This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft
File:                     4a2347a0-a386-4424-8887-fb176c5cf0b5.mft (raw, json)
Hash identifier:          zAARmx8Y0PnCgrcJJrYhTxo5fHALffsX5yOe6b9kRFM=
Subject key identifier:   E2:CB:95:E4:57:98:DC:36:D5:6F:3B:DA:6A:30:50:9A:57:3F:53:F5
Authority key identifier: B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD
Certificate issuer:       /CN=4a2347a0-a386-4424-8887-fb176c5cf0b5
Certificate serial:       010D0C9F4328584C3FF2F834F457566511428740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft
Manifest number:          010D0C9F4328584B5B22A8A8EF383ECB51D9D054
Signing time:             Sat 20 Dec 2025 13:00:04 +0000
Manifest this update:     Sat 20 Dec 2025 13:00:04 +0000
Manifest next update:     Tue 23 Dec 2025 13:00:00 +0000
Files and hashes:         1: 4a2347a0-a386-4424-8887-fb176c5cf0b5.crl (hash: l6ykNaMtmPlup3NpLk7F5hILRErcq69aulzV1V12/iI=)
                          2: a7b64aee-0e1f-3e9b-ae42-a25a00b9d7d8.roa (hash: IdiuqR5qXLXDGOlsUitrK3CLFddIGQU0V7N9E8tdamI=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3f:f2:f8:34:f4:57:56:65:11:42:87:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a2347a0-a386-4424-8887-fb176c5cf0b5
        Validity
            Not Before: Dec 20 13:00:04 2025 GMT
            Not After : Dec 23 13:00:00 2025 GMT
        Subject: CN=b08c0af3-bcb0-430c-85b1-92baabb5ae7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a2:90:91:05:77:ba:1c:c2:bd:5f:e7:5a:56:
                    15:51:8e:71:0e:f7:61:66:f8:fe:03:a1:a8:f2:f5:
                    22:36:dc:32:85:11:b3:d6:23:bb:a3:b2:73:38:2a:
                    57:79:ab:05:4b:9f:20:13:33:08:94:be:df:97:e0:
                    c0:93:41:67:6d:0a:0b:8e:df:2f:9b:b4:fd:a4:61:
                    1f:02:38:b0:38:9e:df:75:56:62:36:7c:c4:c8:f0:
                    94:c9:fe:c5:07:ea:50:74:70:da:77:16:ff:bc:e9:
                    ba:41:ab:56:78:1d:e4:dc:7c:96:14:54:68:6d:f7:
                    95:ad:be:ea:84:1d:1d:1a:13:d6:01:ee:30:e1:2b:
                    ee:5d:47:a3:a2:80:28:6d:33:9c:b6:fc:59:15:60:
                    e4:08:8f:02:12:ef:9c:2b:a4:b4:14:10:06:a6:fb:
                    de:7a:e1:fd:e3:df:b8:86:5f:5e:f0:c9:25:a3:7d:
                    fa:5b:74:b2:e6:83:61:72:cc:0f:02:9c:90:2b:2d:
                    e4:17:73:34:62:9c:7a:e4:dd:17:4c:b2:91:3c:9b:
                    96:09:10:34:96:a4:e2:32:64:34:f8:b3:cd:19:38:
                    35:58:97:b5:65:40:49:45:98:f8:ec:ca:02:ea:10:
                    43:24:d8:e9:4d:7c:09:95:1a:34:63:a9:62:1c:17:
                    f1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CB:95:E4:57:98:DC:36:D5:6F:3B:DA:6A:30:50:9A:57:3F:53:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5/4a2347a0-a386-4424-8887-fb176c5cf0b5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:C4:63:F6:52:C6:6B:14:23:9F:6A:89:24:69:F3:96:4F:79:D8:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4a2347a0-a386-4424-8887-fb176c5cf0b5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:15:12:a0:d7:fe:c8:66:12:c3:74:78:b0:bf:92:01:81:a5:
         99:d8:2e:83:09:b3:11:14:54:f3:41:74:20:d8:85:de:70:42:
         cd:1d:6b:ba:62:bf:9d:93:4d:09:39:6d:a5:06:1f:c2:f7:8c:
         d5:5c:1b:c8:1d:94:65:87:77:9b:c8:5e:31:c0:eb:2e:d6:9a:
         8e:e1:98:23:3b:2c:ac:fb:50:0a:cd:19:e6:53:5b:20:b9:9c:
         73:73:e5:83:42:08:4a:b6:5c:ba:2f:91:3c:49:4a:82:77:2a:
         58:9b:01:06:9f:73:94:43:4b:ae:b5:aa:aa:de:52:d7:c3:fb:
         a5:84:4f:d5:fc:57:69:02:f1:fc:85:9d:a1:3c:ef:e7:da:4a:
         91:c1:69:89:50:36:4e:76:a1:e9:63:b6:a0:4b:8a:30:f9:e2:
         d1:c5:8f:59:ee:73:d6:26:6a:13:52:18:6d:b2:4b:0c:e5:ee:
         d0:b2:32:c6:1c:85:32:ca:a8:a5:9c:2f:38:a7:aa:a3:f0:21:
         70:de:49:14:46:f6:cb:d9:3e:75:31:87:5e:c7:a3:74:c3:40:
         e8:da:52:4e:0e:8b:de:08:90:9e:b2:33:f3:2e:79:05:f1:78:
         e7:e2:66:4d:24:0f:3e:3a:e7:f0:bb:c8:f8:57:f0:73:ab:d2:
         6d:b9:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----