This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft
File:                     58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft (raw, json)
Hash identifier:          kgbLALmQgnhhfIjZwUz+8SPPuZ0szz1cWXgKhdnhd1M=
Subject key identifier:   6E:0B:98:45:ED:69:C4:6D:E4:C7:2F:FC:6D:75:2E:C8:31:B0:CD:28
Authority key identifier: 55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2
Certificate issuer:       /CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45
Certificate serial:       010D0C9F4328584CA2D2BA46DFF919598AAFCC20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft
Manifest number:          010D0C9F4328584ACB0A0D5EAC27B2442ECB6C94
Signing time:             Sat 24 Jan 2026 23:00:08 +0000
Manifest this update:     Sat 24 Jan 2026 23:00:08 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:00 +0000
Files and hashes:         1: 58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl (hash: 8bGaN8t4mlJM63c2IkD+2bUNwN17ALXoXn/v4vvcdVM=)
                          2: 71d350d1-8b29-3843-ac32-aaa6803c69ad.roa (hash: habJn7osBao0q6iNm8KYni4zJDP7h+Y8KshCVCEpF8w=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a2:d2:ba:46:df:f9:19:59:8a:af:cc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45
        Validity
            Not Before: Jan 24 23:00:08 2026 GMT
            Not After : Jan 26 23:00:00 2026 GMT
        Subject: CN=ad610990-8286-4554-a7c3-da2eb8cfa4b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b2:7c:10:7a:4c:17:90:4e:58:10:cc:f0:f1:
                    c6:5a:f0:73:3a:bf:e6:cf:32:11:13:75:06:1d:30:
                    41:21:84:dc:dd:6f:7e:5d:a8:2e:9f:f5:53:c7:da:
                    a9:3b:0c:fc:3e:eb:63:75:d6:8d:3d:64:fc:ac:0f:
                    9b:43:8b:e3:67:bb:a5:b3:6c:7d:77:e4:e6:45:b0:
                    da:33:84:c2:47:47:ac:1c:f0:29:c7:1a:44:cd:62:
                    7d:8f:69:ce:c2:2b:51:d6:89:8a:37:19:82:25:a8:
                    a3:f6:9a:f6:33:6e:7d:e8:f5:22:70:ff:9c:8a:37:
                    c4:a8:d7:55:b1:2a:17:03:e7:1e:82:c7:49:28:04:
                    10:57:77:5a:6e:2d:a2:12:9e:8f:81:fd:c8:21:fa:
                    93:f0:0c:6a:b0:d1:89:16:84:75:07:52:99:e6:3f:
                    ac:7e:f1:1c:49:89:cb:32:07:ca:25:7b:91:af:4b:
                    79:68:d1:df:8f:98:9d:e1:7f:80:a6:cc:15:03:ad:
                    b4:97:df:ba:a7:9f:3e:7d:10:08:cf:da:a4:18:e6:
                    69:ab:7e:2b:74:2e:20:74:35:8e:d9:df:59:0f:48:
                    2f:23:2c:46:94:bc:be:a5:04:b2:c9:39:91:2e:ab:
                    be:08:24:78:3f:cb:9e:89:02:33:89:4f:25:bb:6b:
                    38:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0B:98:45:ED:69:C4:6D:E4:C7:2F:FC:6D:75:2E:C8:31:B0:CD:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl

            X509v3 Authority Key Identifier:
                keyid:55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:1c:8b:af:36:0f:56:cc:de:34:05:bc:7b:fb:09:b5:f6:28:
         b5:45:72:f1:28:d4:6f:98:24:b3:e7:9d:31:70:59:58:b9:9f:
         34:7f:d6:2f:54:5b:d7:80:a1:d4:eb:fa:72:ca:7e:ab:80:3f:
         10:b7:d5:67:dc:a4:ca:8a:01:9c:19:74:3d:d2:62:f9:b9:1a:
         56:fd:84:cb:9f:21:3d:d9:4e:c7:d0:ef:4e:41:29:ed:3f:0b:
         cb:85:91:37:8d:f3:58:92:27:83:a9:7a:64:dd:0d:f7:80:ec:
         dd:31:1e:a5:8e:ef:01:74:0b:c5:44:1e:cc:75:7f:89:0d:6e:
         84:41:1d:e5:d3:6d:23:0c:af:ca:ff:3a:27:59:9e:e0:14:e1:
         fb:8e:4d:0c:45:43:6a:e8:b1:53:fe:26:7f:76:84:4f:b1:7c:
         0a:6c:06:0a:57:c4:bf:5d:12:49:95:b3:7b:91:55:73:d1:2b:
         5e:f4:69:f5:14:67:a0:48:74:cc:96:79:25:77:29:f7:c6:7b:
         7d:c4:c9:9f:6e:51:0e:bc:f5:ff:d7:83:9a:07:55:34:47:9e:
         5e:d4:6e:b4:b5:9c:73:84:67:94:05:db:24:1c:4a:b0:ae:67:
         f1:60:e1:1f:f0:5f:18:6a:2d:fb:2d:fa:81:30:68:21:12:f4:
         22:3c:1e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----