This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft
File:                     28168b94-cad8-4dae-a00d-057ac35417a3.mft (raw, json)
Hash identifier:          FkA7Nf5f3pt2AfOgmIRlTT40gUq4NxQkRWi+P2Khe54=
Subject key identifier:   FD:D8:F4:F3:11:60:36:DD:19:BD:ED:93:AB:DA:3F:EF:60:C6:41:5F
Authority key identifier: 16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89
Certificate issuer:       /CN=28168b94-cad8-4dae-a00d-057ac35417a3
Certificate serial:       010D0C9F4328584C2EBBC90042EF5EF4CF219DF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft
Manifest number:          010D0C9F4328584073A84AF6A0544A9F4F7A3717
Signing time:             Sun 14 Dec 2025 09:00:08 +0000
Manifest this update:     Sun 14 Dec 2025 09:00:08 +0000
Manifest next update:     Tue 16 Dec 2025 09:00:00 +0000
Files and hashes:         1: 28168b94-cad8-4dae-a00d-057ac35417a3.crl (hash: ARAiXp8cnvrWlbm45nHR+zAW1OHVpwIeJ9w2GshKod8=)
                          2: 49085c64-f3ef-35b0-8fbf-8ca6b36b4df0.roa (hash: pqySfbWaEMaKfXjmZ30go0HHp4VOZtXTVYvMm6002J4=)
                          3: 59ba3509-76c2-3b16-9160-b70599626c49.roa (hash: D7TuPYiaVMHvah+x4J0dXUGVHm1Up/gNwreKBbezbMA=)
                          4: b6b08a1d-c41b-3032-ac31-e83eadb7b68d.roa (hash: YuXeKUh+rR0dUtnHH+F9rTBgcNr1+CkSAnA39SY1tPE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2e:bb:c9:00:42:ef:5e:f4:cf:21:9d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28168b94-cad8-4dae-a00d-057ac35417a3
        Validity
            Not Before: Dec 14 09:00:08 2025 GMT
            Not After : Dec 16 09:00:00 2025 GMT
        Subject: CN=da1a81eb-608a-4935-99cc-d3976726fc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:fd:14:44:a2:8c:7b:67:b8:74:85:b7:9c:
                    d0:c9:49:5e:96:e4:8b:88:d5:20:28:b6:7d:76:9c:
                    84:0c:1b:84:29:22:63:7b:6d:22:c6:7a:fc:d8:70:
                    0a:a1:f8:4f:f3:7e:19:14:f9:99:da:35:e9:b4:ff:
                    74:89:f9:a4:ec:09:9a:5f:13:5a:b7:aa:71:a0:b8:
                    6e:c0:15:9e:a6:a6:77:ed:99:5f:0a:0f:70:40:da:
                    e6:04:ae:ac:95:b1:ce:23:0b:95:d8:94:30:e9:68:
                    c0:58:11:74:8c:b2:6c:c2:57:a5:cf:55:f4:f9:88:
                    eb:30:71:d9:e9:31:9f:46:cb:6a:c7:58:24:b6:84:
                    aa:88:a0:85:a1:a8:31:4d:54:ed:e7:f1:d3:13:bd:
                    ad:25:40:e4:76:4d:04:a7:ce:93:cb:b9:a2:6c:b5:
                    12:f4:12:69:21:0c:8b:a8:49:d2:44:89:f8:f0:18:
                    72:e2:88:54:37:f9:98:a7:b7:00:a3:d1:78:46:4f:
                    8f:4f:87:77:cb:83:e7:57:23:65:0c:28:ff:87:55:
                    9f:4e:00:9d:70:59:e5:05:8e:92:85:d4:84:f3:54:
                    9a:51:bb:a1:8d:9d:dd:b0:3d:38:db:bf:b3:8e:bd:
                    69:18:39:cc:20:0d:4a:c1:a7:cb:71:f8:69:b9:d2:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D8:F4:F3:11:60:36:DD:19:BD:ED:93:AB:DA:3F:EF:60:C6:41:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3/28168b94-cad8-4dae-a00d-057ac35417a3.crl

            X509v3 Authority Key Identifier:
                keyid:16:1D:81:62:D4:19:36:01:CD:F5:0E:AF:93:EB:B7:98:7A:BD:F5:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28168b94-cad8-4dae-a00d-057ac35417a3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:37:f3:bd:c0:e6:79:d6:f4:dc:a3:95:e8:63:21:fd:05:65:
         a6:ba:55:03:51:bb:c1:23:f1:30:1d:a1:75:a7:8d:84:47:b6:
         62:ac:4e:9a:60:07:c7:51:04:dc:39:0c:d5:41:ad:1b:ac:81:
         db:cb:64:07:de:67:ce:06:05:84:d0:f7:95:c1:dd:06:70:96:
         55:61:ae:92:dc:3b:d5:c7:2b:d2:e3:29:b8:25:7f:7c:3d:cf:
         24:47:bb:61:d3:8c:f0:25:9d:93:0e:11:17:42:df:45:a5:60:
         fc:4a:fe:c2:09:58:4c:23:f9:bb:69:b4:c2:3e:f9:20:87:c2:
         a6:40:0b:a5:93:60:2d:4a:50:90:c7:20:85:bf:52:f3:e1:4f:
         77:2b:6a:2e:15:11:d4:1e:0c:01:5c:98:ab:08:59:8c:68:2b:
         0a:17:83:62:be:5c:c7:d3:66:ca:f7:39:ae:03:af:70:27:67:
         73:3b:30:c2:32:9f:ed:3b:07:41:73:6b:4a:a9:2e:f7:59:64:
         e0:e3:39:bd:c7:57:f8:b6:22:8e:d3:9d:59:94:dd:32:ba:f9:
         ee:8f:38:7f:55:48:9d:77:60:64:96:47:ac:7e:9b:31:09:74:
         fb:a8:4c:1f:34:8b:e2:c1:a8:c3:10:48:19:63:87:eb:12:f7:
         bf:10:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 06:50:47 2025 by rpki-client