This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft
File:                     25a4f200-c007-4476-b7c6-b306830b991d.mft (raw, json)
Hash identifier:          Q2cscF35490SAMr3YSBsyKONafktqooVXa1Q0X5+j04=
Subject key identifier:   E8:C0:B3:47:78:38:BD:4F:13:81:A5:42:46:FA:BC:D7:B5:24:1D:D3
Authority key identifier: A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC
Certificate issuer:       /CN=25a4f200-c007-4476-b7c6-b306830b991d
Certificate serial:       010D0C9F4328584C1C5ABCEF7CB7581B4CF6B400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft
Manifest number:          010D0C9F4328584AE956642DBB94A1019AE0B2B0
Signing time:             Sun 07 Dec 2025 19:00:03 +0000
Manifest this update:     Sun 07 Dec 2025 19:00:03 +0000
Manifest next update:     Wed 10 Dec 2025 19:00:00 +0000
Files and hashes:         1: 087748f0-1dfe-3009-a1dc-390079e6b5d8.roa (hash: FDdLRAqFkGcwPeQdBBHxXLlfp0nl+QLT5S2cLAhCy3M=)
                          2: 25a4f200-c007-4476-b7c6-b306830b991d.crl (hash: qQYM01Bs6dInHlb7nRDnX/tWyacfovbfWPJDqGjsW28=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1c:5a:bc:ef:7c:b7:58:1b:4c:f6:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a4f200-c007-4476-b7c6-b306830b991d
        Validity
            Not Before: Dec  7 19:00:03 2025 GMT
            Not After : Dec 10 19:00:00 2025 GMT
        Subject: CN=ab7c065a-8ae0-4159-8c61-d63caf50fb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5a:2d:42:14:a6:76:a1:33:11:d2:a1:bd:a9:
                    c3:50:49:02:44:83:97:03:07:da:2e:c0:8f:cd:ee:
                    b9:60:4a:69:4e:f5:91:bf:bb:5c:ec:98:73:ea:f5:
                    c7:c9:50:4e:9f:49:37:0f:df:8b:99:17:ce:ef:73:
                    41:96:35:62:7b:16:59:13:4d:2c:b6:89:b4:20:3d:
                    fc:59:9e:c2:d2:88:88:e9:bf:c4:12:25:6a:09:bd:
                    59:02:0f:e1:58:24:d1:07:25:78:78:26:6c:b7:ba:
                    13:07:2d:72:d8:70:99:38:37:44:49:66:80:b0:af:
                    4a:94:c7:0e:aa:01:f5:4c:70:05:ad:bb:bb:4b:ec:
                    a3:23:68:36:e1:d0:09:1a:e0:a2:5c:37:06:15:f3:
                    ab:48:b4:10:89:b1:c1:ea:37:f0:57:07:36:31:29:
                    ab:a1:fe:5c:bc:75:87:75:8f:27:67:94:7e:64:1a:
                    d5:5a:c0:62:3b:5c:1d:d9:fc:21:2b:8c:a0:24:74:
                    28:32:bc:87:10:04:1a:a7:44:44:61:84:1d:d6:64:
                    b9:7a:6d:2f:96:f3:9f:81:52:35:d1:14:d6:55:1a:
                    84:79:f2:90:9b:8e:71:11:1c:f2:ea:1d:eb:b4:8c:
                    e3:88:c7:a0:21:02:b1:d2:36:c1:2e:7c:c9:7d:2b:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C0:B3:47:78:38:BD:4F:13:81:A5:42:46:FA:BC:D7:B5:24:1D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl

            X509v3 Authority Key Identifier:
                keyid:A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:aa:11:62:37:36:89:80:56:d0:6e:5a:5e:ff:a1:cf:70:95:
         10:b6:a5:9a:00:6d:84:4d:15:0d:86:de:0a:98:1b:d5:f6:8f:
         47:3f:1e:e7:30:8b:b4:36:5c:73:c8:93:41:c6:b2:70:91:05:
         bf:ab:1a:c6:2b:c8:3c:82:dc:ce:f0:30:75:70:63:7b:c1:89:
         c6:be:cd:03:31:9c:44:e6:fd:8f:f0:74:6c:00:eb:90:23:83:
         59:6f:08:c4:18:7e:56:38:70:05:2d:e5:f7:f0:2c:79:4e:c4:
         e7:db:7b:ad:73:ff:8f:9d:f7:7c:c9:93:40:1f:ce:78:90:94:
         07:45:a7:0c:cf:c6:af:a7:36:16:a2:42:1b:f8:e5:7b:79:c9:
         2c:24:25:ee:1c:f0:d4:b7:48:eb:28:bb:42:a9:45:13:4d:8f:
         9b:ca:28:9e:e7:77:66:3a:f9:98:95:ce:56:17:f3:f3:78:6f:
         78:65:81:6b:a0:f6:19:fc:2c:17:ea:e4:4b:f0:cb:42:bb:21:
         c0:b3:c1:40:16:90:77:35:0b:0f:10:01:fb:c1:35:ef:85:2a:
         2c:7d:58:b2:58:2d:f6:d1:23:1f:a7:e0:f4:14:9b:20:1d:66:
         53:6c:e7:20:f9:4d:e5:17:ec:b8:47:47:0c:ec:93:37:8b:d0:
         a7:69:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:37:53 2025 by rpki-client