This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.mft
File:                     c2bc323a-eaca-4811-9f31-5631f5ae8212.mft (raw, json)
Hash identifier:          Q1NOSpoPvBKxJzvYsHY9BM8DI2MPS/zMeuHRi9k05cY=
Subject key identifier:   CB:88:85:A8:14:CE:F1:C1:82:E4:DE:C2:97:07:A1:81:41:5C:F9:D7
Authority key identifier: DA:BD:30:48:0F:12:EB:9F:EF:F2:14:C3:88:92:54:EE:C6:3E:50:73
Certificate issuer:       /CN=c2bc323a-eaca-4811-9f31-5631f5ae8212
Certificate serial:       010D0C9F4328584C37CE7B75B23382F443F8B080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.mft
Manifest number:          010D0C9F4328584237CE22B3220231611A421EB0
Signing time:             Wed 17 Dec 2025 15:00:03 +0000
Manifest this update:     Wed 17 Dec 2025 15:00:03 +0000
Manifest next update:     Fri 19 Dec 2025 15:00:00 +0000
Files and hashes:         1: 6e52805b-95ee-3ef0-88cb-48a478145116.roa (hash: ZGPqpbLoXBRG+1y+vdUnoWWdrao/kukZZ4E6VSV5O9Q=)
                          2: c2bc323a-eaca-4811-9f31-5631f5ae8212.crl (hash: ryCzH1VsennPRV64asfVwMmTGnINPPtzjJhcVQfqKjw=)
                          3: dcc41fd4-74ce-3352-a50b-62c5e7b95f39.roa (hash: 7vqCvE3aJ1t8LtXzxKuZb0tUwm27946jKT0RLnnEC2I=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:37:ce:7b:75:b2:33:82:f4:43:f8:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2bc323a-eaca-4811-9f31-5631f5ae8212
        Validity
            Not Before: Dec 17 15:00:03 2025 GMT
            Not After : Dec 19 15:00:00 2025 GMT
        Subject: CN=2abd561b-78a1-4f28-bd4d-2c5bf3151334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:85:eb:30:f9:ef:ff:c5:55:2d:ae:75:50:04:
                    fc:11:17:da:11:42:e2:f6:b9:d9:bf:27:18:52:9c:
                    a9:65:e8:1c:cb:1c:b0:49:18:59:37:bc:9b:5f:b2:
                    f7:af:c9:f3:a6:17:ad:32:4e:ed:97:03:4f:7c:d1:
                    34:ef:4e:8b:99:91:13:af:0c:ab:e7:70:ba:7b:b3:
                    47:7a:83:cf:21:c2:09:c6:8c:9f:7f:58:c0:48:4b:
                    32:97:dd:83:04:0f:d8:74:09:42:cc:66:b7:c9:90:
                    1a:b3:e3:f6:49:83:4c:05:cb:1b:1b:62:fb:b4:9e:
                    a8:7a:10:92:b5:7c:20:02:5e:4d:49:01:1a:4b:f8:
                    7b:3d:8e:b9:02:ae:46:ff:a4:59:3c:55:9f:9d:d5:
                    17:d2:db:05:34:06:77:2b:e1:27:6f:c6:a8:f9:e8:
                    ac:0d:da:b7:c3:96:1c:97:a8:b1:d9:50:20:59:1d:
                    9c:d2:53:ac:a4:db:6f:ab:54:45:c1:08:13:86:f1:
                    47:a7:9d:88:4a:f9:3d:d3:30:cd:5c:dd:a4:c9:e4:
                    a7:61:9a:ad:62:d1:3a:0d:27:fb:9b:9e:98:39:f6:
                    47:63:9d:9a:71:a3:83:6d:c1:3d:1f:9b:08:7e:c7:
                    5b:d8:12:f3:b2:49:eb:4d:2c:d7:fb:6e:70:e2:d3:
                    28:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:85:A8:14:CE:F1:C1:82:E4:DE:C2:97:07:A1:81:41:5C:F9:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212/c2bc323a-eaca-4811-9f31-5631f5ae8212.crl

            X509v3 Authority Key Identifier:
                keyid:DA:BD:30:48:0F:12:EB:9F:EF:F2:14:C3:88:92:54:EE:C6:3E:50:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2bc323a-eaca-4811-9f31-5631f5ae8212.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:53:b6:8a:f4:5e:36:1a:b9:97:76:2a:56:58:de:dd:e7:3a:
         61:b0:b3:2d:0b:2d:f8:ab:5f:29:af:49:71:ee:9a:aa:31:6d:
         e9:d5:a0:56:10:44:d2:70:67:ce:61:fd:2c:56:8e:c6:4b:4f:
         59:df:00:7e:52:05:9b:8b:1d:f8:18:8d:24:d6:41:c2:95:c7:
         ac:94:75:ea:cc:77:28:fd:99:5d:02:3a:2b:bc:9b:a6:88:78:
         5e:dc:fa:c6:d5:69:53:b5:88:62:03:9f:1b:29:b6:d5:f0:8d:
         d0:4a:b2:ce:e7:52:bf:5d:67:29:47:76:f6:37:3d:d9:26:f2:
         3c:2e:e6:f3:1d:26:84:05:56:fc:21:4e:ba:b7:c9:92:81:38:
         c6:e6:0a:6e:bf:19:e8:d3:0f:96:4f:ec:49:b7:02:e0:a5:09:
         c5:ae:3a:93:69:92:20:07:42:9d:c8:6c:16:56:b0:b6:31:07:
         19:b9:be:bf:16:88:86:0d:4c:b2:d9:85:bc:11:b7:5c:af:62:
         e9:45:86:ed:87:07:34:ea:83:35:08:da:18:2c:a8:82:8c:ba:
         c7:ee:f2:97:8d:1e:37:82:a6:6d:e6:27:88:3a:5e:c4:69:96:
         bc:f2:51:44:e6:a7:f9:f2:ac:5f:00:1a:e2:ac:63:dc:9f:2d:
         0f:5f:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 07:14:26 2025 by rpki-client