This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft
File:                     4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft (raw, json)
Hash identifier:          qZvYOURspaZsOO6LOrz22m8tKoe0c5c0fsJzaO6MTfo=
Subject key identifier:   92:65:3D:CE:CE:85:FB:C6:C0:F1:1B:EF:98:DC:CD:C3:55:D0:97:F1
Authority key identifier: 31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D
Certificate issuer:       /CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec
Certificate serial:       010D0C9F4328584C15D728B8468FB09DC7C7FE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft
Manifest number:          010D0C9F4328584073A84F33EE27419B2D432F44
Signing time:             Fri 05 Dec 2025 11:00:03 +0000
Manifest this update:     Fri 05 Dec 2025 11:00:03 +0000
Manifest next update:     Mon 08 Dec 2025 11:00:00 +0000
Files and hashes:         1: 4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl (hash: WrnoF4t8w/m3Qiuff0OEIlEWqBzfWWaN+Rr95oo2+as=)
                          2: 8cd9bb4a-ed14-375c-aa14-4200b366035f.roa (hash: D6gSzXUGA4Y7fZMtRw8/HvncZLgHQNtwyu3NAqdr3A8=)
                          3: 9c1acd6a-07c0-376e-87e2-b1a2992e2c69.roa (hash: JD+uDnrFk0wtNllnXSAz7RFQzMGJi7cSGsBQHo3daGo=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:15:d7:28:b8:46:8f:b0:9d:c7:c7:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8ec25d-932a-4dd4-8f83-f1da049068ec
        Validity
            Not Before: Dec  5 11:00:03 2025 GMT
            Not After : Dec  8 11:00:00 2025 GMT
        Subject: CN=b3842ee8-795d-4606-8513-4c7c9c800396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ca:c6:3c:e7:f9:d1:9b:9d:0e:68:f5:e4:fc:
                    e9:51:32:d3:f4:07:28:c5:25:e1:ac:2f:de:1b:70:
                    81:09:d4:1f:5b:c2:91:70:27:1b:f7:d3:d5:7d:1b:
                    4d:3c:bb:d5:e1:67:c9:94:74:20:e5:7b:8a:0d:b6:
                    0b:0f:95:30:b7:02:8e:17:a2:61:a9:f8:fd:ce:f4:
                    66:c3:62:82:c5:62:25:a3:83:a0:5a:ea:b3:87:ba:
                    c0:b2:cd:05:1d:fc:76:18:f4:d5:bc:4b:30:40:26:
                    c4:bc:ca:b8:d4:75:f7:47:76:91:ea:69:81:96:bf:
                    b5:a6:65:be:7c:1d:b5:b8:79:85:73:45:e7:e5:55:
                    2c:8a:af:d6:3d:47:c9:93:c1:1a:77:2c:46:e9:65:
                    69:66:c2:39:3f:da:e2:e8:59:52:30:39:48:f3:9e:
                    9b:b9:03:4a:d0:66:4d:fa:3a:c6:eb:72:ba:d5:0b:
                    31:c9:ec:e4:d5:8c:4f:1f:6e:4d:54:0b:bb:2b:88:
                    ed:8f:e4:87:c5:3a:68:28:9e:72:78:b2:69:b4:d5:
                    8f:28:23:13:3a:be:02:0e:ff:84:68:d5:c3:57:11:
                    98:07:a3:af:5a:7c:81:12:53:f5:40:43:37:a1:71:
                    2e:c3:52:f1:61:af:14:0c:8d:30:88:89:91:08:cb:
                    0d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:65:3D:CE:CE:85:FB:C6:C0:F1:1B:EF:98:DC:CD:C3:55:D0:97:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec/4f8ec25d-932a-4dd4-8f83-f1da049068ec.crl

            X509v3 Authority Key Identifier:
                keyid:31:C5:E0:9D:A7:42:17:EF:27:47:7E:8E:A5:29:8D:3F:33:F2:E5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f8ec25d-932a-4dd4-8f83-f1da049068ec.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:96:f0:65:8a:55:de:ed:8d:58:d8:12:4b:c9:e0:0f:08:
         0b:bd:a6:1b:da:3b:83:f3:85:db:90:25:ff:c4:cc:5d:71:50:
         b7:c2:34:02:4e:5b:9e:c3:01:45:27:b1:2f:de:43:b8:e0:c2:
         3a:d9:c6:0d:3e:b4:1c:7f:ba:ca:51:a9:9c:e5:08:2e:fe:b3:
         30:a6:6d:a9:16:74:e2:d0:46:1a:ed:ce:89:3d:a2:71:a5:d7:
         fe:b6:1b:c5:da:85:06:2e:73:79:ad:f4:aa:06:47:59:00:b0:
         ba:7f:83:ac:a2:2d:91:eb:a4:49:df:06:35:2e:96:27:63:e3:
         88:1b:c7:a8:30:51:b5:b8:64:e9:aa:db:95:3e:c0:db:cf:6a:
         41:af:b6:8d:78:1f:3b:14:5c:a2:85:8f:b4:e1:e8:5f:74:0e:
         1e:df:03:3b:1b:04:79:25:6d:ab:12:45:e9:81:f9:17:1f:e4:
         70:3d:e7:7d:03:2e:67:6c:21:9c:09:8f:cd:dc:81:e3:1d:b0:
         12:3f:c9:b1:15:8f:19:7c:a2:c7:86:dc:dc:f7:1b:72:f5:fb:
         52:a9:3b:df:1e:99:3f:2a:87:33:6e:c2:7c:6c:56:79:01:45:
         ef:5a:53:c6:45:43:77:0b:7d:c9:06:42:73:c3:79:b5:1b:1d:
         84:d0:a7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:30:49 2025 by rpki-client