This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft
File:                     643bc0d8-6c26-445a-992d-f31e0934b5f0.mft (raw, json)
Hash identifier:          XTVtwYllXNPUX3v1SuXOV8gcF1ZlCGIoEI8k4sxh8N8=
Subject key identifier:   6D:FA:F8:9C:B4:58:E8:79:E7:EA:56:02:16:08:0A:35:64:43:62:30
Authority key identifier: 59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97
Certificate issuer:       /CN=643bc0d8-6c26-445a-992d-f31e0934b5f0
Certificate serial:       010D0C9F4328584C413A866177D45CB4AC0255C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft
Manifest number:          010D0C9F43285849CD228DC17836374947BEDA26
Signing time:             Sun 21 Dec 2025 00:00:03 +0000
Manifest this update:     Sun 21 Dec 2025 00:00:03 +0000
Manifest next update:     Tue 23 Dec 2025 00:00:00 +0000
Files and hashes:         1: 54e8f0db-16c8-3126-9c7a-5ac4e08d4ee1.roa (hash: W5tSBqDnCoLoAehwbAErZSn2oT987j+oV/YmasCXyOs=)
                          2: 643bc0d8-6c26-445a-992d-f31e0934b5f0.crl (hash: vZnOydJAvEwfomn+KxFf02GTw5eMTEJaVY8/iaT4g48=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:3a:86:61:77:d4:5c:b4:ac:02:55:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643bc0d8-6c26-445a-992d-f31e0934b5f0
        Validity
            Not Before: Dec 21 00:00:03 2025 GMT
            Not After : Dec 23 00:00:00 2025 GMT
        Subject: CN=9be2a5ff-21f5-4e6d-8515-941e9870124d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:1c:1b:cb:9c:e0:ec:14:78:cf:59:7a:d9:
                    4b:fe:c4:4f:34:2c:0c:3f:a4:d2:e3:5b:0b:e3:02:
                    58:2c:57:66:eb:3d:8f:c2:07:4a:5d:31:30:24:7b:
                    22:44:81:df:b9:d4:cf:f5:0a:66:89:7d:cd:18:a0:
                    cb:d2:c8:b3:75:b7:50:c6:a3:11:86:44:44:5b:5f:
                    72:fa:3b:db:cb:c8:2f:24:a7:02:9e:75:82:20:9e:
                    2d:d6:c2:e6:34:09:ed:56:cf:94:65:16:dc:bd:5b:
                    9f:88:31:67:bf:f6:08:66:23:0c:80:54:53:b3:d3:
                    26:32:51:e1:de:49:6e:a0:57:1b:40:ed:7a:bc:a0:
                    5f:47:f5:19:d2:bb:cd:cf:5e:91:71:6f:37:af:48:
                    5e:3b:55:03:4a:fc:72:af:b8:6c:f3:4c:31:73:97:
                    85:46:bb:e3:f4:35:82:08:ec:ad:c0:0f:75:cd:f6:
                    4e:2e:7f:e0:90:5e:8c:4a:84:f7:c4:d6:e4:21:bd:
                    b1:62:35:c7:c1:68:d6:74:d8:f0:d0:d6:f1:2b:5e:
                    1b:44:7c:a3:2c:15:6d:49:0a:8b:6b:67:4c:0e:54:
                    fc:a4:33:97:32:39:7b:e4:b0:35:be:bd:4d:6e:bd:
                    77:84:54:bf:67:ba:02:d1:37:4b:ed:bc:86:90:2d:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FA:F8:9C:B4:58:E8:79:E7:EA:56:02:16:08:0A:35:64:43:62:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0/643bc0d8-6c26-445a-992d-f31e0934b5f0.crl

            X509v3 Authority Key Identifier:
                keyid:59:63:00:DC:B0:D4:B8:12:AF:E1:C0:33:1D:81:00:EE:C2:3F:52:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/643bc0d8-6c26-445a-992d-f31e0934b5f0.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:e7:51:10:64:d4:24:59:22:b8:63:24:58:75:f2:db:27:b1:
         10:7f:8c:83:63:58:84:b4:31:b6:d6:e0:46:7e:a0:44:8a:ac:
         d0:cc:50:8e:12:0f:e4:4d:1a:39:b3:6e:ba:f5:0e:1d:96:9e:
         70:9a:bb:17:9f:c6:c5:65:81:0c:f1:57:82:51:b2:bb:72:27:
         7c:08:b2:f5:78:b4:e3:37:d5:5f:6c:ae:59:93:28:fc:e0:92:
         ab:2b:c8:79:89:cf:ca:a1:24:6f:fc:f3:22:09:e4:ca:29:0c:
         0a:6e:15:2a:1c:00:5c:f0:ab:f0:f2:f4:df:da:50:30:99:42:
         59:30:e8:6b:46:eb:75:3f:3d:90:64:15:fe:ef:90:3b:cf:e8:
         6c:de:19:1e:03:c5:c1:1c:59:9d:4b:10:0b:67:f3:bf:3e:28:
         38:c0:c9:e1:98:e6:1d:28:88:3c:66:d8:2b:19:6b:80:70:72:
         fa:da:a3:d0:2d:af:39:74:1b:ec:da:d5:6a:d4:d8:31:ba:fa:
         d7:b5:b3:95:d8:85:68:22:36:bc:21:9b:04:7a:94:3c:9a:cf:
         89:b3:ea:67:06:cb:78:7b:2e:1e:85:34:34:ac:f3:c9:16:00:
         b2:22:d4:fe:71:5b:2f:03:ff:02:7f:ed:65:95:cf:f1:a8:62:
         56:84:9f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 04:57:33 2025 by rpki-client