This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft
File:                     3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft (raw, json)
Hash identifier:          yfAzZec79Eelydqr/No52MwXLIQFVX6VcZ5d2ujw6Ks=
Subject key identifier:   A1:6C:49:63:7F:9F:F0:B1:9D:9C:37:F0:8E:8A:6F:79:2C:36:B6:E8
Authority key identifier: 0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4
Certificate issuer:       /CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8
Certificate serial:       010D0C9F4328584C164E46C4847588AAD9337F60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft
Manifest number:          010D0C9F43285841AEEEC2DA3330E6DFE2D5A3E3
Signing time:             Fri 05 Dec 2025 15:00:03 +0000
Manifest this update:     Fri 05 Dec 2025 15:00:03 +0000
Manifest next update:     Mon 08 Dec 2025 15:00:00 +0000
Files and hashes:         1: 3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl (hash: mbD+7oBpuhTRH8R0RiKMaMX6WnWVk/LFJBaezdCJmW8=)
                          2: 4c614fa4-86b6-3d9f-847a-8c621d670b67.roa (hash: 37BEPY7aFbFzxnUtzlara7/SVDSY9ipc+kUn6SHzMAA=)
                          3: dff59291-b5c9-3e59-b7d5-550a9ded0ade.roa (hash: 1JfodFAD2AtPnsxkYJWXNbsJGCClb7UwgHHb933uyZo=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:4e:46:c4:84:75:88:aa:d9:33:7f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d9df9b4-6f73-43c8-aacc-4d068a82c5d8
        Validity
            Not Before: Dec  5 15:00:03 2025 GMT
            Not After : Dec  8 15:00:00 2025 GMT
        Subject: CN=895c547b-1c87-4522-a671-0b8ee63e5b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:e6:ee:de:47:94:44:ac:b0:b3:e8:38:cb:
                    76:d7:b8:8a:d2:7f:3f:9f:4e:fc:4f:5c:cc:e2:a9:
                    27:09:3d:21:9b:6b:cb:2a:c0:52:d6:ab:ce:21:2d:
                    ab:0b:98:83:38:95:a5:27:e2:92:ec:20:5c:4c:19:
                    d7:b1:aa:4c:e6:43:86:80:36:43:05:bf:de:bb:f4:
                    2e:62:6a:4f:3e:9d:87:40:9b:50:55:72:53:ab:2f:
                    4a:58:f1:36:ca:1e:ce:f9:f0:f7:9a:4d:ce:c0:f8:
                    59:89:ec:00:08:67:d4:f8:8c:e5:f0:19:94:16:f0:
                    c7:36:12:82:64:8a:46:1a:ca:63:87:85:33:c7:3f:
                    b4:d8:51:50:7b:42:5f:3f:ea:e8:e2:a3:03:7e:64:
                    9a:8d:ef:39:e1:eb:6a:9e:f6:dc:af:91:d2:0c:e2:
                    df:02:c2:9c:ca:27:7a:d8:64:b9:b9:51:59:59:d0:
                    fe:46:0f:8e:84:af:b3:6d:da:e7:17:b7:43:54:c4:
                    9f:95:bd:db:48:0e:dd:c9:60:48:e1:f7:95:12:81:
                    bd:53:5b:1b:44:68:82:0e:3e:fd:cd:59:b9:23:5d:
                    1f:3e:55:e4:70:1a:a2:af:94:30:ca:47:8f:7b:38:
                    db:6c:d9:85:52:40:45:ee:a3:a7:c4:3a:a7:a2:87:
                    b3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6C:49:63:7F:9F:F0:B1:9D:9C:37:F0:8E:8A:6F:79:2C:36:B6:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.crl

            X509v3 Authority Key Identifier:
                keyid:0D:52:33:12:BE:B4:61:AB:88:D5:F1:48:CF:BC:01:2C:2D:B6:5F:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d9df9b4-6f73-43c8-aacc-4d068a82c5d8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:e8:22:72:bc:3d:ec:c0:20:7e:c6:79:bc:8a:92:47:2f:64:
         bc:44:a7:f2:12:a1:4a:53:e2:a0:a4:75:3a:54:37:88:cf:9a:
         96:1d:5c:79:9a:37:9b:84:27:0d:1a:1e:90:2d:2f:49:b3:1e:
         2b:0e:b5:6e:f6:56:13:3f:6a:3c:3e:fa:97:b1:31:2d:4b:76:
         7e:46:41:f2:f1:71:49:d7:a2:11:ff:b8:be:02:40:82:50:88:
         89:6e:37:f6:9e:f1:ba:3c:60:ce:c4:db:a0:c8:4c:46:95:6c:
         f1:68:cb:d8:9b:3c:45:55:1f:45:0d:e2:83:bc:70:47:e6:58:
         aa:15:0f:75:d1:d1:94:5c:f8:a9:b7:60:f9:ea:fb:1f:38:30:
         02:e0:ee:e5:e6:47:fe:6b:ee:09:27:98:4a:2f:3e:c7:27:1f:
         5a:de:61:6a:ef:be:7f:1d:b6:21:a2:97:f1:6d:b7:03:dc:08:
         3b:9a:81:99:84:87:7a:c8:f3:be:ed:1e:ac:51:78:7f:11:59:
         e3:7c:9d:89:bb:11:c2:f6:de:9c:67:81:fc:9a:0f:ce:06:d1:
         53:ba:18:7c:30:50:9d:13:42:0e:3d:a2:6c:6a:c8:2a:a6:2d:
         26:30:74:48:c9:f3:aa:36:7b:1a:c7:b6:0b:04:6b:65:9a:e2:
         1d:91:9c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:09:45 2025 by rpki-client