This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft
File:                     b433860d-ab5d-45f4-a11e-f313b584710a.mft (raw, json)
Hash identifier:          mENfLkoGGPkqMJp/0B/2y+sfOFuHwn8VFiSzhJwiDrQ=
Subject key identifier:   8A:B0:C3:CB:A1:95:A2:D9:B8:65:31:C6:8F:8E:48:D8:9B:CB:27:78
Authority key identifier: CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55
Certificate issuer:       /CN=b433860d-ab5d-45f4-a11e-f313b584710a
Certificate serial:       010D0C9F4328584C17780B2347166C52E6AAFC40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft
Manifest number:          010D0C9F4328584073A833A02A07E904E124DB94
Signing time:             Sat 06 Dec 2025 01:00:04 +0000
Manifest this update:     Sat 06 Dec 2025 01:00:04 +0000
Manifest next update:     Mon 08 Dec 2025 01:00:00 +0000
Files and hashes:         1: 002e220d-5567-33ef-bd92-28d89dfe57f5.roa (hash: EZPjtDcMz/7cMkZbP5P3E9HMnTyh+ucsNTPzZ0Wc7Ko=)
                          2: 1e2f5530-ba9d-381d-9b54-2d76fceca419.roa (hash: qZuSuas5R10vAG7i+UM3Q6PgvhxJ0sUfKOHXhp86dUM=)
                          3: 29ee82f2-26f5-3427-b2a3-e130b3600811.roa (hash: TbOBBgavnS7vsvWebpVnYGju2n+dvzROC/m/NiR6G68=)
                          4: 4ed19f2f-685b-337e-a5ef-568bf7d20094.roa (hash: R9KDuUiMXFHxn3pGCC2ab/jZOjwRuMgAbwnKdxEdcE8=)
                          5: b433860d-ab5d-45f4-a11e-f313b584710a.crl (hash: H/pj+bWHjYL4lmRyveS+7543E0gneLc0gMYa6bGo33k=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:17:78:0b:23:47:16:6c:52:e6:aa:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433860d-ab5d-45f4-a11e-f313b584710a
        Validity
            Not Before: Dec  6 01:00:04 2025 GMT
            Not After : Dec  8 01:00:00 2025 GMT
        Subject: CN=0edd8f1f-da13-4aad-bfdb-a39a1f1f7215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:22:84:be:9a:97:ec:16:99:be:d0:70:b8:6d:
                    18:3a:f0:df:f6:50:d6:1c:96:83:52:14:25:b7:33:
                    bb:c7:9f:9b:0a:3e:a1:09:d9:35:b0:42:48:15:55:
                    c5:fc:1b:bc:5e:ee:85:80:85:5e:c9:9d:06:53:1e:
                    a9:6e:82:30:c7:41:69:f3:43:d5:75:68:45:ab:4c:
                    c4:c7:cf:1c:2d:00:7d:7b:03:83:85:bb:e6:1d:c4:
                    d3:f0:9a:7e:bd:05:87:96:30:ac:85:e3:4c:0f:1a:
                    bc:3c:cd:09:0a:ea:ca:b9:2e:01:f8:40:d4:1e:1a:
                    65:4e:40:52:76:64:c1:43:0a:d6:2e:14:9f:30:da:
                    1b:1f:fd:f0:c7:5d:48:06:52:9b:37:21:b5:8b:69:
                    1e:0b:0c:42:58:37:16:d5:ea:a0:72:d8:24:b2:52:
                    03:b2:f0:15:6a:b5:98:86:50:c9:a2:e2:ed:51:98:
                    06:2e:b9:30:1e:1f:9d:e4:9b:62:de:f2:62:c9:f7:
                    84:47:50:f3:31:11:8c:3a:82:16:0e:66:e7:a5:ce:
                    0e:a0:c1:de:42:65:fc:c0:ed:ef:fb:e4:2d:a8:37:
                    98:59:76:d1:35:4f:18:a3:0c:18:a6:13:e3:93:02:
                    37:b3:4e:7e:2b:69:7a:f0:7c:f2:4a:8f:91:b2:95:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B0:C3:CB:A1:95:A2:D9:B8:65:31:C6:8F:8E:48:D8:9B:CB:27:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a/b433860d-ab5d-45f4-a11e-f313b584710a.crl

            X509v3 Authority Key Identifier:
                keyid:CF:D5:13:65:D3:86:91:03:62:B9:5C:C4:7B:A2:B1:19:7A:65:E5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b433860d-ab5d-45f4-a11e-f313b584710a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d4:d1:d0:43:02:42:75:56:c0:cd:ab:56:40:b3:a0:79:45:
         13:d9:a1:61:fe:a0:64:a8:a0:21:32:41:e7:dc:d9:a1:10:7e:
         c0:2d:59:fd:7a:37:14:18:c5:a6:08:73:57:15:c1:5f:d4:06:
         11:ac:38:fd:42:84:9d:50:9b:74:f3:7c:00:82:81:20:e0:5c:
         2c:b9:26:af:c2:7f:66:b6:c4:20:eb:da:0f:d5:b8:b5:86:86:
         6e:cd:e1:a8:df:6d:18:9a:fd:40:82:4c:71:1b:b7:38:52:94:
         33:73:b1:27:b4:07:34:f6:30:ca:52:3e:21:1e:0c:cd:a2:35:
         c6:23:8a:c4:06:ee:1c:e4:5d:06:64:56:11:02:9e:79:d7:1f:
         32:b8:c3:1e:d2:7b:c6:32:0d:29:13:a4:23:0e:5b:66:fe:4b:
         02:cb:d5:29:e9:cd:76:eb:e5:88:46:9b:45:0a:47:2f:6b:8e:
         81:d9:56:bf:ab:9f:10:54:6a:c0:cb:49:8f:e8:9b:3b:71:68:
         97:e1:f8:bc:b7:b4:bc:4c:a4:a2:d4:3b:08:70:66:73:3c:74:
         e3:f4:36:58:16:45:a3:97:7d:27:55:cd:c2:dc:3c:80:58:24:
         bb:b9:5b:fa:fd:40:b7:86:c2:f5:d5:06:62:f5:49:94:fc:ab:
         59:5d:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:22:26 2025 by rpki-client