This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
File:                     cba86acd-9af7-450a-ac5c-6c872671a7a3.mft (raw, json)
Hash identifier:          oaVt9uL9cqO9RT7df+xwwd+ADZ3gYYhapgmQFREEaiA=
Subject key identifier:   BB:A0:D3:D1:47:DB:6C:43:15:04:2A:E5:B3:92:3F:DF:F1:75:12:4F
Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22
Certificate issuer:       /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
Certificate serial:       010D0C9F4328584C16C56233DC70BB50D2B59400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
Manifest number:          010D0C9F43285842B05B94A037CBDA338D15A7F5
Signing time:             Fri 05 Dec 2025 19:00:03 +0000
Manifest this update:     Fri 05 Dec 2025 19:00:03 +0000
Manifest next update:     Mon 08 Dec 2025 19:00:00 +0000
Files and hashes:         1: 9383c5fa-66ba-3e20-8d2f-3409e291cf77.roa (hash: 6A+Qo6FdihZ4Wq+clSv4zWmo+6YGeXPdrR8Di0XCoNI=)
                          2: b7201278-097e-3b32-a4e1-96b53fb35fb0.roa (hash: uKXguR/rg23nFfIjNZC9yr+CtMmyunUDJ6aCinC27fA=)
                          3: cba86acd-9af7-450a-ac5c-6c872671a7a3.crl (hash: XhImX9gArJh+DcqhbB03CR3vSqUEiHNjpr055/u67A4=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:c5:62:33:dc:70:bb:50:d2:b5:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3
        Validity
            Not Before: Dec  5 19:00:03 2025 GMT
            Not After : Dec  8 19:00:00 2025 GMT
        Subject: CN=29a10fe7-6020-40d1-b3c7-1c23bdd719e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:99:ff:0d:c6:60:bc:1d:a3:c4:79:5f:25:
                    06:19:f5:39:b3:14:19:2a:b3:23:40:2f:80:fb:ec:
                    92:40:4a:9c:3b:3b:6f:84:49:92:cd:58:08:1a:b5:
                    a1:f2:2e:fe:34:59:64:4f:80:f5:56:b8:98:aa:b0:
                    b5:64:9f:8a:09:60:42:cf:d6:b7:a7:76:f3:c0:ed:
                    7b:69:d4:74:a7:e9:b3:fd:3c:01:e4:a0:dd:58:81:
                    f6:e0:08:0a:4f:ae:4b:88:12:c4:37:3c:02:8e:b3:
                    99:b7:64:e1:7e:9f:d8:70:df:48:74:4f:e4:4e:15:
                    4e:e4:48:86:6c:11:91:2f:93:fb:39:50:39:af:08:
                    80:7c:e7:39:48:b3:22:fd:63:1f:31:58:11:6c:08:
                    21:eb:4c:40:aa:50:a9:a3:4d:e4:7e:f5:e8:89:a6:
                    7d:9b:a6:5d:04:6e:d1:a7:53:27:b5:b6:09:6e:d3:
                    98:70:b1:22:26:72:00:eb:89:ec:6c:a3:d5:73:7b:
                    c0:49:4c:77:93:23:d2:c7:a7:4a:fd:fc:74:db:80:
                    3d:ee:b1:3d:fc:27:a1:9a:f4:e8:b2:46:f0:e8:7d:
                    f5:15:d5:35:84:88:b1:02:02:ca:72:74:53:73:d2:
                    5e:84:35:7a:93:57:48:a0:f3:00:5b:6d:5f:b5:06:
                    99:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A0:D3:D1:47:DB:6C:43:15:04:2A:E5:B3:92:3F:DF:F1:75:12:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl

            X509v3 Authority Key Identifier:
                keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b3:88:14:d0:12:17:61:4e:bc:9f:10:a6:9c:a4:44:d7:14:
         60:e8:59:6d:8e:70:4c:b4:a2:ac:d1:ce:c1:87:cf:ae:61:5a:
         9c:f9:66:5c:62:27:30:57:b3:3b:ed:dd:02:e6:0a:7e:29:7c:
         9f:32:35:86:cd:45:3f:ab:99:fa:e8:3b:cc:a5:fa:fa:02:bf:
         bb:20:44:04:de:0f:37:a0:58:fb:3b:15:a8:63:48:37:8c:0a:
         fd:06:2d:c4:1c:63:f1:46:8a:b8:71:15:cc:13:65:ce:b4:d5:
         f0:f3:8d:4d:ae:11:e4:bc:6d:37:1f:20:89:0a:8e:45:69:08:
         76:b0:90:cf:c4:fe:89:78:f4:58:3b:10:9c:ea:2b:06:8b:69:
         85:bb:a8:ab:21:e4:66:01:0f:a6:c8:9c:3f:4e:c1:91:32:d8:
         e7:3d:e7:c3:32:62:9d:11:60:25:89:2d:f3:eb:4a:59:af:c7:
         2f:54:f4:5c:c3:f7:80:b0:29:5a:f1:3a:7f:3d:c5:21:cf:de:
         03:93:ce:39:75:03:f5:5a:bd:11:6e:2a:0f:72:61:f7:1f:d4:
         49:c9:60:8c:53:ab:39:48:8e:ab:01:be:cc:68:8b:91:20:b7:
         a4:86:6b:ff:80:bd:5a:ac:d9:7f:f5:68:60:da:6e:b2:78:ad:
         88:8a:22:b2
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWxWIz3HC7UNK1lAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JhODZhY2QtOWFmNy00NTBhLWFjNWMtNmM4NzI2NzFh
N2EzMB4XDTI1MTIwNTE5MDAwM1oXDTI1MTIwODE5MDAwMFowLzEtMCsGA1UEAxMk
MjlhMTBmZTctNjAyMC00MGQxLWIzYzctMWMyM2JkZDcxOWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsviZ/w3GYLwdo8R5XyUGGfU5sxQZKrMjQC+A
++ySQEqcOztvhEmSzVgIGrWh8i7+NFlkT4D1VriYqrC1ZJ+KCWBCz9a3p3bzwO17
adR0p+mz/TwB5KDdWIH24AgKT65LiBLENzwCjrOZt2Thfp/YcN9IdE/kThVO5EiG
bBGRL5P7OVA5rwiAfOc5SLMi/WMfMVgRbAgh60xAqlCpo03kfvXoiaZ9m6ZdBG7R
p1MntbYJbtOYcLEiJnIA64nsbKPVc3vASUx3kyPSx6dK/fx024A97rE9/CehmvTo
skbw6H31FdU1hIixAgLKcnRTc9JehDV6k1dIoPMAW21ftQaZUQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFLug09FH22xDFQQq5bOSP9/xdRJPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYmE4
NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3MjY3MWE3YTMvY2JhODZhY2QtOWFmNy00
NTBhLWFjNWMtNmM4NzI2NzFhN2EzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2JhODZhY2QtOWFmNy00NTBhLWFj
NWMtNmM4NzI2NzFhN2EzL2NiYTg2YWNkLTlhZjctNDUwYS1hYzVjLTZjODcyNjcx
YTdhMy5jcmwwHwYDVR0jBBgwFoAUrjSM2vaXuh9jjWu2Z60noyVvHiIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYmE4NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3
MjY3MWE3YTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAes4gU0BIXYU68nxCmnKRE
1xRg6FltjnBMtKKs0c7Bh8+uYVqc+WZcYicwV7M77d0C5gp+KXyfMjWGzUU/q5n6
6DvMpfr6Ar+7IEQE3g83oFj7OxWoY0g3jAr9Bi3EHGPxRoq4cRXME2XOtNXw841N
rhHkvG03HyCJCo5FaQh2sJDPxP6JePRYOxCc6isGi2mFu6irIeRmAQ+myJw/TsGR
MtjnPefDMmKdEWAliS3z60pZr8cvVPRcw/eAsCla8Tp/PcUhz94Dk845dQP1Wr0R
bioPcmH3H9RJyWCMU6s5SI6rAb7MaIuRILekhmv/gL1arNl/9Whg2m6yeK2IiiKy
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:35:44 2025 by rpki-client