This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft
File:                     2a28de55-f597-40cf-b508-0c5d7318b5ec.mft (raw, json)
Hash identifier:          qiQ3++/FkCImkLokqk+VJVoAxifqMFYENDwhIvoi7R8=
Subject key identifier:   BD:62:B3:41:E1:27:81:6C:7D:39:ED:64:C5:F2:9D:DA:B6:2D:EB:85
Authority key identifier: 86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B
Certificate issuer:       /CN=2a28de55-f597-40cf-b508-0c5d7318b5ec
Certificate serial:       010D0C9F4328584C43528A62A37F5931E9970880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft
Manifest number:          010D0C9F43285848F58129CF4AE5C5563684F51B
Signing time:             Sun 21 Dec 2025 18:00:03 +0000
Manifest this update:     Sun 21 Dec 2025 18:00:03 +0000
Manifest next update:     Tue 23 Dec 2025 18:00:00 +0000
Files and hashes:         1: 2a28de55-f597-40cf-b508-0c5d7318b5ec.crl (hash: EbYrXoo8Mhm8HKDmOd2spY5jloiVmCHGPk8dIyO/SfA=)
                          2: 3358dd7a-ea55-3107-b7f7-ed23e2729a6e.roa (hash: dIwTeEXCSbWdKGnK64saYf2s+hnOKDEwu8C0hqDsCc4=)
                          3: 3cd115c8-3c6e-3d24-a93c-ec589ec9b7c8.roa (hash: DTo3rZs33qmoFHz9A2hcAuK7goGp7piq5SvnAI5jhKY=)
                          4: 41cb8410-408f-34b7-9356-bf990e3ec27c.roa (hash: 3ZQc3rbhVtjs8Mezad0Se92URzUaj3PRJJ55y2gkCyk=)
                          5: d00f734c-b5eb-3c44-bc31-d1614e638db3.roa (hash: bQLzxlMRV9JCVHJxB3gqga0rK5JXTAMRvYIBUImJfBs=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:43:52:8a:62:a3:7f:59:31:e9:97:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a28de55-f597-40cf-b508-0c5d7318b5ec
        Validity
            Not Before: Dec 21 18:00:03 2025 GMT
            Not After : Dec 23 18:00:00 2025 GMT
        Subject: CN=06b02ccb-0b50-4df6-88c8-55b12609494b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:eb:69:06:a8:de:e0:de:88:b8:f8:2b:10:
                    f1:d7:e0:31:b9:fd:2f:1f:74:cd:07:95:60:d1:73:
                    07:b8:8f:e7:20:56:55:30:c0:d1:0f:0a:4b:0f:5f:
                    7d:f2:c6:dd:db:5a:48:ed:37:bc:87:fb:e8:46:f5:
                    3a:20:11:d9:a4:9c:5f:3d:07:85:60:74:da:9f:34:
                    14:67:54:c5:51:11:48:c8:2d:97:d4:9e:9b:16:73:
                    ca:99:03:59:fd:d6:b9:59:0a:0c:70:58:ad:5e:14:
                    98:c8:22:9d:b1:10:22:02:f1:e9:ab:57:11:1b:73:
                    0d:5a:c5:3e:31:bc:39:68:03:29:ac:7d:7f:7f:6e:
                    06:31:25:41:43:7c:57:7d:ff:fd:7f:b2:11:7b:f4:
                    50:19:89:b7:eb:82:db:3c:15:c2:9f:e9:81:13:de:
                    8f:73:39:33:34:5a:c9:64:4f:1f:05:b8:e2:42:b7:
                    56:88:ca:77:56:3c:ca:97:25:15:c1:22:1a:fb:14:
                    a4:23:b3:42:74:e2:b8:d8:aa:72:2b:28:1b:24:c5:
                    8b:9d:08:fe:e3:56:ed:18:ce:af:26:e8:a7:18:40:
                    24:6b:14:0e:46:70:e6:a7:8c:e6:00:a3:79:2b:ea:
                    63:40:91:02:4e:5e:42:ea:fb:62:97:50:a7:b5:82:
                    37:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:62:B3:41:E1:27:81:6C:7D:39:ED:64:C5:F2:9D:DA:B6:2D:EB:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec/2a28de55-f597-40cf-b508-0c5d7318b5ec.crl

            X509v3 Authority Key Identifier:
                keyid:86:D9:F3:20:76:CC:37:F0:1A:D8:48:0A:94:50:96:15:D5:58:DC:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a28de55-f597-40cf-b508-0c5d7318b5ec.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:1b:e3:aa:c9:01:9d:78:b5:c2:0d:11:fc:d9:b9:7f:d5:
         66:6b:64:35:f4:b1:33:e5:c1:5b:f5:9d:93:dc:d0:66:35:e1:
         38:a4:4a:e5:f2:af:1a:47:cf:63:22:a7:b9:85:c0:fe:fc:47:
         eb:f7:e1:10:8a:00:de:9f:0c:81:08:00:09:ff:40:d9:ed:21:
         3a:aa:e1:44:a4:40:7e:39:be:6a:cb:fb:bb:38:ba:c8:5e:62:
         e5:f5:fb:e0:2d:08:1d:d2:6c:98:16:62:c0:d0:67:2c:90:70:
         97:dc:d0:fd:36:10:cc:c2:63:91:a6:03:d0:52:a1:57:f7:59:
         96:60:17:54:8f:fd:3f:64:3d:7f:fc:b3:40:a3:66:6e:15:c3:
         fd:a5:c5:6c:dd:ad:0e:0e:a2:96:45:72:8e:1a:94:8a:f7:5e:
         f1:9b:4f:31:57:f1:7a:c1:d7:91:e0:8c:fe:8b:1f:9e:0d:4b:
         01:49:b0:17:12:0c:5d:79:f4:78:92:67:b2:bf:9b:b7:81:c6:
         b7:1c:47:3b:b5:4c:0b:a3:9e:b6:d9:66:60:78:6b:0b:1c:d0:
         74:b7:22:ce:40:28:c6:a5:40:73:5b:c3:2e:fb:1c:b4:6d:c0:
         29:95:c2:51:c9:f4:68:ea:9f:a3:fb:94:2b:7a:8e:4d:f8:b8:
         b4:ad:83:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:20:56 2025 by rpki-client