This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
File:                     d3bf28f7-eba5-4254-a572-761a872427b5.mft (raw, json)
Hash identifier:          O6GAZrjAjP2b11/peK2AR209FrirCLAP8eu6tJ1SOxk=
Subject key identifier:   F3:6B:2C:E6:E8:65:9E:5D:89:66:01:4D:C5:0F:0A:10:6C:A6:BC:87
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584C16C5626CC4CF1C8082374A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
Manifest number:          010D0C9F432858428C0BBA437144D71ED8B54DC6
Signing time:             Fri 05 Dec 2025 19:00:03 +0000
Manifest this update:     Fri 05 Dec 2025 19:00:03 +0000
Manifest next update:     Sun 07 Dec 2025 19:00:00 +0000
Files and hashes:         1: 1bea0700-2bfc-3937-9a52-46b59459456c.roa (hash: uGxgT8HeJbtapCh+zyPrxTkt6u9/XpVIDa46gUvPysw=)
                          2: 2d512d2b-840f-30cb-88f8-f79128126588.roa (hash: zV4UFS2sKRaKsHxgB2a4c8boGh3ShhQIZt2ytL/+rMY=)
                          3: 38d9a0e9-90b7-3886-ae3b-1824b0d93c0b.roa (hash: qSsi/362OuWZVwtdP6pk5DlRIvk8fQmqOMWZSzPsHSs=)
                          4: 8eb6de6b-8c71-3506-8c2b-efa177569f89.roa (hash: 56P+fWwSKGmsgCjbSPpaMeMUW3eJlFSNb35wOvVMWb8=)
                          5: d3bf28f7-eba5-4254-a572-761a872427b5.crl (hash: IkasQwxR7LVqJ0x1L/ncZD0R79CpBGTSTEmSlG4z/QM=)
                          6: ea93ae24-34e7-3c83-9477-44557229880c.roa (hash: eFiq7od6/9vubyyQwGWG+h8iOqRgDdVJ1XmbSarZ5sg=)
                          7: f315e10e-f697-32b0-97e5-9bcb2cc83dcb.roa (hash: CTsV7PhWReDYedLVWUtd66Yj+XNl86hHA0GZEvPNeaU=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:c5:62:6c:c4:cf:1c:80:82:37:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Dec  5 19:00:03 2025 GMT
            Not After : Dec  7 19:00:00 2025 GMT
        Subject: CN=ba6dee55-dd67-431d-87d2-062fc79a3b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:41:f4:bb:9b:04:7e:3d:8b:b3:23:c5:8e:
                    48:79:f8:05:77:93:a0:07:39:9d:71:28:a7:9b:dd:
                    1d:51:61:fa:74:f0:a4:b3:1e:43:9e:df:46:9e:5d:
                    60:3f:16:21:6d:8f:8a:b3:3a:08:f9:cf:10:7b:48:
                    f3:fa:3c:60:c0:fb:48:8b:21:05:aa:52:18:4d:aa:
                    77:46:82:31:97:ab:68:52:99:8e:10:d4:08:1e:2a:
                    ff:3f:ba:55:17:96:52:e6:3a:cd:79:2f:73:eb:81:
                    8a:37:76:04:9b:ab:94:b7:4f:f0:4f:f4:70:e3:a5:
                    2c:02:80:ac:0b:f1:0a:73:7e:90:53:07:f2:b0:12:
                    58:01:33:d6:92:97:43:4b:c6:d8:43:2e:d9:8b:03:
                    fb:f6:4d:bb:1d:27:56:61:85:1b:7b:9e:89:7a:58:
                    81:a6:90:d3:07:60:1d:d2:16:8f:33:44:9e:03:1e:
                    8c:a4:78:05:ff:21:24:2a:22:b5:50:15:87:82:0f:
                    ee:da:1e:6e:a7:8a:b4:fb:78:7c:bc:52:e4:e5:80:
                    dd:b5:dc:52:37:30:0b:d6:59:12:df:f9:2c:4f:91:
                    e7:12:65:b0:2b:df:a4:b7:a1:15:01:c7:ea:34:44:
                    82:11:2c:d7:6c:f5:b7:d4:c5:88:d5:a2:65:2d:0a:
                    98:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6B:2C:E6:E8:65:9E:5D:89:66:01:4D:C5:0F:0A:10:6C:A6:BC:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:70:9e:b1:86:d6:70:ad:1d:c4:38:ee:78:e5:ac:5d:2a:86:
         b4:bd:25:6e:96:56:32:d6:99:12:70:61:e6:8b:5b:7f:b1:ef:
         eb:44:06:7d:c1:bb:17:2b:aa:4a:f2:fe:24:0b:ef:1e:53:12:
         49:4c:43:07:c4:c0:bc:c5:a1:cf:df:a5:28:a1:1e:52:37:6d:
         38:54:16:2f:13:81:57:ef:51:82:33:1b:bf:7d:84:d2:1b:15:
         7c:e5:03:7f:aa:42:4a:26:95:04:c9:fa:f5:62:aa:9d:4f:47:
         17:2a:9c:e7:72:65:20:b1:ca:85:3d:52:86:c0:08:79:da:e1:
         a5:59:33:f6:c3:e1:ea:96:bc:85:eb:31:af:28:26:15:e9:dd:
         29:c1:28:d7:c5:f8:09:e1:e2:31:1c:ea:8f:83:1d:89:4c:8e:
         a2:84:ee:9f:06:ad:b2:9e:6e:52:2a:1d:e8:4d:11:35:13:08:
         24:69:e1:93:7b:16:d9:dc:ff:08:c7:e2:58:48:8d:b9:20:95:
         70:b0:e0:5b:a1:b8:fe:c4:55:39:0d:b8:2a:b6:86:d8:75:7b:
         86:60:ab:8f:02:1c:a7:24:af:9b:98:20:c0:76:8a:01:40:4d:
         a6:4c:43:77:3f:41:81:85:36:c2:74:c3:6c:1f:66:77:d7:f3:
         7b:4b:d9:56
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWxWJsxM8cgII3SkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNiZjI4ZjctZWJhNS00MjU0LWE1NzItNzYxYTg3MjQy
N2I1MB4XDTI1MTIwNTE5MDAwM1oXDTI1MTIwNzE5MDAwMFowLzEtMCsGA1UEAxMk
YmE2ZGVlNTUtZGQ2Ny00MzFkLTg3ZDItMDYyZmM3OWEzYjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1lB9LubBH49i7MjxY5IefgFd5OgBzmdcSin
m90dUWH6dPCksx5Dnt9Gnl1gPxYhbY+KszoI+c8Qe0jz+jxgwPtIiyEFqlIYTap3
RoIxl6toUpmOENQIHir/P7pVF5ZS5jrNeS9z64GKN3YEm6uUt0/wT/Rw46UsAoCs
C/EKc36QUwfysBJYATPWkpdDS8bYQy7ZiwP79k27HSdWYYUbe56JeliBppDTB2Ad
0haPM0SeAx6MpHgF/yEkKiK1UBWHgg/u2h5up4q0+3h8vFLk5YDdtdxSNzAL1lkS
3/ksT5HnEmWwK9+kt6EVAcfqNESCESzXbPW31MWI1aJlLQqYzQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFPNrLOboZZ5diWYBTcUPChBspryHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kM2Jm
MjhmNy1lYmE1LTQyNTQtYTU3Mi03NjFhODcyNDI3YjUvZDNiZjI4ZjctZWJhNS00
MjU0LWE1NzItNzYxYTg3MjQyN2I1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDNiZjI4ZjctZWJhNS00MjU0LWE1
NzItNzYxYTg3MjQyN2I1L2QzYmYyOGY3LWViYTUtNDI1NC1hNTcyLTc2MWE4NzI0
MjdiNS5jcmwwHwYDVR0jBBgwFoAUBYO/RQRVyIycbPigW3Yx/vdqjBkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kM2JmMjhmNy1lYmE1LTQyNTQtYTU3Mi03NjFh
ODcyNDI3YjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+cJ6xhtZwrR3EOO545axd
Koa0vSVullYy1pkScGHmi1t/se/rRAZ9wbsXK6pK8v4kC+8eUxJJTEMHxMC8xaHP
36UooR5SN204VBYvE4FX71GCMxu/fYTSGxV85QN/qkJKJpUEyfr1YqqdT0cXKpzn
cmUgscqFPVKGwAh52uGlWTP2w+HqlryF6zGvKCYV6d0pwSjXxfgJ4eIxHOqPgx2J
TI6ihO6fBq2ynm5SKh3oTRE1EwgkaeGTexbZ3P8Ix+JYSI25IJVwsOBbobj+xFU5
DbgqtobYdXuGYKuPAhynJK+bmCDAdooBQE2mTEN3P0GBhTbCdMNsH2Z31/N7S9lW
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:22:48 2025 by rpki-client