This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.mft
File:                     4ef7c372-e70a-4b95-81eb-c17911a45361.mft (raw, json)
Hash identifier:          kypSwlPVRcyl1InOFW3TmFKIZSzX6NYVViV7Mpisa9k=
Subject key identifier:   2E:7B:A8:D0:E6:19:DE:ED:81:19:E6:D7:E8:31:B2:D9:2B:62:F2:3B
Authority key identifier: BD:6A:9B:E1:93:FC:46:BA:E9:7F:47:79:A4:3F:B0:F2:1A:C3:2C:7C
Certificate issuer:       /CN=4ef7c372-e70a-4b95-81eb-c17911a45361
Certificate serial:       010D0C9F4328584C18DD664A2428FF73EC4DD600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.mft
Manifest number:          010D0C9F4328584BABFEB21694C0E4D0C405A328
Signing time:             Sat 06 Dec 2025 13:00:03 +0000
Manifest this update:     Sat 06 Dec 2025 13:00:03 +0000
Manifest next update:     Mon 08 Dec 2025 13:00:00 +0000
Files and hashes:         1: 19a9095c-4fa3-3969-bc54-b6b6f9d11d17.roa (hash: eKaJdGhambRRmPrXFOHtNHA9PWVFEktIB6sfzQsdRYs=)
                          2: 4ef7c372-e70a-4b95-81eb-c17911a45361.crl (hash: X7nU2lKzxFEt7FQb+LmTy9ISSxPrz4r+blMLy82V2H8=)
                          3: b0f6dc5b-a71e-34fc-971b-2130a514c95e.roa (hash: crz5W2lXz7jFjoCMGICBggJrV7pFG6CIgjU2Vn522Ek=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:18:dd:66:4a:24:28:ff:73:ec:4d:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef7c372-e70a-4b95-81eb-c17911a45361
        Validity
            Not Before: Dec  6 13:00:03 2025 GMT
            Not After : Dec  8 13:00:00 2025 GMT
        Subject: CN=a23289dd-4ba7-467c-becf-092f6192eefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:66:e1:aa:4e:fb:b4:05:fd:6f:2e:9c:63:
                    12:1b:79:c2:0e:fb:47:17:b9:7e:cd:72:c4:89:92:
                    1a:e9:55:4a:e1:98:52:71:6b:e7:04:11:06:c2:f6:
                    c0:19:94:e3:4c:38:fe:d2:9b:fc:18:5c:ef:b2:a6:
                    52:5a:2d:d0:42:fb:8c:8d:d8:92:d8:8f:b3:99:f2:
                    aa:e1:b4:fa:6b:3b:dd:9a:ab:d5:ac:86:3c:0b:bf:
                    e7:96:e2:6c:9a:1c:52:dc:fb:9a:cc:dc:de:8e:bd:
                    b0:a4:7d:1b:53:99:ba:3f:af:89:37:bb:ed:ad:48:
                    68:ac:6d:09:41:db:6f:52:5f:03:03:62:bb:59:fe:
                    93:fe:f4:a5:80:31:b2:5a:74:f5:ba:4a:c8:65:8d:
                    d8:59:45:e8:e6:34:f6:e6:56:8e:61:3f:5d:9e:a9:
                    a5:b5:03:b6:01:a9:95:6b:35:22:52:d3:18:c8:49:
                    b7:38:bf:e1:97:b2:ae:35:99:bd:5a:a3:d1:32:13:
                    b8:0a:0f:a0:28:ce:9a:2d:e6:8b:58:8a:92:e9:6a:
                    02:20:ee:20:fd:27:dd:54:e0:80:15:68:c5:ee:74:
                    d1:c1:b4:b9:03:b8:8d:d7:9b:3f:08:71:11:3f:d9:
                    e4:b7:dc:c6:c4:53:d0:67:3f:79:78:b6:be:44:29:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7B:A8:D0:E6:19:DE:ED:81:19:E6:D7:E8:31:B2:D9:2B:62:F2:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361/4ef7c372-e70a-4b95-81eb-c17911a45361.crl

            X509v3 Authority Key Identifier:
                keyid:BD:6A:9B:E1:93:FC:46:BA:E9:7F:47:79:A4:3F:B0:F2:1A:C3:2C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4ef7c372-e70a-4b95-81eb-c17911a45361.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:14:15:f7:68:f2:16:23:87:c5:81:24:0f:5e:e5:11:71:ca:
         56:a6:44:ef:90:e2:6c:c6:99:af:3c:7a:5f:fa:22:42:dc:a3:
         b0:df:1f:b2:38:75:f5:6b:4d:10:8d:d5:d6:47:59:a2:87:7c:
         51:2e:71:f9:0d:19:7e:8a:40:6a:7c:9f:f1:f6:2e:71:82:26:
         94:d5:93:55:f9:42:04:9d:45:b2:96:cd:eb:a4:fc:39:25:14:
         3e:2c:32:57:ee:05:8c:06:ea:19:5d:d8:22:a0:a2:22:78:f1:
         22:85:48:14:6e:4e:f9:a7:c8:3f:7e:b4:43:e3:56:b5:d9:75:
         9d:20:b1:d4:43:9f:e1:db:e5:53:80:51:60:f9:56:81:f5:73:
         12:86:ea:78:a7:a3:82:ff:43:c2:64:fc:20:ef:0c:e1:06:16:
         52:35:cc:ea:db:a8:60:6d:f3:f7:bb:5d:8f:05:2b:29:4b:17:
         1e:81:7f:03:4c:15:07:95:db:5d:36:0c:cc:5c:cb:71:72:5d:
         d7:d4:c7:57:56:29:ba:56:16:15:25:55:e5:d1:9f:5b:21:90:
         27:37:c2:44:5b:b8:33:8b:6f:9d:a1:f1:34:18:97:c1:84:9a:
         bb:aa:62:c2:40:94:50:b0:49:f1:ab:78:8c:0d:28:7a:fe:a9:
         f6:f6:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:15:26 2025 by rpki-client