This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft
File:                     0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft (raw, json)
Hash identifier:          fbxYMfAY3XxPnEeGUwnm+LxdAqr5o1mc4/6lLKu6LJw=
Subject key identifier:   F4:A9:05:92:E4:FC:52:6D:5B:D3:80:F1:D5:3E:DD:E8:70:28:B1:93
Authority key identifier: 49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5
Certificate issuer:       /CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317
Certificate serial:       010D0C9F4328584C4334CDBAC50B97FA2AA1BE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft
Manifest number:          010D0C9F43285849788B979960F4FADA4C7F5009
Signing time:             Sun 21 Dec 2025 17:00:08 +0000
Manifest this update:     Sun 21 Dec 2025 17:00:08 +0000
Manifest next update:     Wed 24 Dec 2025 17:00:00 +0000
Files and hashes:         1: 0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl (hash: 9Ff3ZsS8/H68K7epB3SI1KUxAh06qXutliPt5yhqCSM=)
                          2: 843d57d7-14a7-3349-a57b-8157cba92880.roa (hash: iPRqa9zsw7u01nbFG3A8ODVarhZsUmBL6I9KEwZDTFA=)
                          3: 8cae9a02-39b3-3c4a-b824-865da368ac0e.roa (hash: KQgI8X/ICrtvU2uPMoTOFAmwe4A1h6u2tdG+FTqMyNk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:43:34:cd:ba:c5:0b:97:fa:2a:a1:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317
        Validity
            Not Before: Dec 21 17:00:08 2025 GMT
            Not After : Dec 24 17:00:00 2025 GMT
        Subject: CN=8aaec162-a551-446b-9ee3-3064f8864fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:4b:39:08:69:d8:18:11:70:6f:04:40:14:
                    14:6f:95:e1:7c:d0:64:77:a3:65:ee:34:1e:3c:43:
                    32:d9:8d:85:07:2b:3a:4f:6e:9b:99:3b:ca:f0:96:
                    32:cd:3f:79:73:f6:92:d8:02:e1:a0:bb:fa:ff:70:
                    bb:61:e0:6e:e1:2f:a3:43:fb:3c:e9:ec:a9:26:90:
                    25:a6:d9:34:9e:c3:ba:b3:fe:82:ae:05:c7:1d:bc:
                    5f:1b:c2:55:6a:c2:74:ea:f0:d6:23:7d:a2:4f:67:
                    60:d1:a5:d7:2c:5e:5d:2a:f6:92:1b:ef:55:b2:b1:
                    ca:98:16:73:46:fc:53:94:02:19:4a:1b:26:54:a4:
                    88:11:fb:50:01:29:30:b5:87:93:2e:2b:d3:a7:71:
                    47:56:aa:74:98:0e:2e:c6:82:38:7e:99:43:f9:40:
                    b2:db:6f:76:70:5d:32:f6:f8:6a:36:d8:56:cd:39:
                    5a:2c:f3:7a:03:27:96:72:28:19:fe:e0:09:c5:68:
                    b7:76:79:c4:1c:d7:a6:a1:42:24:92:d3:74:2e:47:
                    79:79:0e:cc:ed:d3:d1:b1:80:2a:64:c1:4f:31:95:
                    79:5e:7d:ed:4b:24:d4:9a:cc:6b:21:71:0f:bb:4c:
                    bc:cb:cb:8f:69:26:98:d3:dd:b9:eb:0d:a6:62:43:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A9:05:92:E4:FC:52:6D:5B:D3:80:F1:D5:3E:DD:E8:70:28:B1:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.crl

            X509v3 Authority Key Identifier:
                keyid:49:E4:5C:27:F5:7A:0A:5F:DC:C8:9A:DF:E7:26:BF:A2:5B:05:0D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0fb48ce5-21a3-4b60-9bcf-f1e0d6a40317.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:b0:a6:50:df:6f:ca:da:ff:1c:8b:f6:47:1a:9b:38:bb:38:
         53:38:b5:5c:9c:48:02:83:1a:7b:e4:98:2f:9c:0f:a4:69:59:
         f4:1e:7c:4d:93:8b:d3:69:4e:02:97:92:15:5c:d3:96:0a:1b:
         37:4a:81:f9:56:78:8a:de:47:a7:4c:3d:55:be:e5:b7:c3:2d:
         52:3d:75:bb:07:ba:97:4e:17:b2:e8:bc:84:b2:b0:e6:4a:c3:
         91:b9:31:87:ad:50:f5:ce:20:17:a9:1e:0b:f6:5f:8d:a9:1e:
         7f:69:02:4f:c7:db:9b:13:53:87:46:a2:e4:55:73:79:f8:7f:
         29:1a:62:06:7b:9d:10:82:77:7d:70:3b:ac:af:74:c9:2d:96:
         6f:2e:75:42:aa:a7:6b:47:a5:a3:bc:31:f1:25:a9:aa:e9:95:
         8a:c9:71:e1:71:fe:eb:b7:6a:e2:4e:39:81:22:17:e2:22:1c:
         ee:f3:72:9f:4c:13:3e:68:f9:67:f7:7a:6b:7b:dc:1c:3f:15:
         72:4b:c6:2a:3b:7e:ad:37:c9:19:4d:af:a1:56:39:ff:77:5f:
         f4:45:7e:2c:74:68:20:95:b0:6b:ab:9d:80:e5:eb:05:ab:5a:
         d2:2a:46:4c:1e:15:0c:66:50:59:1b:48:2a:dd:f1:1e:96:4c:
         89:9d:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:26:47 2025 by rpki-client