This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft
File:                     b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft (raw, json)
Hash identifier:          cuSH3fKzBW9NTtMT8A70qVKc6fQ8o0EK3oKuHbvqEMo=
Subject key identifier:   BD:F6:F7:D2:1B:EF:70:4F:BE:B8:33:FA:FB:0A:BC:18:CD:A6:1F:B5
Authority key identifier: DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6
Certificate issuer:       /CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5
Certificate serial:       010D0C9F4328584C3EC92FF73DEB3F1E4C0649A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft
Manifest number:          010D0C9F43285849CAAC3E1D5F50DF86AC84E668
Signing time:             Sat 20 Dec 2025 03:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 03:00:03 +0000
Manifest next update:     Mon 22 Dec 2025 03:00:00 +0000
Files and hashes:         1: 70a46534-e8e5-3181-abb5-2f44dc79049a.roa (hash: NDDf941GUOVVHt4k3IQXsvr9hasivdHlo6mO2A+d/+8=)
                          2: 91f8f680-3529-30da-b7ca-a545285b4d50.roa (hash: aVM1v6Igi6rfnmsOfy1SToCRxcsw5NCO8RqsWVMhD/o=)
                          3: b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl (hash: 6arce9yV4LIlzAv2/zXdtkw1pKBpQSelmllzWIYE8Fk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3e:c9:2f:f7:3d:eb:3f:1e:4c:06:49:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5
        Validity
            Not Before: Dec 20 03:00:03 2025 GMT
            Not After : Dec 22 03:00:00 2025 GMT
        Subject: CN=bb840d91-e9ed-4eb2-9947-cb4e716c1cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:50:24:31:ef:70:25:74:03:b0:2a:4e:a5:1d:
                    30:41:01:25:da:59:e7:51:f2:43:64:e8:a2:00:69:
                    fd:be:8b:f9:cb:82:ac:d2:c9:22:e6:2c:76:fe:df:
                    59:19:60:64:a3:b0:17:55:c1:ca:75:64:a4:13:5c:
                    4f:d1:8e:c4:a1:e8:d7:66:82:63:ca:2b:68:c8:b9:
                    62:ed:8c:77:d7:fe:2e:45:0c:d1:64:fe:76:4f:47:
                    45:54:b9:d6:3c:27:ba:e5:52:f2:80:6b:23:ce:f6:
                    2b:2c:67:c0:92:b8:fd:10:e9:88:2a:bc:13:c3:87:
                    48:dd:0c:6a:b3:6b:17:3f:c2:e1:11:cf:2c:b5:88:
                    0c:91:f7:56:f4:f5:41:6b:9e:71:3c:e5:f5:52:cf:
                    5f:44:07:f7:a4:40:57:d8:08:c5:1c:63:b4:13:e9:
                    5b:10:19:50:47:87:eb:1e:a6:c6:4d:63:3e:98:63:
                    ed:72:c9:a7:58:69:00:91:3f:94:62:d6:df:de:24:
                    df:13:6c:9f:bb:60:9e:bb:15:51:35:aa:cf:7e:5c:
                    37:e7:be:c6:1b:49:bb:4e:d9:f8:5b:0e:95:dc:42:
                    71:c6:f3:b6:5a:72:1d:35:64:e6:e9:fb:fe:a4:25:
                    ca:9b:04:f0:ab:01:31:2a:80:cf:32:46:75:a6:4e:
                    64:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F6:F7:D2:1B:EF:70:4F:BE:B8:33:FA:FB:0A:BC:18:CD:A6:1F:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl

            X509v3 Authority Key Identifier:
                keyid:DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:73:00:ea:cb:fb:36:9d:fc:ff:34:22:24:f9:f6:13:5f:3f:
         38:7a:de:ac:82:4b:d5:06:16:ac:87:97:0c:0a:4e:90:22:44:
         39:db:43:c7:ac:7f:ea:16:2a:4e:6e:d3:fc:99:ba:b5:79:3b:
         13:9d:55:ec:c6:a2:82:59:6b:01:00:e2:22:bf:8a:dd:d0:21:
         5e:f1:98:ea:bf:a4:c3:2a:f8:c8:be:15:08:c3:85:ad:57:2b:
         ae:20:dc:a2:c3:db:38:cc:6d:ca:d4:90:08:e0:8a:63:04:c1:
         6f:58:67:89:0b:63:f8:9e:7e:92:ee:c8:97:5a:95:6a:97:28:
         f2:99:86:ce:9d:c6:18:88:18:54:05:c3:19:f0:b5:cc:96:ae:
         12:50:e6:e3:2c:38:b4:6c:8e:0c:04:83:99:6c:22:56:99:01:
         cd:c9:17:bc:32:d5:b0:05:fd:2f:4d:26:7a:9f:11:75:65:6b:
         f1:2a:c3:32:73:a5:08:92:f0:5d:1e:07:f0:2c:58:f8:21:f7:
         a4:45:1e:ab:85:49:78:94:f3:dd:38:a7:c4:5a:5d:27:ba:ac:
         ff:5a:f7:eb:e7:d5:b9:0d:89:29:30:87:10:2c:25:ed:5a:90:
         21:71:7a:d7:7b:d8:f7:ab:65:d7:9b:93:7a:7a:c3:d4:13:e2:
         b0:98:fd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:00:50 2025 by rpki-client