This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
File:                     28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json)
Hash identifier:          b9tBXG4qzHbCEcGuBZ0e5WuZp3v11GDZdxEQfyjNYjw=
Subject key identifier:   D2:30:A2:74:AA:CA:CE:4C:4D:BC:BD:79:CC:42:62:1C:30:31:20:11
Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
Certificate issuer:       /CN=28591b95-39d7-4e54-90f3-1339338b842c
Certificate serial:       010D0C9F4328584BF6C84A4B58A1E1A3B0A0D420
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
Manifest number:          010D0C9F4328584073A84793D8858966B57163DA
Signing time:             Mon 24 Nov 2025 08:00:03 +0000
Manifest this update:     Mon 24 Nov 2025 08:00:03 +0000
Manifest next update:     Wed 26 Nov 2025 08:00:00 +0000
Files and hashes:         1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: OGWQn8hrZ3fllB7ZuJ/stYAMgGTlxbzLlrpBpnv0gj0=)
                          2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: YXc4hirmGPFU0oYA49DSVQYUXe2TmsJ3b54QfwlxmZQ=)
                          3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: uYf5LdshGXZ5TVpPX45/YX9DwyBUscp+t4sF9FTpLZ0=)
                          4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: 0YSBgruHnXi/SlJrdCeJrZlsjX8EvCylN0rVqYV5zcY=)
                          5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: 2HOCKx8FZe2gPhcAu/F3Kr+zdCpcsFXn0jNYmUM2BnQ=)
                          6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: j20E4xVJgKHWwzxBnHjr7Y8/llGqJ+OBFW8uKPmBidQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f6:c8:4a:4b:58:a1:e1:a3:b0:a0:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c
        Validity
            Not Before: Nov 24 08:00:03 2025 GMT
            Not After : Nov 26 08:00:00 2025 GMT
        Subject: CN=a6c80da4-845b-4178-9c8f-5c9d900e8f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3a:1b:87:89:c3:99:1a:99:76:e2:aa:da:30:
                    f0:fb:89:e7:e5:2e:bd:b6:e7:a2:77:54:d9:6a:b4:
                    61:7c:81:e8:df:90:b6:88:7f:82:56:f6:d6:45:dd:
                    c5:25:a7:06:5c:09:9a:4c:9e:5f:61:3d:10:ae:2c:
                    15:74:5a:be:9b:d3:4d:03:ca:70:93:16:40:7a:cb:
                    eb:87:35:c2:3b:34:ab:0a:b2:c2:dd:1e:9c:f0:92:
                    91:e6:38:b5:7f:4d:53:8f:9a:79:c1:76:b7:69:8b:
                    d7:d4:21:ca:bd:e0:93:3c:22:2d:04:9a:47:1e:a2:
                    09:cb:a2:3f:35:88:a0:f4:4a:48:ac:c8:a7:5e:51:
                    eb:11:9a:88:9e:eb:5e:0b:50:c8:fe:85:58:e2:7a:
                    bc:e1:29:d9:86:16:62:c5:3b:f6:08:8f:b0:39:c3:
                    07:f0:ff:02:97:7d:e9:49:e5:87:24:25:93:db:0e:
                    c9:22:25:18:e5:b4:ba:bd:3b:60:cb:d9:75:a9:b4:
                    57:cb:38:a9:3b:a6:60:a4:39:56:03:0d:ac:ab:cd:
                    85:05:48:2c:d4:10:94:73:6d:f2:25:43:3b:e0:20:
                    35:be:8e:d2:36:3a:b0:29:02:09:49:03:41:b8:d3:
                    f7:86:9f:22:e0:2d:29:a1:a7:55:a8:5e:98:71:54:
                    c7:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:A2:74:AA:CA:CE:4C:4D:BC:BD:79:CC:42:62:1C:30:31:20:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl

            X509v3 Authority Key Identifier:
                keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:b2:f3:82:a4:09:c5:4d:0c:2a:89:1e:d8:92:b6:44:18:
         ab:75:a9:fd:e5:99:ad:43:ca:fc:7f:92:e4:cd:47:b0:e5:b2:
         ba:20:ec:1f:fd:c2:04:fb:ce:c6:fc:9e:d6:c2:ed:70:cb:44:
         7a:4f:9c:fa:f5:9f:e5:d0:17:92:df:6b:b8:f0:d9:7f:38:37:
         9f:55:d3:bb:8d:fc:e8:2a:ca:e5:49:cb:38:c6:30:bd:a2:25:
         cf:88:4c:72:85:56:df:60:6f:b1:88:0e:3b:9b:de:da:51:7b:
         fe:c7:61:44:eb:c8:21:48:ce:03:9b:25:d2:94:34:c3:5b:83:
         fb:1b:cb:51:34:19:b7:8f:cf:30:79:d1:21:71:d4:b8:e9:06:
         21:e0:b9:07:a8:1b:cd:10:34:c0:7f:11:8b:c9:50:f6:31:fb:
         2e:e5:f1:2c:b6:ab:83:f9:f6:f4:e8:75:e2:c4:12:e9:c9:84:
         7b:9f:48:c8:b9:7d:8d:1a:1b:b6:87:bc:8d:91:1a:7d:cd:14:
         9e:2e:32:20:88:92:65:fd:16:1f:eb:73:4b:dd:f6:f1:1a:55:
         f4:03:b2:07:ab:c4:2d:b8:0b:fb:1c:96:ec:fd:96:89:df:d2:
         bf:9b:84:ea:58:04:21:62:66:58:8c:62:e8:52:05:1b:ed:1a:
         93:bc:5f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 07:30:10 2025 by rpki-client