de:b2:99:b5:c6:aa:e3:0a:de:21:d6:8f:
                    03:92:a9:d9:36:40:c0:36:d4:e2:fb:af:37:3c:60:
                    ef:6b:4a:0a:a7:21:1d:62:8c:c9:66:e4:60:df:ee:
                    a6:cc:e9:ed:55:82:e8:1e:8e:d4:39:42:03:94:46:
                    73:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:83:F5:2E:2A:C8:F0:2F:AC:73:72:71:C9:01:55:E6:9A:BF:FD:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514/db34d8ad-c64f-4fe0-a095-112a8e656514.crl

            X509v3 Authority Key Identifier:
                keyid:2F:94:8F:1F:6D:4C:10:90:33:EB:5D:AB:DF:F1:94:4E:78:3F:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/db34d8ad-c64f-4fe0-a095-112a8e656514.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:15:3c:34:a5:61:21:45:c1:4b:b6:c4:4b:8f:09:70:3a:
         13:4e:76:49:e0:d1:11:39:1e:7f:ef:3b:e2:4c:6b:86:3e:0f:
         dd:c8:3f:44:6e:b3:0d:d6:85:9c:34:68:f2:ac:f3:18:20:50:
         25:f4:51:6f:7a:13:d3:1c:b8:67:17:f9:21:c7:bb:6b:3a:8c:
         38:a3:e0:a2:e9:20:ff:5c:49:33:8e:aa:ba:41:04:2e:08:e2:
         8f:7b:f1:fa:58:0a:21:60:bb:42:3b:ed:a7:bf:09:1f:12:dd:
         be:d3:fb:78:09:0f:f3:45:42:bd:c4:4c:1b:64:46:02:96:39:
         f6:99:8e:f3:b8:4a:a6:e1:4c:7b:e3:24:6a:9c:35:2e:ee:78:
         c6:f2:73:30:a5:d5:6f:60:47:fd:88:41:01:ff:a2:28:2c:be:
         7b:21:1c:d2:be:5a:e6:0d:7d:5b:85:8d:10:29:66:46:41:83:
         fa:77:4f:c4:f3:80:c8:41:bd:76:d0:31:a8:68:a7:4e:d1:48:
         53:f0:f1:ca:83:90:19:f7:c0:a0:f5:99:93:0e:64:25:7b:21:
         ee:04:4d:66:82:99:ee:1e:01:20:f9:14:ea:da:07:e3:ad:33:
         ee:34:5b:85:f5:0f:db:77:50:51:96:2b:9d:7b:be:d0:16:b6:
         9b:c2:0b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:02:45 2025 by rpki-client