This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft
File:                     252aff2f-9807-45d4-ba31-1a3198784cae.mft (raw, json)
Hash identifier:          L4nxalSRpD7n9rRMHSJtT6RbN3PkceP2z2cYt2F3Iek=
Subject key identifier:   D1:7D:C3:99:72:D4:0A:A9:32:AF:AB:F2:62:00:2D:3B:1D:92:31:31
Authority key identifier: 65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0
Certificate issuer:       /CN=252aff2f-9807-45d4-ba31-1a3198784cae
Certificate serial:       010D0C9F4328584C246178973650DEDB79908D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft
Manifest number:          010D0C9F4328584AAE4DC59D07CE7A5E6AC02F09
Signing time:             Wed 10 Dec 2025 16:00:03 +0000
Manifest this update:     Wed 10 Dec 2025 16:00:03 +0000
Manifest next update:     Sat 13 Dec 2025 16:00:00 +0000
Files and hashes:         1: 252aff2f-9807-45d4-ba31-1a3198784cae.crl (hash: 6VJjQmNMqlCMV6jVm/qDydWPnbYtVYKRWOI5wx7mdtM=)
                          2: 3544a471-27ca-3d8b-9f8a-6fa2f613447c.roa (hash: CU0ZnnwGj8gncJrAIAKUgjbzQan2iTzZVYhhbOT4T90=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:24:61:78:97:36:50:de:db:79:90:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252aff2f-9807-45d4-ba31-1a3198784cae
        Validity
            Not Before: Dec 10 16:00:03 2025 GMT
            Not After : Dec 13 16:00:00 2025 GMT
        Subject: CN=24083f39-7176-4fd1-82e3-48f8b435cefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:31:c1:54:b6:00:a9:51:52:8f:82:9b:cb:
                    f0:54:d4:02:e7:b4:a2:06:3a:6e:9d:7d:50:14:2b:
                    d1:25:9c:6f:e2:3d:9f:05:b7:e4:5a:3c:b0:f5:6a:
                    e8:fe:71:98:ac:9f:c4:1f:e5:2d:35:b9:4d:c5:68:
                    bd:78:b7:e3:71:e7:63:3f:b7:b7:0a:d9:d2:46:d2:
                    7b:ff:64:cd:b7:93:f2:dd:11:a3:90:76:c1:5a:31:
                    bd:60:70:ec:80:52:15:cd:00:3f:df:26:29:99:64:
                    cc:0a:4d:1f:b0:5d:71:f4:6a:54:1e:13:4e:be:1d:
                    d9:a4:ae:ef:19:3b:00:9b:0b:e2:60:bd:93:64:20:
                    43:e7:e8:cd:f2:cf:e6:14:06:7a:e5:bd:f0:ef:24:
                    ae:b1:a1:62:f8:52:f1:86:83:d4:dd:24:61:c8:b6:
                    24:c3:67:7a:74:db:bb:7c:16:da:50:51:e2:d4:16:
                    47:fc:a0:ab:f0:f8:02:a9:06:d9:17:65:62:f2:83:
                    e3:c4:1b:13:3e:38:34:45:86:25:1b:93:f3:df:a5:
                    72:d0:6f:29:93:4c:26:56:c7:b5:86:cb:f5:00:a5:
                    a5:b8:41:ae:2c:8b:1a:7e:48:35:ef:77:ea:ab:07:
                    9a:ed:00:0c:93:07:80:cd:70:4a:da:a5:b7:d6:28:
                    b9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7D:C3:99:72:D4:0A:A9:32:AF:AB:F2:62:00:2D:3B:1D:92:31:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae/252aff2f-9807-45d4-ba31-1a3198784cae.crl

            X509v3 Authority Key Identifier:
                keyid:65:21:3A:3B:45:2D:F3:33:92:5D:D7:16:83:0C:31:30:7A:F8:98:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/252aff2f-9807-45d4-ba31-1a3198784cae.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:72:ed:ac:2d:1d:82:ed:f5:b3:9b:f7:84:47:9d:88:48:a3:
         44:5c:38:40:cf:31:33:0a:bc:ce:a7:ae:4d:47:50:6d:4f:7a:
         49:8e:03:0a:3d:1c:fe:50:af:e2:f9:04:87:a0:e9:d0:92:bb:
         68:f7:c0:23:51:5b:36:fd:f1:81:36:6a:38:3b:23:93:36:d0:
         d1:f6:ae:f9:41:88:55:6d:3d:92:19:dc:9c:d2:dd:8d:69:1f:
         4b:ed:d9:c3:b1:e2:b3:65:2e:c0:80:eb:c4:ca:8c:44:16:e6:
         5a:a8:7b:18:8d:b6:00:73:7d:5a:22:fe:b6:62:3a:25:d7:18:
         3a:48:5e:68:20:cc:88:6a:ed:7a:14:f5:ef:85:49:72:74:d9:
         25:d7:00:5b:7a:6e:73:00:3f:e4:7d:7c:2c:f3:57:de:d7:9f:
         79:44:e9:cd:e8:d5:72:92:52:98:41:10:8a:4e:52:65:f8:d6:
         f6:9f:92:2a:8d:f8:0a:08:04:1e:2f:f0:b9:7c:3a:4e:eb:8f:
         d9:17:28:12:d1:f4:13:19:18:b6:f2:1e:cc:73:4f:50:b9:63:
         b8:0e:42:d1:aa:65:cd:be:72:7f:e1:42:57:a9:8a:76:e0:da:
         8e:7e:cc:db:1f:56:ef:b4:93:b8:0d:9a:11:07:b5:db:46:f1:
         c6:30:64:59
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwkYXiXNlDe23mQjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUyYWZmMmYtOTgwNy00NWQ0LWJhMzEtMWEzMTk4Nzg0
Y2FlMB4XDTI1MTIxMDE2MDAwM1oXDTI1MTIxMzE2MDAwMFowLzEtMCsGA1UEAxMk
MjQwODNmMzktNzE3Ni00ZmQxLTgyZTMtNDhmOGI0MzVjZWZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6gxwVS2AKlRUo+Cm8vwVNQC57SiBjpunX1Q
FCvRJZxv4j2fBbfkWjyw9Wro/nGYrJ/EH+UtNblNxWi9eLfjcedjP7e3CtnSRtJ7
/2TNt5Py3RGjkHbBWjG9YHDsgFIVzQA/3yYpmWTMCk0fsF1x9GpUHhNOvh3ZpK7v
GTsAmwviYL2TZCBD5+jN8s/mFAZ65b3w7ySusaFi+FLxhoPU3SRhyLYkw2d6dNu7
fBbaUFHi1BZH/KCr8PgCqQbZF2Vi8oPjxBsTPjg0RYYlG5Pz36Vy0G8pk0wmVse1
hsv1AKWluEGuLIsafkg173fqqwea7QAMkweAzXBK2qW31ii50wIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFNF9w5ly1AqpMq+r8mIALTsdkjExMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJh
ZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMxOTg3ODRjYWUvMjUyYWZmMmYtOTgwNy00
NWQ0LWJhMzEtMWEzMTk4Nzg0Y2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjUyYWZmMmYtOTgwNy00NWQ0LWJh
MzEtMWEzMTk4Nzg0Y2FlLzI1MmFmZjJmLTk4MDctNDVkNC1iYTMxLTFhMzE5ODc4
NGNhZS5jcmwwHwYDVR0jBBgwFoAUZSE6O0Ut8zOSXdcWgwwxMHr4mMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8yNTJhZmYyZi05ODA3LTQ1ZDQtYmEzMS0xYTMx
OTg3ODRjYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIcu2sLR2C7fWzm/eER52I
SKNEXDhAzzEzCrzOp65NR1BtT3pJjgMKPRz+UK/i+QSHoOnQkrto98AjUVs2/fGB
Nmo4OyOTNtDR9q75QYhVbT2SGdyc0t2NaR9L7dnDseKzZS7AgOvEyoxEFuZaqHsY
jbYAc31aIv62Yjol1xg6SF5oIMyIau16FPXvhUlydNkl1wBbem5zAD/kfXws81fe
1595ROnN6NVyklKYQRCKTlJl+Nb2n5IqjfgKCAQeL/C5fDpO64/ZFygS0fQTGRi2
8h7Mc09QuWO4DkLRqmXNvnJ/4UJXqYp24NqOfszbH1bvtJO4DZoRB7XbRvHGMGRZ
-----END CERTIFICATE-----
Generated at Wed Dec 10 18:07:38 2025 by rpki-client