This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft
File:                     2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft (raw, json)
Hash identifier:          0pYjUTefACkQ6+oA9k7Z+UHlH/niJ/D4liEJFwi6I6w=
Subject key identifier:   84:03:E6:CF:0C:C2:80:0F:61:45:D7:81:09:03:D7:73:69:18:63:A3
Authority key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B
Certificate issuer:       /CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd
Certificate serial:       010D0C9F4328584C4176226E57A196AB3B29ABC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft
Manifest number:          010D0C9F4328584B4BCFD881B87CBE90580D31D8
Signing time:             Sun 21 Dec 2025 02:00:08 +0000
Manifest this update:     Sun 21 Dec 2025 02:00:08 +0000
Manifest next update:     Wed 24 Dec 2025 02:00:00 +0000
Files and hashes:         1: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl (hash: Bn3844J1nEkXK/bylyDaj5l+iRekS9LmiZFdH50eI7c=)
                          2: 4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer (hash: YQB3ja0LD/RpPSpiFOvhsYwRInhxQQNy5l8nfauLYkE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:76:22:6e:57:a1:96:ab:3b:29:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd
        Validity
            Not Before: Dec 21 02:00:08 2025 GMT
            Not After : Dec 24 02:00:00 2025 GMT
        Subject: CN=ebe9d2f3-1915-4b4e-beec-99bd4ab53641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:42:67:5f:4a:5b:2a:6e:e1:d6:e6:e2:11:76:
                    38:6a:d7:af:ed:e7:fc:ad:fd:15:66:6b:c2:47:84:
                    9b:30:5d:6a:df:28:a7:a7:e6:c2:e7:cf:a8:26:b6:
                    ca:a8:f6:b5:94:77:30:8e:62:f4:84:a5:bf:24:ec:
                    fd:6f:8e:4a:21:f2:dd:2f:43:0d:0c:9c:ba:cc:b3:
                    40:81:57:d5:48:e2:e2:81:c8:fb:a1:61:4c:99:3b:
                    5f:f7:d7:4f:dc:c8:14:dc:d2:27:44:31:c0:06:fe:
                    45:66:10:32:e7:64:44:c7:35:4f:aa:3a:76:b5:2c:
                    e5:6d:2c:cb:37:4f:2d:5f:7e:81:56:28:ea:44:cc:
                    d7:54:da:a6:a3:dc:79:09:0e:8e:62:65:a2:36:6f:
                    95:5f:ca:60:d5:bb:c5:6d:85:63:79:f5:85:ca:c0:
                    41:2d:88:ad:b8:9b:58:9f:2d:95:52:79:33:b5:e2:
                    c4:75:31:80:6b:69:68:fa:5d:be:2c:32:f2:03:d6:
                    3e:36:47:e2:5c:7e:45:0f:12:f0:d6:ab:de:1a:96:
                    1c:dc:18:88:4c:35:09:82:16:ab:69:7b:5d:88:8d:
                    4d:d2:62:3b:ee:7a:e5:2a:06:8d:0e:23:a2:cf:e7:
                    82:45:bc:94:22:45:9a:27:49:90:40:5f:6c:8d:ac:
                    ee:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:03:E6:CF:0C:C2:80:0F:61:45:D7:81:09:03:D7:73:69:18:63:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl

            X509v3 Authority Key Identifier:
                keyid:0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:ba:21:f1:a0:f9:d0:24:db:20:2e:d0:22:9c:a3:b1:10:4e:
         47:e0:3c:8c:84:10:19:8b:a3:1b:59:51:79:d1:d6:b0:5d:c6:
         b8:28:9f:92:53:fe:4e:9b:8d:2b:86:02:f8:aa:2d:09:5f:59:
         7e:c0:91:cc:a4:f0:ae:c6:57:c5:ed:05:60:1b:1e:74:78:fa:
         49:0a:d4:10:0d:13:59:e9:f7:1b:13:10:7f:05:85:e3:40:93:
         60:17:1b:aa:d0:58:12:57:c9:ac:e3:be:00:1a:98:53:c5:a5:
         7f:19:b1:73:d6:39:f4:c3:15:1f:5f:dd:6d:87:e5:af:ab:02:
         05:a3:1f:15:b1:1b:80:6b:21:b4:e4:de:8d:90:59:e9:f7:52:
         3e:4f:85:fe:b2:59:1a:a6:d1:2d:0d:af:d4:16:47:a0:0a:68:
         72:72:7f:c1:79:c8:2f:3e:c0:14:c7:f4:2d:3a:c8:00:66:69:
         dc:8f:ed:4f:da:d9:09:50:af:d8:14:82:b8:95:cc:fc:57:15:
         31:5a:22:99:86:e5:d7:1e:85:32:1c:92:dc:c3:7b:ba:9f:d6:
         b8:37:7d:a6:32:8f:70:78:ba:70:a9:34:81:f1:e3:23:ec:df:
         85:d8:d2:d4:da:bd:85:1f:c1:01:f0:28:ea:af:d9:04:04:78:
         a7:df:f6:21
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExBdiJuV6GWqzspq8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIz
YmRkMB4XDTI1MTIyMTAyMDAwOFoXDTI1MTIyNDAyMDAwMFowLzEtMCsGA1UEAxMk
ZWJlOWQyZjMtMTkxNS00YjRlLWJlZWMtOTliZDRhYjUzNjQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkJnX0pbKm7h1ubiEXY4atev7ef8rf0VZmvC
R4SbMF1q3yinp+bC58+oJrbKqPa1lHcwjmL0hKW/JOz9b45KIfLdL0MNDJy6zLNA
gVfVSOLigcj7oWFMmTtf99dP3MgU3NInRDHABv5FZhAy52RExzVPqjp2tSzlbSzL
N08tX36BVijqRMzXVNqmo9x5CQ6OYmWiNm+VX8pg1bvFbYVjefWFysBBLYituJtY
ny2VUnkzteLEdTGAa2lo+l2+LDLyA9Y+NkfiXH5FDxLw1qveGpYc3BiITDUJghar
aXtdiI1N0mI77nrlKgaNDiOiz+eCRbyUIkWaJ0mQQF9sjazutQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFIQD5s8MwoAPYUXXgQkD13NpGGOjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0
YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQvMjk1NGI4YTEtNjlkZS00
NjMwLTgwMDYtNGRjOGZmZTIzYmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjk1NGI4YTEtNjlkZS00NjMwLTgw
MDYtNGRjOGZmZTIzYmRkLzI5NTRiOGExLTY5ZGUtNDYzMC04MDA2LTRkYzhmZmUy
M2JkZC5jcmwwHwYDVR0jBBgwFoAUCtV6etttzc0D69uV89EzrhnHBgswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4
ZmZlMjNiZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBuiHxoPnQJNsgLtAinKOx
EE5H4DyMhBAZi6MbWVF50dawXca4KJ+SU/5Om40rhgL4qi0JX1l+wJHMpPCuxlfF
7QVgGx50ePpJCtQQDRNZ6fcbExB/BYXjQJNgFxuq0FgSV8ms474AGphTxaV/GbFz
1jn0wxUfX91th+WvqwIFox8VsRuAayG05N6NkFnp91I+T4X+slkaptEtDa/UFkeg
Cmhycn/BecgvPsAUx/QtOsgAZmncj+1P2tkJUK/YFIK4lcz8VxUxWiKZhuXXHoUy
HJLcw3u6n9a4N32mMo9weLpwqTSB8eMj7N+F2NLU2r2FH8EB8Cjqr9kEBHin3/Yh
-----END CERTIFICATE-----