This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
File:                     df45c214-cd13-454c-ac2d-2978c76c6f7f.mft (raw, json)
Hash identifier:          j2NCmy/RLb9em91JC1kr6RitzQZJoFN+B1ICzgianVs=
Subject key identifier:   5C:CB:C2:E9:D0:C9:18:D6:84:9D:8C:22:ED:BA:EA:E2:70:B3:B2:4D
Authority key identifier: D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8
Certificate issuer:       /CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
Certificate serial:       010D0C9F4328584C413A84CBF592A77BC8AE6900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
Manifest number:          010D0C9F43285848F622F2E67C320CBC3351833C
Signing time:             Sun 21 Dec 2025 00:00:03 +0000
Manifest this update:     Sun 21 Dec 2025 00:00:03 +0000
Manifest next update:     Wed 24 Dec 2025 00:00:00 +0000
Files and hashes:         1: 278765ee-7e37-387f-89f2-66a24d12e07c.roa (hash: Zd+DDgEf/zdTwJkF4B4Si/lGWWfmypIwKQNUJdZcLGg=)
                          2: 58d18a9d-961e-38a1-898a-cab3732b33e7.roa (hash: D9cxAO2c8C5TWLtQ1jtyIDscY1kpBzKQO51tqHb112w=)
                          3: df45c214-cd13-454c-ac2d-2978c76c6f7f.crl (hash: w5JsNt9ucNctW3U44hDfTfP3aG1/7ft4McdxXcobajM=)
                          4: e3d9753b-d297-3f28-8411-a24b30d79d35.roa (hash: /RvCixeEQxOeN8ysh1kdlBJDlIY9+QNROIMIudf0j5E=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:3a:84:cb:f5:92:a7:7b:c8:ae:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
        Validity
            Not Before: Dec 21 00:00:03 2025 GMT
            Not After : Dec 24 00:00:00 2025 GMT
        Subject: CN=4aee74a2-a1ff-4e6f-bfa1-a496ad85f7d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4b:6e:a0:d4:2a:22:67:09:fa:b8:59:31:bd:
                    1e:8a:bd:63:87:6f:2f:95:e9:68:62:00:62:99:1e:
                    eb:60:4c:50:b7:e2:a0:aa:21:30:d2:76:a0:d7:b3:
                    2f:04:ba:61:d0:29:42:8d:74:c1:1c:09:24:94:3e:
                    1b:11:92:e1:ff:1e:b2:f0:b2:35:fe:a3:f4:25:36:
                    5b:ae:b9:43:53:0f:9b:56:60:56:ef:3d:8c:6c:46:
                    64:7f:16:49:91:62:6e:48:e5:fb:c1:4d:af:1e:6e:
                    fd:e3:4d:03:8a:4d:c2:34:73:2d:aa:cb:6d:1f:c4:
                    fc:66:70:50:04:ef:87:c9:df:af:98:f6:b0:ff:b8:
                    cf:7a:37:6e:8b:ea:36:3f:49:44:64:16:58:72:d3:
                    c4:00:4a:12:c9:59:5e:a1:b1:75:f4:4f:bd:a9:c6:
                    25:e1:a9:f2:d1:63:cf:10:87:59:94:e5:ab:a4:25:
                    5e:6f:8b:44:6b:58:45:18:6c:23:af:a8:5c:f0:eb:
                    26:37:a4:89:19:57:51:7e:98:e8:b8:31:dc:a3:71:
                    77:e2:7a:39:1d:46:c8:6c:3c:84:9f:83:e8:24:45:
                    00:79:d7:31:2d:31:c8:a3:25:31:12:3c:e9:09:39:
                    e5:3f:d2:ba:73:b0:7f:54:54:9b:1f:5a:0e:a1:98:
                    14:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CB:C2:E9:D0:C9:18:D6:84:9D:8C:22:ED:BA:EA:E2:70:B3:B2:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:65:a0:bc:f1:0b:ee:de:72:4f:c9:c4:7e:a4:a6:4f:4c:da:
         56:48:06:37:79:18:05:03:f4:1c:41:58:e3:35:86:d0:81:0e:
         c9:5f:18:7b:11:57:a6:e3:00:41:f2:a2:b1:27:ba:a7:26:0c:
         b5:93:ad:8e:c3:c5:41:dd:d9:db:50:01:2f:f2:14:08:d7:1c:
         97:5d:50:06:77:9b:5b:6a:8b:94:97:05:54:36:0f:bf:ff:ed:
         21:91:04:cc:a5:f5:aa:d6:cb:c3:3a:b1:64:e2:db:a2:a7:c9:
         c3:f4:b0:df:b0:5b:2b:85:a7:97:94:f4:f3:1e:88:04:94:a3:
         59:6c:a7:18:4a:05:65:f8:4a:df:5c:6b:16:ee:ff:8c:42:70:
         4c:d0:95:30:ae:ad:2f:b3:52:9a:c3:bf:e9:57:d5:b7:20:5f:
         59:39:3d:1e:3f:f9:e4:a2:65:5b:36:de:c4:4d:41:40:97:83:
         3d:95:48:96:06:03:23:c0:9d:26:91:a8:26:13:88:56:98:ef:
         5e:7e:57:02:85:6a:be:9f:44:20:d9:eb:95:79:5e:c2:d6:20:
         7b:18:b3:92:44:16:6e:a3:ef:5b:5c:c9:4a:af:42:01:20:01:
         03:53:b9:28:15:f8:2c:4b:19:e0:32:11:e7:48:8e:56:f9:b1:
         cf:1d:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 12:27:09 2025 by rpki-client