This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft
File:                     8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft (raw, json)
Hash identifier:          zUmuXLZzvIVNOVlLnNCrpaNK/Jfwt2+wriMBb/wKWI0=
Subject key identifier:   C8:EA:D1:16:0A:98:21:0F:20:E7:01:C5:E8:05:88:3E:63:BC:4D:13
Authority key identifier: CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A
Certificate issuer:       /CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6
Certificate serial:       010D0C9F4328584BF1E5963EED56CB241650CD00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft
Manifest number:          010D0C9F4328584073A85954D1D18CB092344237
Signing time:             Sat 22 Nov 2025 14:00:03 +0000
Manifest this update:     Sat 22 Nov 2025 14:00:03 +0000
Manifest next update:     Mon 24 Nov 2025 14:00:00 +0000
Files and hashes:         1: 3e223fd6-e6be-376b-be27-58334385989f.roa (hash: cW/nBeGfgO1YoZANxT0xlhCeF+d09XHLIr4mCQaxvuE=)
                          2: 8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl (hash: QrZQa1HBTVJiQyPPCmAKiSUCOvIkagqce6GZ7duii9U=)
                          3: d1facf3a-0252-3062-bd40-b1752bcaaa35.roa (hash: BfVvVU4iMr+bRWvCbYwMAgDejo0suj5nYswRP2TqjGQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f1:e5:96:3e:ed:56:cb:24:16:50:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6
        Validity
            Not Before: Nov 22 14:00:03 2025 GMT
            Not After : Nov 24 14:00:00 2025 GMT
        Subject: CN=3e805910-1100-4d43-85ed-900b7b47f57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:43:bc:47:38:fc:08:0c:00:55:84:eb:a4:60:
                    b9:37:bc:95:8f:be:95:11:14:b5:0f:4e:46:a7:b8:
                    8b:df:ab:d8:42:45:eb:87:86:5b:6e:b0:5e:31:da:
                    36:f5:a7:f3:bf:2a:ce:df:78:ee:85:8e:c7:37:65:
                    3d:6d:85:fb:f3:0c:6b:4f:e1:cf:33:85:8b:1b:d2:
                    b4:10:57:1a:3c:12:8a:cd:d1:9a:72:3b:33:c9:4d:
                    d2:a1:b2:d8:43:63:58:57:4e:c4:ec:1b:4f:da:07:
                    d7:e0:52:a0:e4:a4:e6:d8:0e:99:3d:2b:cf:1b:72:
                    a8:a2:b0:7a:eb:d1:f5:68:18:b7:e0:86:a7:77:ff:
                    01:30:71:a9:51:10:d4:4b:61:53:f3:12:5a:3c:3c:
                    b2:2a:1b:c8:13:30:2a:ed:74:ed:2f:7f:50:05:9f:
                    0c:62:eb:38:57:0c:aa:ae:9a:4f:82:31:0b:8b:12:
                    30:3f:9d:5e:6c:51:73:44:e9:43:68:62:a1:6c:98:
                    e6:bf:7c:e0:96:17:58:4a:62:0b:08:42:ad:f3:75:
                    8d:ba:31:0e:e1:29:ee:cd:1b:04:82:c5:e0:97:ba:
                    21:e1:28:29:ee:b4:50:d4:fe:b3:f4:0d:c2:19:bf:
                    b4:2d:ce:90:42:70:db:2a:e4:60:98:13:0a:2c:91:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EA:D1:16:0A:98:21:0F:20:E7:01:C5:E8:05:88:3E:63:BC:4D:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl

            X509v3 Authority Key Identifier:
                keyid:CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:e4:bf:cf:25:88:f3:61:5d:b6:1f:d1:dd:5e:37:08:02:38:
         7c:56:b1:a5:51:a8:20:f8:d9:72:b0:2f:63:c3:41:76:75:c7:
         77:c2:d0:f8:e4:a2:5c:66:20:72:fe:d2:67:5d:b3:48:5d:85:
         7e:e9:21:b2:89:2e:c4:b5:fa:c6:b6:e0:a1:14:3d:9f:5d:42:
         89:ed:9a:c3:c8:f9:00:59:9a:34:85:75:48:19:7f:41:82:cf:
         44:73:fd:2e:4c:3f:d2:f8:d5:0d:a5:5f:05:39:c9:dc:35:40:
         a1:37:d8:86:17:5c:d3:44:1c:29:a2:9e:a0:21:f1:e6:21:bc:
         db:7d:ab:17:73:02:b7:6f:4c:17:d0:86:1f:23:dc:3c:c7:63:
         cc:35:f7:87:20:1f:1a:3f:73:15:ed:dc:91:e4:41:ea:6a:d6:
         1f:86:2e:1d:4f:89:8b:c1:64:9c:8f:d1:87:b3:35:95:9f:09:
         ff:41:bd:7c:c6:c6:ff:4b:38:d1:df:e2:cc:51:aa:d0:2d:d7:
         1e:84:ee:3e:fc:de:6e:13:d5:02:21:16:36:ae:5f:90:47:9b:
         cc:33:1a:05:9b:a3:6e:f5:d2:bd:5e:3a:85:d9:de:c9:5a:7e:
         07:50:d2:db:28:0d:9e:1b:12:88:02:ba:70:b9:84:b2:d1:66:
         1e:30:73:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:49:58 2025 by rpki-client