This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft
File:                     afac962a-1647-4571-99e5-a23db5fd79d7.mft (raw, json)
Hash identifier:          o0XsN4yEXwJG6IV+k3lT1GZuhWMkQ4lJ6zfWEii/vhg=
Subject key identifier:   58:21:5F:F8:C7:2C:AC:FB:B0:60:45:54:A3:1F:5C:91:F3:30:6C:AB
Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F
Certificate issuer:       /CN=afac962a-1647-4571-99e5-a23db5fd79d7
Certificate serial:       010D0C9F4328584C78F270FF45CEA7E99E90F680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft
Manifest number:          010D0C9F4328584073A82FF0EBCB41ACCF058975
Signing time:             Fri 09 Jan 2026 23:00:04 +0000
Manifest this update:     Fri 09 Jan 2026 23:00:04 +0000
Manifest next update:     Mon 12 Jan 2026 23:00:00 +0000
Files and hashes:         1: 01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa (hash: 9KW3Np5R1qEPkmlQH1FYFh4igcf6XnKbXs8JTwIYgHw=)
                          2: 0d8274da-0703-3d0a-ab87-cd190f0a1378.roa (hash: 7Jvml0dRQX1llIczU1zI1PGr/Jll1VMoaokYQKnMsek=)
                          3: afac962a-1647-4571-99e5-a23db5fd79d7.crl (hash: 26P6knOf3ZZBnb9UNH0sYW5vzFSqMLQkQs2soGRgPXo=)
                          4: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (hash: 3VxujpJC8KKCuGErirZzBu8SkU2DV7o0C5ZEZrZUzeY=)
                          5: e5e560e3-7114-3301-9261-7725a1241fa8.roa (hash: ydBkeSAalHEJDaQYnBsagCJ20HUdQDQmd0YdXOBHxtY=)
                          6: ed93203f-cf71-30b1-9801-397105ab7580.roa (hash: aNlPuIdfInVUPX5E5aoLHRcSO275EdpPNlfJpOIeCBA=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Jan 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:78:f2:70:ff:45:ce:a7:e9:9e:90:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7
        Validity
            Not Before: Jan  9 23:00:04 2026 GMT
            Not After : Jan 12 23:00:00 2026 GMT
        Subject: CN=191576db-62d0-4d8e-ba29-1ac9fc208228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:88:44:2e:8e:36:bb:7d:88:d9:83:1f:15:
                    ad:6e:d6:b0:9b:b4:7c:2b:e0:85:67:1d:71:1a:d3:
                    aa:d7:a2:77:53:62:b7:0d:ba:fd:0a:2d:c4:df:70:
                    ac:60:74:8e:b4:0f:d8:43:06:ef:7d:57:0b:b5:3a:
                    87:11:97:c4:b8:b7:56:61:27:99:98:c3:b6:5f:77:
                    6a:86:74:ef:cc:94:80:51:15:b7:8d:13:d5:f9:10:
                    3b:1c:65:7e:97:00:8a:47:c7:0a:e3:22:63:8b:39:
                    32:4e:9b:be:8b:e9:bd:31:12:c1:d7:a5:26:e0:f2:
                    8d:f8:12:7e:69:a1:7b:06:9c:40:8b:b4:fe:44:02:
                    94:52:65:c9:83:c4:92:6c:cd:fe:d5:8d:28:a0:2b:
                    80:6d:6b:f6:78:07:68:65:f4:3e:d5:6a:ab:62:ff:
                    8b:82:ef:44:ad:4b:4e:8e:68:9a:69:9f:bb:c3:9c:
                    dd:a2:a7:21:83:fd:81:f3:8e:a4:a7:20:dc:57:fa:
                    29:38:47:3d:b5:e0:f7:24:78:6c:23:07:f1:10:16:
                    d1:0e:b7:7e:e9:ba:d7:70:ae:62:62:4e:4e:b6:cf:
                    63:a7:ac:4b:9d:c1:98:2f:74:81:f1:5f:6a:40:59:
                    f3:e4:dd:c2:bd:2e:af:ec:8b:12:c0:1c:4b:55:51:
                    f2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:21:5F:F8:C7:2C:AC:FB:B0:60:45:54:A3:1F:5C:91:F3:30:6C:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl

            X509v3 Authority Key Identifier:
                keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:99:06:15:c8:e5:26:84:c7:eb:ca:5b:2d:54:86:d8:b6:c6:
         7a:f7:8a:71:d8:aa:8d:6c:19:e9:8e:fc:04:9f:4c:05:7b:2e:
         fb:99:9d:01:0e:56:c9:6f:9f:e9:da:a1:9d:42:36:fc:48:d6:
         67:89:10:fd:fc:61:fc:d9:a5:1c:20:fe:2a:1e:62:33:fb:b7:
         bb:01:2f:3c:8a:78:96:9e:3b:9f:75:10:66:9f:ec:db:05:13:
         bd:c5:86:7a:5b:fc:36:94:5c:a3:cd:27:b1:be:e5:35:b8:31:
         86:68:5d:ae:7b:fb:f8:dd:52:50:12:2c:fb:00:9f:ad:2a:dd:
         8d:09:ad:16:f1:ef:03:63:94:f5:db:ef:a0:87:24:f7:4c:a5:
         0d:01:7a:ec:c8:64:7c:63:9a:70:13:49:0a:a7:80:34:74:f2:
         bf:30:a6:97:c0:a3:eb:37:b5:2a:9e:31:df:0a:68:4e:d6:d6:
         fe:5f:3c:31:10:aa:8b:61:48:1a:e7:ec:71:32:03:d3:e6:94:
         c0:d9:3d:dd:ed:6f:58:be:f0:7a:7a:a9:cd:27:b2:11:26:5e:
         f0:9a:7a:3d:5b:ab:ff:a4:52:26:a5:a8:d0:16:56:9c:f5:b6:
         92:a3:12:1c:66:c5:3c:c7:54:62:df:a6:4e:cf:9c:f3:74:ce:
         32:96:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:54:00 2026 by rpki-client