This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft
File:                     25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json)
Hash identifier:          GPxJ1lejtL26m0nO551x6oZAWNLZGkpnUDJjowTpylU=
Subject key identifier:   D9:19:81:BA:21:FB:FD:CD:B7:73:58:3E:5E:D7:33:0E:F2:C3:4F:FA
Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E
Certificate issuer:       /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8
Certificate serial:       010D0C9F4328584C4087E911A2BE7BC476DF50C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft
Manifest number:          010D0C9F43285848565C3129D3EC730D3401F949
Signing time:             Sat 20 Dec 2025 18:00:08 +0000
Manifest this update:     Sat 20 Dec 2025 18:00:08 +0000
Manifest next update:     Mon 22 Dec 2025 18:00:00 +0000
Files and hashes:         1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: pMpeBuev+FttxIf+qulpYOUbbCWxjez0mrlsijCSPo0=)
                          2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: AkkJB+r+kVHmRaGWXOjen9QljuykXv+wFLwrowqgHOc=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:40:87:e9:11:a2:be:7b:c4:76:df:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8
        Validity
            Not Before: Dec 20 18:00:08 2025 GMT
            Not After : Dec 22 18:00:00 2025 GMT
        Subject: CN=90624fc1-5b1d-469c-94be-844d5249fd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:3c:00:56:7e:29:7a:e5:7e:8f:31:53:3d:e3:
                    b0:d4:3d:78:d8:c7:63:2f:14:c3:3d:18:bb:42:11:
                    15:70:61:b4:9a:c2:15:8f:ea:b7:91:bc:13:88:13:
                    66:6a:d0:32:ea:d1:58:be:87:7b:e1:06:d6:58:0e:
                    6f:f6:18:20:b5:74:77:f7:4a:60:85:c0:b1:75:57:
                    c0:c3:70:89:1e:f7:c5:06:b0:b3:2a:6e:e6:fa:b8:
                    55:51:0d:8d:33:a9:2f:e5:36:b5:e9:cc:1a:d8:8a:
                    b2:18:c1:47:92:e3:39:e9:39:3c:82:d3:37:cd:5c:
                    a9:57:2e:8c:32:bd:26:91:f9:44:92:8f:63:4a:a1:
                    c2:e0:00:88:ba:f0:ad:42:3f:70:0a:62:18:62:9b:
                    14:bd:91:4a:aa:dd:a3:01:ce:81:15:8e:d0:94:fc:
                    ea:0b:df:06:e5:48:88:3a:0b:0c:e2:07:e2:23:ab:
                    d9:bf:b9:69:54:82:4e:b9:8f:80:fe:d7:48:c2:f6:
                    6e:26:46:75:00:68:79:40:a1:ca:1d:3b:dd:c4:81:
                    dd:35:8d:43:b6:3d:f8:24:4d:bd:2e:d9:84:a0:a7:
                    3b:13:61:a7:bf:40:c8:bb:a3:3c:ff:02:45:ff:d3:
                    b0:45:15:91:64:b0:91:06:c8:22:f6:ae:10:10:6d:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:19:81:BA:21:FB:FD:CD:B7:73:58:3E:5E:D7:33:0E:F2:C3:4F:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:0c:30:42:9f:0c:db:dd:d3:19:2e:d3:1e:b4:6c:1c:4d:4d:
         3c:ae:ad:4d:38:1b:8e:95:86:36:70:c8:ab:bc:e1:fa:08:f5:
         28:a7:9a:0e:5d:9a:05:92:66:e0:e8:fe:62:5e:f6:39:7c:7f:
         08:6a:fe:02:ca:41:e8:24:b2:be:99:93:bb:f3:59:f5:a4:c5:
         03:c5:c5:f5:45:d1:4d:2e:0c:de:fe:28:9b:49:08:2c:d7:e7:
         45:e8:7e:69:ca:8f:fe:79:ba:5d:2b:95:55:bd:77:ad:8a:6a:
         48:63:40:8c:84:0e:87:ce:d6:2a:08:41:1d:81:d8:78:19:68:
         32:b2:3c:d8:87:f1:7b:87:c3:85:3a:06:56:56:9f:33:99:22:
         10:10:dc:37:6d:5b:05:00:34:a1:81:65:06:b7:b6:5f:ac:a3:
         17:41:c0:1e:ed:22:0b:76:4f:98:54:e2:f4:1e:e5:89:1c:0b:
         95:cf:5c:4c:19:b3:83:36:5f:71:8f:f0:05:09:91:45:04:56:
         2a:b9:fc:f1:62:10:31:2d:32:ff:74:22:8d:13:f9:28:52:3d:
         3b:df:13:d8:3e:10:df:cf:9f:2b:50:71:5f:04:c7:a6:12:ac:
         47:a4:38:66:02:03:74:e2:4b:c1:16:a1:d6:9b:54:ca:cb:a2:
         ff:f9:43:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----