This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
File:                     28aae7db-2f51-4656-bba0-64f1d3ee3256.mft (raw, json)
Hash identifier:          tQKmIhxAgpC0GcKNC3VfQTrt0C3z3p8mE5din4t1iYY=
Subject key identifier:   B5:D5:04:13:8E:CC:5E:83:DF:08:EF:9B:86:F6:AE:C6:EF:77:B4:77
Authority key identifier: 8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F
Certificate issuer:       /CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
Certificate serial:       010D0C9F4328584C3B2E0D0E414AC3B3A2990E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
Manifest number:          010D0C9F43285844BA8B4395ABA4BC7BE3153A42
Signing time:             Thu 18 Dec 2025 20:00:03 +0000
Manifest this update:     Thu 18 Dec 2025 20:00:03 +0000
Manifest next update:     Sun 21 Dec 2025 20:00:00 +0000
Files and hashes:         1: 06c9128a-9285-3afb-94e5-19a96b0f2a6f.roa (hash: Yn3b6dA2SNRvJIxu+Ae1+4VMJH/OxKHC0YQMdr1Dli8=)
                          2: 28aae7db-2f51-4656-bba0-64f1d3ee3256.crl (hash: 7fyads7h3KSiZSt+eZasVQ5YQI1KDOzbNoxNJOXrZYc=)
                          3: 8b8a85b0-e152-340d-9552-d571b618a288.roa (hash: 6M3NB2CDvPt853JYWk8lPIJ3YoMWy8ECOAfKE02YMfo=)
                          4: b7cfc94e-3868-3c6d-ac09-5bcd12f0ce16.roa (hash: OFgamgbeQwoPLit2uce65nB7X1dIYPgJ+lIUVirt9pk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3b:2e:0d:0e:41:4a:c3:b3:a2:99:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aae7db-2f51-4656-bba0-64f1d3ee3256
        Validity
            Not Before: Dec 18 20:00:03 2025 GMT
            Not After : Dec 21 20:00:00 2025 GMT
        Subject: CN=31369eae-ca62-4947-b7b6-c0d55f876aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9f:91:22:8b:8b:6a:31:f1:db:f9:2b:c5:21:
                    25:9d:8f:5c:d5:72:1f:c8:06:46:fa:2b:ed:23:70:
                    61:6d:9c:b3:b4:42:f7:a5:a5:1b:ef:fa:67:7c:ff:
                    c2:47:9b:b8:40:a9:9c:1f:87:1c:71:8e:e3:50:47:
                    be:14:30:7e:45:37:3c:38:7c:72:7b:74:47:b9:a9:
                    a0:fa:c8:8f:16:64:0e:b1:9c:6f:0c:5f:9b:29:e2:
                    71:12:cf:76:c1:cd:21:ee:c4:21:05:42:dd:c8:7d:
                    ee:cf:13:03:2f:70:76:b8:bd:90:e3:0a:22:e8:7b:
                    8c:cc:dd:68:71:a4:65:e3:da:b9:92:13:cf:37:df:
                    f8:ea:69:32:ff:ce:14:16:80:4e:4c:a5:d8:11:c6:
                    27:d2:79:59:a9:16:e7:94:39:98:5d:44:b8:7a:07:
                    97:a1:b9:2b:2c:b6:a8:83:2f:a3:9f:3a:bd:83:c1:
                    a8:38:f9:74:75:c7:79:f4:75:2d:ae:c5:8c:9e:c2:
                    ce:39:ad:34:36:50:37:98:4f:db:d7:e0:7e:89:1b:
                    a5:e6:2a:87:3d:0f:92:55:c6:5e:46:4c:db:f3:01:
                    69:e9:e6:cd:02:eb:8b:38:fe:65:82:18:5e:bf:b4:
                    d5:cd:d4:a8:ca:9f:6a:ea:1b:b2:8e:39:51:13:b1:
                    bd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D5:04:13:8E:CC:5E:83:DF:08:EF:9B:86:F6:AE:C6:EF:77:B4:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256/28aae7db-2f51-4656-bba0-64f1d3ee3256.crl

            X509v3 Authority Key Identifier:
                keyid:8C:E0:CF:16:AC:8F:6F:CC:E4:63:27:ED:DF:DF:A1:F9:E7:6F:93:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/28aae7db-2f51-4656-bba0-64f1d3ee3256.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:09:1a:08:b5:be:07:0b:20:e8:2c:8f:33:c2:c4:e4:2f:88:
         80:90:77:ea:dd:5c:22:9e:72:9a:94:37:e0:bf:a5:61:5e:d8:
         07:74:9a:ab:73:fa:a1:14:c3:9a:62:ec:f0:ef:f8:55:80:2d:
         af:4c:b5:d6:9d:d0:66:ef:34:6a:89:61:dd:8b:21:69:3d:60:
         bf:6c:bb:55:e1:b2:fb:b6:af:11:c8:70:ea:4d:e2:30:04:ed:
         aa:21:d7:48:31:80:7f:e5:f9:a3:73:cd:ca:bd:43:d6:30:c9:
         64:33:70:5e:b2:78:ca:e0:85:5a:80:6e:5f:d9:9f:ec:83:03:
         97:29:3c:bb:39:7b:d1:3e:ec:a2:ed:c1:9d:7a:75:27:08:de:
         18:4c:d4:8f:07:96:a4:0a:60:0b:65:e0:6e:9c:bb:10:50:4f:
         c4:e9:1f:c8:c2:b6:76:b2:ab:e4:30:42:3e:b9:30:28:24:24:
         a8:cf:d6:5b:48:bb:5d:37:26:8d:18:9c:2a:d5:05:35:80:67:
         48:1f:c5:0e:5f:7e:71:41:11:b6:17:26:36:d6:20:2a:9c:4e:
         e2:af:83:5c:0e:a3:76:1a:41:4f:28:55:31:80:2f:e8:ba:53:
         fa:23:f7:1c:e6:71:45:88:98:80:c4:13:1a:8f:64:c8:ab:d5:
         f2:20:26:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:27:07 2025 by rpki-client