This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
File:                     4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft (raw, json)
Hash identifier:          y+XlqOt3Q16pHKFSG2b1cRKwz/fn5V8MZyQ1zCLTy4M=
Subject key identifier:   94:0C:78:FC:37:7F:84:B7:91:A8:2A:63:8F:A0:EC:E7:29:9D:06:4A
Authority key identifier: F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59
Certificate issuer:       /CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
Certificate serial:       010D0C9F4328584BF80FD950B82ABD8C64BA7900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
Manifest number:          010D0C9F43285844B7A0D13397B2A13D06AB96DF
Signing time:             Mon 24 Nov 2025 19:00:03 +0000
Manifest this update:     Mon 24 Nov 2025 19:00:03 +0000
Manifest next update:     Wed 26 Nov 2025 19:00:00 +0000
Files and hashes:         1: 204c1e03-7ef3-3f1a-b01e-d7ee729db418.roa (hash: 4IItrw0MKVCiQZeKR4X2owJi8mQqjLe6S+Ck4EmpqNE=)
                          2: 2938d50c-8e48-36b6-993b-1b4431994e3b.roa (hash: QGNqNZQL3GLaqGJ6Whj2HuHh43RsP/fNUWMT7w+MnUU=)
                          3: 36746d5e-b777-3090-864b-cc36fff7cc3f.roa (hash: jKpd2praLSF8HXuL5bX+bEgGtRcOQcUEXUCkRxJSOXA=)
                          4: 4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl (hash: pKTQPgYphjx5w118smx3hWsUxnfShEVl5lAvDWYFn8Q=)
                          5: ba0578d9-926a-35fa-a460-8eae2d199b7f.roa (hash: KTRFDxJr1SXl3Xs0/49cGeTFu88kZnS3I7NZFQdzGmQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:0f:d9:50:b8:2a:bd:8c:64:ba:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7
        Validity
            Not Before: Nov 24 19:00:03 2025 GMT
            Not After : Nov 26 19:00:00 2025 GMT
        Subject: CN=aca9e1e3-06ed-4403-9bc0-f2a3e2d6371d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:2d:74:62:29:5c:7f:0b:d2:a9:6f:f2:04:
                    6f:2c:e8:9c:c5:fb:78:07:79:c2:a4:b1:dc:53:88:
                    d3:a3:62:b4:a1:87:b9:b6:ba:f6:fe:34:42:5c:36:
                    1a:db:d2:22:f0:0d:bf:aa:0a:50:76:68:f6:ea:06:
                    cd:c1:c9:bc:70:2e:f1:26:cd:d0:56:1f:9f:45:1e:
                    46:7e:14:e7:d3:a6:07:20:51:45:41:1c:6b:54:9a:
                    78:28:a7:d2:07:b5:ab:0a:79:0c:16:b8:b0:d1:0e:
                    e1:68:4b:9f:4e:83:4d:d3:31:33:44:3c:54:d7:10:
                    11:68:ae:5f:a7:43:cc:54:3a:ab:70:b0:c2:4e:7f:
                    f2:c2:9c:1e:d3:19:68:f4:b0:20:86:9b:a9:04:7a:
                    64:f3:78:07:a3:84:87:20:c3:33:8d:f3:15:f3:7e:
                    df:71:18:88:0f:7d:3d:ef:a5:36:36:5a:4b:70:63:
                    78:47:a3:d6:77:2b:38:46:d0:d5:db:f4:56:28:3e:
                    d4:af:cd:25:7a:e4:be:14:f9:55:91:8c:7e:ca:c6:
                    11:14:b0:89:ba:e2:10:fc:7b:a1:2b:7b:e6:d4:b2:
                    20:1b:60:12:e0:42:c6:e8:d5:eb:7c:72:74:5e:f9:
                    82:a6:7d:a3:a2:1d:51:59:6b:ed:59:d2:64:7d:e8:
                    25:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0C:78:FC:37:7F:84:B7:91:A8:2A:63:8F:A0:EC:E7:29:9D:06:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.crl

            X509v3 Authority Key Identifier:
                keyid:F7:C8:46:F1:D6:FE:04:68:EA:AC:40:E7:0B:41:CA:28:F8:25:DA:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4be51e82-7cc5-4500-a0ff-cc3a9d5e3fb7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:d0:76:92:14:e6:68:c3:fc:52:59:25:7d:2e:54:c9:04:0d:
         6a:12:10:c8:17:dd:a9:b3:de:a7:0f:0d:c0:f6:a1:10:7e:45:
         d3:8f:52:82:b3:f7:25:3e:16:0e:1a:84:05:8d:62:6d:89:d2:
         90:f2:26:c0:78:2d:bb:d2:1b:1b:53:d1:44:4a:2a:39:63:5b:
         dc:65:35:12:e9:7b:ca:dc:ba:d3:a4:75:26:8c:ee:7e:b6:0d:
         de:12:80:c3:ab:7c:c4:64:f4:2e:ac:da:11:e0:92:51:74:87:
         6f:79:1c:ee:38:8c:a4:8b:42:7d:9c:3d:07:e9:24:81:88:84:
         41:8d:32:01:81:33:15:6f:f0:be:38:88:23:ac:ea:5c:f9:84:
         cd:68:ea:81:28:87:56:78:0d:37:8f:2d:c5:1c:21:9d:e5:44:
         b5:fc:c2:f9:c4:ac:5e:1b:4b:e8:0e:c2:ca:47:fe:c0:fb:08:
         10:83:1f:9e:6e:06:74:17:cc:02:62:bf:dc:9a:9a:c9:06:b1:
         fa:35:f0:3c:cd:48:03:7e:cc:73:91:e1:be:df:9e:0f:4a:0a:
         65:76:3e:50:c8:f4:a6:0f:e1:0e:f2:9b:00:1a:da:20:d6:3f:
         45:b6:78:c0:1f:5a:75:e7:1f:68:a4:fa:7c:ca:0e:36:e7:00:
         b8:95:3a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 13:37:06 2025 by rpki-client