This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft
File:                     958d43d9-c341-46e7-b131-b154f01666e6.mft (raw, json)
Hash identifier:          La+Ac5Eq7GXkk+n99qiKKIRKL6E9tvT8BgXHohz+D1s=
Subject key identifier:   CC:88:C6:92:18:2A:BF:B4:63:72:E3:FA:58:FD:DE:C0:81:9F:58:E5
Authority key identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15
Certificate issuer:       /CN=958d43d9-c341-46e7-b131-b154f01666e6
Certificate serial:       010D0C9F4328584BF527675A704885A880329A40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft
Manifest number:          010D0C9F4328584BD94681EE9FBA36868078120B
Signing time:             Sun 23 Nov 2025 18:00:03 +0000
Manifest this update:     Sun 23 Nov 2025 18:00:03 +0000
Manifest next update:     Wed 26 Nov 2025 18:00:00 +0000
Files and hashes:         1: 958d43d9-c341-46e7-b131-b154f01666e6.crl (hash: xbXBeI4NKDyHIB2SKBxDtcsD1pJVLpP+Tim1jorCL5g=)
                          2: 990b7dd1-611c-3ea1-aafc-3d83c74060da.roa (hash: +2RG2XyqrViC1GJm5KPhMlewX2BZOT+K3skLvQSEgRM=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f5:27:67:5a:70:48:85:a8:80:32:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958d43d9-c341-46e7-b131-b154f01666e6
        Validity
            Not Before: Nov 23 18:00:03 2025 GMT
            Not After : Nov 26 18:00:00 2025 GMT
        Subject: CN=23d06c7c-986b-4a71-ac3f-05cd54ca74cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:c3:ef:f8:6c:01:8c:11:77:79:9d:da:d3:
                    7b:e5:84:5f:0e:52:e6:d5:50:32:ac:fc:16:ce:36:
                    83:3f:24:9e:5e:04:ad:9b:98:22:3d:13:4a:88:41:
                    59:25:b7:4c:b8:95:bb:b6:b1:81:0b:03:f3:9c:26:
                    46:0f:af:a4:30:be:49:ce:9f:b0:3b:6e:39:f3:56:
                    64:ff:e2:1b:bd:7c:94:51:a9:08:8f:e0:60:59:d1:
                    3b:ea:c0:39:d9:f5:30:0e:a5:85:80:25:83:b8:e6:
                    8f:dc:c4:8e:cd:4d:5f:f7:1f:17:1c:80:89:fb:05:
                    19:86:71:78:f4:da:4f:f9:88:ab:14:d8:a6:22:98:
                    83:03:fd:b4:ca:ae:63:1a:47:3e:cb:c7:69:9d:d7:
                    fc:6d:50:87:4e:dc:86:ba:b8:68:13:00:9c:b1:ac:
                    f7:de:db:c3:2c:bc:f7:ae:10:3f:ac:31:fd:c3:d1:
                    d8:e8:6e:00:aa:19:ed:c6:f4:b3:bd:dc:a5:ea:95:
                    e7:80:f9:5e:6b:b2:65:78:1d:1d:9c:6b:ed:60:ad:
                    80:c5:d5:10:55:e9:5a:3f:02:44:d3:47:7c:8d:d6:
                    51:04:e9:0a:3a:d8:89:f6:85:cb:c2:ba:00:a0:25:
                    06:b7:b6:aa:15:1a:67:84:9f:2d:e0:ba:44:b5:32:
                    9b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:88:C6:92:18:2A:BF:B4:63:72:E3:FA:58:FD:DE:C0:81:9F:58:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl

            X509v3 Authority Key Identifier:
                keyid:E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:86:82:ae:cd:93:06:e7:8e:b7:79:16:b3:b6:63:91:9b:af:
         69:fc:2d:de:fe:5c:14:38:13:6f:3a:9a:ac:a9:a5:73:0b:50:
         d5:af:da:2d:91:4a:bf:af:0d:18:97:6d:a1:c3:92:e6:a7:a4:
         4c:ad:c1:b6:bd:34:5e:f0:3b:e9:49:8d:1e:ec:03:19:2b:cb:
         e6:7f:76:4a:d1:37:f4:ac:c8:b2:59:70:27:06:7b:01:41:1e:
         bd:3e:de:15:98:09:b5:33:d6:f1:27:ae:40:1e:f4:b0:1f:f8:
         28:9f:32:8e:92:bc:b9:c9:01:53:d9:58:2f:9d:e7:af:50:b7:
         6b:c0:ff:fb:df:17:39:db:8e:43:5b:c4:8b:b9:1d:d9:71:df:
         44:ab:27:06:4b:16:cb:cd:88:7c:1e:a1:92:b6:89:c7:a9:72:
         fa:ff:ec:0c:f8:41:79:21:5b:54:c6:90:e3:c4:9a:9a:78:a5:
         5c:95:d8:8b:21:93:5a:ae:6d:51:41:0e:33:98:62:6d:68:f8:
         94:36:76:9f:7b:f8:df:ec:cc:ca:c2:49:bf:ae:52:45:10:8f:
         77:d3:e4:ca:c0:18:8b:ff:73:1b:e9:7a:87:67:e4:8f:e5:89:
         a3:f8:9f:0e:43:25:e8:0e:7d:57:49:8d:50:e8:3d:74:f3:83:
         9c:60:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----