This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft
File:                     650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft (raw, json)
Hash identifier:          9j05eQjdUODbm63nPE9NyprSYCM9ONWluutU3w2qqGM=
Subject key identifier:   73:87:AE:47:DE:0D:52:AF:07:9D:3E:CC:2D:82:79:5F:8E:23:F5:B8
Authority key identifier: E8:7A:F1:C7:EC:C2:87:49:8F:CA:84:8F:EA:DB:1F:CB:05:B1:1D:F8
Certificate issuer:       /CN=650afc4b-a3fd-482c-9b5f-6e8c732568ab
Certificate serial:       010D0C9F4328584C3E6FD6BC112F00C8A6A38508
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft
Manifest number:          010D0C9F43285847ECF8DDEBB36A535755A675B5
Signing time:             Sat 20 Dec 2025 00:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 00:00:03 +0000
Manifest next update:     Tue 23 Dec 2025 00:00:00 +0000
Files and hashes:         1: 650afc4b-a3fd-482c-9b5f-6e8c732568ab.crl (hash: jT2QOcWzZWobR/MkXrw6fq6EYJ3wb7/DceqcH5XUADw=)
                          2: b4acf39b-529d-3507-b6a7-c216868daffb.roa (hash: nWr3c82ubwBiXU8/P23aXVXUIwF7+e9LfsJFDEG2OS4=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3e:6f:d6:bc:11:2f:00:c8:a6:a3:85:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=650afc4b-a3fd-482c-9b5f-6e8c732568ab
        Validity
            Not Before: Dec 20 00:00:03 2025 GMT
            Not After : Dec 23 00:00:00 2025 GMT
        Subject: CN=dc6b6dd3-81a7-4711-8087-8bf149ea1889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:52:4a:24:fe:4b:2d:89:8b:bd:7c:1d:3d:15:
                    a6:bf:c7:89:62:e3:51:56:12:1c:37:17:e9:7b:94:
                    10:b8:39:18:86:f2:9d:5e:b6:5a:58:6a:6a:b0:0b:
                    a2:ed:c3:01:53:89:02:4f:62:16:2f:5e:8d:80:c6:
                    3f:1d:9f:79:66:79:24:b7:87:1b:a4:59:50:ad:74:
                    a1:56:ab:27:59:86:38:d0:74:96:74:c1:77:a2:25:
                    27:6b:30:53:7d:9a:0f:2d:fc:d5:53:f0:7c:a4:e3:
                    66:94:5e:2b:23:11:94:61:a8:e0:b5:37:b8:92:6d:
                    d2:83:a9:ca:e2:8e:6c:89:41:e1:a4:e3:49:d4:ad:
                    24:68:cb:cf:77:97:ef:90:94:3d:7c:35:85:7b:34:
                    35:dd:f8:da:fa:60:4f:13:f1:1b:77:86:97:44:55:
                    82:ea:ef:d0:4f:3e:69:ff:35:15:84:ce:45:54:a1:
                    65:6a:d3:49:c0:f4:2a:46:e6:04:e8:1d:78:14:38:
                    76:62:a5:0d:d7:f8:96:06:26:2e:9a:95:07:51:18:
                    07:90:e8:61:f9:c8:58:8e:7c:58:b0:c3:8b:d9:1f:
                    30:95:1f:b7:09:1a:a3:6f:a0:42:02:9f:a2:4e:3d:
                    1b:16:25:78:a7:24:28:c1:d4:94:aa:a7:c5:1c:26:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:87:AE:47:DE:0D:52:AF:07:9D:3E:CC:2D:82:79:5F:8E:23:F5:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7A:F1:C7:EC:C2:87:49:8F:CA:84:8F:EA:DB:1F:CB:05:B1:1D:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:46:6e:f2:a0:36:04:1d:36:28:bd:3d:0c:96:6a:f6:f1:92:
         21:9b:d1:84:20:3a:dd:b2:79:12:46:95:25:21:47:7a:38:4a:
         e4:23:45:c9:01:42:25:48:9d:c7:9b:7c:f8:41:e7:f2:e7:19:
         80:8c:45:f8:52:ef:c8:08:d5:6b:db:35:05:b9:4b:a3:c6:d2:
         fa:31:1c:25:36:a3:13:d1:26:48:97:03:10:d1:d5:c7:8a:6e:
         82:ce:4b:4f:7d:87:6f:e1:8c:74:8f:6c:1e:b0:2e:81:b4:f0:
         71:e6:2a:0a:42:da:63:0b:61:4f:18:98:7c:03:d9:88:cb:c4:
         04:1f:c7:64:47:17:a2:a8:25:5a:29:df:b9:4f:fd:d3:6d:8a:
         1e:c7:ac:87:7e:d9:b1:8d:a4:86:d7:0b:27:38:ca:46:04:84:
         28:fe:2f:e8:36:cb:e6:d1:ae:9c:53:fa:6c:f4:2e:4e:bb:bf:
         b2:09:00:14:2b:c8:6c:f1:da:d2:03:fd:75:ef:bf:9f:68:84:
         91:e9:ae:05:d6:ed:83:77:1e:43:f8:f6:d0:20:72:af:71:d8:
         ae:0e:3c:be:49:6f:6f:08:fd:fa:5c:a9:59:13:5e:4f:53:91:
         05:1b:c8:cf:b4:05:c5:9c:bf:c7:72:69:e9:79:d3:af:0f:19:
         b7:98:65:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----