This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft
File:                     823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft (raw, json)
Hash identifier:          U1CWLe3gZ5wSkLZ3wIWW3IVQIBJ084iENQ1MUUhjL9A=
Subject key identifier:   38:78:17:6A:35:0F:17:0F:5F:97:30:66:97:20:94:A8:29:7D:6E:97
Authority key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C
Certificate issuer:       /CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39
Certificate serial:       010D0C9F4328584C17D16429DC50B7E8B58F1100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft
Manifest number:          010D0C9F432858421237B5114163604AF3D10AF2
Signing time:             Sat 06 Dec 2025 04:00:03 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:03 +0000
Manifest next update:     Mon 08 Dec 2025 04:00:00 +0000
Files and hashes:         1: 39a94270-c119-3ad5-843c-1350f228e9b2.roa (hash: kKQh89rZx0tLuG0ovelgt24dU67DrBwpqcpJutDeHD8=)
                          2: 823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl (hash: 2W0DPSZVBd79AY4bQbKY2oWxKbhUdwjCpzoXclOg3vY=)
                          3: 9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa (hash: Ajn81mj779lVrtGfeaYzVvRPAxtlI38NRCFo69Ol+Js=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:17:d1:64:29:dc:50:b7:e8:b5:8f:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39
        Validity
            Not Before: Dec  6 04:00:03 2025 GMT
            Not After : Dec  8 04:00:00 2025 GMT
        Subject: CN=09813910-99a2-40ea-beb3-7de2c03d58ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:74:07:95:20:13:69:9b:fa:94:a9:fd:4b:67:
                    d9:9e:fa:43:f5:ec:e8:46:65:14:dc:8e:f9:e5:f1:
                    c6:21:7c:b0:ee:9d:2d:fd:1d:a0:3b:b1:00:f7:69:
                    c3:98:92:11:68:d3:08:7f:cc:27:66:34:f8:de:24:
                    8f:25:af:56:35:52:55:c8:1b:8b:71:04:c9:f4:06:
                    b7:d4:e9:9b:c7:fd:3b:a8:d9:ba:a3:c9:8e:5f:64:
                    fa:b9:9f:fb:73:07:e4:b8:bf:e0:58:a2:4c:7b:35:
                    b9:5a:db:d6:eb:7f:12:1b:0d:8c:9f:78:be:8b:bf:
                    af:58:31:5d:fd:18:ab:3e:5b:55:9f:d5:73:f3:5c:
                    56:84:48:e0:a6:16:10:4e:a2:d3:e7:50:29:32:b5:
                    95:4c:b8:f4:0e:10:50:c0:db:48:66:13:98:3d:f9:
                    a5:0c:ad:85:4c:e1:92:7d:fa:7a:24:b8:66:00:8d:
                    7f:27:b3:50:6d:e4:90:5d:70:d6:ec:1b:32:2e:c1:
                    8b:1a:8a:da:af:3c:98:44:9e:76:f3:14:66:c2:66:
                    ba:e2:f4:ff:87:cc:38:2d:9b:8b:22:63:0a:70:54:
                    26:25:02:1a:c0:3c:cd:70:a9:02:aa:6b:9b:b6:33:
                    0a:b7:de:64:5d:15:c5:0e:c3:33:eb:e6:d4:55:4e:
                    9a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:78:17:6A:35:0F:17:0F:5F:97:30:66:97:20:94:A8:29:7D:6E:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl

            X509v3 Authority Key Identifier:
                keyid:0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:65:83:4b:15:a5:cf:0e:1a:b0:5c:5d:79:b8:69:28:de:e8:
         90:0a:c3:e5:6c:6a:55:50:68:bc:2e:d8:2d:af:0c:52:a1:40:
         4c:73:fa:90:e2:32:63:23:e6:6b:36:08:97:01:5b:c7:0c:25:
         53:42:9d:f7:c5:02:93:41:82:d0:79:8b:f3:bf:41:62:f2:b1:
         0d:88:2a:d7:1d:2b:78:89:be:4d:a4:4a:b7:76:a5:3c:f9:8e:
         3f:aa:49:ae:4a:8d:8e:00:fa:2d:48:d3:92:81:ad:e7:10:98:
         02:9b:32:c0:89:6c:15:b4:a7:77:5c:07:69:6b:21:7d:2a:98:
         70:60:d6:ff:92:b4:9d:1f:9f:29:4e:11:da:30:22:92:14:9b:
         df:c8:1f:6c:9e:3f:4e:40:2a:de:ad:ca:57:bc:c5:5e:83:f0:
         e4:f3:6b:0a:cc:5d:24:d1:f3:a6:f1:00:1f:62:b2:fd:62:92:
         41:e5:85:af:52:82:29:01:e3:d5:65:d1:d9:00:38:4e:44:3d:
         8c:65:3f:09:b6:18:ec:2e:6d:10:15:d7:f5:fd:27:4c:c2:df:
         56:96:64:bc:34:0f:11:17:77:f3:a9:64:35:67:5b:e8:c5:82:
         05:3d:10:e7:a4:c1:f8:04:25:46:95:6a:b7:37:3c:a7:80:50:
         68:6e:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:57:59 2025 by rpki-client