This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
File:                     aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft (raw, json)
Hash identifier:          CnuKuzYXqrUm9qyt5DJoAWezo1k1JTR4ZwKBXRxHeuw=
Subject key identifier:   3D:7E:DE:AF:FD:61:0A:48:20:90:A7:2D:C0:8B:65:6C:04:7F:51:7C
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Certificate issuer:       /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial:       010D0C9F4328584C3AD4BAD79A82B67346A41380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
Manifest number:          010D0C9F4328584073A81DA04074EE3AF8C1AD14
Signing time:             Thu 18 Dec 2025 17:00:03 +0000
Manifest this update:     Thu 18 Dec 2025 17:00:03 +0000
Manifest next update:     Sun 21 Dec 2025 17:00:00 +0000
Files and hashes:         1: 09ec274f-da2c-3656-b306-6333a9599045.roa (hash: f1rXLuMhc4JDA6RTif8yyV6BD4NmQSvdMS/hsPZVE3I=)
                          2: 31248d0a-d319-3cba-927d-bd309e4d067b.roa (hash: nTqVxxBL90h+6z2bxZFotHVsK1nimrWGpuGgf/UJn8Q=)
                          3: 4349fd77-644a-312d-9099-d76547d47c00.roa (hash: zn2nTly5w1DfwXSUwacg3njRmbaIh69LQeFmpsEq0BU=)
                          4: a9cbd22d-c94e-3818-bd27-75de97d8d08f.roa (hash: JMmqvQo9Cqu/3UkS0e+Mm7oLnjvYW5BiWd5xg9o2Mqg=)
                          5: aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl (hash: g2FxmQqxt6x2kELp4S+slNPRMgCACaR6riJ33eGK4yU=)
                          6: ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa (hash: jchjf5Kvgtm8g5Xur2a7PgFLTmGbhgHOdoryTEMj7KY=)
                          7: e7a63767-3591-3686-abea-302b290a8a7a.roa (hash: 5J80s0N8Oby60I4265oc4SIwF7z1Sl7T+LpuKNI/AP4=)
                          8: f21f10f0-da2f-37c5-99d5-0935a2d74af1.roa (hash: rxawwGcRaS60E/lGDPcachgKhK8XNXu5tcKCIVOrYas=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3a:d4:ba:d7:9a:82:b6:73:46:a4:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
        Validity
            Not Before: Dec 18 17:00:03 2025 GMT
            Not After : Dec 21 17:00:00 2025 GMT
        Subject: CN=10331e46-df86-4e19-af19-181333b62bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:e3:56:d7:45:b6:ca:8d:87:d5:26:c5:9c:
                    8e:7e:0f:34:0f:d2:54:e3:40:eb:8a:c4:1a:78:1b:
                    9a:61:a0:df:2b:83:6c:0e:49:94:9d:01:e8:5f:c9:
                    69:2b:5e:ed:1a:4e:d0:21:9f:a1:b3:ab:f7:ef:03:
                    06:33:57:a8:37:59:b5:df:10:7f:8e:6f:03:e9:4d:
                    79:9e:ff:90:05:c8:c0:05:57:dc:ef:fa:cd:69:94:
                    df:4e:78:b1:84:6b:bb:96:fa:0a:41:db:f4:c9:fe:
                    41:e9:b8:ee:0a:1a:53:02:c6:90:a5:f6:71:ae:4e:
                    68:bc:7c:ef:f1:f5:99:5d:b2:01:34:1e:8c:29:6c:
                    84:54:46:91:fe:47:32:9c:24:0f:26:5a:55:f7:e4:
                    5d:02:44:4d:a2:d5:3e:74:a1:f1:b4:25:d3:0c:48:
                    3a:c4:81:5d:b3:d2:a2:1e:24:da:a7:cb:f4:ab:4e:
                    b2:de:8d:ef:2e:b1:1b:98:f3:65:68:f4:fd:74:e7:
                    41:7f:fa:ea:1c:70:c1:ec:ec:ac:09:11:b5:e0:b7:
                    ce:54:3d:a3:dd:d2:8f:b5:eb:09:d5:3d:c6:c9:0a:
                    fc:e6:7c:0a:e1:b5:6c:8d:1c:a6:a9:45:ee:3b:41:
                    21:c6:0c:d4:8e:c5:d6:24:00:90:89:ef:ab:25:eb:
                    a4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7E:DE:AF:FD:61:0A:48:20:90:A7:2D:C0:8B:65:6C:04:7F:51:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:50:58:72:c4:b4:17:33:ed:60:f6:bb:2b:fc:8c:de:66:13:
         40:61:54:9c:12:08:90:83:bc:11:17:89:ff:6c:46:8d:79:ee:
         27:a2:d9:0e:8e:e4:00:ea:5d:26:34:a7:cf:e6:59:88:de:03:
         85:14:3f:fc:cc:5e:05:87:0d:db:8d:d4:71:d6:e4:37:05:c4:
         fd:89:36:65:ff:8c:87:07:59:23:4d:57:72:df:e8:fc:c7:97:
         51:38:56:a0:1d:0c:28:11:31:54:3b:f7:37:be:ab:44:51:81:
         a9:ea:5b:52:fc:f7:97:e8:57:d9:f4:a9:a7:20:01:0b:64:5c:
         73:85:cc:29:67:0d:2c:c5:39:bc:3e:10:13:f6:74:5d:74:c6:
         62:99:82:91:01:74:fa:89:f1:a4:bc:7f:93:87:e3:48:ac:0c:
         b0:c4:e7:c1:b9:7a:8c:41:b6:8a:b0:5a:22:46:96:b5:39:4f:
         6b:1b:2c:88:39:5d:4c:c5:9f:ae:cb:94:7f:43:7d:03:04:62:
         fb:11:18:dd:53:4a:c5:91:b1:8e:e7:7e:57:9e:14:04:ee:90:
         68:9a:96:97:99:57:4b:d3:f6:69:19:95:b5:a6:86:8a:a0:3c:
         c8:f7:86:cb:83:42:c0:70:72:ef:2d:6c:9c:0d:02:10:67:e9:
         43:1e:f1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:20:02 2025 by rpki-client