This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
File:                     baff326b-1f24-468c-b9c6-fa089a461350.mft (raw, json)
Hash identifier:          w9BkRaKTMjJwz+/MTGJ70J5WXM/fBHElFD6ucJl2R1Q=
Subject key identifier:   0C:D1:3B:03:25:CB:96:02:08:F4:D9:99:CE:45:E3:12:3E:35:C9:D2
Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
Certificate issuer:       /CN=baff326b-1f24-468c-b9c6-fa089a461350
Certificate serial:       010D0C9F4328584C399A1869A02AF581DFF04B80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
Manifest number:          010D0C9F4328584073A830D864F9AE9DDE3D8ECA
Signing time:             Thu 18 Dec 2025 06:26:08 +0000
Manifest this update:     Thu 18 Dec 2025 06:26:08 +0000
Manifest next update:     Sat 20 Dec 2025 00:00:00 +0000
Files and hashes:         1: 296786d6-6c0e-38ad-bf10-759d9a0d6aa8.roa (hash: mGTYUYLslnbeIj0j1FGNnWPZQSSrNkZwtbVOPjb09p0=)
                          2: 47a950a5-c11b-3ac6-948d-a99bc891a802.roa (hash: vqa8XUmLqtk8EeSZqJ6M8nbXw5y1lA5h6AjM7k2jj44=)
                          3: 5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa (hash: 5HCemg7DAr7kYQih2dkH0ts9Xt7DVRAj/nFE22aK23M=)
                          4: baff326b-1f24-468c-b9c6-fa089a461350.crl (hash: qbY/QRrReE7t4PnEbLhuy/8ZWZ1norfonaHc+q9pqWM=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:39:9a:18:69:a0:2a:f5:81:df:f0:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350
        Validity
            Not Before: Dec 18 06:26:08 2025 GMT
            Not After : Dec 20 00:00:00 2025 GMT
        Subject: CN=76d0f056-e38d-42c4-aa13-f41a094cab0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:da:8e:82:a6:d8:13:db:9d:b1:a2:ba:5b:54:
                    33:8d:49:d8:d1:1d:1d:8d:31:e5:fe:a6:53:97:fc:
                    41:88:8b:c3:7d:24:81:a0:8c:fc:a7:39:e6:1a:71:
                    d1:ed:a0:a9:50:2b:c0:ec:59:9e:a3:67:b3:bd:b5:
                    d6:bb:c1:45:03:ad:c8:46:91:09:46:ce:7c:4e:24:
                    59:86:db:d7:d8:76:e7:d0:c9:17:1b:84:83:28:af:
                    55:31:8e:d1:39:57:91:86:02:32:21:c8:19:b0:ec:
                    aa:cc:fc:59:fb:c5:24:ec:d5:21:60:94:e8:0a:a7:
                    46:1f:c1:9a:27:87:00:d6:d3:38:8d:fc:00:40:85:
                    cf:4d:d7:9e:70:b0:38:e8:e2:f6:08:29:ef:09:c0:
                    3f:8c:6e:e4:aa:29:11:61:64:95:ce:53:69:cf:08:
                    c5:4c:33:9f:56:ad:f1:dd:b1:03:17:07:11:11:0d:
                    9b:91:59:48:38:e0:09:b0:26:c2:d4:b9:f0:48:b5:
                    12:52:d5:a2:d4:84:0b:aa:86:09:65:3a:88:8f:c9:
                    2c:6c:af:16:76:ef:63:5a:b8:93:ed:2f:06:a2:aa:
                    51:19:80:0b:85:98:39:a4:08:12:4e:52:1e:36:32:
                    9a:96:5c:06:61:bf:9f:65:dc:2d:e1:a5:b1:94:45:
                    21:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D1:3B:03:25:CB:96:02:08:F4:D9:99:CE:45:E3:12:3E:35:C9:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl

            X509v3 Authority Key Identifier:
                keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:a8:03:b0:81:69:f7:de:13:7c:a4:05:93:95:90:09:31:69:
         3b:9d:b1:43:97:74:1a:34:a5:66:9b:16:8f:cd:b4:99:09:da:
         b9:e2:07:17:57:f8:19:14:51:00:0c:08:63:38:b4:f3:94:01:
         26:5a:1e:03:3f:8d:3a:d3:f6:c1:3d:1a:32:83:c1:61:d1:4a:
         a5:70:05:b9:54:3e:af:e2:63:77:bc:29:f3:01:89:5c:60:ca:
         69:55:50:92:c2:d9:7d:57:d6:ab:bc:3d:06:4d:d0:fc:d4:0c:
         5d:71:2d:28:2d:1f:fb:4b:8a:d1:98:64:71:84:d1:4d:8b:7d:
         c8:39:ab:8d:5e:0e:e5:43:d5:22:b0:80:36:b4:dc:17:bd:de:
         d7:58:6d:64:17:ad:8e:ee:a8:3a:3e:2c:b8:30:b3:1a:37:95:
         f3:a3:f5:8f:8f:98:cd:18:54:71:4d:2e:b8:9c:45:6c:e4:20:
         66:db:8f:f3:c3:1f:c5:8d:40:c9:35:5e:37:26:9c:d5:1d:83:
         8a:52:3d:6a:11:af:1c:dd:e5:11:f1:76:b5:f7:7a:33:e0:8a:
         37:0b:03:df:06:55:3f:da:ea:9c:9e:da:ea:dc:66:5e:bb:a0:
         ac:41:39:8e:8a:9c:4d:2e:74:0d:0a:52:b4:cd:19:9d:dd:9f:
         98:00:85:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:37:10 2025 by rpki-client