This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft
File:                     c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft (raw, json)
Hash identifier:          8lO+gR7iEnMUMMnGDbujNr1KSs6s0kCHDd8ILKToPC4=
Subject key identifier:   98:E9:56:8D:91:BD:26:C2:E0:99:E2:8C:21:42:7D:AF:C2:19:F6:E1
Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08
Certificate issuer:       /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
Certificate serial:       010D0C9F4328584C4905BBEA553A52BF8F699000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft
Manifest number:          010D0C9F4328584182C9D2A8511793A84C4DED01
Signing time:             Tue 23 Dec 2025 19:00:08 +0000
Manifest this update:     Tue 23 Dec 2025 19:00:08 +0000
Manifest next update:     Fri 26 Dec 2025 19:00:00 +0000
Files and hashes:         1: 8fb3012a-d947-3398-947d-9744cdd32093.roa (hash: Zp4GpUKbo3cGZuB2WqrhkYVksqj3WOoFfjsa3OVfxS8=)
                          2: c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl (hash: Gt0ymKrF7qG95/YU7zxrkr9nNduq/kBmnonBlwc81hg=)
                          3: d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa (hash: E4FYn4q951FpruC4/LJ8kdHnH3jkKcRV4RODfV49Ju8=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:49:05:bb:ea:55:3a:52:bf:8f:69:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3
        Validity
            Not Before: Dec 23 19:00:08 2025 GMT
            Not After : Dec 26 19:00:00 2025 GMT
        Subject: CN=bdc2ed0f-0375-4c01-b3dc-c1f16d935992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b5:2a:c6:36:bc:f4:35:50:da:df:b6:41:92:
                    ce:1e:aa:85:7f:f0:d7:b1:f6:25:bb:c4:cf:12:9d:
                    65:04:55:47:e1:aa:d8:8b:d2:b9:ff:a9:8b:28:07:
                    e3:3c:95:35:93:3c:79:47:15:40:45:d1:cb:a3:8a:
                    23:3c:00:dc:d4:c1:97:2c:fe:90:4c:e6:aa:e3:dc:
                    34:2e:84:d3:b3:17:ac:e0:13:18:7a:16:dc:80:85:
                    05:f7:86:cf:f1:c1:8b:f0:95:8d:95:4d:b6:09:b3:
                    75:75:e4:88:47:6d:82:bc:24:5e:eb:e3:a3:6b:ed:
                    e9:6f:2f:b2:f2:c6:ce:e2:a1:f1:4b:96:ed:e9:eb:
                    0f:5a:9e:c7:87:18:6d:85:b9:d8:a5:81:03:c6:c6:
                    52:f7:0d:9b:89:a7:4c:a4:9f:ff:12:b2:de:4f:9a:
                    44:c1:48:3f:b8:b2:57:6e:d8:f1:7a:59:37:1b:ff:
                    1d:de:6c:94:e2:10:48:00:41:a2:52:b4:b1:72:21:
                    ee:47:02:82:be:06:3a:6a:36:04:59:5e:e8:2b:6c:
                    07:ba:f9:ae:b2:d0:48:db:b0:0e:7f:7b:f7:79:12:
                    9f:4f:ea:32:0a:cb:fa:89:53:9d:40:c2:41:eb:95:
                    71:e2:83:04:b3:0d:09:b1:39:c1:2a:7f:65:27:61:
                    04:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E9:56:8D:91:BD:26:C2:E0:99:E2:8C:21:42:7D:AF:C2:19:F6:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl

            X509v3 Authority Key Identifier:
                keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:82:a0:29:d9:28:80:8e:1b:4a:6c:d3:cf:72:2d:c4:ad:4f:
         5c:58:ef:5f:66:0f:a7:bd:26:56:4c:5f:2a:0c:15:87:a0:69:
         87:e0:64:f5:b3:f6:c5:2f:7e:33:03:fd:f3:19:98:65:82:4c:
         13:ea:e8:9b:3e:f3:2d:7d:16:39:13:ab:f8:df:c6:1d:7f:6b:
         94:df:64:e3:7a:1c:2c:f1:9d:fa:cf:07:52:1e:86:ab:d7:aa:
         03:dd:22:ff:38:5b:a9:d5:69:36:33:5f:48:c9:e4:e6:5f:67:
         cc:c7:f1:e6:de:db:42:01:fc:e7:39:ba:32:d4:9f:0d:2f:63:
         8d:42:c6:35:9c:90:bb:11:10:66:6c:3d:b1:70:2f:46:5f:e9:
         98:25:e2:f3:db:06:39:8a:10:3d:93:06:e0:57:77:d2:a6:79:
         6f:d8:ef:53:b4:28:00:9d:1f:c0:bb:bf:98:25:56:3c:ed:44:
         f5:cd:3d:10:f5:21:a5:37:dd:fa:8b:67:3d:a6:ce:cd:3f:eb:
         be:a2:5d:6a:ab:16:22:ab:da:90:cd:01:96:34:75:92:12:86:
         ca:cb:a6:bd:5e:60:0d:ef:f7:f1:57:3a:69:40:43:c5:42:c2:
         97:9b:92:11:e6:24:94:bc:78:08:9d:a3:c8:5b:fe:8f:17:25:
         7f:0b:03:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 08:50:12 2025 by rpki-client