This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft
File:                     ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft (raw, json)
Hash identifier:          Dxpenr5n2ZRFEQWPytUPw+g0d93kU3A5/aeuZrf0glo=
Subject key identifier:   52:48:7A:B8:04:28:9A:C5:A4:7E:42:FD:5F:1E:A6:2E:CF:70:22:DB
Authority key identifier: 8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63
Certificate issuer:       /CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de
Certificate serial:       010D0C9F4328584C18BFA6E78401BA60D8A56880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft
Manifest number:          010D0C9F432858496A0C3C15BC9330CA323C2540
Signing time:             Sat 06 Dec 2025 12:00:08 +0000
Manifest this update:     Sat 06 Dec 2025 12:00:08 +0000
Manifest next update:     Tue 09 Dec 2025 12:00:00 +0000
Files and hashes:         1: 25011387-72eb-330c-8418-a7095dd54d97.roa (hash: BGs7QAVLM5Kilx992D/z3BnJEINTdA70R42WLLEVYpM=)
                          2: 9ad5f257-d034-30d5-9781-af4a5f8619f4.roa (hash: z8edSdccrJE8PV96ld3PINjhomBidAq651tKEt9Qoc4=)
                          3: c80c6de4-1fae-3db8-b512-f8b77f106309.roa (hash: U0XVeAjafZ5YpzdhJ7ArkkZlH90Y+mP1JFnaGFohchE=)
                          4: ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl (hash: Gtik/72dtaqbUNcH4tPTw2wgkYeXDjPzQ1rPqRbpOZs=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:18:bf:a6:e7:84:01:ba:60:d8:a5:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de
        Validity
            Not Before: Dec  6 12:00:08 2025 GMT
            Not After : Dec  9 12:00:00 2025 GMT
        Subject: CN=54f43c22-e1e6-4e2f-aa71-66abcec8dc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:af:23:b6:b3:38:b3:92:ce:cd:09:30:2c:58:
                    49:d1:38:36:82:da:ff:0c:a3:0f:a9:03:93:6b:5f:
                    9c:75:82:52:22:8a:16:e5:3a:70:85:ca:ab:b6:d8:
                    f7:d3:f1:de:80:bb:3c:d8:09:a5:aa:2a:af:f8:5f:
                    11:74:22:87:ac:73:c7:94:94:fe:f6:ce:92:b9:a8:
                    f9:a6:6c:19:24:5f:c2:cb:d6:cc:8f:57:93:30:ca:
                    d2:56:3c:4e:7d:37:ac:c4:b8:d3:4b:ee:93:9f:ba:
                    1d:73:40:6c:6a:d2:1d:a0:9a:c4:2c:c4:e8:12:1e:
                    b5:2c:27:a7:20:92:3e:8f:70:a2:9b:dd:b4:27:c5:
                    9d:da:1f:40:d1:cd:d4:ba:c1:76:9b:48:df:84:95:
                    18:99:4a:ac:dc:7e:0d:4b:15:a0:31:e2:e9:cf:f3:
                    bf:68:6b:74:13:0f:cc:f0:ff:a4:5b:eb:06:90:42:
                    a6:7e:ad:2f:0d:be:6c:3a:df:22:1c:b7:84:c1:74:
                    36:a2:02:d0:9e:48:ee:8f:51:43:20:14:39:b1:fa:
                    41:2e:1d:fa:56:ce:a9:02:9e:24:68:22:38:ac:0c:
                    56:60:fb:69:36:1b:17:fb:b9:cc:a1:7b:e4:b4:8f:
                    6d:45:93:73:6f:21:46:21:1e:7f:cc:be:ea:60:27:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:48:7A:B8:04:28:9A:C5:A4:7E:42:FD:5F:1E:A6:2E:CF:70:22:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:70:ec:e6:18:12:fd:a7:38:6f:fb:4c:b7:5c:6a:73:07:d6:
         1c:c3:e5:31:a6:8a:39:74:27:bf:08:ad:e1:b5:8f:be:ac:6a:
         fe:3a:4c:67:77:93:4f:4f:c0:7d:38:c7:52:e7:80:dd:30:b1:
         e9:da:02:25:ac:87:52:1a:d5:9a:8c:f1:a6:ed:7e:ae:03:0f:
         ff:30:f1:3b:17:e3:eb:e5:c3:6d:d6:ca:0b:70:d7:81:ce:b9:
         a9:4f:1b:83:70:31:3e:36:65:c7:0c:0c:86:e6:f2:8e:ee:c4:
         00:19:90:59:c9:a4:48:97:31:23:f5:79:d8:cc:69:fb:cc:1a:
         b2:a0:b6:e9:b4:59:04:fe:67:fe:5f:4a:87:b9:a7:66:12:b0:
         e2:92:b3:b0:64:8f:54:e2:3e:b8:4b:e8:56:53:1b:49:b2:f2:
         71:c6:fe:f5:8d:87:03:39:ca:3c:3d:48:04:3c:1a:b7:71:32:
         11:05:f5:d4:60:d9:03:cd:17:61:68:82:36:bb:2b:7f:ff:95:
         95:49:7e:23:c5:cc:7a:1c:ff:5c:34:8a:3e:df:10:41:62:4b:
         c2:12:03:29:ad:bb:fa:f4:77:99:f1:f7:01:66:f9:a2:e5:58:
         52:77:22:8b:05:3a:30:f4:c9:5d:cc:2d:27:eb:35:1a:8a:96:
         32:da:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:55:40 2025 by rpki-client