This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft
File:                     cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft (raw, json)
Hash identifier:          5GL4iMjQrhOIAZK6PpkEwugGHgcXxvH9i7KjmpHloZA=
Subject key identifier:   CC:D8:BB:71:3A:72:F8:8B:F6:10:58:42:D3:DF:8E:22:1B:F2:44:57
Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93
Certificate issuer:       /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef
Certificate serial:       010D0C9F4328584CA2024D33DACB939C8BF44700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft
Manifest number:          010D0C9F432858453FC397D9677135A132B028AC
Signing time:             Sat 24 Jan 2026 16:00:10 +0000
Manifest this update:     Sat 24 Jan 2026 16:00:10 +0000
Manifest next update:     Mon 26 Jan 2026 16:00:00 +0000
Files and hashes:         1: 04e0c440-3c28-3d4a-b869-4387c175a350.roa (hash: Pj8byopBBYosFmT2mSbkgwunjNIraltgRvU4/m1pIhQ=)
                          2: 31f547f0-5e98-3a6f-a158-ea22001e9fa7.roa (hash: 7nMulYWo4xYvVgSd30zfydFCSPdu8+A4kece+Al2FQg=)
                          3: 4fcf8fdb-2990-369f-8239-fd79baf2050a.roa (hash: Xc2t1U/NMP782SDbiJNI7Q0HJp+d8aERLYQlHzrZQTw=)
                          4: 659829db-6e05-3656-8a31-0b396982219d.roa (hash: G3mbj6Bk9loyTY8UTSWz3jDyAAvwI2Jn6sgJj+HqnMU=)
                          5: b5ae4ab1-c64f-3049-b683-ceef08c95978.roa (hash: Y83u92K541uFjuFchlJey2f6gATsHm+2tmLFW3jkWTM=)
                          6: cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl (hash: BLMYgVm788+Mnowt8Bj+xceZ43sEI87+FHQgYT7illc=)
                          7: d271dde0-2fa3-31de-8ce3-cc167fb544d6.roa (hash: Z/3qAzPRQlab4X96dK9p/VPsdl2PnwehOyszFwpinpY=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a2:02:4d:33:da:cb:93:9c:8b:f4:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef
        Validity
            Not Before: Jan 24 16:00:10 2026 GMT
            Not After : Jan 26 16:00:00 2026 GMT
        Subject: CN=0c62c563-5f28-4d12-a2cf-86c50bdf2479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:46:7a:06:58:db:01:53:ba:c4:e7:1f:87:8e:
                    65:f7:72:c1:4d:b5:12:90:fe:f1:21:c6:07:d8:e3:
                    d6:20:b1:2c:48:d8:a2:b4:6a:57:7f:ef:c8:36:ce:
                    6e:bc:a6:67:c5:22:96:27:f3:a5:3d:7e:49:e0:b4:
                    10:49:99:e4:6a:73:63:68:ce:b3:43:08:9e:dd:2d:
                    e4:b6:b2:a0:36:63:84:d5:1b:1a:d4:af:cb:6a:61:
                    99:1d:e4:98:b2:2d:c5:35:87:9b:14:09:ca:a4:90:
                    c0:2f:02:ca:6c:dd:a9:4c:6a:cf:dc:2c:f7:b9:39:
                    a0:65:98:d7:2c:19:4a:e4:48:6e:75:f2:ac:d9:8d:
                    a4:5a:60:26:cc:69:66:7f:7e:a2:78:f4:7a:d7:8b:
                    24:02:f1:9a:43:89:5a:77:2f:97:0f:ee:da:89:91:
                    26:c5:3e:24:50:25:75:27:64:8f:1c:da:c7:b4:6f:
                    0e:8f:65:8d:26:d5:28:ad:26:ac:2c:d8:ad:f0:29:
                    3f:11:e6:02:f1:6d:03:c5:2e:4f:4b:77:68:62:58:
                    0b:78:37:56:31:d8:c2:eb:3a:c9:9e:a5:e0:13:c0:
                    e2:76:b1:b0:44:ac:7b:74:95:6c:65:05:3b:b9:57:
                    eb:c7:d4:1b:27:88:ef:9e:bc:c4:4a:9f:7d:a5:47:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D8:BB:71:3A:72:F8:8B:F6:10:58:42:D3:DF:8E:22:1B:F2:44:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl

            X509v3 Authority Key Identifier:
                keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:38:b6:92:b1:25:13:55:cf:99:fc:e2:32:53:1c:e2:41:91:
         1f:92:f3:13:b2:3c:a8:bc:3e:d2:f0:76:5c:65:ae:46:17:be:
         5b:9c:a0:9a:1b:06:55:a6:51:e0:31:56:99:0a:24:15:2f:4a:
         ec:ed:20:47:c7:e2:c7:f8:fd:78:e7:38:af:0f:98:c7:ca:17:
         85:d9:06:d0:0c:74:97:96:e7:80:b5:53:e8:2a:a9:df:68:70:
         68:10:a7:a9:a7:65:c7:1b:31:7a:c9:0c:3f:0e:49:db:f3:cb:
         43:7e:39:b5:47:91:26:d7:1b:f4:e8:0e:2d:36:3f:35:8d:a1:
         dc:23:e6:88:f5:b2:87:b8:15:09:16:8d:75:b9:85:ee:c2:1b:
         04:dc:f4:72:13:a3:09:13:93:1f:bb:a5:ea:25:e9:2f:2e:02:
         cc:3c:e9:7f:f3:a6:69:3c:0e:ea:f4:08:12:c4:58:b4:2c:60:
         52:a2:24:88:9a:3d:1b:84:32:c2:55:a9:9a:d3:7a:1f:b3:53:
         18:8c:2e:58:09:a0:6c:12:67:e7:b1:c7:dd:5d:88:39:db:2a:
         66:53:24:cf:bb:64:f8:b7:c4:27:d9:fb:27:67:8a:5d:ef:a8:
         83:96:76:f6:7f:af:6e:9d:ee:37:44:c6:c5:2e:d0:c0:df:cc:
         80:5c:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:51:54 2026 by rpki-client