This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft
File:                     cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft (raw, json)
Hash identifier:          AeCVsAEGZS2Wmli/zzsbaDCdkfTIiJmVfNHYE3QY9zo=
Subject key identifier:   9B:32:29:60:00:CB:A4:55:36:0F:7E:F6:EC:24:7D:97:09:D0:7D:CE
Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27
Certificate issuer:       /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0
Certificate serial:       010D0C9F4328584CA2D2BC67B6272F434F39A580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft
Manifest number:          010D0C9F4328584ACB090E855DD5D7EE923FD42C
Signing time:             Sat 24 Jan 2026 23:00:08 +0000
Manifest this update:     Sat 24 Jan 2026 23:00:08 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:00 +0000
Files and hashes:         1: cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl (hash: A2P3tH/ktp5miFr6Y7edHsREk60NEXmKNVD5rlrHPpY=)
                          2: eb089fd3-de83-32fc-94eb-491970ba886f.roa (hash: NEv5PERJ9yiU4Gzduf+UsNDltzFnyLY9eG74eJyUSuA=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Jan 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a2:d2:bc:67:b6:27:2f:43:4f:39:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0
        Validity
            Not Before: Jan 24 23:00:08 2026 GMT
            Not After : Jan 26 23:00:00 2026 GMT
        Subject: CN=948431bd-b243-499d-81f3-e4b3750c24e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:f7:c1:5c:8e:ac:51:d2:10:7f:03:b8:fa:
                    2c:69:7a:de:52:4e:51:f9:27:99:d0:29:be:6f:fe:
                    6b:5c:50:4f:c9:7e:73:3e:44:b3:f8:4a:52:9a:7e:
                    ae:53:3f:e9:fb:a1:b6:6a:a6:79:9f:0a:01:01:c0:
                    d8:5e:f2:d1:b5:0a:2d:5a:48:16:9c:59:2f:6e:3d:
                    ef:9b:ea:6b:fb:f4:0a:52:32:c1:a0:2a:2a:06:91:
                    df:dc:5d:b2:a7:6b:c8:9d:76:ce:c9:dd:cf:8a:88:
                    27:c5:e8:d0:85:20:c4:18:f9:ea:f8:f5:8b:c9:e3:
                    30:79:bb:1e:0a:7f:32:3c:b2:1b:cd:7c:6a:7d:6c:
                    c6:fb:8a:f8:53:04:b3:be:2a:4f:1a:96:37:c9:11:
                    d2:e9:ed:e0:c4:06:b5:b6:79:a8:43:d3:f7:88:49:
                    13:71:dc:96:0a:20:eb:7b:b9:6e:96:9b:92:b2:bc:
                    f3:b0:5e:ec:c5:08:58:60:8c:f9:87:fa:54:f5:cf:
                    3e:d0:c6:dd:43:ad:49:4c:65:2d:26:1d:1d:6c:bf:
                    42:cd:5a:e6:30:23:ac:fa:7e:cb:e2:70:0c:f8:f0:
                    7e:ca:ac:d1:8a:fc:e2:1a:86:98:2f:a0:cb:ae:30:
                    3e:2b:ab:f4:13:e5:e7:0a:c5:65:7b:0a:b0:71:bd:
                    af:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:32:29:60:00:CB:A4:55:36:0F:7E:F6:EC:24:7D:97:09:D0:7D:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl

            X509v3 Authority Key Identifier:
                keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:5b:c7:3b:9d:92:16:1b:2a:58:79:70:67:20:ba:91:7f:18:
         37:7a:f8:30:de:47:49:a4:6c:9b:03:f7:e5:12:14:6a:4d:e2:
         ff:06:33:c1:63:8e:89:48:8c:5d:a3:1d:b3:f5:c9:d7:03:2d:
         67:1f:f2:88:3d:c6:9a:ec:bc:1f:e5:0d:79:29:7e:0c:6d:a8:
         70:16:35:cd:d3:2c:6e:03:0e:34:3b:e1:de:92:c9:40:a5:fb:
         fe:48:0e:d9:9d:b8:03:3f:3a:1b:04:d8:f1:f7:fc:0e:c2:06:
         16:be:3f:60:dd:13:f1:30:0f:12:38:b2:8b:df:7e:c1:5e:ea:
         17:02:80:a8:f9:d8:97:2f:a2:df:f8:aa:a7:24:a5:de:06:b6:
         98:87:23:2e:87:b2:90:03:61:87:82:1f:b2:79:9a:33:ee:30:
         48:c9:84:08:c4:61:16:ea:34:8a:b9:97:f0:51:3a:28:5c:13:
         c6:5a:59:0a:0d:f5:f7:11:ae:ca:ec:7b:20:f8:ea:9e:1c:b9:
         c8:91:da:4a:cf:71:ca:bb:93:22:62:9d:fa:c3:ef:52:6b:52:
         6e:0e:7a:c6:d7:8c:73:c5:ed:34:60:70:d2:fb:dd:22:ed:74:
         1e:0b:86:8a:8d:18:ca:85:0a:b9:67:85:0e:12:a4:b0:de:fb:
         f3:6a:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----