This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft
File:                     af8fc859-9134-44b2-9e4c-267a8d2386da.mft (raw, json)
Hash identifier:          6Al9ve/TFXL2O857uikI9GzUKdPaKH0wu0E7N+3SFOQ=
Subject key identifier:   E6:11:5A:CF:7C:A0:57:68:EB:0F:04:0C:D0:9F:14:23:7D:E5:3B:16
Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60
Certificate issuer:       /CN=af8fc859-9134-44b2-9e4c-267a8d2386da
Certificate serial:       010D0C9F4328584C166C156BB454FE5F18616B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft
Manifest number:          010D0C9F43285841A12CF5D49033CD73DC699CD6
Signing time:             Fri 05 Dec 2025 16:00:08 +0000
Manifest this update:     Fri 05 Dec 2025 16:00:08 +0000
Manifest next update:     Sun 07 Dec 2025 16:00:00 +0000
Files and hashes:         1: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (hash: EqwNzd2x/eaGcVC7l7FVBF3G192vibOhy89lHmE4toA=)
                          2: af8fc859-9134-44b2-9e4c-267a8d2386da.crl (hash: dhGhzqsDM1evkbzc1Ki2R1MZcea8a9iih0ClmdkRv6I=)
                          3: dede31bf-e82b-3380-8794-1fc710158b40.roa (hash: T1T5yPEQ9XvbhxLvRIwgJumPswUIOw2tTiFUdT5L9xc=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:6c:15:6b:b4:54:fe:5f:18:61:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da
        Validity
            Not Before: Dec  5 16:00:08 2025 GMT
            Not After : Dec  7 16:00:00 2025 GMT
        Subject: CN=51eef6ed-6dd6-4ce4-8de8-05fee63e1e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:28:c8:5d:f5:5b:b2:fe:aa:da:1a:2f:ea:
                    da:3c:15:4e:4c:97:59:50:03:f3:b3:5f:e2:6b:72:
                    3e:6a:7b:5d:c2:07:c0:cf:83:14:33:af:e0:d2:17:
                    3f:33:31:f1:1d:fa:ff:0d:14:b8:f9:9d:f2:fb:e5:
                    f5:35:59:70:c7:84:06:54:e9:33:92:6f:b0:3f:8e:
                    a5:0a:f1:81:1e:22:2e:b9:49:cc:cd:8a:26:7e:00:
                    78:a0:b0:83:7d:4b:6a:cd:f9:fd:70:d2:c5:bd:e2:
                    d2:1c:77:c3:b2:b7:25:20:21:2e:f5:80:6a:52:4f:
                    93:a4:f0:a9:0e:47:44:aa:f4:a3:36:bc:94:e9:34:
                    bd:4c:bd:a4:ad:bb:2f:da:63:81:e5:35:47:8c:7b:
                    50:9b:74:b1:29:5b:17:92:75:6f:76:c9:04:30:d7:
                    ca:49:54:0a:dd:52:2b:90:6b:97:cf:cf:04:77:ca:
                    a0:35:0f:ad:c2:43:41:ca:ee:95:32:c2:bd:b7:72:
                    4a:db:ab:2d:b4:3b:e7:2a:78:d0:4c:fb:ec:47:85:
                    a1:b6:34:2e:22:19:b3:17:38:4d:0c:71:91:9a:fa:
                    70:9b:99:ed:48:6b:c0:09:cb:92:a8:b1:30:87:ba:
                    dd:a6:b6:44:03:4f:5c:72:35:2a:af:4d:d9:11:b4:
                    38:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:11:5A:CF:7C:A0:57:68:EB:0F:04:0C:D0:9F:14:23:7D:E5:3B:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl

            X509v3 Authority Key Identifier:
                keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:5d:d2:73:df:e0:86:f3:c6:eb:89:54:48:cc:34:47:5c:a2:
         a7:02:b2:d7:1b:5d:69:b7:73:71:da:11:f8:67:bb:ad:a9:6c:
         e8:75:ca:14:b2:6c:76:69:cb:07:05:0c:ba:cb:25:dc:df:5d:
         6a:cb:45:32:39:29:a4:aa:dd:87:0a:3e:72:0b:74:1e:02:f7:
         bb:73:6f:fd:3b:d5:9b:f6:35:7f:c4:2c:44:39:89:78:9a:8c:
         84:00:fa:6c:41:0b:6d:3c:32:64:42:8a:28:60:18:25:a5:c2:
         43:5a:12:8e:1d:25:76:f2:ed:b2:e8:20:a7:00:d0:74:24:73:
         84:18:95:75:39:05:0e:65:e1:d8:0a:d6:88:ec:7f:91:1f:bb:
         33:fc:32:98:97:b2:78:62:c2:9e:af:70:8b:10:69:13:90:09:
         5b:a9:16:6f:90:c7:c8:c3:79:d2:e6:e3:61:e3:9d:1c:b2:f5:
         bf:0d:6f:fa:19:ce:b9:72:b1:69:7a:7a:31:c2:f3:20:02:91:
         07:a9:1f:1b:ab:46:61:92:08:09:69:41:d7:a5:e8:c8:ce:12:
         94:d1:17:a5:9e:bb:da:ad:f4:4a:6a:79:d1:2f:3a:d6:d2:d8:
         85:7a:34:58:e5:fe:c3:e0:38:a0:94:20:f0:4b:9a:3f:a7:1d:
         9a:58:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 11:13:13 2025 by rpki-client