This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.mft
File:                     c555aac9-439a-4358-a9be-500d9810368f.mft (raw, json)
Hash identifier:          5HjsLGiaADmZ3OdpgTU43rjlPNQbxBGkPMiH+2b6eS4=
Subject key identifier:   9C:12:0F:A4:DD:BD:AE:89:F2:D6:EF:A5:78:AB:6B:63:BC:34:97:8B
Authority key identifier: 79:01:DF:C8:C2:64:8C:6B:21:E7:9C:25:74:F9:5B:73:A6:34:11:DF
Certificate issuer:       /CN=c555aac9-439a-4358-a9be-500d9810368f
Certificate serial:       010D0C9F4328584C19901E897C4958DA4486B540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.mft
Manifest number:          010D0C9F4328584A36AD8C5BAB83125620801172
Signing time:             Sat 06 Dec 2025 19:00:10 +0000
Manifest this update:     Sat 06 Dec 2025 19:00:10 +0000
Manifest next update:     Mon 08 Dec 2025 19:00:00 +0000
Files and hashes:         1: 33052445-97be-3c23-8f5a-c93af4994487.roa (hash: 4Dj77BEgm39aZFLm8viXCOvWFM8W5a6L8ySobK9GkvY=)
                          2: c555aac9-439a-4358-a9be-500d9810368f.crl (hash: xNNRs+kMU5rOcgylN+O9WcfrbUVZykzUZ1/fidJjBI4=)
                          3: fe92713a-e16d-375d-ac58-ffb52f2f876e.roa (hash: 9zrh0IxS7eEqwbingYjcNjMO4qsG8FsDFXouKZHE0l0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:19:90:1e:89:7c:49:58:da:44:86:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c555aac9-439a-4358-a9be-500d9810368f
        Validity
            Not Before: Dec  6 19:00:10 2025 GMT
            Not After : Dec  8 19:00:00 2025 GMT
        Subject: CN=065c9dc7-642c-4795-99a7-33172a3bf581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:c1:9d:4a:1a:79:3c:d4:a6:e6:48:c9:8d:
                    44:25:18:12:f3:5c:69:85:7b:6f:4f:6d:32:29:2d:
                    88:48:1f:db:df:57:19:62:c0:3e:23:bd:b6:bf:dc:
                    d5:30:de:86:9b:53:b6:74:10:b0:8a:59:74:9b:a9:
                    04:52:1e:d3:60:01:8b:b7:c4:b7:cf:d0:4f:90:ad:
                    0e:4c:c9:23:ea:db:4c:d8:ff:b7:1e:0e:4b:a9:2d:
                    73:f8:16:10:dc:a5:32:d7:e9:4e:dd:8e:b4:68:64:
                    de:f8:b4:6e:3f:d9:6c:ff:91:7c:76:19:3d:91:75:
                    1c:49:24:34:01:bc:99:bb:17:fb:4b:e4:ff:f9:50:
                    b6:e6:d0:1a:2a:f0:85:fa:3e:34:2a:f9:1c:cd:ec:
                    b1:c3:46:96:20:26:63:37:c9:94:a2:41:6d:da:ef:
                    a2:d8:47:4a:d3:39:f5:c2:0c:8b:67:a7:b0:e0:0a:
                    59:bf:d7:c9:bc:69:53:24:7e:26:a8:28:69:31:4c:
                    31:7f:9e:c0:6a:51:0b:91:48:ad:96:5f:28:5e:21:
                    40:a5:08:0a:92:ed:2c:fd:92:cb:72:59:31:3f:8c:
                    cd:a8:7b:5b:01:cb:e4:fd:af:fc:42:a6:1e:31:2b:
                    fa:50:00:38:39:9e:d9:5f:62:09:da:09:9a:ee:e8:
                    59:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:12:0F:A4:DD:BD:AE:89:F2:D6:EF:A5:78:AB:6B:63:BC:34:97:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.crl

            X509v3 Authority Key Identifier:
                keyid:79:01:DF:C8:C2:64:8C:6B:21:E7:9C:25:74:F9:5B:73:A6:34:11:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:93:2e:7d:c9:e9:f7:ac:e9:1c:4c:2a:84:6a:7c:ff:a3:a8:
         52:19:fe:51:b6:d0:5d:e0:dd:58:36:fa:7b:a4:e7:3c:55:e3:
         82:28:2f:66:fe:87:cd:83:e6:80:a9:4a:e4:41:89:27:4f:f6:
         1c:9d:51:dd:15:83:23:b7:01:a9:4f:3d:a8:4b:bf:f7:83:18:
         b6:a7:13:d3:4d:63:bc:6d:97:10:06:12:70:81:f6:d7:e8:94:
         f0:06:67:1d:89:96:47:dc:93:8e:46:96:64:46:02:aa:b7:6c:
         b8:58:df:77:d0:1d:06:db:03:10:c2:cb:21:23:1b:83:97:ea:
         63:86:4c:28:7a:1c:d0:78:cb:87:78:06:66:04:36:fd:e8:f5:
         07:5a:aa:d4:18:03:bc:09:7a:41:56:f5:cd:ab:a4:8c:f8:37:
         24:05:60:1e:4c:e0:4e:ac:f4:ef:fa:b7:d7:ef:c7:be:bb:6d:
         14:39:5e:d0:07:52:10:51:a3:3c:b6:c9:72:87:e8:3a:e1:d6:
         51:57:c2:3a:70:7b:4b:d3:5e:3c:53:c3:91:31:d1:aa:8e:0f:
         b7:f2:15:3e:89:0b:cf:72:9a:24:ad:d9:65:26:6d:b9:79:a4:
         78:9b:4c:91:98:07:ae:b7:65:e4:02:cf:0d:79:24:1d:09:e3:
         49:6a:c9:f6
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwZkB6JfElY2kSGtUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzU1NWFhYzktNDM5YS00MzU4LWE5YmUtNTAwZDk4MTAz
NjhmMB4XDTI1MTIwNjE5MDAxMFoXDTI1MTIwODE5MDAwMFowLzEtMCsGA1UEAxMk
MDY1YzlkYzctNjQyYy00Nzk1LTk5YTctMzMxNzJhM2JmNTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS3BnUoaeTzUpuZIyY1EJRgS81xphXtvT20y
KS2ISB/b31cZYsA+I722v9zVMN6Gm1O2dBCwill0m6kEUh7TYAGLt8S3z9BPkK0O
TMkj6ttM2P+3Hg5LqS1z+BYQ3KUy1+lO3Y60aGTe+LRuP9ls/5F8dhk9kXUcSSQ0
AbyZuxf7S+T/+VC25tAaKvCF+j40Kvkczeyxw0aWICZjN8mUokFt2u+i2EdK0zn1
wgyLZ6ew4ApZv9fJvGlTJH4mqChpMUwxf57AalELkUitll8oXiFApQgKku0s/ZLL
clkxP4zNqHtbAcvk/a/8QqYeMSv6UAA4OZ7ZX2IJ2gma7uhZEQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJwSD6Tdva6J8tbvpXira2O8NJeLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jNTU1
YWFjOS00MzlhLTQzNTgtYTliZS01MDBkOTgxMDM2OGYvYzU1NWFhYzktNDM5YS00
MzU4LWE5YmUtNTAwZDk4MTAzNjhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYzU1NWFhYzktNDM5YS00MzU4LWE5
YmUtNTAwZDk4MTAzNjhmL2M1NTVhYWM5LTQzOWEtNDM1OC1hOWJlLTUwMGQ5ODEw
MzY4Zi5jcmwwHwYDVR0jBBgwFoAUeQHfyMJkjGsh55wldPlbc6Y0Ed8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jNTU1YWFjOS00MzlhLTQzNTgtYTliZS01MDBk
OTgxMDM2OGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtky59yen3rOkcTCqEanz/
o6hSGf5RttBd4N1YNvp7pOc8VeOCKC9m/ofNg+aAqUrkQYknT/YcnVHdFYMjtwGp
Tz2oS7/3gxi2pxPTTWO8bZcQBhJwgfbX6JTwBmcdiZZH3JOORpZkRgKqt2y4WN93
0B0G2wMQwsshIxuDl+pjhkwoehzQeMuHeAZmBDb96PUHWqrUGAO8CXpBVvXNq6SM
+DckBWAeTOBOrPTv+rfX78e+u20UOV7QB1IQUaM8tslyh+g64dZRV8I6cHtL0148
U8ORMdGqjg+38hU+iQvPcpokrdllJm25eaR4m0yRmAeut2XkAs8NeSQdCeNJasn2
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:16 2025 by rpki-client