This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
File:                     52a20e5a-3a5d-4417-92d7-250e134c6d09.mft (raw, json)
Hash identifier:          NhU1NDL0QN85a1DDYodLaQuSIUdoeqFy/iKHzU5tlPI=
Subject key identifier:   AE:AB:C7:88:F1:90:42:14:1D:1C:1E:C4:C2:00:F4:E0:60:B0:51:2E
Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70
Certificate issuer:       /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
Certificate serial:       010D0C9F4328584BF7F21E00047DA79320739400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
Manifest number:          010D0C9F4328584073A82194633A7F2D5BDD0F8A
Signing time:             Mon 24 Nov 2025 18:00:08 +0000
Manifest this update:     Mon 24 Nov 2025 18:00:08 +0000
Manifest next update:     Thu 27 Nov 2025 18:00:00 +0000
Files and hashes:         1: 1a45910b-5f44-30ce-9dfa-9fdc1fe86ca5.roa (hash: an+8FKvFIprtMvnR6Ru/h91rDnqSPzO04dKmcSY1mlg=)
                          2: 1ed11bba-2055-382e-ae61-183dfc3956d0.roa (hash: R2K79TAoBHmEGlyq/zeLS9pLkXn8nEDRpY105TfGz5E=)
                          3: 3c529cbb-9f8d-34c8-9371-e628e7734516.roa (hash: l/ccWZNVnQDOWfqkp2C2dDsas0IOt24M1sDuxQOA6+w=)
                          4: 49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa (hash: MEVQBo3uuZ0v0zetoSUeIrRFMTmo1Fq9ikoMkxRPut8=)
                          5: 52a20e5a-3a5d-4417-92d7-250e134c6d09.crl (hash: uu30bandzr/BIvO6u9wPmXsC1AbhsNqDnkkoTKTU2oE=)
                          6: b8284293-bc14-36f3-a3bd-f5e172f91d0f.roa (hash: c8xFa7KSBiJS2k9SyyOjJI88cRMtK8zzskWcfLWlsMk=)
                          7: d71bc207-ec65-3381-a9cd-02c1fbbed0b1.roa (hash: 78oJeHHa+LhF+NynnpezSJp4mhGP9YuAAFofOR+gG5Y=)
                          8: ff65af41-ecd3-3895-bccd-6f1b55448a5a.roa (hash: MEgBUx2Q5rOyiRIF0SJU/Db46ObXQh1c/e6YcgoRS9U=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f7:f2:1e:00:04:7d:a7:93:20:73:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09
        Validity
            Not Before: Nov 24 18:00:08 2025 GMT
            Not After : Nov 27 18:00:00 2025 GMT
        Subject: CN=fc7d1c20-dfc5-4b32-935b-46258b8e319d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b1:02:72:33:15:a6:ad:6e:b6:3d:25:5e:3b:
                    9a:a0:7f:77:93:c3:26:d0:8b:b2:58:6a:d8:50:7b:
                    c6:ff:ce:89:6d:13:d2:73:c8:a1:9d:51:1a:3c:df:
                    f2:05:57:e1:d4:ad:b8:16:f2:5d:ba:81:21:0d:c9:
                    0c:6d:ab:1a:66:de:47:d9:11:68:22:c2:60:44:22:
                    b0:89:97:08:52:b6:ce:ff:9b:e7:a0:45:91:86:ee:
                    89:3c:c7:96:7d:86:49:a4:a6:e4:bd:80:8c:e3:24:
                    fd:56:e9:38:f1:7f:22:ea:a2:e5:c7:4d:32:79:bb:
                    49:f9:0c:14:30:6e:c1:fb:e2:a3:4e:27:d3:26:00:
                    4b:51:8b:89:a2:92:ac:79:7b:34:c4:7b:c9:69:2b:
                    ef:23:df:45:24:02:63:cd:90:38:ae:7f:2a:e9:97:
                    98:b0:38:2c:b4:54:c3:54:73:e1:67:0a:c8:98:f6:
                    a7:8e:d4:76:4f:2e:03:60:cf:01:e8:41:3b:0e:f8:
                    8e:55:cc:11:3e:d1:1b:3c:16:7f:0c:3f:af:c3:7d:
                    95:3c:22:d5:3b:56:a7:92:06:64:48:9b:d7:f3:c8:
                    18:e9:8f:8a:98:25:f7:cc:90:f0:fb:2d:5c:69:93:
                    72:37:06:79:7c:40:c9:f1:01:a5:17:53:41:33:d7:
                    19:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AB:C7:88:F1:90:42:14:1D:1C:1E:C4:C2:00:F4:E0:60:B0:51:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:30:d2:b7:67:17:46:1f:42:2f:6e:d9:5a:11:6e:8e:f1:32:
         e5:1e:b9:cf:52:d0:b9:b9:37:1b:4c:3e:7c:31:1f:9f:b4:00:
         87:59:7c:e8:e7:d8:9f:81:bf:20:70:fc:8d:d6:98:28:0c:a5:
         36:e9:81:ae:bc:19:a1:aa:21:8e:68:b6:45:51:c6:c1:5e:89:
         f2:ac:b6:c9:e6:d9:c7:34:88:27:b5:c1:09:56:98:03:99:2f:
         3c:1a:ad:8c:ac:cb:50:f5:ff:45:b1:37:5a:f7:be:e9:72:4a:
         57:37:23:4e:f9:e8:aa:24:2b:95:bb:4e:e5:81:de:06:f4:86:
         de:80:01:90:a7:db:a1:76:de:c3:18:a0:0d:94:c2:fb:34:37:
         9a:1d:cf:61:1a:16:6b:55:fa:93:47:db:c9:a6:ff:fe:34:5b:
         2d:71:48:34:52:d4:6a:8c:62:29:5a:94:ed:9c:d6:2a:69:f3:
         ca:3e:b4:ab:1b:7d:cc:4c:62:cd:50:73:04:db:87:b2:aa:bb:
         aa:1e:b0:a3:b6:23:75:c5:88:38:7f:be:be:c1:71:94:ac:a1:
         2a:70:16:90:1d:fd:98:18:0b:3d:dc:97:f7:00:aa:dc:70:b8:
         20:b6:8f:f5:87:0e:2c:a2:78:7b:71:0b:80:81:94:64:35:2b:
         01:fc:e2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 07:26:14 2025 by rpki-client