This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft
File:                     dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json)
Hash identifier:          2xlOJIKKMmPYT/MW6j8O5E2Zvjqo1Mj5PVSmnaw+Cs8=
Subject key identifier:   E2:CD:80:AD:1A:94:58:CB:55:5A:D3:8E:89:E2:0E:26:B0:25:72:E2
Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE
Certificate issuer:       /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
Certificate serial:       010D0C9F4328584C380A0A03B98980A0B89FAC00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft
Manifest number:          010D0C9F43285843E05DB4B41D1D11863F6C3690
Signing time:             Wed 17 Dec 2025 17:00:03 +0000
Manifest this update:     Wed 17 Dec 2025 17:00:03 +0000
Manifest next update:     Fri 19 Dec 2025 17:00:00 +0000
Files and hashes:         1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: 7Pwh8V6lyQ3WXEmS1Aw3cCBJxJv1Mf3adlnoNsMzjvc=)
                          2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: my6kRHkDqTfaXGck2kPKWJB2BaEhhUudxCbil4nUW3o=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:38:0a:0a:03:b9:89:80:a0:b8:9f:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2
        Validity
            Not Before: Dec 17 17:00:03 2025 GMT
            Not After : Dec 19 17:00:00 2025 GMT
        Subject: CN=b2fe5862-fa16-46b9-bb2d-eaeac431e0a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:66:3d:8d:a1:b1:50:3d:17:d9:48:36:11:08:
                    bd:9d:6d:c3:90:90:e6:51:7f:10:8a:6c:10:a6:dc:
                    28:35:02:5c:2b:e5:52:23:22:36:f6:30:35:40:df:
                    92:ae:75:ea:9e:aa:48:64:65:a3:67:84:6f:14:75:
                    87:57:8d:ea:d1:f0:49:3d:07:41:01:bf:47:4f:13:
                    ef:80:46:95:47:ab:58:00:c6:87:fc:3c:c0:83:3f:
                    b3:c8:3a:7d:8f:1f:c8:ad:de:a8:0d:95:77:74:68:
                    1a:44:97:25:60:07:4a:02:e5:38:e0:9c:35:b3:93:
                    c7:44:bb:6d:e9:e4:bf:b7:a0:ef:07:4e:af:30:58:
                    db:31:53:5d:fb:78:0e:19:c9:5e:4e:67:4c:62:4e:
                    dd:f6:a6:a3:23:e2:7e:7f:f4:d0:21:20:dd:f1:d1:
                    c4:35:c4:fb:2a:86:17:ad:07:8b:c6:e7:b7:bb:4a:
                    28:6c:81:78:69:ff:75:0b:34:75:2f:7f:5c:6d:1b:
                    f2:57:11:43:e0:90:db:63:7b:50:31:72:0a:e1:3b:
                    9f:30:4d:ea:96:d0:06:cf:09:9d:32:07:42:09:1f:
                    8a:38:49:52:54:b0:f0:9b:d1:95:43:e2:3f:2a:1b:
                    ff:f2:9f:7e:9f:db:9e:77:3a:42:a4:4e:77:78:bc:
                    f0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:CD:80:AD:1A:94:58:CB:55:5A:D3:8E:89:E2:0E:26:B0:25:72:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl

            X509v3 Authority Key Identifier:
                keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:fa:3d:4b:6c:1d:a4:89:b0:c8:38:b7:fa:53:59:94:28:04:
         78:20:26:3f:42:2a:ee:9b:cb:6b:66:bf:b1:be:60:c5:27:0c:
         68:5f:a9:80:5a:31:80:e8:f1:8e:28:c5:36:31:fe:e3:45:f8:
         57:20:0a:2a:8e:b3:1c:fe:cc:31:71:6b:8d:ef:c2:e4:3b:c7:
         8e:a5:95:6b:d9:fb:eb:e8:db:0b:bc:4c:e1:77:56:07:af:32:
         7b:00:ac:df:6b:a4:6a:0e:b4:3c:45:22:97:ed:7d:83:2b:ce:
         d5:e6:01:2e:06:72:03:fe:41:70:9b:c3:b6:fb:04:3a:54:4c:
         1e:56:0d:9d:33:d9:e9:4a:42:c2:cf:00:b6:44:3b:f8:86:8e:
         74:3c:23:22:82:5b:6b:de:8c:06:48:30:97:02:f3:9c:98:6e:
         c3:3e:cf:12:8a:f3:82:4e:25:71:ba:78:94:ce:22:58:23:b2:
         fc:e6:a7:49:e5:3a:ac:d1:12:31:c0:98:cf:a4:41:b6:c9:4d:
         ba:a9:f0:bb:08:c4:bb:ec:82:36:4b:db:ba:1b:20:1f:75:55:
         f9:02:dc:3e:c1:19:bc:91:cb:a2:1e:8b:07:0c:03:3b:05:51:
         64:91:0e:c9:82:3b:f1:61:11:cb:8c:fc:ea:c5:06:33:c3:58:
         00:de:bf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----