This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft
File:                     d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft (raw, json)
Hash identifier:          hKBiYLGpDuo7zdaPnjCPs/Ds67HsFrh2HMHyS6lLqUI=
Subject key identifier:   35:E1:12:D7:E8:B0:4C:A8:44:7B:E6:88:E5:59:8C:CA:B3:D0:CD:FF
Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21
Certificate issuer:       /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f
Certificate serial:       010D0C9F4328584C3D81A0A010E65321483E7500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft
Manifest number:          010D0C9F43285840DAF369C653798922BCBA2FE7
Signing time:             Fri 19 Dec 2025 16:00:03 +0000
Manifest this update:     Fri 19 Dec 2025 16:00:03 +0000
Manifest next update:     Mon 22 Dec 2025 16:00:00 +0000
Files and hashes:         1: 1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa (hash: fy7znut8h9Cx+I7A44vIu6p/Std16MTgFrdxwCg8Jik=)
                          2: 84f1e976-515d-38d9-acb6-c0126c79dee6.roa (hash: olThMc/PyCKfH+bjPMKlwwlybxphIeMYBfqr1hj7uXk=)
                          3: 8c7e27d3-a385-3d26-9dbf-0a83dc695e0f.roa (hash: JqeFfzQ4BOMn/qAzvVRAge7cksuffFDOKZcXXAZBBdM=)
                          4: d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl (hash: mjEHpwutwjvhuBFkNrK7FXhVjjtd9Ikd5UJHr9S05XE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3d:81:a0:a0:10:e6:53:21:48:3e:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f
        Validity
            Not Before: Dec 19 16:00:03 2025 GMT
            Not After : Dec 22 16:00:00 2025 GMT
        Subject: CN=82aaa580-0d49-48dd-84a9-b6dc9d3f631b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:67:25:be:10:c2:1c:cb:9f:80:6d:c1:88:43:
                    d7:92:0f:8a:eb:e4:1d:64:21:78:ae:ad:65:e8:43:
                    07:c2:94:60:be:05:40:b4:c7:5a:e8:85:8b:16:25:
                    67:9d:3b:49:46:b0:f2:f8:54:6e:38:59:05:e0:79:
                    6f:45:89:bc:a3:58:c3:6a:a6:26:c4:12:f3:5d:90:
                    10:16:da:41:86:7d:7a:97:96:eb:7d:2f:2a:52:e4:
                    94:87:3d:04:99:3a:97:32:4f:17:41:ab:85:a6:df:
                    09:33:3d:4b:57:6d:a1:d6:67:8c:90:e8:5d:38:79:
                    c5:ae:7e:d7:5c:fb:da:7f:c6:f3:a0:6c:33:85:7e:
                    7a:65:c3:92:73:30:29:1e:ae:40:1b:d4:8a:15:d8:
                    0d:d1:48:b3:01:8c:6f:c3:68:04:ba:5d:25:26:f7:
                    ea:f5:73:25:be:ff:9a:43:c2:bd:b5:e1:e4:a5:70:
                    61:a0:23:cd:40:3c:f6:20:8c:0f:00:4c:25:a8:dc:
                    80:ab:8c:f4:93:11:b3:e4:b9:ac:de:b8:a6:b1:d0:
                    f1:47:42:a2:17:41:15:7d:13:42:e9:9b:37:e9:49:
                    d2:ad:c3:be:11:38:1c:b1:c0:a7:01:05:b9:52:ef:
                    ec:89:07:37:6e:88:cf:0d:1b:db:69:f4:77:5c:1f:
                    0b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:E1:12:D7:E8:B0:4C:A8:44:7B:E6:88:E5:59:8C:CA:B3:D0:CD:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl

            X509v3 Authority Key Identifier:
                keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:77:77:ec:80:53:14:9b:9d:4c:1d:43:37:1a:32:9c:ea:64:
         b6:c0:23:c9:9e:89:9d:e9:f1:f2:2c:3d:19:e6:f4:61:a5:ee:
         c7:ec:34:43:e7:aa:17:b2:4a:7b:eb:3a:f9:c5:95:56:3d:2f:
         48:05:29:26:f2:f9:4b:bd:4b:24:d8:79:64:fd:0c:7d:f1:12:
         ea:40:12:b5:e4:0d:83:81:08:2e:4b:ef:a9:c4:2b:56:c8:4d:
         e7:ce:cc:d5:f1:60:f0:f9:0b:98:31:66:4d:14:be:c5:73:2a:
         e6:f2:cd:e8:36:22:d7:64:75:c7:51:73:e7:69:b7:84:8c:2e:
         83:5c:b7:ee:e0:38:ae:68:8e:33:23:2a:6e:bb:56:43:45:0d:
         be:59:b6:28:d4:b3:97:98:b9:92:d2:0d:32:ef:ae:28:93:20:
         23:0d:7e:f9:00:eb:8a:09:39:71:63:21:98:a0:14:b0:95:c5:
         52:24:20:90:6a:06:4a:ef:0b:62:01:10:b8:1e:e6:cc:9f:70:
         ea:d1:45:39:fc:6a:6b:b9:e9:7f:0d:11:9b:c7:74:a6:8b:0f:
         f1:a0:11:82:d7:12:61:81:58:42:7d:b6:6a:fe:79:b3:a4:1e:
         78:eb:4c:92:88:87:cf:c1:c5:e3:37:c2:00:6e:0e:76:de:c4:
         79:6c:91:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:43:01 2025 by rpki-client