This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft
File:                     d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft (raw, json)
Hash identifier:          KYoLSSKkFf/Iv/mmdcQIv3lTvo6FL1YkL3721lrlsWA=
Subject key identifier:   0D:76:4F:7D:D2:B7:46:A3:6C:E9:5B:05:00:F0:36:89:28:8B:20:31
Authority key identifier: 49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46
Certificate issuer:       /CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe
Certificate serial:       010D0C9F4328584C4334D337E93FDA176CEDB880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft
Manifest number:          010D0C9F4328584073A81DD449105A1435A12A4E
Signing time:             Sun 21 Dec 2025 17:00:08 +0000
Manifest this update:     Sun 21 Dec 2025 17:00:08 +0000
Manifest next update:     Tue 23 Dec 2025 17:00:00 +0000
Files and hashes:         1: 455b85de-a208-333d-ad2f-1cacd114a2e0.roa (hash: iQzHcUJhD64o/NUdlsEpgvMWkYdGUrQDk6/PmZkhp90=)
                          2: 79d50f22-3431-3294-9576-851a087acf8c.roa (hash: IJR2WuJ3OAA7LRXh2IxS/U6BwObzYchLCtUDELbMFdM=)
                          3: d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl (hash: QYY9nxTGqZ3iOa1SlBT2ZidkWFUCZTXSJUb2PqUrItA=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:43:34:d3:37:e9:3f:da:17:6c:ed:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90dc44b-85b6-4247-b579-eb8cfd8e97fe
        Validity
            Not Before: Dec 21 17:00:08 2025 GMT
            Not After : Dec 23 17:00:00 2025 GMT
        Subject: CN=adb102d4-ba53-4f57-8a3b-c7bf88109eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6a:47:47:a4:5d:9b:d7:88:8d:71:22:34:fc:
                    bc:fe:ff:01:9f:49:a2:37:40:08:c5:5b:91:7a:5d:
                    9f:b6:03:98:45:88:fb:92:f4:d1:a1:0a:8f:09:30:
                    f3:ee:c8:b7:fe:76:af:e0:57:29:6c:01:20:66:a2:
                    f9:1e:8b:aa:a0:69:db:76:88:f1:c2:79:0a:96:89:
                    67:f0:4f:9e:2b:82:91:2c:7f:0a:b0:24:3b:1e:65:
                    0c:3f:88:f0:c2:eb:c2:a9:f4:ba:95:bf:e0:69:1d:
                    0f:b3:a2:74:41:5a:20:29:93:10:c3:77:d7:36:e8:
                    b7:c5:61:ae:b9:16:0c:03:92:29:d7:c1:9f:32:0e:
                    3e:63:ec:2d:a3:f7:47:6b:73:83:cb:ea:88:e0:76:
                    ce:e2:35:50:2c:ae:65:40:1a:ce:47:61:02:9b:b7:
                    4d:b4:4b:d7:2c:7d:b0:d7:53:19:82:81:8c:99:6c:
                    67:f1:30:05:85:0c:98:de:be:cb:25:e2:43:3a:60:
                    35:dd:7d:be:c2:0c:28:f5:64:4d:a2:a9:64:f4:b7:
                    2d:cd:82:72:83:5a:df:e7:95:35:b5:d1:d4:f7:4c:
                    2a:f0:7b:d0:d0:42:97:d6:b8:b9:05:3d:8f:65:af:
                    3f:c8:f7:d8:41:88:33:23:7b:4a:21:38:56:72:99:
                    c6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:76:4F:7D:D2:B7:46:A3:6C:E9:5B:05:00:F0:36:89:28:8B:20:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.crl

            X509v3 Authority Key Identifier:
                keyid:49:E5:24:6E:2B:90:48:3B:5E:6B:B4:77:16:E9:94:54:0F:B3:18:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d90dc44b-85b6-4247-b579-eb8cfd8e97fe.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b6:c3:0e:09:95:9f:23:92:15:be:fa:57:14:dd:4d:cb:e4:
         27:d9:19:4f:37:a1:08:f2:83:8a:05:c6:2b:10:75:e0:91:2b:
         ef:d1:c9:d7:bf:76:0f:9e:f4:80:27:59:ed:31:df:34:cf:8c:
         41:a4:c1:8b:41:05:d4:bd:61:fc:06:ed:90:e2:65:75:26:41:
         cd:29:56:06:64:7f:f2:a9:08:e5:ad:f4:81:d0:b8:1e:4d:ed:
         9f:c7:40:06:94:8c:cb:13:7c:67:2d:61:16:58:f3:b0:05:46:
         1f:71:d1:3c:be:43:c9:16:1a:4c:9c:20:c7:5a:2d:0d:bb:01:
         c7:ea:34:a7:b7:e3:f3:21:94:d0:b8:fb:bc:93:43:1d:26:92:
         f0:c6:47:ee:56:be:20:d6:1e:0f:f4:fb:c6:b1:65:47:f4:5a:
         b5:09:19:5c:7e:23:68:5b:c9:aa:85:af:2b:09:77:89:20:86:
         c3:01:b8:05:a2:9b:08:73:7d:23:72:f3:b7:e5:87:b2:65:ef:
         81:bf:1a:71:b4:39:bf:69:7b:24:bc:8d:b5:f5:47:d8:68:9d:
         3e:b6:34:bd:78:fd:45:04:d8:83:e2:34:a1:55:0a:26:43:d3:
         78:d5:b4:7c:4e:d6:b4:b4:2f:31:57:2c:cb:e9:e1:46:dc:31:
         1c:df:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 01:25:42 2025 by rpki-client