This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft
File:                     3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft (raw, json)
Hash identifier:          DznICCsh0bCHCPBuAsr/4Hkzlh6DZu8KMdKOgCykeAw=
Subject key identifier:   C3:68:3D:8D:5D:7E:ED:1C:35:6E:86:BF:8F:24:3E:07:54:1E:30:86
Authority key identifier: B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D
Certificate issuer:       /CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f
Certificate serial:       010D0C9F4328584C402E8836EB7538FEA8283000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft
Manifest number:          010D0C9F43285840D8030218D81B64E5E4C52557
Signing time:             Sat 20 Dec 2025 15:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 15:00:03 +0000
Manifest next update:     Tue 23 Dec 2025 15:00:00 +0000
Files and hashes:         1: 05fd079c-ab7a-3b06-96d9-0546148ecf20.roa (hash: CbUFAxGaVZs+AxJT/1EF3HeAmmJMKCVKxtZPnJzQiBM=)
                          2: 3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl (hash: QJAIO7CIASkSlYnZTtNSwqSe9rar8oT3Ra5MhVEudzQ=)
                          3: 8c7d3e4b-0e86-348a-b4fd-f390c6d57d5a.roa (hash: B9paoA0/3FRWTqq3eyotQABI/cpwMbAlTde1lIH4YOw=)
                          4: be756b92-6acc-3494-9eeb-3de9866cb967.roa (hash: DDU2dIe3T3D84zq9b0lYDaq+6wplxfRFc+Ot3c7Kd6c=)
                          5: e31f5cb8-043d-36c0-abe7-033fb4a61cc4.roa (hash: Rns2ZH+jrpyG1StbLf4pEXxkaZIHpSH7Kn2TCcv+tJY=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:2e:88:36:eb:75:38:fe:a8:28:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f
        Validity
            Not Before: Dec 20 15:00:03 2025 GMT
            Not After : Dec 23 15:00:00 2025 GMT
        Subject: CN=353b0e9c-570b-4ae2-b287-0309c002957a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6e:8d:1f:be:b9:97:91:53:e5:95:6f:a5:69:
                    79:af:3d:87:a6:5d:8e:00:7b:02:5f:da:19:c0:84:
                    54:62:4b:a8:b9:06:4b:b8:5a:1e:24:47:5e:75:7b:
                    31:73:01:5d:55:8c:97:70:d1:28:8b:47:d9:10:cb:
                    42:9b:4c:20:41:34:59:d4:39:22:c3:16:ef:d8:69:
                    e1:19:0c:1e:1a:98:0b:65:65:f2:63:0a:76:fd:0f:
                    d2:63:d7:f7:db:5f:55:df:85:67:45:4f:50:ba:cc:
                    c3:ae:c5:c1:20:60:ad:d1:ea:1c:b2:0a:21:1f:62:
                    af:b6:92:33:ee:50:45:f6:3f:01:c0:84:9e:00:c0:
                    0f:d8:a9:52:1a:f9:b7:56:49:fe:65:04:df:bd:d2:
                    f7:fa:e2:ba:35:97:41:ee:f0:71:1e:87:9e:5b:09:
                    95:81:db:e1:77:91:ac:39:59:e9:a3:da:8b:a1:e2:
                    7f:4a:5e:99:0a:50:26:fb:ab:90:05:c3:29:1f:90:
                    14:48:e3:99:16:08:9d:ce:1b:f9:67:a5:32:a2:67:
                    18:a0:38:92:7d:81:06:c5:c4:dd:02:39:f6:92:23:
                    cc:10:ba:2c:a3:85:a0:16:c1:e9:f0:5d:24:c2:19:
                    da:c3:68:c2:3f:79:58:48:23:91:44:01:a1:23:95:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:68:3D:8D:5D:7E:ED:1C:35:6E:86:BF:8F:24:3E:07:54:1E:30:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.crl

            X509v3 Authority Key Identifier:
                keyid:B8:F6:EB:89:EB:99:E9:DA:77:78:CD:50:4D:57:27:9C:52:0F:90:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3c9dd88c-6cdc-4875-8cdd-a3c653e2fd7f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:ec:92:dc:03:6a:cf:9e:1e:90:73:b6:0d:79:ac:b3:de:71:
         ac:31:45:e9:19:a2:b4:64:8f:a0:3b:3e:39:3b:5f:19:5e:6d:
         84:d4:60:c2:ab:23:86:e4:47:2c:c9:f6:96:65:b8:67:ba:1b:
         6c:18:bf:95:15:c3:ad:4f:49:42:3a:95:ef:c1:0a:92:4b:bd:
         6d:f9:b4:11:34:50:a5:ca:4b:a3:90:5e:26:ca:f1:57:d2:89:
         d9:6a:15:02:94:f6:49:67:83:ae:60:27:b0:32:c9:c4:79:35:
         4d:88:6a:0f:85:80:7e:7e:c4:62:78:a0:16:18:e8:9d:00:4f:
         90:cb:e9:8a:d3:e8:64:41:98:9c:26:a5:9c:b7:70:75:35:50:
         b5:ed:6c:2e:5f:c8:64:be:0a:a2:69:53:f1:16:a0:44:66:9a:
         61:39:93:0c:a9:fa:92:9b:61:fb:13:0a:2a:bd:9f:cf:7b:5b:
         d1:c8:a9:d9:d9:e2:9b:81:41:79:88:75:09:59:a0:67:07:b9:
         e9:e8:43:fb:ec:62:0a:8c:e3:3d:28:32:ec:12:c5:7c:19:f9:
         2c:97:50:ff:a8:7f:bb:f2:08:68:88:29:88:db:44:0c:d8:9a:
         5f:2c:77:25:61:ba:4f:9b:38:74:70:20:1a:ac:f1:57:39:45:
         82:c3:b4:cc
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExALog263U4/qgoMAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M5ZGQ4OGMtNmNkYy00ODc1LThjZGQtYTNjNjUzZTJm
ZDdmMB4XDTI1MTIyMDE1MDAwM1oXDTI1MTIyMzE1MDAwMFowLzEtMCsGA1UEAxMk
MzUzYjBlOWMtNTcwYi00YWUyLWIyODctMDMwOWMwMDI5NTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG6NH765l5FT5ZVvpWl5rz2Hpl2OAHsCX9oZ
wIRUYkuouQZLuFoeJEdedXsxcwFdVYyXcNEoi0fZEMtCm0wgQTRZ1Dkiwxbv2Gnh
GQweGpgLZWXyYwp2/Q/SY9f3219V34VnRU9QuszDrsXBIGCt0eocsgohH2KvtpIz
7lBF9j8BwISeAMAP2KlSGvm3Vkn+ZQTfvdL3+uK6NZdB7vBxHoeeWwmVgdvhd5Gs
OVnpo9qLoeJ/Sl6ZClAm+6uQBcMpH5AUSOOZFgidzhv5Z6UyomcYoDiSfYEGxcTd
Ajn2kiPMELoso4WgFsHp8F0kwhnaw2jCP3lYSCORRAGhI5UlzwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFMNoPY1dfu0cNW6Gv48kPgdUHjCGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zYzlk
ZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2NTNlMmZkN2YvM2M5ZGQ4OGMtNmNkYy00
ODc1LThjZGQtYTNjNjUzZTJmZDdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2M5ZGQ4OGMtNmNkYy00ODc1LThj
ZGQtYTNjNjUzZTJmZDdmLzNjOWRkODhjLTZjZGMtNDg3NS04Y2RkLWEzYzY1M2Uy
ZmQ3Zi5jcmwwHwYDVR0jBBgwFoAUuPbrieuZ6dp3eM1QTVcnnFIPkG0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8zYzlkZDg4Yy02Y2RjLTQ4NzUtOGNkZC1hM2M2
NTNlMmZkN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAp7JLcA2rPnh6Qc7YNeayz
3nGsMUXpGaK0ZI+gOz45O18ZXm2E1GDCqyOG5EcsyfaWZbhnuhtsGL+VFcOtT0lC
OpXvwQqSS71t+bQRNFClykujkF4myvFX0onZahUClPZJZ4OuYCewMsnEeTVNiGoP
hYB+fsRieKAWGOidAE+Qy+mK0+hkQZicJqWct3B1NVC17WwuX8hkvgqiaVPxFqBE
ZpphOZMMqfqSm2H7EwoqvZ/Pe1vRyKnZ2eKbgUF5iHUJWaBnB7np6EP77GIKjOM9
KDLsEsV8Gfksl1D/qH+78ghoiCmI20QM2JpfLHclYbpPmzh0cCAarPFXOUWCw7TM
-----END CERTIFICATE-----
Generated at Sun Dec 21 02:02:36 2025 by rpki-client