This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
File:                     349213f7-28e2-4fa1-8491-78e3580cdb7f.mft (raw, json)
Hash identifier:          GB5LTyIWXqPO4u9y8dxeNqBJ4Um4Y+IcbS0zPi1q4lA=
Subject key identifier:   7D:D6:47:10:CF:06:16:FE:E6:9A:37:22:FA:24:B5:5E:60:81:63:47
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584C3FB76854A35D8E73EF895800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
Manifest number:          010D0C9F43285848CDA21291CF7BF07D35BA4CDB
Signing time:             Sat 20 Dec 2025 11:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 11:00:03 +0000
Manifest next update:     Tue 23 Dec 2025 11:00:00 +0000
Files and hashes:         1: 034075d2-3ea7-36e4-af44-836f9514a1e9.roa (hash: Fu65yow9mKDCQVQ/ob+YsxHoct0zeUf9YNEynqOqtpQ=)
                          2: 10efffec-8118-3912-b378-fa58a2bf751a.roa (hash: 4k+AJ43j2vAZrkuygO0TKmqgdu+c9JT4ohBqsR6uyqc=)
                          3: 18fb07f7-a249-3be9-92a5-6fcce55d697b.roa (hash: YdJ4tHd/WCy52hIn53XRbKGxVhS6iod+0naqVlTUG1Q=)
                          4: 349213f7-28e2-4fa1-8491-78e3580cdb7f.crl (hash: 7hULv64Ewvlx8SO4iZV7iq3St4gFH8Rqrvl9Hi8/oFk=)
                          5: 41eef9e7-05dd-3353-85e0-443a2845f0ea.roa (hash: yJI+XadTyWxK1q6qTNBLAGctQq/dulXl+X3Ilt84pWs=)
                          6: 434ec046-ec4e-3046-aed3-b5f5ef3c8c90.roa (hash: gPmsmTiiLUK9WbrHHIaoBLUmVjApK589RFLRMF2dhX0=)
                          7: 49d4a850-27cb-308b-a7ec-c5c0c7afa746.roa (hash: qjvaVWkvrPNS62Gg7xfbNCQ9i8pZ4tfTuitMs9SXHZU=)
                          8: 69bc01f0-27eb-39e2-9169-1b190f7c2b9b.roa (hash: pZbpnaxyYqL7Hd43DisPKmACc9v5GugwG12LjHftpuA=)
                          9: 7c8a4b99-283b-3234-b816-b4b5409f8a4d.roa (hash: w5cfjoKdFfqpqQ0TeYaBTSgQuCk0DYsYJwms+nH+ytg=)
                          10: b6bab6f6-1332-3f01-9c8f-b956989936f8.roa (hash: +3btWTMuKlO+/GQUj66UwG1j198imd8ibXOM1nJTdsM=)
                          11: c7f5a7c6-4657-3bd4-899b-0e88594df27b.roa (hash: 9DWpCww49/rhhDEdC/S38GUJIH6VGCRHabgmMliW7FY=)
                          12: e01fe237-d6f0-3180-bbea-fe38f284c022.roa (hash: dnIh/j7Lf+TTdVFjG0hQ8/9faRzq1v65kLf2eFhiBK0=)
                          13: e7dde7ff-c6bc-33be-ad66-4c77c91a4eb5.roa (hash: 3i1SLZC3wW1QTbs5HJxc0Xd7nJtv9uO2d48F3l6e2NE=)
                          14: f441c09f-0eea-375c-b13f-bceb660b2cd7.roa (hash: TBZTv+8fAbDqZ+oB8t/lly66bZDjxa052X9xWVacor8=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3f:b7:68:54:a3:5d:8e:73:ef:89:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Dec 20 11:00:03 2025 GMT
            Not After : Dec 23 11:00:00 2025 GMT
        Subject: CN=cdba29e5-f728-4222-8b55-a4da2b2aefb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:53:7b:c3:d7:e7:e7:17:ea:e4:e1:66:f0:58:
                    f4:09:51:96:b5:7a:f5:74:ed:22:96:de:69:30:1b:
                    79:92:15:e0:bb:48:ae:a3:f7:66:7d:27:b3:07:48:
                    26:92:64:58:92:88:55:e5:2a:ce:ad:dc:34:e1:f4:
                    f1:de:0c:c4:04:1f:9d:03:32:eb:13:99:b1:de:89:
                    ee:4c:5c:c2:6b:78:84:ec:5a:d2:1d:9d:9f:de:cc:
                    d0:b5:3c:ba:7c:61:49:bc:f1:1c:f0:e3:d4:40:7f:
                    69:c9:0f:c0:0f:6d:10:b2:b6:6a:ca:90:b3:af:59:
                    70:6e:f4:ed:34:a7:42:7c:cc:9b:fd:65:59:ac:32:
                    a6:dd:b7:07:e5:17:64:36:5d:ff:df:c7:7b:12:7a:
                    45:64:b9:3d:6a:61:5d:76:18:66:7a:43:2b:c4:34:
                    2d:f9:d7:99:89:75:f0:d4:99:67:38:ea:24:ef:6f:
                    5f:09:88:9e:85:ac:98:53:da:cb:c6:60:f2:8f:17:
                    92:3d:a6:68:67:f9:8a:79:f3:f8:06:e5:7a:07:bd:
                    9f:9b:74:b9:02:14:c0:b2:96:bd:c5:75:52:a8:7e:
                    4e:df:f3:fa:1e:cc:b7:97:9a:fd:4f:b0:59:5c:17:
                    b7:9d:85:1b:18:c8:4c:0d:5a:c1:80:8c:04:a1:6c:
                    97:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D6:47:10:CF:06:16:FE:E6:9A:37:22:FA:24:B5:5E:60:81:63:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1e:63:dd:b1:78:2b:73:31:7d:b3:6c:29:ea:f2:69:2d:d6:
         32:28:9e:a0:5c:64:13:d1:9f:06:b8:8f:ea:34:58:37:3a:62:
         e3:11:aa:cd:65:27:58:98:d3:f2:43:5d:33:c3:35:90:ca:13:
         80:d1:bc:af:6d:bd:ec:c7:2f:0e:9d:eb:15:02:6f:25:bf:de:
         a6:f6:33:72:cb:44:fc:29:52:77:e9:22:e1:b9:43:ef:74:9e:
         85:06:d1:6f:e0:72:0d:93:3a:36:32:05:28:82:0e:5c:21:7a:
         38:b1:4b:f8:85:ba:85:a4:11:fe:39:9f:68:b5:2d:6f:b4:f0:
         0f:ec:a4:6f:ab:e1:d6:ff:32:8e:b9:7a:2a:95:58:a3:7e:88:
         14:b7:3d:da:b8:97:bd:a0:9f:52:51:a8:e1:91:62:ac:b4:7a:
         33:9e:d1:b9:2d:62:3a:b0:a3:3a:77:fe:f2:aa:e6:ed:ae:04:
         9c:08:46:c8:8b:92:12:e6:d2:2f:3a:82:ec:9c:0f:29:9d:a5:
         a1:78:b9:93:2c:95:55:f7:0e:c5:fb:27:0b:c3:83:41:de:39:
         39:9c:d3:30:c0:8b:ee:7f:c3:44:d0:d3:83:3c:c7:3d:c5:e9:
         95:d3:95:e8:c7:bc:37:58:6b:6e:c1:bb:13:b1:7f:0a:c4:98:
         7d:1e:a2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:43:46 2025 by rpki-client