This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft
File:                     989afb89-021f-486a-9386-ea5ad2a85eb3.mft (raw, json)
Hash identifier:          MIAEtq1Ixa4zWB/qzXwX9sBFmdutyVFcE08CUr5HoLI=
Subject key identifier:   2F:F3:C4:00:C2:06:67:06:BD:70:EE:06:7F:C3:C6:95:8F:09:E1:99
Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52
Certificate issuer:       /CN=989afb89-021f-486a-9386-ea5ad2a85eb3
Certificate serial:       010D0C9F4328584C18FB2C208689725C90F51FD0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft
Manifest number:          010D0C9F4328584AB3B971372E2FC2C294D1E80C
Signing time:             Sat 06 Dec 2025 14:00:03 +0000
Manifest this update:     Sat 06 Dec 2025 14:00:03 +0000
Manifest next update:     Tue 09 Dec 2025 14:00:00 +0000
Files and hashes:         1: 24ff25e6-fb53-31cd-9980-92a2e33cb078.roa (hash: pUiy2UzYFiv/NrKCS/A4KxaEojnQDEorLFjzRS5HaOk=)
                          2: 4bd87949-f415-39b3-9d62-cda131cadecc.roa (hash: JCy6rVoyDmrfMnTUJUqPQLWcgI01HDqeE1TOorvAb4Y=)
                          3: 84a820e8-2494-3391-a8ed-9f54f9e78765.roa (hash: ebcfApQDaKNYk7bRt+ZecRu4+UImn8WRgGAvWHxeDIM=)
                          4: 86f9e25e-c248-3933-9ce8-4e4b4097a657.roa (hash: LPxaf4VXVJ4wOKiQbPtEGMqxTkBHwuwxAJuoUYYoiic=)
                          5: 989afb89-021f-486a-9386-ea5ad2a85eb3.crl (hash: c+e8tQChi2QAg1fLUsJ9riBxkhfeFJsrIKr3jsJBc1w=)
                          6: e17bd202-be79-3815-9fd1-b952c78144fc.roa (hash: jPiuKGrwYPrJ4510ipotolKjywz9VbAYm3HwACVSAxY=)
                          7: fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa (hash: av3rQ6IfAwCAZ8mXg6b3cRN/EmqqWMFWsdJ/P0rUfrk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:18:fb:2c:20:86:89:72:5c:90:f5:1f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3
        Validity
            Not Before: Dec  6 14:00:03 2025 GMT
            Not After : Dec  9 14:00:00 2025 GMT
        Subject: CN=185d9e64-8e4b-451e-8ec2-685877d4e4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5e:9d:34:7d:f5:d0:ef:75:54:57:47:00:9c:
                    9d:9e:3f:8c:cb:c3:40:ba:04:40:74:4f:be:f8:c1:
                    15:2e:5b:0c:29:05:db:2e:a0:f8:36:93:cb:92:9a:
                    78:0d:51:43:95:65:61:2c:81:ff:63:16:bf:ef:3e:
                    38:86:0a:8f:c6:b8:83:73:d4:34:06:0c:42:50:54:
                    52:3e:16:df:b8:5d:84:12:88:45:d5:4f:95:0f:1f:
                    8b:3d:05:91:7b:d3:8d:26:52:bd:9e:2f:fd:0f:50:
                    12:9e:a6:9e:42:8f:3d:1e:75:98:47:d9:85:44:f8:
                    da:57:d0:72:b4:ed:d9:a1:e9:60:85:04:b1:72:23:
                    19:77:e8:71:e6:1d:e2:d2:ca:ed:b4:c2:d0:c6:7b:
                    ad:aa:f3:20:93:b5:02:b4:94:13:7b:48:92:fc:38:
                    a8:ba:18:55:df:00:01:57:c0:0c:0a:07:72:f2:e4:
                    55:8d:88:d2:2c:80:57:0b:da:6f:5b:7c:ee:0d:e1:
                    ee:2f:92:5e:34:48:d4:1e:36:1a:6f:1b:ff:a9:d3:
                    41:44:18:03:a9:e2:3e:a3:2b:57:33:ad:1c:a6:79:
                    3a:6f:89:55:0d:57:c8:72:2b:b1:64:ca:27:ea:06:
                    ec:f5:d2:b1:3f:a4:c2:89:c4:f0:09:74:57:95:d8:
                    67:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:F3:C4:00:C2:06:67:06:BD:70:EE:06:7F:C3:C6:95:8F:09:E1:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl

            X509v3 Authority Key Identifier:
                keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1c:8a:87:63:39:18:a6:06:db:52:2a:4b:39:4b:ae:26:fa:
         41:15:40:f8:51:6e:f1:22:62:61:ef:69:0c:54:42:97:34:84:
         af:6a:61:0c:a2:9c:8a:73:4a:91:44:ac:7a:b6:de:da:ce:61:
         e5:b8:6f:77:16:fb:2a:e8:2d:91:b6:39:1e:a9:86:db:e8:c6:
         00:75:35:fc:01:b7:f0:0c:31:69:51:cc:6c:4e:a5:4b:cc:fe:
         57:ea:fd:2f:82:2f:72:39:df:22:2c:b3:e8:16:15:99:e6:5f:
         f9:70:9f:0b:d7:25:d7:85:4b:95:29:5d:b5:46:8e:2d:de:a2:
         e3:f3:f5:c2:e4:bc:98:e3:3a:ac:2f:d5:91:76:f1:39:ad:1c:
         77:75:bc:75:9e:d8:44:f9:d1:19:1f:c7:fd:fe:d6:f4:ab:76:
         c7:21:90:3d:f1:22:e4:7c:f3:14:19:d3:bc:e6:30:38:f5:64:
         95:ec:8b:48:8d:52:72:09:cd:c2:78:47:0b:99:60:c9:64:e9:
         4b:cc:81:1c:b1:82:f8:a4:66:e9:4b:1a:af:d9:c8:1a:45:33:
         51:4a:a9:9e:f6:ba:7d:79:d9:9d:cf:dd:76:ef:85:dd:4d:03:
         b5:ac:66:54:3c:eb:ee:d4:c7:f3:5f:6b:64:41:1a:68:2f:e4:
         b6:02:fe:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:30:59 2025 by rpki-client