This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
File:                     8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft (raw, json)
Hash identifier:          jr3YsqSUw33+9IV/oQAE+Va3DUx/IHcdtyyvuBhZ0Xc=
Subject key identifier:   48:2F:4F:28:20:76:EE:2D:F5:B6:12:D2:5C:0A:C9:EC:C4:5D:EC:80
Authority key identifier: 46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF
Certificate issuer:       /CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
Certificate serial:       010D0C9F4328584C1918F7C81983B93C62BEC080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
Manifest number:          010D0C9F43285842EA6511F68AE8111CAA6098EE
Signing time:             Sat 06 Dec 2025 15:00:03 +0000
Manifest this update:     Sat 06 Dec 2025 15:00:03 +0000
Manifest next update:     Tue 09 Dec 2025 15:00:00 +0000
Files and hashes:         1: 1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa (hash: K4hsRqCt+T+tee8uGTQgIBE1GmZDMwegPfChDm6qRbM=)
                          2: 23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa (hash: 2IjMeP3h0I92py98sxrobjNkflT/ryAVCJ+l+HLaG8c=)
                          3: 8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl (hash: ZCWAKa7Onj+sXO3MD82T4lN4ywHBouZT8xjNPpy8R6s=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:19:18:f7:c8:19:83:b9:3c:62:be:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
        Validity
            Not Before: Dec  6 15:00:03 2025 GMT
            Not After : Dec  9 15:00:00 2025 GMT
        Subject: CN=2b0a8767-6684-44c0-8c31-02807397ff10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2d:6c:b2:a5:53:0e:9f:35:d0:20:70:44:73:
                    4c:c9:c8:7d:a6:ed:04:9f:71:e6:c9:90:99:5d:03:
                    07:80:68:8d:2f:99:28:21:69:34:c0:35:2d:37:83:
                    96:3d:4f:92:92:8b:6c:aa:c7:17:5e:94:67:80:ba:
                    62:05:41:0b:eb:5a:ea:b8:06:d2:9a:68:c7:0f:9f:
                    03:be:c0:59:c3:b9:35:e3:11:73:a3:b2:54:9b:ed:
                    36:2c:8c:da:d2:37:85:d3:ea:df:9e:35:7f:69:6d:
                    b7:dc:29:31:1a:89:ab:52:22:c4:4d:f1:23:a5:77:
                    f9:44:4b:a5:75:2a:4d:43:cd:55:19:11:2b:97:e3:
                    e8:ae:b2:9a:28:40:c7:cf:de:b7:8f:2b:bf:1e:7e:
                    ca:c0:3c:3a:e3:8f:97:11:f8:45:18:dc:45:d3:5e:
                    16:7b:7c:2e:e1:b1:56:9a:ae:e2:ac:3e:1c:6e:df:
                    73:b5:de:73:70:e3:fe:a4:19:b5:44:97:31:64:ca:
                    c8:7f:c7:45:55:6d:87:2b:d5:82:71:6e:01:f0:61:
                    03:34:ac:44:c8:15:b6:04:fd:88:ba:19:24:83:bf:
                    a7:96:3c:cb:1a:03:68:78:92:e3:1b:40:20:19:5b:
                    d1:06:76:0d:87:d2:d8:90:9a:7f:f6:da:8b:b4:b2:
                    ab:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:2F:4F:28:20:76:EE:2D:F5:B6:12:D2:5C:0A:C9:EC:C4:5D:EC:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:4f:e9:45:78:bb:4e:7a:3a:82:68:3b:4b:d2:3d:18:cd:2f:
         ac:9e:95:33:7e:74:b5:d0:5a:6b:c7:a2:42:bc:d7:47:ce:e2:
         87:6f:58:9c:30:ae:fa:eb:42:7e:ce:35:2b:ff:f1:d5:50:6f:
         11:f9:a2:7f:4c:c3:ee:4e:19:8b:08:d4:ae:91:f1:d5:1e:4d:
         2e:ab:34:1b:b1:8c:9f:be:e1:cc:95:ca:2e:88:1b:af:8d:c5:
         a6:98:ba:81:30:76:c5:13:ad:8e:ef:58:dc:7a:a1:d3:ea:6d:
         ca:d9:46:5e:d9:fe:07:47:db:3b:7d:69:c3:b8:ac:ea:a0:43:
         4e:7b:3b:9b:65:bf:41:fb:9e:0b:67:f4:dc:87:ce:83:af:0c:
         5d:28:f1:3e:d1:3b:2c:8b:85:7b:f9:cc:a4:25:ff:2e:3a:ad:
         f5:75:c3:c7:1d:7a:04:a9:94:20:0f:7c:a0:6a:b5:75:ad:36:
         4c:d9:74:30:fa:5d:c5:25:08:66:3a:cc:2a:04:dd:47:54:5f:
         98:8e:04:0a:2c:fd:b9:8d:5a:78:29:32:fb:9d:94:dd:40:b3:
         a9:eb:58:d6:c1:30:17:5a:0d:f0:c9:4d:f6:cc:68:29:63:38:
         9c:f2:48:c7:26:8f:2e:46:76:ed:60:ca:8c:9d:93:e2:b5:09:
         64:3c:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:49:49 2025 by rpki-client