This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft
File:                     b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft (raw, json)
Hash identifier:          S6mKiuDuMVc2hmVwoYkNL+X+siN6ldPvBSxrrGtWO7s=
Subject key identifier:   59:4B:85:A0:0E:9F:82:D2:12:82:64:43:60:78:7E:8D:7E:C2:16:51
Authority key identifier: 05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22
Certificate issuer:       /CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
Certificate serial:       010D0C9F4328584C40C36F1FB4D169FC33C25080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft
Manifest number:          010D0C9F43285841536EFDB53F2B26BB04F92E4D
Signing time:             Sat 20 Dec 2025 20:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 20:00:03 +0000
Manifest next update:     Tue 23 Dec 2025 20:00:00 +0000
Files and hashes:         1: 03c5f6b9-43d4-3675-b1f7-711c78cf6b5b.roa (hash: P8B7bCEOBsx9aVKWdMcPY5BCdV/OTZrpjEZ0KKwTcN8=)
                          2: 54ce3ffb-b802-3eaa-b445-e361781dbdab.roa (hash: LEdxRSyJ84hoDdGtIu7kFf5F6p/l/Pd6cunKlB04WX8=)
                          3: 81d31864-726f-36cc-86a4-ef212cd940e3.roa (hash: lIpcUwB/iGJ84hkXLJaBn1xqoJB+2OEqWjPu+FB9S2Q=)
                          4: 87c56411-a115-366c-b881-794a7033caac.roa (hash: 419V3cQaYKqlrhTMEKNKQWYg5Cl4yXIMWeHaIgY3IqA=)
                          5: 8aad0e5a-8116-38d5-8d89-1d1ec4bf3a53.roa (hash: DiIZXir0y8IMt02xPpxUCdOgwNJsuNZHmm9MxvTiS90=)
                          6: b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl (hash: ueYGD0TBRzPhdmvbb3b/uOHYfcEwO5YKoBMJ4go23HQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:c3:6f:1f:b4:d1:69:fc:33:c2:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
        Validity
            Not Before: Dec 20 20:00:03 2025 GMT
            Not After : Dec 23 20:00:00 2025 GMT
        Subject: CN=b7f702be-bc32-445c-9686-3b3cb09e72a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:43:61:fb:db:23:f1:ba:6b:49:5d:01:8c:
                    2d:58:c6:3b:f5:1d:25:fe:6e:2d:51:9b:99:8f:5b:
                    34:8b:a0:d7:8b:21:67:35:74:fb:02:7a:47:6b:c3:
                    c1:57:83:e4:b3:03:57:4e:b1:2d:67:06:61:82:75:
                    2f:ef:77:87:07:ac:c3:bf:ca:8d:61:68:f6:ec:cb:
                    a6:02:97:b8:dc:9f:69:39:37:20:ba:03:7f:a2:2f:
                    7f:3d:dd:0b:26:1c:69:39:a7:b8:7f:cf:67:4f:ba:
                    53:55:f3:e0:d9:a6:49:1e:4f:51:8b:fd:33:98:a9:
                    50:54:f0:97:23:b3:00:e5:9d:9f:93:ed:26:e7:22:
                    10:5b:05:98:b7:57:d8:28:aa:de:36:91:ed:22:b7:
                    30:2b:a8:87:08:e7:8b:df:dc:a1:6a:ef:88:bb:b0:
                    fe:38:91:82:18:1e:5a:2f:60:af:4f:35:14:3b:19:
                    5c:0f:e4:7e:c3:d5:1f:e1:72:75:18:2f:0f:87:73:
                    59:ad:77:fe:d0:ad:9c:e1:55:0a:cc:7b:7e:a0:f0:
                    fe:43:21:d4:09:6e:f2:ea:57:14:f6:38:21:d7:f0:
                    40:0d:74:70:4c:c2:ed:a2:07:c9:f7:fe:d7:c7:7d:
                    66:ad:3d:90:59:2a:02:1e:4e:22:b6:a2:7b:89:8f:
                    80:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4B:85:A0:0E:9F:82:D2:12:82:64:43:60:78:7E:8D:7E:C2:16:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl

            X509v3 Authority Key Identifier:
                keyid:05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:92:d0:b4:2d:34:a0:3a:bc:2b:0a:c7:58:79:26:26:f4:aa:
         a2:40:23:d0:5a:bd:20:64:25:67:58:42:ed:44:2b:a7:03:38:
         bd:9f:4f:b8:ef:2d:3f:8e:cf:69:17:35:fe:7f:e1:a0:e5:ff:
         b8:f5:fe:08:af:a8:81:32:92:9a:07:43:1f:ad:8f:e6:75:1e:
         ef:e4:d2:aa:6d:e8:b4:75:4d:80:8f:94:60:a0:6b:32:aa:d8:
         93:39:a5:92:96:8e:00:26:a0:e2:26:5f:36:33:32:8a:98:ce:
         22:ce:ed:47:43:28:19:54:9d:1d:21:e6:a8:c3:d7:e4:29:52:
         5d:2c:41:0c:cc:cd:65:c1:9b:2f:c0:5b:92:b9:39:26:d9:de:
         84:91:ea:fa:00:08:a9:cc:4c:a0:90:92:8b:6c:3a:a0:7c:c7:
         0b:37:60:17:2d:20:d3:ba:e0:63:2e:7f:d7:3c:b4:c4:57:67:
         ca:bc:ea:f7:2f:63:9b:41:6d:c7:88:99:52:67:57:d1:d3:0c:
         23:ca:0c:14:6d:0d:d0:de:79:34:f5:0c:c2:56:ae:3c:3f:c3:
         3f:75:8b:f2:94:d3:ad:34:46:14:55:74:71:4d:fb:8a:86:af:
         44:8b:c1:f6:66:9b:2a:67:ea:5a:de:28:6a:18:fb:48:12:d4:
         01:18:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 22:36:42 2025 by rpki-client