This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
File:                     2cb23841-08c5-41c8-81c9-076b288743e8.mft (raw, json)
Hash identifier:          s3E8KHqD3qxAkkutPDGshK5qi0w+OOEojP7HkhVGfFg=
Subject key identifier:   2D:1A:D5:04:2C:27:BE:85:B7:35:29:BF:A7:01:1B:E2:80:F5:5A:F8
Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18
Certificate issuer:       /CN=2cb23841-08c5-41c8-81c9-076b288743e8
Certificate serial:       010D0C9F4328584C300354120DD826A32F849240
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
Manifest number:          010D0C9F4328584073A81F986B74B9D7B91A63C5
Signing time:             Sun 14 Dec 2025 20:00:04 +0000
Manifest this update:     Sun 14 Dec 2025 20:00:04 +0000
Manifest next update:     Wed 17 Dec 2025 20:00:00 +0000
Files and hashes:         1: 00f0462c-a442-31ab-8df4-efac62bb8166.roa (hash: VueSWgHGpmUQwpIeyTk60+tdK4rK8dQ4g0K1Zec2s7U=)
                          2: 1208c61d-795d-39aa-83bd-93a914e71179.roa (hash: Wab4CZBJzeQfXYL3/MvKVgxn4PI9P7LJDfasJDbJrFI=)
                          3: 21f399c4-9b55-39ef-bed5-884b07932f9f.roa (hash: lu8/H2x2vWBgTtDEd4Gk3hYOLsmaV4Q7M3HQKl2J9aw=)
                          4: 2cb23841-08c5-41c8-81c9-076b288743e8.crl (hash: HSWUzpy35kyFVN7P0yVw+0NGCznp+RfOCK/VdibddvE=)
                          5: 3b0adfcb-841b-360d-b808-c58d891a93d9.roa (hash: B5yQshDz+K34rhN8BqkkLJfTCQYWqT0UMS7ithQ1zCk=)
                          6: 4305d133-1886-3cea-8f72-7f6bc4e75a43.roa (hash: H9G96zlRk25/YtLvi5OToxLxZVfZ6GvbIw0YtA5Yt5E=)
                          7: 5b7a743b-ad2f-3ba7-b440-851ab9575dfa.roa (hash: GjAhpLtPZHdAT5+h12QYgPcINDoR/jK9VC4FUqBwCj8=)
                          8: 93e74dba-3278-3588-9c20-148b3cd3190c.roa (hash: 3eGzYfMOWOPqcZr1zuVA6vxN4WG3187kg++F+vLbedE=)
                          9: 9c3fab74-0b0d-31ce-9e60-48382ddab243.roa (hash: G/MPg/ty6mZq569yKwxAXM2VYrMl88s6LVzG6lHzuD4=)
                          10: b2801328-0ae2-37ae-8299-e11c2e4c5d13.roa (hash: UhdUohd+unvLyFQyhtL87GF8E4hc9WumwmWrxvMk0as=)
                          11: ce38122d-5a2c-3c90-91f7-4c9c3326741e.roa (hash: 2eVOe75A79CAaQZdyd2EC/F6TN9fZ0Rp99eBwwvjbOQ=)
                          12: df4b0eea-74dc-3b3e-8bd2-22fbe6bfe6c4.roa (hash: SUYFO4ITBUEqC45Oh3vvEuDoL39JZiIjKMaAlDMrIrU=)
                          13: ef72f3dd-4d0c-3459-a054-577ef0c2b3b8.roa (hash: 17GUtfbXF+dwwAgA/7CEboFC7aqwFAaOMCQsRKNQpnM=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:30:03:54:12:0d:d8:26:a3:2f:84:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8
        Validity
            Not Before: Dec 14 20:00:04 2025 GMT
            Not After : Dec 17 20:00:00 2025 GMT
        Subject: CN=5fcac761-e1de-48d5-bd3a-c6f53a4f0fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:4d:34:53:9e:18:43:aa:4b:d9:6a:73:98:
                    e7:58:86:46:3e:28:c2:54:da:54:78:a7:3f:7a:0a:
                    12:51:bc:22:e8:be:9d:c3:41:5d:ea:fa:39:63:d3:
                    e0:de:6e:96:28:be:ec:78:54:12:93:30:85:e0:f2:
                    8a:b2:f9:96:00:e2:71:da:0a:35:e8:b6:4d:5f:7e:
                    40:93:42:24:20:86:55:09:10:8c:da:86:89:12:e8:
                    fd:c4:ab:1a:18:2e:1c:94:9d:e8:53:7c:bb:04:ef:
                    07:6f:24:ae:10:4a:73:29:ec:b5:ec:5b:f1:ea:be:
                    47:00:1a:5b:5e:d6:8a:8f:f0:fc:84:2c:49:9c:d7:
                    aa:f2:9b:56:b1:a0:17:1e:74:c9:02:47:f7:1e:8e:
                    73:09:e7:4d:12:7e:25:77:66:7f:33:92:cf:cf:02:
                    9e:f4:1b:8b:c2:4b:fa:c3:33:b3:8e:24:43:a2:db:
                    23:25:7c:9b:22:a4:3d:9c:b3:17:6f:44:66:1a:ba:
                    f8:40:b2:8c:b6:89:59:a9:e6:e1:1c:de:0f:e3:04:
                    e4:4b:f5:99:14:d4:c6:4b:46:51:55:83:d3:67:5c:
                    bc:01:df:a0:e7:d1:7f:d4:94:09:1f:b9:bf:ae:41:
                    a1:57:7b:1c:b3:1f:14:4f:91:0e:e8:de:6f:33:0f:
                    f4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:1A:D5:04:2C:27:BE:85:B7:35:29:BF:A7:01:1B:E2:80:F5:5A:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl

            X509v3 Authority Key Identifier:
                keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a3:3b:1b:33:11:e5:71:03:87:6f:27:7c:18:f0:f4:82:16:
         63:22:5b:7c:86:12:08:61:fd:3f:7b:e4:4c:63:16:2e:00:02:
         5b:0a:3b:9e:e3:67:50:00:b2:17:1d:20:e1:2a:45:6d:af:64:
         2a:90:f8:08:16:59:36:db:5d:be:0a:fc:55:b3:b1:1e:a8:b5:
         63:d7:81:df:94:3d:c7:89:f6:f3:4c:c1:2c:c9:fb:93:eb:ae:
         d1:cc:1d:1a:99:8f:6c:39:b8:1d:6a:2e:2e:a7:6e:cf:95:78:
         67:d3:1b:d1:ac:75:8d:02:c3:d5:6d:e7:b6:f4:86:17:42:9b:
         95:96:83:3b:24:c0:f8:6c:bd:3f:d4:1c:6a:b5:48:51:81:62:
         7c:1e:e5:24:e1:8b:b3:9e:e9:54:2f:98:41:48:c0:96:f1:7c:
         a8:b2:70:b7:e2:87:9b:be:28:3c:5d:b9:4b:35:a4:89:0a:50:
         63:ec:44:68:fa:2d:67:74:e8:ab:3d:a5:c1:33:4c:ed:24:a2:
         b7:e5:7d:0e:e5:d9:a4:8d:46:a5:16:3c:69:52:09:aa:f1:9e:
         ad:8a:8e:a8:c3:7c:00:cf:b7:d0:42:c3:0e:d9:46:8d:f3:94:
         3b:f9:a5:91:15:d7:34:36:0f:63:2b:e0:e0:b4:c9:0d:2f:f7:
         08:d7:05:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 15:03:23 2025 by rpki-client