This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft
File:                     8de2686c-f2c7-4e46-bfb3-85a78f602984.mft (raw, json)
Hash identifier:          lKvGb8L3q5k6dhiAr6cUZ71FCqlGSxjZbDODVYPR+Mw=
Subject key identifier:   8E:09:2D:6F:BA:A4:C9:2B:DD:62:89:77:2D:B6:63:C1:B7:28:C3:64
Authority key identifier: 26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08
Certificate issuer:       /CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
Certificate serial:       010D0C9F4328584C164E4784FE589973C7A77400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft
Manifest number:          010D0C9F43285848EA000EDE10FAA8D3840C420F
Signing time:             Fri 05 Dec 2025 15:00:03 +0000
Manifest this update:     Fri 05 Dec 2025 15:00:03 +0000
Manifest next update:     Sun 07 Dec 2025 15:00:00 +0000
Files and hashes:         1: 39d37bab-e9cc-3fec-86ef-a7daf491525a.roa (hash: D1FFE4SeEo0xAsvFjHuh4wDZ8mCet9Kjfw09h/JWcQQ=)
                          2: 56f10411-4489-347f-8d08-8f6071826d7e.roa (hash: 38xpXwc8V8SfF/j0fuGhRcDJOfaDsXdNckjvEpeK70U=)
                          3: 8de2686c-f2c7-4e46-bfb3-85a78f602984.crl (hash: a9Ii+eHFs46K/lmYRmaY9jVciYWutLdDr++x2/FyjhU=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:16:4e:47:84:fe:58:99:73:c7:a7:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8de2686c-f2c7-4e46-bfb3-85a78f602984
        Validity
            Not Before: Dec  5 15:00:03 2025 GMT
            Not After : Dec  7 15:00:00 2025 GMT
        Subject: CN=9b272da8-b5c5-4b0a-89b8-c700f7738d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:fe:53:75:f7:e2:19:3b:4b:09:1d:d5:4e:
                    ba:91:e5:87:79:aa:2c:8a:b1:2e:e7:13:bb:73:09:
                    ab:84:56:d7:ee:21:a8:82:68:57:96:02:f0:fd:8a:
                    34:91:4a:0f:72:ba:4c:6f:9b:fb:3e:ac:28:c3:30:
                    8f:6b:58:da:c1:a6:ef:6b:bc:d5:f6:4e:29:10:9f:
                    75:36:10:28:05:90:70:cb:2a:df:d5:f1:55:cf:16:
                    51:18:2d:e6:af:e5:88:35:dd:5f:01:8b:35:7a:9b:
                    8e:8b:69:fb:df:e6:fa:97:5b:c2:88:e5:26:64:59:
                    0d:e4:23:b4:46:00:2f:f9:33:b9:ec:bb:a1:47:07:
                    3d:54:1c:15:13:ed:c1:c8:50:5b:de:d1:42:43:32:
                    1b:a7:0b:f3:22:d0:6c:33:37:fd:4a:95:1f:7c:11:
                    95:df:c4:15:ca:50:58:35:7d:90:7b:81:1c:d1:ef:
                    c6:4c:96:c1:dc:f0:20:b7:b4:b7:62:9e:c3:5c:30:
                    00:cb:e1:6f:95:e6:a2:5f:87:51:33:71:a7:4d:92:
                    44:9f:4c:63:5b:90:dc:d4:7f:60:3d:ae:e5:8d:a7:
                    b7:a1:3a:78:58:1d:80:93:f9:90:f9:9d:bb:b5:5a:
                    81:c9:1c:9e:8b:f4:95:ea:07:02:25:d3:72:af:5a:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:09:2D:6F:BA:A4:C9:2B:DD:62:89:77:2D:B6:63:C1:B7:28:C3:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984/8de2686c-f2c7-4e46-bfb3-85a78f602984.crl

            X509v3 Authority Key Identifier:
                keyid:26:8A:F6:F1:2E:71:87:80:43:C2:38:B0:55:54:13:96:4B:65:B8:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8de2686c-f2c7-4e46-bfb3-85a78f602984.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:8e:b7:44:71:83:89:01:ed:09:b4:94:bb:0e:aa:a2:cc:d7:
         6c:8b:92:2d:d0:9e:a7:19:14:46:a0:7a:e3:aa:2b:c1:bb:bc:
         fa:5a:77:36:ed:5a:7a:09:94:42:ba:4f:c9:41:9b:66:02:85:
         a2:05:23:23:8a:fd:22:3d:b2:85:2d:24:5f:75:98:f0:43:52:
         ed:ce:8c:52:52:19:73:d8:37:30:4f:bd:e8:dc:e2:4d:39:56:
         57:42:ee:70:56:30:ba:d1:2c:16:c6:f8:2c:f5:ff:11:b3:d5:
         4d:75:fa:12:f2:51:71:e5:83:e5:b8:31:41:5e:39:4a:c5:b9:
         65:5a:34:bc:24:22:a3:03:52:80:5a:d6:50:21:09:d0:52:3c:
         0b:21:6c:bb:42:bb:c2:0f:7e:3c:93:b4:4e:91:43:1a:39:33:
         20:f3:78:4c:37:64:3c:ee:2e:58:91:af:59:19:cf:2f:84:f5:
         5a:2c:df:f5:07:c6:60:c7:b3:dc:32:b0:30:2a:93:59:d3:95:
         b4:0e:a4:f2:ff:b1:57:aa:1a:dc:25:98:95:5a:c9:26:19:89:
         de:51:5b:48:44:6a:0c:b1:cb:ee:90:78:9b:30:af:ae:25:26:
         a9:5d:c9:c0:f7:9c:e7:3e:c2:de:1c:28:70:97:c4:3e:cd:20:
         17:9e:a4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:57:34 2025 by rpki-client