This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft
File:                     ba2a1fed-6973-4607-a297-20f3f241a739.mft (raw, json)
Hash identifier:          1+pbt0QxW6LtFPHYGEWHq8V95EszuW0hCv/pKo6Fj/E=
Subject key identifier:   52:66:85:22:2C:20:AA:37:5A:52:3F:86:01:8F:41:27:89:10:E8:5C
Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6
Certificate issuer:       /CN=ba2a1fed-6973-4607-a297-20f3f241a739
Certificate serial:       010D0C9F4328584C5C72B32689D5CDC15C20C780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft
Manifest number:          010D0C9F43285840BF4A16296741E0B61796E646
Signing time:             Tue 30 Dec 2025 18:00:03 +0000
Manifest this update:     Tue 30 Dec 2025 18:00:03 +0000
Manifest next update:     Thu 01 Jan 2026 18:00:00 +0000
Files and hashes:         1: 9bba60d3-0bdd-3615-9dee-42f9533f7786.roa (hash: nnlWrilp75WX3EH6N1ZcVkc6oIKrv2GjhevAAKy0rOc=)
                          2: ba2a1fed-6973-4607-a297-20f3f241a739.crl (hash: objw1ZlXfEBpjEBpsnRJefQKkCfgesRkpR9qthchNU4=)
                          3: c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa (hash: uZIr9Cfr02GFibI8SoPxXhzbFhzz7Q3gRTqk+RUok1w=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Jan 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5c:72:b3:26:89:d5:cd:c1:5c:20:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739
        Validity
            Not Before: Dec 30 18:00:03 2025 GMT
            Not After : Jan  1 18:00:00 2026 GMT
        Subject: CN=4b6fb4d1-0f3b-4c29-a5ad-1772709324ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:90:09:14:58:e6:16:4f:26:36:ad:97:7b:
                    f0:c8:13:52:5f:bc:72:b3:b5:03:64:48:96:e4:80:
                    a6:81:fe:0f:5c:f1:4d:58:01:41:9b:aa:0f:11:3c:
                    93:cf:fb:66:2c:53:5d:31:8d:39:88:dc:e9:de:0f:
                    c7:d9:f3:22:28:b6:63:66:db:33:d5:12:49:bf:c4:
                    d6:46:55:e9:9b:1c:84:99:f1:e1:34:db:7d:4c:5f:
                    bf:32:f8:f6:78:e5:6e:f2:9f:17:4f:04:83:5b:e1:
                    a6:7d:33:ad:7a:f0:6b:31:98:3f:ac:65:75:bd:2d:
                    c2:5d:38:f5:1a:d3:a5:2e:a8:80:f2:f7:85:d2:b4:
                    b7:46:b9:7a:65:44:2a:48:33:2a:f3:29:a7:a4:c5:
                    84:d3:00:a7:ca:52:0f:32:3e:ea:45:f6:8c:23:c6:
                    11:b9:ab:c7:15:82:c9:5c:ee:83:f9:fd:0c:62:1a:
                    06:1e:da:30:39:63:95:5f:df:f3:6f:df:c8:30:90:
                    5d:f2:70:87:69:91:47:6b:40:14:61:72:06:22:b7:
                    1b:e1:d9:ba:ef:77:ab:44:15:8f:56:66:cf:6d:7b:
                    f2:f6:bf:42:79:09:75:24:63:c9:76:8e:11:04:09:
                    6c:93:9a:ae:a5:0d:63:c2:62:d9:a2:44:79:a3:2f:
                    80:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:66:85:22:2C:20:AA:37:5A:52:3F:86:01:8F:41:27:89:10:E8:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl

            X509v3 Authority Key Identifier:
                keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:86:eb:f6:0f:15:e4:9d:2d:83:02:57:72:ac:d1:f5:6b:02:
         3e:db:04:6b:7e:18:08:29:a9:fa:1f:68:df:8c:c6:6c:84:e8:
         35:e3:ee:97:1e:f8:78:f9:97:13:45:a2:6e:2a:af:fb:8f:91:
         76:4b:53:c6:a8:cc:d9:64:c6:1b:c5:0d:a3:80:a4:5b:62:41:
         91:42:75:f2:47:79:cf:4f:5e:67:fa:0d:95:b7:d5:61:36:4b:
         23:f5:6c:e8:85:33:36:f2:41:94:f8:46:02:2c:c6:3f:66:4d:
         22:e8:bc:f1:de:d2:26:a7:06:08:20:7b:6e:a2:ba:1e:dc:47:
         0a:29:2a:45:3c:62:55:ed:f9:47:d2:2c:2d:4d:49:06:e0:a8:
         62:be:a2:3c:44:0d:af:16:04:aa:6e:7d:88:22:4c:99:58:68:
         08:8d:ff:2f:e3:8d:c6:86:a9:c1:95:1e:f9:a7:e7:ed:72:cc:
         e2:1e:f7:fa:4b:47:f4:2f:ab:df:44:e4:43:12:71:f4:16:8f:
         4c:75:a4:b2:d8:4a:07:36:76:47:d3:24:41:92:2c:a0:e7:be:
         fd:80:7e:8c:d3:bf:b7:1b:68:e0:a8:c3:6e:82:49:28:ca:7b:
         e8:83:06:52:ee:1c:40:a8:64:46:56:1f:2a:47:9c:00:4b:57:
         be:55:53:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 31 03:43:59 2025 by rpki-client