This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.mft
File:                     24570cf0-6be7-4f66-a550-b04cfd954538.mft (raw, json)
Hash identifier:          0ioaQmfxBpJUO87P8d8asC0L+mUp9nvIEgCybyBl9W8=
Subject key identifier:   3A:B3:BB:C1:88:66:EA:E7:65:AD:47:8F:8F:C2:A8:D1:B2:EF:41:A1
Authority key identifier: 0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE
Certificate issuer:       /CN=24570cf0-6be7-4f66-a550-b04cfd954538
Certificate serial:       010D0C9F4328584CA3DEB5467D876D5B882FCD80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.mft
Manifest number:          010D0C9F4328584B03EAC8878D5A34A2172AB3B8
Signing time:             Sun 25 Jan 2026 08:00:04 +0000
Manifest this update:     Sun 25 Jan 2026 08:00:04 +0000
Manifest next update:     Tue 27 Jan 2026 08:00:00 +0000
Files and hashes:         1: 175b01ae-d440-3465-a430-3580015e4b3c.roa (hash: /6VKtTH8KnEfQOvZqefLGvsvwWhKM11CRgn1FAl7xrA=)
                          2: 24570cf0-6be7-4f66-a550-b04cfd954538.crl (hash: yLrSY3Rg3AYDM+An09JKMH7ZL3uuLZk68FBUAuW+qUI=)
                          3: b1e93cdb-7048-3eec-a474-37efd56ac00b.roa (hash: meaOK2fx0oD/NWx+MKABEZwxgpKQTn0dZ3n3tpDqH+Y=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Jan 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a3:de:b5:46:7d:87:6d:5b:88:2f:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24570cf0-6be7-4f66-a550-b04cfd954538
        Validity
            Not Before: Jan 25 08:00:04 2026 GMT
            Not After : Jan 27 08:00:00 2026 GMT
        Subject: CN=4e830e5d-4a38-408c-87df-e380e9275f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:22:d7:f4:2b:fe:8d:ad:3d:66:30:bb:82:7f:
                    aa:c9:b7:b1:39:cb:66:6c:55:7c:71:60:69:7b:21:
                    54:b6:7d:36:91:60:d8:7c:7f:73:65:8c:d1:fe:28:
                    87:2b:74:2a:51:3b:cf:27:1c:c6:79:c6:d1:06:0e:
                    de:fa:62:5a:6e:62:bc:55:a4:ff:ac:bf:6e:24:ed:
                    c5:86:97:07:01:dd:a0:d9:da:19:92:60:81:a5:36:
                    69:fb:2f:dd:3d:b6:06:fe:36:21:09:26:31:8d:fc:
                    5f:11:56:63:e3:6f:7e:b5:33:f8:55:5d:80:9f:07:
                    17:34:b9:7c:53:73:68:96:1a:c8:34:da:6d:61:00:
                    13:4c:65:c9:41:f2:27:2c:3f:b0:e3:a3:f4:5d:7b:
                    00:2a:03:50:50:75:41:fe:cf:9d:8e:e0:3a:61:c7:
                    d9:10:9f:be:38:f4:aa:b8:3d:63:da:54:a2:cb:65:
                    b0:9b:5a:ab:0d:95:8b:3a:a4:c9:26:46:b9:27:dd:
                    4d:e4:d8:60:c9:52:ea:91:15:7b:a9:57:1b:53:ea:
                    9d:66:a4:00:2b:88:59:73:e3:a7:dc:59:cb:e6:37:
                    54:42:2e:10:45:30:d8:33:52:23:2e:41:6f:b1:f0:
                    4a:3a:94:74:d1:32:4f:ad:4e:11:5b:da:df:00:44:
                    a0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B3:BB:C1:88:66:EA:E7:65:AD:47:8F:8F:C2:A8:D1:B2:EF:41:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538/24570cf0-6be7-4f66-a550-b04cfd954538.crl

            X509v3 Authority Key Identifier:
                keyid:0A:C0:D2:13:85:AA:09:75:83:97:EF:B6:FB:54:0A:9B:77:8D:D2:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/24570cf0-6be7-4f66-a550-b04cfd954538.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:9e:9d:2c:4a:20:2d:e6:26:03:4a:88:f4:82:97:41:d8:f1:
         bb:53:a7:6e:a5:b5:4d:5e:5a:db:5b:ea:1c:23:5d:be:94:61:
         b6:fc:d5:d1:8a:83:fa:2b:bb:6a:db:c8:96:6c:e4:97:7d:56:
         3e:98:86:a2:20:7c:41:31:fb:ed:2a:11:e9:68:2e:84:04:46:
         65:92:a0:65:3a:46:ab:c0:b9:04:55:52:0b:13:e8:a4:4e:9f:
         ca:6f:1a:d0:61:9a:9d:4a:c0:65:df:32:21:6f:63:37:ba:b5:
         d9:28:9d:ae:be:6b:19:51:4c:f1:13:7f:5c:57:28:9b:11:8e:
         4e:40:d0:62:fb:6f:69:8d:89:73:9d:66:4b:bf:d8:61:c5:cc:
         82:fe:be:27:ac:6e:47:a7:46:e3:2a:a6:0e:04:1e:83:53:f9:
         39:63:2e:e4:12:4f:37:dd:52:c5:83:8a:84:83:79:8d:f1:5b:
         86:14:db:90:f5:20:6d:db:81:d6:d9:67:16:fb:e3:4f:a9:0d:
         75:0c:e0:82:22:92:56:41:ce:46:f0:8f:8c:59:d0:12:7a:ae:
         33:1a:07:d1:86:2a:42:c3:e7:ee:ee:9a:6c:5f:04:18:10:36:
         91:d0:15:dd:ba:9f:0d:ee:f0:e8:8e:ae:e7:b4:58:e9:f9:00:
         18:ca:98:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:03:32 2026 by rpki-client