This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.mft
File:                     4298b6ff-8a6d-4135-b127-80a55c0919df.mft (raw, json)
Hash identifier:          olyyhfaGM7eJEgJDOcSEAGwhceCC3p/AwS4HJFsnstM=
Subject key identifier:   9C:A5:7F:B6:37:04:50:45:4F:5A:FB:81:D5:6F:5B:AC:03:23:A0:F2
Authority key identifier: 4A:FC:61:2F:3B:D7:32:8B:65:D2:0A:6E:34:9B:3F:09:6B:84:6F:34
Certificate issuer:       /CN=4298b6ff-8a6d-4135-b127-80a55c0919df
Certificate serial:       010D0C9F4328584C3FF3F6DC6BE64CD278344000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.mft
Manifest number:          010D0C9F4328584AEE322667985C00EFDC41ADBE
Signing time:             Sat 20 Dec 2025 13:02:03 +0000
Manifest this update:     Sat 20 Dec 2025 13:02:03 +0000
Manifest next update:     Mon 22 Dec 2025 13:00:00 +0000
Files and hashes:         1: 4298b6ff-8a6d-4135-b127-80a55c0919df.crl (hash: FBj4OvXvFRcjQ+ST2uBRFsjx26DReUzLrx7zLngs3sc=)
                          2: 6a0bbce7-c581-3331-906e-a9f1222f970b.roa (hash: tkkQ1RJhCd7Ge5775PzN6P03DDK6z39K5RIQOFP6vB4=)
                          3: e1c95166-e3fe-3fac-9109-56a8e4b9f490.roa (hash: YK9FHt/bITH4XtLEG6FOuBuh/7ztDvVBGzH+Ypw8kSw=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3f:f3:f6:dc:6b:e6:4c:d2:78:34:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4298b6ff-8a6d-4135-b127-80a55c0919df
        Validity
            Not Before: Dec 20 13:02:03 2025 GMT
            Not After : Dec 22 13:00:00 2025 GMT
        Subject: CN=09dd8532-1571-415e-b15f-e92843e9439e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0f:ef:84:87:73:ed:15:a3:09:5a:ff:7e:b0:
                    0f:dc:c3:f7:d4:c6:6a:72:78:9d:97:b4:74:fb:c0:
                    71:bd:5d:ef:eb:56:a4:0d:bf:ed:b4:de:5c:b6:74:
                    16:94:7c:b1:4b:9b:26:61:70:8f:69:f9:83:f5:03:
                    75:39:0d:3a:09:a7:f6:4a:b1:89:2a:c8:1f:da:e9:
                    75:85:b2:41:5a:bd:57:fe:50:78:3a:7a:16:51:2c:
                    ff:b9:d9:5f:2a:f3:ea:e2:48:30:12:cc:d4:7b:2c:
                    66:79:65:7c:e1:a8:fd:e7:c4:a3:b0:52:6c:a3:a5:
                    25:d0:88:d0:e5:82:77:e9:e5:fa:6e:30:1b:c8:4c:
                    b7:c5:43:43:08:f1:f8:dd:32:37:90:42:6e:0c:d2:
                    11:3d:34:80:06:4d:3f:6f:8b:7f:d3:22:28:b4:02:
                    c3:db:0b:7d:fd:36:f9:58:98:21:05:8e:d3:df:02:
                    e2:df:7e:fd:b7:65:8c:ae:7c:09:d6:91:51:f4:d0:
                    da:e9:c1:3a:4b:f0:fa:fd:fc:48:4e:26:ad:e7:ff:
                    89:2f:b9:5e:17:b3:d7:36:5d:4f:51:e1:54:b9:f2:
                    cf:39:23:fa:7d:98:b8:e8:c9:37:f8:df:6b:b6:19:
                    93:a6:c1:06:b6:05:77:86:da:fb:bd:1a:05:78:e5:
                    51:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A5:7F:B6:37:04:50:45:4F:5A:FB:81:D5:6F:5B:AC:03:23:A0:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df/4298b6ff-8a6d-4135-b127-80a55c0919df.crl

            X509v3 Authority Key Identifier:
                keyid:4A:FC:61:2F:3B:D7:32:8B:65:D2:0A:6E:34:9B:3F:09:6B:84:6F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4298b6ff-8a6d-4135-b127-80a55c0919df.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:31:1c:7e:9a:01:d8:f4:be:17:55:cb:f4:30:ee:28:59:c0:
         57:fc:3a:80:98:21:04:d9:1e:e4:86:52:51:03:91:89:9d:d6:
         c7:45:61:14:9a:d7:12:df:fa:ba:5e:cb:14:df:71:87:3e:d9:
         19:8d:90:b9:32:f8:27:84:6b:db:d0:88:3c:ae:9d:e2:6a:c0:
         00:80:5f:48:39:14:f0:e5:2f:e0:f7:8f:5e:52:86:50:bd:d6:
         2d:96:f0:97:9d:61:89:59:71:fe:43:0c:e0:47:ab:59:fc:07:
         0e:2a:bb:a4:c3:81:4c:35:99:8d:70:c7:91:02:51:b3:8e:e8:
         0b:14:c2:10:e3:77:ce:a9:db:22:43:5a:54:14:b0:95:ce:3f:
         87:e0:94:41:1b:8a:9d:38:9d:31:35:6a:89:85:70:ed:ea:e0:
         0e:a0:65:f3:e8:44:61:0b:74:06:5e:bd:60:b2:a9:70:0e:43:
         3a:c8:94:aa:a0:d9:63:7e:b9:5d:44:e9:d3:a8:9c:f8:fb:fb:
         e6:c0:0d:3a:e7:c5:38:a8:d7:a6:7b:fe:62:b6:0e:dc:f9:5d:
         4d:b1:fd:7e:f5:b1:8b:5e:a9:ec:69:26:53:d4:53:35:24:59:
         df:56:93:01:cb:88:6b:f9:6d:60:ad:a5:65:45:d7:d6:35:2d:
         6b:be:31:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:01:38 2025 by rpki-client