This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.mft
File:                     ef573c37-3920-4b85-b5ca-50707eefe4b3.mft (raw, json)
Hash identifier:          HNR0gipjXvE8FQPrVscqmnDko550JCazmJIOc/WRfSk=
Subject key identifier:   89:65:F7:A8:2C:E3:1D:1D:E6:48:AB:E8:79:32:56:F4:00:04:27:23
Authority key identifier: AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF
Certificate issuer:       /CN=ef573c37-3920-4b85-b5ca-50707eefe4b3
Certificate serial:       010D0C9F4328584C1936C995EF76AE10792D3280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.mft
Manifest number:          010D0C9F43285841E97E40E7B911D702822AE538
Signing time:             Sat 06 Dec 2025 16:00:08 +0000
Manifest this update:     Sat 06 Dec 2025 16:00:08 +0000
Manifest next update:     Tue 09 Dec 2025 16:00:00 +0000
Files and hashes:         1: cbf84949-5a41-3aab-b6f9-f96b596dd3c3.roa (hash: 8pA4BwVEOEeXq7w0KJFivjAPJ+CY8/Y2kpYk/pgHtAw=)
                          2: d7567321-e4c6-3ef1-bc68-b7342c65de83.roa (hash: Usm+3bAVVdjaxF3MoHO8m3alxz1fregjYToT2vM/tbk=)
                          3: ef573c37-3920-4b85-b5ca-50707eefe4b3.crl (hash: ezF1pL6DMzprRYLr6jp04qs+HfXHlrVM9pPn9a3ebLc=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:19:36:c9:95:ef:76:ae:10:79:2d:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef573c37-3920-4b85-b5ca-50707eefe4b3
        Validity
            Not Before: Dec  6 16:00:08 2025 GMT
            Not After : Dec  9 16:00:00 2025 GMT
        Subject: CN=b2593e2c-5cea-4604-a1ad-7ae4d065c2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:54:c8:fd:44:5d:73:c4:aa:ee:52:49:89:68:
                    1e:fa:9d:8c:f0:f6:75:0e:a0:aa:e9:8f:5d:d6:c9:
                    d1:0e:45:96:c3:84:97:75:4e:bc:25:36:7c:99:e8:
                    04:c6:0b:e1:ce:9a:09:dc:b9:d8:ec:5a:f5:b3:ff:
                    5f:67:e1:50:ee:d2:dc:00:13:cd:f5:2d:e8:8c:e4:
                    d1:4f:b2:4b:bd:2c:f3:d0:43:ba:a4:1f:33:bb:c9:
                    74:50:17:19:32:89:1a:e4:41:7a:82:d4:76:d1:0d:
                    28:b7:d3:62:1e:c3:71:23:e4:6f:f6:1c:b8:5d:00:
                    41:83:68:e2:9a:10:90:ad:f1:29:3e:96:4c:19:e9:
                    76:33:c2:ed:1a:fe:b1:89:22:4b:68:cd:fa:52:64:
                    0d:83:12:68:4b:85:9a:62:11:96:37:56:73:37:07:
                    5a:b1:aa:13:d4:7d:40:bb:b7:96:77:36:14:7c:79:
                    a0:72:5a:ed:71:dc:c8:2d:15:bd:8f:6f:e6:cd:f9:
                    8e:8d:91:fa:34:c6:66:f4:a0:98:8a:cf:d8:7b:fa:
                    fb:c3:82:05:10:31:9e:13:d3:9d:aa:4d:1c:a5:1d:
                    0a:a5:ba:4e:0f:86:16:3e:eb:cb:c0:45:db:10:31:
                    a0:05:1a:3d:0f:f8:37:fc:8a:fc:a2:a5:c2:42:e9:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:65:F7:A8:2C:E3:1D:1D:E6:48:AB:E8:79:32:56:F4:00:04:27:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3/ef573c37-3920-4b85-b5ca-50707eefe4b3.crl

            X509v3 Authority Key Identifier:
                keyid:AA:51:97:02:8A:6A:68:80:01:9B:E8:D2:E8:D9:46:50:CB:DD:63:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ef573c37-3920-4b85-b5ca-50707eefe4b3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:1f:57:03:c0:69:4c:cf:4c:d4:6d:c5:32:8c:4e:be:3c:
         60:30:a7:e4:44:93:0d:47:48:a5:17:b3:dc:27:69:37:48:73:
         36:60:93:47:0c:c8:70:34:c6:a4:76:58:cb:76:4c:a4:27:19:
         ef:3c:b7:f6:9d:1c:5f:e5:04:e7:33:7f:d5:30:e1:7a:92:3b:
         87:4a:c3:c1:03:5c:27:85:34:02:60:d4:90:24:af:6f:21:33:
         91:ed:65:58:f5:f7:2b:2b:d1:4d:85:13:6b:be:c9:19:5c:c7:
         57:b0:28:c4:c7:fd:30:d6:9f:9a:c9:6a:54:ef:72:5d:74:66:
         80:c6:20:f6:13:74:59:e5:36:ae:d5:6b:b6:75:0e:40:d9:eb:
         81:79:66:1d:af:74:88:26:7e:ed:bb:2b:de:11:74:39:be:61:
         ff:3a:a4:a2:50:f3:8c:38:94:6f:4b:67:f1:ac:5f:44:8b:37:
         1b:90:13:09:53:1a:ac:47:ad:22:f0:d6:36:de:d3:42:16:a9:
         3a:c7:83:f0:d9:70:04:a9:27:94:9b:fa:02:ae:5a:6b:e4:af:
         a0:7f:f9:d1:9c:10:a4:15:d5:6b:dd:0e:97:86:42:a7:32:f8:
         be:45:54:1d:67:8d:e4:ca:b5:2a:87:4e:94:d5:5a:67:01:31:
         1c:f3:59:95
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwZNsmV73auEHktMoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWY1NzNjMzctMzkyMC00Yjg1LWI1Y2EtNTA3MDdlZWZl
NGIzMB4XDTI1MTIwNjE2MDAwOFoXDTI1MTIwOTE2MDAwMFowLzEtMCsGA1UEAxMk
YjI1OTNlMmMtNWNlYS00NjA0LWExYWQtN2FlNGQwNjVjMmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1TI/URdc8Sq7lJJiWge+p2M8PZ1DqCq6Y9d
1snRDkWWw4SXdU68JTZ8megExgvhzpoJ3LnY7Fr1s/9fZ+FQ7tLcABPN9S3ojOTR
T7JLvSzz0EO6pB8zu8l0UBcZMoka5EF6gtR20Q0ot9NiHsNxI+Rv9hy4XQBBg2ji
mhCQrfEpPpZMGel2M8LtGv6xiSJLaM36UmQNgxJoS4WaYhGWN1ZzNwdasaoT1H1A
u7eWdzYUfHmgclrtcdzILRW9j2/mzfmOjZH6NMZm9KCYis/Ye/r7w4IFEDGeE9Od
qk0cpR0KpbpOD4YWPuvLwEXbEDGgBRo9D/g3/Ir8oqXCQunehwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFIll96gs4x0d5kir6HkyVvQABCcjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lZjU3
M2MzNy0zOTIwLTRiODUtYjVjYS01MDcwN2VlZmU0YjMvZWY1NzNjMzctMzkyMC00
Yjg1LWI1Y2EtNTA3MDdlZWZlNGIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWY1NzNjMzctMzkyMC00Yjg1LWI1
Y2EtNTA3MDdlZWZlNGIzL2VmNTczYzM3LTM5MjAtNGI4NS1iNWNhLTUwNzA3ZWVm
ZTRiMy5jcmwwHwYDVR0jBBgwFoAUqlGXAopqaIABm+jS6NlGUMvdY98wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lZjU3M2MzNy0zOTIwLTRiODUtYjVjYS01MDcw
N2VlZmU0YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPJB9XA8BpTM9M1G3FMoxO
vjxgMKfkRJMNR0ilF7PcJ2k3SHM2YJNHDMhwNMakdljLdkykJxnvPLf2nRxf5QTn
M3/VMOF6kjuHSsPBA1wnhTQCYNSQJK9vITOR7WVY9fcrK9FNhRNrvskZXMdXsCjE
x/0w1p+ayWpU73JddGaAxiD2E3RZ5Tau1Wu2dQ5A2euBeWYdr3SIJn7tuyveEXQ5
vmH/OqSiUPOMOJRvS2fxrF9EizcbkBMJUxqsR60i8NY23tNCFqk6x4Pw2XAEqSeU
m/oCrlpr5K+gf/nRnBCkFdVr3Q6XhkKnMvi+RVQdZ43kyrUqh06U1VpnATEc81mV
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:03:10 2025 by rpki-client