This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft
File:                     4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft (raw, json)
Hash identifier:          kzYz0p2BZHpSkSVveV5P/i4BEcOhblW/8o0+EyPGQiU=
Subject key identifier:   39:6C:6D:A3:58:5D:20:1B:C1:75:81:9D:0C:20:D3:DB:B6:7B:DA:88
Authority key identifier: B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA
Certificate issuer:       /CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8
Certificate serial:       010D0C9F4328584C9448673ACE69A7B8D4B7D680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft
Manifest number:          010D0C9F4328584BEA088ECD2D8F60B215FF913D
Signing time:             Mon 19 Jan 2026 18:00:04 +0000
Manifest this update:     Mon 19 Jan 2026 18:00:04 +0000
Manifest next update:     Wed 21 Jan 2026 18:00:00 +0000
Files and hashes:         1: 4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl (hash: LKZPrQYAjFvx4yNwamwPw2zOJh28nWphLwJY3o0BSNc=)
                          2: 73ec1743-80bd-3181-93d0-4ee648c1a2c2.roa (hash: c3VP3XDKi1oFUa8CrMCQ2WselqQ1ql3EQqSyuRkkthk=)
                          3: a46157e0-a7ea-356d-a381-71067022a9b8.roa (hash: UCDai33j7mthQyhAoxTcTr40+XNuZVeq6oNKm+l6XWg=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:94:48:67:3a:ce:69:a7:b8:d4:b7:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8
        Validity
            Not Before: Jan 19 18:00:04 2026 GMT
            Not After : Jan 21 18:00:00 2026 GMT
        Subject: CN=dfc8b2d5-957e-4e65-b6d8-092ddf258d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c6:14:4d:f7:4d:7f:9c:ae:f0:0d:e4:78:0a:
                    4b:11:2d:36:9e:c7:a0:3a:44:13:5c:27:6a:ae:77:
                    72:d1:82:eb:69:c2:dc:80:1c:3e:84:a5:77:69:b7:
                    8b:80:d9:17:e9:5d:ad:3a:b2:af:63:54:7a:dd:07:
                    da:f3:2e:fa:a0:7b:7d:a2:80:c9:ca:22:8b:1b:e7:
                    b3:0c:24:ea:91:f4:af:97:e2:ea:54:82:ed:ee:3a:
                    06:b2:a9:6e:c0:a2:09:5e:ff:58:ec:c0:df:a5:a8:
                    fd:d2:e9:26:d3:07:f2:06:0e:4d:c2:c6:bc:ce:81:
                    81:14:ee:f0:13:1e:a2:9a:c3:cf:c3:d5:7a:f2:6b:
                    bf:a3:88:79:0a:48:ef:5e:31:3d:64:63:d6:db:7a:
                    0f:c7:20:db:99:f7:c8:51:5f:fa:cb:5e:96:85:27:
                    96:08:09:21:27:3e:1f:40:77:ff:65:d1:a5:1b:fd:
                    50:50:c0:59:a2:25:5b:35:0b:1a:81:1f:8d:90:5d:
                    01:1f:fd:88:cf:4a:f3:82:3f:59:d5:4c:8b:e1:59:
                    bb:07:0d:01:46:f0:e3:26:47:cb:91:56:6e:0b:7c:
                    76:aa:70:89:a5:23:31:91:37:45:ab:3a:cf:dc:50:
                    e4:27:ba:05:dd:73:27:c0:f2:10:8c:6a:7e:cd:3c:
                    33:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6C:6D:A3:58:5D:20:1B:C1:75:81:9D:0C:20:D3:DB:B6:7B:DA:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl

            X509v3 Authority Key Identifier:
                keyid:B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:87:07:34:a2:dd:42:2c:ec:c7:5c:bf:df:3f:25:c6:84:7b:
         21:92:41:92:12:a9:c4:d1:a7:1f:9f:87:17:3e:81:27:da:e1:
         f3:69:73:54:14:bd:42:d4:31:a2:8c:6c:91:7c:c7:a9:15:bb:
         71:15:4a:ae:4a:03:10:9e:e7:ba:57:f4:59:dd:04:ee:51:6f:
         6c:38:1f:94:15:8c:a2:31:90:c7:36:71:21:10:45:02:3a:0c:
         80:2c:f3:d8:08:57:b9:ae:8f:b2:40:43:c2:07:45:15:6b:01:
         79:ce:42:be:42:3b:df:68:ea:7f:5a:ea:c3:ab:4c:38:99:ed:
         c2:c1:e8:a3:4c:a8:66:9a:25:c1:00:7e:c4:06:4c:ca:11:00:
         7f:f5:05:0a:85:8e:3f:d6:77:08:f4:2e:27:91:e5:5e:33:6b:
         7a:c9:fd:f6:84:0f:4d:0d:53:af:8e:96:61:1d:65:72:8b:37:
         c5:8d:09:7f:1f:e1:a7:07:41:ec:bb:b3:ad:56:f5:0f:17:ed:
         d0:88:e4:02:27:8b:45:37:3f:6b:0a:e4:b3:e3:fc:a2:84:c6:
         20:28:4a:f2:81:f1:92:c0:d5:4e:de:ec:28:4b:77:7a:37:ee:
         b9:31:5f:f6:89:52:b3:db:04:1a:19:8a:cd:6e:a6:99:e2:37:
         90:e4:27:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:27:09 2026 by rpki-client