This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
File:                     3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft (raw, json)
Hash identifier:          eG6m0l4a2kKitUZ8KIwnFvPc15z8re5xz2aVDOyUtNM=
Subject key identifier:   80:A2:BE:F3:4A:27:FD:35:23:B5:98:C8:FB:9C:95:43:07:D4:29:CA
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584C4871CB169153A0830EB7B600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
Manifest number:          010D0C9F43285844E1C09AE60DCB3082CF9A35DC
Signing time:             Tue 23 Dec 2025 14:02:03 +0000
Manifest this update:     Tue 23 Dec 2025 14:02:03 +0000
Manifest next update:     Thu 25 Dec 2025 21:00:00 +0000
Files and hashes:         1: 121123d8-f74f-33d5-8776-bedc2864efb9.roa (hash: eVANhuR07gx8TN8CBpyR+hxiAwm5IBfjJoklVcPhSzg=)
                          2: 3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl (hash: GOZ6dU4kA7IuZ13npP7uu9wSrnt2yA0CWCONS4tsAlg=)
                          3: 480d7a14-dda4-3eaa-860b-15903be57295.roa (hash: Zs5zmRT3uBZsyGdPHYEg1JndIJhNO+1fvo6HZbsgw4k=)
                          4: 69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa (hash: zWJQjTPxGlYUruIvOca6K7nZ11sn3xMLiu8e86MVg54=)
                          5: 6ca72908-2221-3ecd-8e5a-9b8fe27f2c2b.roa (hash: d2br0p1UuQiCFpiCtzpL9fld5GTynD+UfHZMtxhxx1Q=)
                          6: 6e62b154-aad7-308e-adbb-e41b22b5c510.roa (hash: pkARXZXQIpaOJdegH45uiGtw+YsfgsLCDao2ynFLEVw=)
                          7: 8b308819-abe6-3d17-b3e3-7cbe2c07b783.roa (hash: grHGWMxB5ttvbUzuh/JCwR7Hw1cb6u72DG2NQTkxKww=)
                          8: 8c6a9247-1a35-3ffe-ad0c-d7fd562dd846.roa (hash: oOgZqOcaMf+k5+15lm/zCQvdr66B5QdCbA6v+9+tHTY=)
                          9: 93ee71c3-c105-3f73-8994-522e86d342af.roa (hash: m7GtvGH65sqhEfX61Tj4wkfZc3D2SyZZJpVbjIkAn7k=)
                          10: 96a7d5f8-e293-37e1-9694-e0d0a7da47b9.roa (hash: +1f8TMfbnMXOGPZGh0hnkO/D1QbdbdQt37AGL1f6gYk=)
                          11: b092e113-9087-3240-9295-0c9963a2bb6b.roa (hash: lnCxL4l2tQOvQDWoiX3+oNvMFt7u5VM902uIf3CDAcM=)
                          12: bca9cd84-b5a9-34b2-983a-541164ef60ba.roa (hash: YM2ulsTHmPl1sE6VAuZuObqVuHrhG8p175mEAYzxLUc=)
                          13: c650be8d-29c8-3d31-9c64-9172d71f8ec4.roa (hash: MtapM21NNWS8YllTr8BhGn/RsnWOHDtcfGkRnBMPmLI=)
                          14: e0b7f0f7-6f94-3ad1-8f3c-2cfd2dd3b619.roa (hash: p6MFIq61I2avvibOcyu0rlTKTcCYgq+JKv3huReUVd0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:48:71:cb:16:91:53:a0:83:0e:b7:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Dec 23 14:02:03 2025 GMT
            Not After : Dec 25 21:00:00 2025 GMT
        Subject: CN=734d1a23-be54-4440-8f96-ddca72112138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:cc:a5:4b:f2:5c:2f:b3:ef:97:3a:9e:73:12:
                    df:c0:e1:86:d6:44:fa:61:fe:aa:db:02:28:d9:1e:
                    50:f7:77:e8:c3:91:39:a9:1a:ec:40:67:59:8a:d8:
                    f1:a2:bd:c3:ee:5e:9b:6e:6f:a2:7c:30:e3:ff:78:
                    af:4c:24:42:b4:1f:0c:55:cb:bc:ba:ac:03:1b:7a:
                    ca:e5:8c:ec:21:b4:f0:05:e4:06:ed:f5:16:33:e6:
                    8c:22:3e:46:0f:07:34:83:a5:60:50:8b:e0:08:fb:
                    c2:2b:7f:08:2c:e2:86:4a:0d:32:51:0b:6e:f1:32:
                    e6:e9:a9:9f:6b:d4:64:04:f3:a6:03:2e:e2:1a:20:
                    0d:1e:99:07:9e:7f:5a:fe:ab:4b:8c:f9:31:72:1b:
                    95:f7:7a:7f:57:d8:71:df:fe:7d:32:32:d3:76:15:
                    a8:16:5e:e9:ed:cd:fb:46:0b:cd:f8:5c:07:ab:32:
                    80:a5:84:5c:c8:cb:20:61:e5:ac:c6:38:6e:3f:db:
                    4a:02:f7:80:b2:32:bb:6b:eb:67:d1:30:9a:3e:f4:
                    16:26:0f:65:d1:ed:af:84:1f:94:c4:ea:cb:63:66:
                    61:5a:6b:48:18:81:39:ee:b2:b7:0e:9e:95:d0:20:
                    64:94:a3:4c:c0:b1:d7:c6:f6:f0:36:72:2b:c5:01:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A2:BE:F3:4A:27:FD:35:23:B5:98:C8:FB:9C:95:43:07:D4:29:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:1b:aa:9d:5d:60:f2:57:ac:bb:ca:3b:05:22:95:eb:63:b6:
         82:35:b9:33:f9:5b:f3:64:29:66:23:db:b6:72:4b:f8:9a:b9:
         a1:75:ab:ba:cb:00:69:af:48:a0:3d:96:01:0f:89:87:66:5f:
         8f:5a:be:19:0b:42:b4:19:d9:2d:98:87:c8:d4:8c:8e:b0:f8:
         69:10:e9:c7:6a:b6:7a:d2:82:b2:00:f7:27:e2:9c:e8:4e:3a:
         8d:11:2d:b4:14:ab:76:65:a4:02:14:d8:92:69:8c:e0:b6:ef:
         3c:12:9d:ac:d7:17:ea:74:5e:fd:52:95:32:bb:ce:e8:54:bb:
         bc:23:38:16:3b:f0:56:8b:7a:79:5e:dd:56:69:6b:97:ad:03:
         06:78:77:da:88:85:26:c1:8b:0a:25:47:93:61:ff:6e:ac:e0:
         e8:45:32:27:71:db:42:96:e3:ac:c4:3f:05:97:19:55:96:63:
         6b:a6:20:81:4d:b5:33:75:98:83:1b:4e:e3:39:8f:ca:c3:9e:
         19:74:11:cd:9f:03:1f:90:da:d7:6b:1f:0a:31:a9:e3:46:a7:
         b5:45:eb:7c:3e:bc:97:d5:8a:08:41:4d:84:00:80:f5:7b:48:
         65:8d:df:fa:03:a9:08:94:87:31:64:f1:cc:e0:fa:70:03:c0:
         78:66:7c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 17:40:53 2025 by rpki-client