This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft
File:                     da733fda-b405-4eb1-adbe-811e8f7eacd4.mft (raw, json)
Hash identifier:          BNnEEd6uxEGyIaezXTfCCLndeWxmMFpyMrorddA/7wQ=
Subject key identifier:   42:72:42:4A:61:85:6C:F4:06:FB:F0:68:06:87:88:B6:9E:62:FE:82
Authority key identifier: CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38
Certificate issuer:       /CN=da733fda-b405-4eb1-adbe-811e8f7eacd4
Certificate serial:       010D0C9F4328584C16E334AA401BA73521F356C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft
Manifest number:          010D0C9F432858421F3DE7F5F6EBD9C80E64EDF6
Signing time:             Fri 05 Dec 2025 20:00:09 +0000
Manifest this update:     Fri 05 Dec 2025 20:00:09 +0000
Manifest next update:     Mon 08 Dec 2025 20:00:00 +0000
Files and hashes:         1: 376f1606-d35e-3cb6-b663-26b1e90c408b.roa (hash: 973lKIsq9GziLoCjX4oEIG5cn0iJU8b6lI2FPOKFUMM=)
                          2: 57d98090-55a2-30ab-8349-61de4555e46c.roa (hash: hsOm+eGbJwTdKVqFp9R17gEU+zDomU5yYW6BkGlrgyE=)
                          3: da733fda-b405-4eb1-adbe-811e8f7eacd4.crl (hash: Aw14khqBLy2BgLjb69gvGD/ShEg3uAndr1aQ26BnIpU=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:e3:34:aa:40:1b:a7:35:21:f3:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da733fda-b405-4eb1-adbe-811e8f7eacd4
        Validity
            Not Before: Dec  5 20:00:09 2025 GMT
            Not After : Dec  8 20:00:00 2025 GMT
        Subject: CN=b6a790c3-ae28-4b51-a359-1677ef3f1211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:2d:1f:06:c7:5f:b1:c0:f5:19:c0:9e:84:
                    60:6d:85:b6:aa:7d:b0:bd:11:2b:84:5d:d2:22:42:
                    c0:73:8d:a4:c6:7a:b3:a9:cc:cd:48:ea:13:d9:04:
                    43:7a:b8:28:10:b5:b9:02:b1:6c:9f:4d:78:01:63:
                    6f:a5:18:40:80:42:89:58:19:83:3a:14:5c:0f:81:
                    7b:c1:db:cc:22:35:10:43:5a:c6:f1:a5:b8:79:4e:
                    e3:31:15:8e:e3:22:53:ed:f2:90:4a:da:c4:7f:6f:
                    12:2c:95:38:21:dc:77:ad:5e:ed:ce:ef:da:8d:ea:
                    d3:21:5f:6e:8d:78:f6:9e:0c:ba:e4:8a:f7:b7:1f:
                    7c:90:16:5b:e4:06:d8:02:4b:13:13:26:81:9e:3e:
                    84:18:0e:81:7f:fa:ea:41:51:71:a8:6e:1d:a5:1a:
                    d7:33:74:86:92:c0:14:5f:aa:92:89:c3:5c:b4:47:
                    4e:36:8a:51:c6:08:8c:25:ae:c2:8b:aa:cc:f1:2a:
                    45:96:49:75:9b:d9:58:ad:1a:33:53:08:95:26:23:
                    77:8d:eb:c3:fd:98:e6:04:eb:8e:42:e6:54:16:62:
                    36:c2:ca:3d:1e:82:02:8b:a1:2f:c2:fd:bd:1c:17:
                    72:6b:08:cf:6c:d4:3d:75:3a:3f:80:e9:00:6c:3f:
                    b4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:72:42:4A:61:85:6C:F4:06:FB:F0:68:06:87:88:B6:9E:62:FE:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4/da733fda-b405-4eb1-adbe-811e8f7eacd4.crl

            X509v3 Authority Key Identifier:
                keyid:CF:9A:BF:04:C8:42:8F:3F:52:AA:0D:50:E8:C7:7B:D2:75:46:E5:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/da733fda-b405-4eb1-adbe-811e8f7eacd4.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:52:ec:cf:ac:00:93:07:df:88:13:a3:05:d4:ae:1a:43:38:
         00:cf:6c:c8:9e:13:c6:fa:3b:d3:69:d3:49:04:5c:c4:f0:20:
         26:70:42:84:35:89:cb:f4:b5:a0:a6:fa:b5:64:52:82:67:1d:
         41:fb:dd:85:e1:13:68:26:82:a4:ba:ae:50:b4:51:36:aa:df:
         be:08:e3:82:4a:b6:c3:b1:b5:ee:dc:54:f3:16:de:18:29:e7:
         9a:fe:7b:21:03:75:12:ac:12:48:a4:e2:f7:68:44:3d:7f:78:
         05:4a:89:70:27:5b:f3:f4:e2:54:b4:72:b3:60:d0:e7:74:38:
         20:c9:d5:0d:48:24:83:bd:29:c4:ad:ae:d6:d2:7c:f2:59:0e:
         e5:93:a6:f0:97:1e:dd:f7:93:a1:d0:8c:a5:e5:24:b1:1d:87:
         41:2c:e5:09:70:61:2d:9f:fd:1a:0b:a3:cd:d2:15:6d:e2:3b:
         82:95:e9:7b:aa:70:f3:2b:9e:67:67:7a:b4:e0:42:58:5f:d6:
         3c:23:9d:9a:9d:18:5a:4d:81:2c:68:8f:5f:df:e7:b4:cf:d4:
         87:48:5c:a7:28:91:73:3a:7b:69:ce:07:3d:a8:e5:d8:e9:7d:
         8f:61:6c:58:46:c4:a4:97:86:54:a7:1c:b1:c7:7a:60:1d:0c:
         5b:a2:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:02:39 2025 by rpki-client