This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
File:                     8a8a1a2d-c949-4896-93b9-71f917048e79.mft (raw, json)
Hash identifier:          sBDlAX9dS4nPLJRAXACyO8Cb24PsRD/W7KBzyHCU3vM=
Subject key identifier:   E9:33:6B:BB:4A:BF:07:FD:0C:AC:04:04:3B:6B:12:91:C9:8A:B9:AE
Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Certificate issuer:       /CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Certificate serial:       010D0C9F4328584C38DA7B9525D1480F23F53880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
Manifest number:          010D0C9F4328584073A831A891656E121B8A8C33
Signing time:             Thu 18 Dec 2025 00:00:04 +0000
Manifest this update:     Thu 18 Dec 2025 00:00:04 +0000
Manifest next update:     Sat 20 Dec 2025 00:00:00 +0000
Files and hashes:         1: 2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa (hash: ECvuqiFgvJvz3+BnFD7KI9BcWphdNbCU0lZ0qo4jD44=)
                          2: 8a8a1a2d-c949-4896-93b9-71f917048e79.crl (hash: ltECB/ddfwb+bXGFWBf8bADT4nLUrEPwwznl5UuTMSU=)
                          3: 8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa (hash: T8GmcmXS9iB6+ttGF0E66VqA+pN0J4Rt7ceFn0Em65k=)
                          4: af752bb6-5c49-322d-b8be-c43eb496a124.roa (hash: leCDdzXe/bcgc64VtkuZKeGat+posund3lbhFY8Pxak=)
                          5: d57c390c-9f0a-385c-a044-6ac60c35012d.roa (hash: UftDK6dmjX76yCg2tI3fVCJ/aIdO/VNIhwO7/3RJ+Yk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:38:da:7b:95:25:d1:48:0f:23:f5:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
        Validity
            Not Before: Dec 18 00:00:04 2025 GMT
            Not After : Dec 20 00:00:00 2025 GMT
        Subject: CN=473eefee-ec23-4806-a157-31055f5c4fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c9:ba:f3:8c:c8:fe:60:3f:7f:00:6f:50:a5:
                    0c:b4:6b:4c:50:3c:bc:04:f9:a2:a3:3d:73:00:43:
                    56:c4:b9:38:a1:8e:5f:63:4d:dc:42:47:dc:aa:b8:
                    df:ba:89:b6:fe:10:5f:c9:06:4a:19:17:64:71:66:
                    ca:ec:5f:d4:93:41:ba:59:95:22:3c:72:c6:6f:81:
                    12:0d:ed:6c:96:8c:40:62:e5:77:cf:2a:7a:91:97:
                    cc:ad:58:ee:3a:d6:c4:07:ca:8f:f8:1b:3d:1e:4b:
                    a5:c6:02:02:f9:f0:92:57:1a:12:05:27:b0:2b:61:
                    54:0e:c7:79:ed:30:b0:fb:d3:60:2c:22:a4:1a:0c:
                    25:74:33:a7:53:aa:62:5d:cb:60:a2:24:3c:52:a9:
                    46:f2:b6:26:6f:94:0e:d2:46:79:fd:52:c0:88:bc:
                    02:fd:5d:d5:6c:fc:d1:1c:7f:00:94:89:c5:11:e4:
                    34:40:e5:c2:da:63:ad:33:7b:db:c0:ee:e5:c2:11:
                    a1:10:71:4e:e4:72:96:21:ce:a5:f5:69:8f:c9:a6:
                    b2:56:b5:e3:64:05:d8:ab:4a:9d:b2:e7:e5:7f:f7:
                    37:4f:7c:01:88:5c:76:85:d2:a3:e6:9f:12:7e:92:
                    f5:22:f6:df:43:0e:09:98:ba:0e:9b:d7:de:5e:55:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:33:6B:BB:4A:BF:07:FD:0C:AC:04:04:3B:6B:12:91:C9:8A:B9:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl

            X509v3 Authority Key Identifier:
                keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c7:ea:d3:ba:ec:bd:de:ca:96:92:cc:d0:91:d3:46:03:bd:
         92:3c:51:1f:f7:62:2f:32:80:62:b9:0e:d5:51:5a:81:d8:70:
         01:2b:38:39:d9:58:bb:a4:33:bb:ad:4f:c8:45:97:a9:39:6b:
         01:35:fd:b0:7b:b6:7d:5d:cc:b1:39:43:6b:b0:ac:9f:04:91:
         de:7c:92:bd:f2:4d:cf:a7:fa:17:1f:d4:4d:ad:c2:d2:1b:b9:
         8f:78:f9:e6:80:1e:4e:e2:36:12:2a:33:f7:62:2a:45:97:46:
         8b:c9:38:5c:38:86:04:98:c6:df:d9:a2:8c:12:43:66:38:c2:
         7a:3d:cc:a4:98:5f:bd:f7:74:40:51:2b:bf:46:ec:ee:c6:e9:
         48:55:95:87:ac:6d:78:57:cf:67:cf:6a:8e:75:5e:0c:bb:e6:
         bc:41:c4:70:cf:a8:99:59:00:2f:7d:5e:51:0d:61:ef:a0:8d:
         01:b8:0c:fc:08:86:60:e8:08:9c:ed:2b:41:e1:e2:89:b0:50:
         0f:f0:a1:5a:5b:70:f6:73:59:9f:44:fe:7d:c8:a4:3c:b0:4c:
         b5:a1:60:60:66:90:b4:66:7e:b9:f6:ad:f2:d8:25:f4:20:10:
         63:17:eb:43:7d:07:0e:5c:d6:6a:89:ae:6d:6c:69:f4:8e:61:
         4a:82:00:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:25:53 2025 by rpki-client