This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft
File:                     aa31a4a0-7b77-4f56-8f89-01525b506129.mft (raw, json)
Hash identifier:          l5W6/r6ctfVngfJEyY9FBX+B1FNGiGJcKdxopsOJgAU=
Subject key identifier:   A1:8E:11:A3:16:F6:6C:60:E6:C0:A3:5C:5C:CA:6C:1A:4C:CA:4D:DB
Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
Certificate issuer:       /CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Certificate serial:       010D0C9F4328584C4B770977D38B224FE72BE140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft
Manifest number:          010D0C9F43285848025535B12A6F9EF4C012B5D8
Signing time:             Wed 24 Dec 2025 16:00:03 +0000
Manifest this update:     Wed 24 Dec 2025 16:00:03 +0000
Manifest next update:     Fri 26 Dec 2025 16:00:00 +0000
Files and hashes:         1: 08ad9252-a414-3b87-84d9-259b7e5e27cf.roa (hash: X6yC3JFAqDwl7ZXoE/P1tu95ctj2a4NKJPDkpqemLIE=)
                          2: 2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa (hash: dift3bCya9tS0h/VXBnlTNTzu7QRRcGGnQMK5A81K+U=)
                          3: 3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa (hash: qSc/wiMPPMOC4bh9I0pqIXQzlB1BZbMBBiu+PDvOfDk=)
                          4: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (hash: ufnB4wNVDI3H/r7mgzOEaI9eQrMhuvI27pxN0dyZmKM=)
                          5: 5c4f117d-45b9-3f38-be81-53b231ffe933.roa (hash: YyZuos4Qflttx6phU02lCHxcvgoLGnPUwj3mPcS8s/E=)
                          6: 918523ba-c151-3f99-b377-2e0bfbd7897c.roa (hash: HzGZk5wCaprO2/SIeztSz4b72hQVQ5QIO9LgEDhqq0w=)
                          7: a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa (hash: R6k/sRP8LvL9HNtUDw5y+RcUptyqUlKWTaNxpLGX2bE=)
                          8: aa31a4a0-7b77-4f56-8f89-01525b506129.crl (hash: EKvRRGmtUP3rjbB+SP+aDE4/dsA5FiiLyGAfFKMtPqw=)
                          9: ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa (hash: WQP0333LWBo3JU6rYUj2jMeH/02lTEo7oVfm+zBLeVo=)
                          10: c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa (hash: I+CQSsU3P880CBvS3h2GWeCCCjwf21UFjcPf2klhcDY=)
                          11: d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa (hash: PiOK7pc38oi0cjia0H9NVLtdfxNz6Tcg0FMS3ubs+q8=)
                          12: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (hash: mC9XdF83rIjAp0TSDJOCmkmlkICAenkSQjyfJTdDqVE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:4b:77:09:77:d3:8b:22:4f:e7:2b:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129
        Validity
            Not Before: Dec 24 16:00:03 2025 GMT
            Not After : Dec 26 16:00:00 2025 GMT
        Subject: CN=a269eb9f-412c-4dd1-ac9a-eb921c602990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:fb:7c:94:20:a6:99:5a:d2:c7:c4:bd:b0:
                    99:37:bd:24:35:7b:4f:5c:8e:f3:7c:35:1c:11:b4:
                    b0:e6:4e:72:53:dd:32:f4:24:07:ad:d2:ab:89:0c:
                    e4:d2:fc:fd:f1:8e:94:d5:e4:1e:1b:68:2e:51:a7:
                    eb:b5:11:70:70:bf:93:58:62:26:96:09:55:71:b4:
                    76:4e:d9:0b:e2:8b:24:c0:a9:75:d2:2b:fc:6c:a3:
                    ea:9f:07:25:99:a9:27:37:5c:ae:62:0b:d0:a5:6b:
                    7f:91:5a:bc:20:be:82:c5:65:1a:76:ab:3e:28:06:
                    ee:0a:44:c6:85:d4:e9:7c:1a:e6:cd:e7:17:39:04:
                    31:c7:f4:f0:63:fb:79:c6:c6:92:3a:00:2b:cb:ad:
                    cc:c6:59:42:b7:15:db:6b:86:2d:7c:0f:34:1a:e0:
                    33:12:20:75:b5:a5:17:65:22:f5:79:71:bf:68:8c:
                    ae:14:21:15:84:fa:5b:04:4e:83:39:f3:de:40:ad:
                    68:52:20:6e:1e:36:cc:f1:d2:7b:a2:c8:a6:f8:2b:
                    f7:6d:b7:c7:4a:b6:49:27:04:65:88:6d:be:1e:72:
                    92:17:c0:53:b7:d2:86:78:46:6b:ba:be:13:7e:ad:
                    16:1f:ea:59:40:59:f9:fd:70:13:0b:2c:fb:f5:3d:
                    6f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8E:11:A3:16:F6:6C:60:E6:C0:A3:5C:5C:CA:6C:1A:4C:CA:4D:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl

            X509v3 Authority Key Identifier:
                keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:6a:39:8d:fc:20:22:9c:aa:80:e5:9d:05:bc:ff:04:e7:8d:
         a3:92:c2:58:80:57:68:03:75:58:31:42:08:f5:32:08:a1:86:
         2b:3a:75:1e:f3:62:7c:33:0a:2d:2e:4a:42:e3:c0:34:9e:f7:
         23:0d:14:7a:af:c3:37:63:fc:49:80:c0:39:bd:c4:e3:7e:2e:
         d6:8d:2f:98:94:c7:10:6d:ca:84:79:af:54:95:ec:0d:10:66:
         53:b9:62:85:88:2f:8a:90:be:51:68:36:b0:cd:8b:8e:0d:f5:
         3e:9f:f9:0f:a9:a9:a6:94:68:99:68:6a:35:59:1c:6a:0b:e2:
         07:23:56:c8:b6:78:f0:dd:a5:f3:93:4f:09:38:ea:08:f2:9f:
         0a:3c:c2:ba:02:2c:e6:05:9a:cf:d4:98:ce:d4:72:21:f2:81:
         83:a8:33:d3:c0:d5:45:62:4a:17:58:e1:7d:72:bf:fb:a8:dd:
         97:b8:f9:33:26:07:98:97:3b:54:d9:46:28:39:fc:1f:46:c1:
         fd:65:ff:1b:cf:97:bf:5d:b2:88:03:54:cd:38:e8:1f:da:78:
         bd:49:a3:d8:9d:55:8e:0f:02:7f:7a:62:e0:4f:ef:fd:1d:58:
         2c:7b:07:44:09:37:d0:e7:d2:1e:1a:3e:49:e3:57:20:10:da:
         6f:59:ae:bd
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExLdwl304siT+cr4UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2
MTI5MB4XDTI1MTIyNDE2MDAwM1oXDTI1MTIyNjE2MDAwMFowLzEtMCsGA1UEAxMk
YTI2OWViOWYtNDEyYy00ZGQxLWFjOWEtZWI5MjFjNjAyOTkwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRn7fJQgppla0sfEvbCZN70kNXtPXI7zfDUc
EbSw5k5yU90y9CQHrdKriQzk0vz98Y6U1eQeG2guUafrtRFwcL+TWGImlglVcbR2
TtkL4oskwKl10iv8bKPqnwclmaknN1yuYgvQpWt/kVq8IL6CxWUadqs+KAbuCkTG
hdTpfBrmzecXOQQxx/TwY/t5xsaSOgAry63MxllCtxXba4YtfA80GuAzEiB1taUX
ZSL1eXG/aIyuFCEVhPpbBE6DOfPeQK1oUiBuHjbM8dJ7osim+Cv3bbfHSrZJJwRl
iG2+HnKSF8BTt9KGeEZrur4Tfq0WH+pZQFn5/XATCyz79T1vwQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFKGOEaMW9mxg5sCjXFzKbBpMyk3bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx
YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYWEzMWE0YTAtN2I3Ny00
ZjU2LThmODktMDE1MjViNTA2MTI5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm
ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw
NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy
NWI1MDYxMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDaajmN/CAinKqA5Z0FvP8E
542jksJYgFdoA3VYMUII9TIIoYYrOnUe82J8MwotLkpC48A0nvcjDRR6r8M3Y/xJ
gMA5vcTjfi7WjS+YlMcQbcqEea9UlewNEGZTuWKFiC+KkL5RaDawzYuODfU+n/kP
qammlGiZaGo1WRxqC+IHI1bItnjw3aXzk08JOOoI8p8KPMK6AizmBZrP1JjO1HIh
8oGDqDPTwNVFYkoXWOF9cr/7qN2XuPkzJgeYlztU2UYoOfwfRsH9Zf8bz5e/XbKI
A1TNOOgf2ni9SaPYnVWODwJ/emLgT+/9HVgsewdECTfQ59IeGj5J41cgENpvWa69
-----END CERTIFICATE-----
Generated at Thu Dec 25 11:00:55 2025 by rpki-client