This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.mft
File:                     a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.mft (raw, json)
Hash identifier:          +BzNhMUwMm6LPvruzxMeamb5nph+xaJL2aF+5k4IwHw=
Subject key identifier:   91:F3:5F:4E:CA:D9:B0:0E:C8:73:17:4B:A3:F6:C5:59:B2:37:C2:BE
Authority key identifier: 72:AD:D4:E7:99:ED:20:44:16:63:6A:EA:8A:44:54:1C:5C:2B:C0:F4
Certificate issuer:       /CN=a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e
Certificate serial:       010D0C9F4328584C4370636059B0833180AC5500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.mft
Manifest number:          010D0C9F43285849F0CD9B66D2C0F9B874A8F75A
Signing time:             Sun 21 Dec 2025 19:00:08 +0000
Manifest this update:     Sun 21 Dec 2025 19:00:08 +0000
Manifest next update:     Tue 23 Dec 2025 19:00:00 +0000
Files and hashes:         1: 613abee1-24fd-3f37-99bc-3562f8d1b8fb.roa (hash: ngkabC0EiH5DLXKk/08OCO9YUlAbxJK9DOn/OKdlUtg=)
                          2: a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.crl (hash: D56RWHBRt3SMhCda6edR25z0M1qlXoREm+f57LqvyMM=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:43:70:63:60:59:b0:83:31:80:ac:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e
        Validity
            Not Before: Dec 21 19:00:08 2025 GMT
            Not After : Dec 23 19:00:00 2025 GMT
        Subject: CN=52c605c7-ace9-43d3-97b7-d52db9be40ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ed:08:84:5d:fa:13:ee:9d:fb:35:8d:16:81:
                    a3:92:c6:86:16:10:8b:b4:2d:86:9d:3e:eb:6b:97:
                    40:dc:36:b9:85:4d:a1:ed:ea:6d:69:e9:d0:75:58:
                    9e:0b:80:2c:06:d0:82:bf:0a:24:ba:b9:01:54:99:
                    27:0d:ea:f4:84:2d:a7:46:e7:4a:d8:ea:9e:48:6d:
                    88:1f:40:84:8a:f3:d4:80:07:4d:b6:60:2d:38:d7:
                    8e:06:0d:db:a1:95:83:d1:c3:fb:6f:05:66:c8:9f:
                    2b:17:9e:ab:ca:44:bb:f2:6a:99:34:5a:1f:e7:4c:
                    e4:24:cf:b4:50:c2:62:fc:9b:67:0a:f9:35:b6:15:
                    db:5d:aa:c1:92:3b:d9:3c:ec:5d:62:0f:64:2d:d5:
                    38:8d:a0:bf:d1:e0:b9:b3:cd:af:05:63:08:e4:fc:
                    31:61:12:79:40:72:9e:d0:3e:5d:84:43:63:7a:3b:
                    48:f2:71:90:6e:aa:16:c2:f8:ff:1b:46:22:09:73:
                    c7:b1:a4:f2:c5:b3:64:30:64:20:5b:e7:c2:0c:79:
                    3d:c2:9b:1a:da:86:7e:5a:73:61:31:f9:8d:ee:0c:
                    8a:1c:b4:ca:a2:02:04:b0:17:58:33:19:9a:a3:e3:
                    f2:11:3a:ac:8c:e2:bb:7b:3f:7e:c5:a8:12:90:14:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F3:5F:4E:CA:D9:B0:0E:C8:73:17:4B:A3:F6:C5:59:B2:37:C2:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.crl

            X509v3 Authority Key Identifier:
                keyid:72:AD:D4:E7:99:ED:20:44:16:63:6A:EA:8A:44:54:1C:5C:2B:C0:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a7a5f6f8-12f7-448c-8cbc-ee3ecdc1a97e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:e8:ac:f4:c5:01:ce:77:12:b4:43:12:7f:84:27:d8:8a:13:
         4e:8a:11:54:2d:a5:c4:64:64:ac:e1:1b:ce:5e:67:33:76:14:
         0e:2c:91:a2:ee:73:22:60:dc:c9:ad:7c:3f:61:ce:21:c9:5f:
         65:91:a3:ab:02:4d:4b:cc:b6:5d:ec:2f:85:c1:cd:56:20:79:
         53:5d:82:e1:1f:fc:2f:81:27:35:3a:cc:b8:f7:8a:0f:13:ae:
         75:c3:7f:75:86:b7:c1:fd:c9:0c:74:a1:75:9b:60:56:a6:77:
         6f:f5:62:96:f9:22:d9:a9:c0:38:4c:e5:e4:22:33:a2:88:76:
         f2:3c:16:10:24:48:7a:ea:d5:35:3c:55:b7:b4:fc:1a:41:4e:
         3d:64:e2:0f:33:51:43:84:50:f0:47:a0:11:04:62:55:22:76:
         93:1e:8d:0a:40:4a:2b:60:5c:27:c9:b7:ca:a7:b8:ce:00:e0:
         9f:8f:56:8c:dc:66:02:9c:06:b8:b8:9e:c1:bd:15:1d:92:17:
         fd:73:21:9e:95:e2:4b:43:a3:65:21:bb:bf:ce:07:14:d7:19:
         6b:6c:8d:4f:f2:fc:71:3e:1f:13:d8:ac:d0:8b:20:b1:16:77:
         cf:6a:07:76:39:cd:9c:38:29:f1:37:38:35:e2:60:a6:66:7c:
         ec:69:b1:23
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExDcGNgWbCDMYCsVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTdhNWY2ZjgtMTJmNy00NDhjLThjYmMtZWUzZWNkYzFh
OTdlMB4XDTI1MTIyMTE5MDAwOFoXDTI1MTIyMzE5MDAwMFowLzEtMCsGA1UEAxMk
NTJjNjA1YzctYWNlOS00M2QzLTk3YjctZDUyZGI5YmU0MGNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye0IhF36E+6d+zWNFoGjksaGFhCLtC2GnT7r
a5dA3Da5hU2h7eptaenQdVieC4AsBtCCvwokurkBVJknDer0hC2nRudK2OqeSG2I
H0CEivPUgAdNtmAtONeOBg3boZWD0cP7bwVmyJ8rF56rykS78mqZNFof50zkJM+0
UMJi/JtnCvk1thXbXarBkjvZPOxdYg9kLdU4jaC/0eC5s82vBWMI5PwxYRJ5QHKe
0D5dhENjejtI8nGQbqoWwvj/G0YiCXPHsaTyxbNkMGQgW+fCDHk9wpsa2oZ+WnNh
MfmN7gyKHLTKogIEsBdYMxmao+PyETqsjOK7ez9+xagSkBRLOwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJHzX07K2bAOyHMXS6P2xVmyN8K+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hN2E1
ZjZmOC0xMmY3LTQ0OGMtOGNiYy1lZTNlY2RjMWE5N2UvYTdhNWY2ZjgtMTJmNy00
NDhjLThjYmMtZWUzZWNkYzFhOTdlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTdhNWY2ZjgtMTJmNy00NDhjLThj
YmMtZWUzZWNkYzFhOTdlL2E3YTVmNmY4LTEyZjctNDQ4Yy04Y2JjLWVlM2VjZGMx
YTk3ZS5jcmwwHwYDVR0jBBgwFoAUcq3U55ntIEQWY2rqikRUHFwrwPQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hN2E1ZjZmOC0xMmY3LTQ0OGMtOGNiYy1lZTNl
Y2RjMWE5N2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAv6Kz0xQHOdxK0QxJ/hCfY
ihNOihFULaXEZGSs4RvOXmczdhQOLJGi7nMiYNzJrXw/Yc4hyV9lkaOrAk1LzLZd
7C+Fwc1WIHlTXYLhH/wvgSc1Osy494oPE651w391hrfB/ckMdKF1m2BWpndv9WKW
+SLZqcA4TOXkIjOiiHbyPBYQJEh66tU1PFW3tPwaQU49ZOIPM1FDhFDwR6ARBGJV
InaTHo0KQEorYFwnybfKp7jOAOCfj1aM3GYCnAa4uJ7BvRUdkhf9cyGeleJLQ6Nl
Ibu/zgcU1xlrbI1P8vxxPh8T2KzQiyCxFnfPagd2Oc2cOCnxNzg14mCmZnzsabEj
-----END CERTIFICATE-----
Generated at Mon Dec 22 01:34:32 2025 by rpki-client