This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
File:                     aa34647f-3229-480c-9b05-3cf0b00fa173.mft (raw, json)
Hash identifier:          4QpM+8xZMk3omiRCAeT3NCNPrjYa5Fr5+/09UjJJ74s=
Subject key identifier:   C3:03:58:FD:70:7D:7E:70:FB:91:9C:F2:A2:14:37:DE:8F:AF:BE:58
Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6
Certificate issuer:       /CN=aa34647f-3229-480c-9b05-3cf0b00fa173
Certificate serial:       010D0C9F4328584C1612BDA693B57402BF8AD700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
Manifest number:          010D0C9F43285849B8591A0A2626962C4503E960
Signing time:             Fri 05 Dec 2025 13:00:08 +0000
Manifest this update:     Fri 05 Dec 2025 13:00:08 +0000
Manifest next update:     Sun 07 Dec 2025 13:00:00 +0000
Files and hashes:         1: aa34647f-3229-480c-9b05-3cf0b00fa173.crl (hash: mc7JqiP+ETuzsL0O8bcea03B2KAQRZzGUe4GqEQgm1U=)
                          2: c6ed17f1-34cb-3ce9-8d06-e0a16d240510.roa (hash: DM60ccb6RE5CofJQ3v0vpE6r5XWrjeBGsIoaBU61dtY=)
                          3: eba3c881-4793-3d27-b8a0-c5d10a55657a.roa (hash: qNcEBKfj15mncSGtvWyAHfTezgrG2+3nLDePwwA6+5k=)
                          4: fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa (hash: g9HNrHm/7uyyMQWhJUSLd09BGNxqvjrtbWNHutWs+7s=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:12:bd:a6:93:b5:74:02:bf:8a:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173
        Validity
            Not Before: Dec  5 13:00:08 2025 GMT
            Not After : Dec  7 13:00:00 2025 GMT
        Subject: CN=cda2f575-49f3-42de-b3f5-dfd1e5f590a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:8c:00:41:4c:fd:3b:cc:a1:54:d6:40:99:75:
                    a6:a1:8b:7a:95:a6:0c:43:bf:17:57:5f:00:e4:eb:
                    17:18:f3:ec:32:3f:e4:6b:6d:47:9f:c6:14:1d:26:
                    ea:49:2f:63:6d:1c:c7:ce:a1:72:f1:e1:69:bc:e3:
                    cd:57:72:7a:c6:06:30:5b:22:30:b3:1f:1b:9d:1f:
                    38:5e:23:18:58:fd:28:70:b3:6d:e8:9a:68:08:3a:
                    3e:dd:b9:ec:3c:dd:91:9d:04:5e:07:ed:13:4f:bd:
                    e6:c4:55:2e:35:2a:3e:bb:e2:9a:b0:43:19:83:50:
                    04:4f:f3:6f:79:13:dc:9d:1f:de:4f:e8:69:76:e6:
                    f3:b1:df:05:18:87:7c:db:e0:27:66:ea:b8:07:87:
                    26:79:db:d2:f1:19:a9:7a:a2:99:09:2d:e4:d6:54:
                    a9:0e:a3:a0:e0:df:34:fb:93:fd:47:5b:b0:7f:0b:
                    88:6e:ee:d0:67:0e:d6:76:1b:d6:1c:5e:1d:8a:0b:
                    70:99:89:8e:2b:c2:22:f2:65:88:ff:59:63:5e:48:
                    c9:a4:7f:21:fc:30:5f:ec:ab:6b:c6:a1:d8:8e:cb:
                    2c:43:71:3d:7f:fa:36:74:d3:0e:50:34:64:85:b3:
                    21:5e:05:0f:fc:8d:25:ee:0b:26:ab:ea:a3:e3:5b:
                    25:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:58:FD:70:7D:7E:70:FB:91:9C:F2:A2:14:37:DE:8F:AF:BE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl

            X509v3 Authority Key Identifier:
                keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:40:3b:95:04:80:d8:c9:1a:21:13:9f:4c:3a:2b:41:95:c1:
         d2:be:53:77:19:db:30:57:ec:d4:af:a6:36:a7:65:34:4d:04:
         ab:d5:3d:6a:5a:4b:a6:27:1d:c1:cf:e0:bc:6d:e2:96:16:bd:
         eb:4e:11:ab:83:1d:1d:d1:f4:29:5d:ab:ef:bb:71:a0:35:cb:
         e6:83:87:cb:72:4d:83:8a:88:f4:e0:04:e9:d2:39:f0:1c:12:
         d7:9c:ed:24:f1:ec:8a:58:59:ff:bc:66:16:f8:25:17:0a:08:
         36:5a:31:9d:b6:ce:fd:91:d9:13:f9:b6:4d:01:63:98:92:46:
         65:2b:c0:7d:31:da:bf:90:a4:ad:cc:7e:c7:18:8b:04:bf:f4:
         42:a9:1f:a7:9c:e3:1c:94:5f:4a:f0:5a:ea:83:8b:5c:95:9b:
         25:a4:ad:b6:29:c8:bf:6b:88:a6:30:67:8e:9f:6f:d6:ba:5e:
         99:a0:b6:3b:fb:fa:26:25:c5:bf:9a:01:44:fb:55:1d:0d:61:
         d2:25:c9:b5:49:ac:dc:86:ae:53:09:ff:ad:ca:35:56:13:ec:
         bf:53:8a:a5:90:e5:2d:ee:2e:b2:97:e9:db:8f:ad:2f:5c:e3:
         09:7f:9a:d0:86:b9:1f:72:62:ba:00:a2:fb:7f:e1:22:af:87:
         7c:96:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:54:08 2025 by rpki-client