This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft
File:                     70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft (raw, json)
Hash identifier:          DbPX7Fo4aL48g+qStaxqYgEG+qOJQQnPti5BlvI/gXM=
Subject key identifier:   5B:16:63:4C:AD:D1:AF:D9:BA:D2:2D:12:A3:75:92:09:67:A1:2E:C1
Authority key identifier: 33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0
Certificate issuer:       /CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
Certificate serial:       010D0C9F4328584C5718E720009E1A33C29AA680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft
Manifest number:          010D0C9F432858454085274C375F806199848E59
Signing time:             Sun 28 Dec 2025 20:00:03 +0000
Manifest this update:     Sun 28 Dec 2025 20:00:03 +0000
Manifest next update:     Wed 31 Dec 2025 20:00:00 +0000
Files and hashes:         1: 51ba34f2-0f80-3a8b-802e-03a2afc487f5.roa (hash: r3Rq7UE9XrtwsRvmAjZWNy85xOBYIws8lsYEBLORVq4=)
                          2: 70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl (hash: 5U5o0TAZ3LoDTqIKS74CeinRw264Anq0IVSnsZ6QnG0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:57:18:e7:20:00:9e:1a:33:c2:9a:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f
        Validity
            Not Before: Dec 28 20:00:03 2025 GMT
            Not After : Dec 31 20:00:00 2025 GMT
        Subject: CN=32bf900c-cd89-4baa-aa40-ceb713495a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2e:54:53:c1:f1:69:df:f0:a7:23:dd:bb:40:
                    a5:8b:ff:a5:6c:79:1c:89:b9:7f:01:22:72:ab:7a:
                    ec:b4:53:91:09:fd:a3:40:21:bd:7f:bd:46:a4:c5:
                    03:22:8e:65:61:28:d5:87:07:fb:b4:8f:12:33:59:
                    7a:31:32:5d:ab:bf:a6:96:49:50:11:ca:a6:16:4c:
                    ae:a8:da:65:dc:c6:a1:d2:e2:90:0b:da:a4:c5:9e:
                    8c:86:35:76:64:88:02:44:e8:44:6d:bd:3c:29:01:
                    bb:b8:70:b0:f7:5c:42:8d:36:59:ec:42:f3:e5:39:
                    05:d5:aa:72:cc:04:ee:cd:36:55:af:58:4e:7d:f5:
                    4b:fd:13:fb:0e:75:83:2b:4c:a7:37:89:ac:79:6f:
                    d4:70:49:35:31:76:49:34:a1:b6:fa:81:03:16:b1:
                    d6:86:8b:d9:ba:33:d5:62:04:f8:1a:40:75:73:2a:
                    8b:0c:c4:be:71:4d:4c:c9:48:d1:6a:36:36:af:0c:
                    7d:0c:2d:96:89:92:06:74:d6:67:d0:14:28:74:0a:
                    87:5b:9e:7e:82:4d:d0:6e:4c:ab:f2:b5:be:34:48:
                    56:92:06:3d:b7:95:67:f0:28:3c:30:dc:c4:76:e0:
                    ca:4e:3d:c9:00:3b:46:a5:b7:7f:41:68:ee:bb:70:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:16:63:4C:AD:D1:AF:D9:BA:D2:2D:12:A3:75:92:09:67:A1:2E:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.crl

            X509v3 Authority Key Identifier:
                keyid:33:BC:06:60:55:7E:F9:2B:1A:FE:9F:02:E2:E6:F6:E8:AD:26:31:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/70c1bf68-9dc9-4d0f-a17b-3d0f845bbd0f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:93:1f:65:ce:cb:9d:c1:6b:41:8c:d0:e5:72:c6:1a:90:5a:
         41:9d:ea:da:00:96:6f:df:75:d8:df:2d:39:53:64:8a:3f:7e:
         89:fa:47:57:a9:3b:5f:2d:d7:ec:97:33:b2:50:16:16:6c:0e:
         3e:06:46:77:bc:4d:20:43:55:70:7d:a4:0f:53:2e:55:b4:50:
         cc:07:7f:2e:79:bd:dc:3f:ee:eb:c1:b6:d9:d5:05:56:20:f6:
         38:5d:27:26:e7:47:70:ff:5b:72:c5:21:7a:52:c7:ca:e5:1d:
         49:fe:01:08:da:88:e6:94:45:3c:38:6b:fd:71:31:b4:27:f4:
         4e:bd:31:82:54:a5:37:d6:01:25:6d:98:d3:b3:08:bc:7d:7f:
         68:7b:09:fc:1b:59:af:c4:31:0a:68:c2:d7:89:da:eb:9f:f3:
         03:30:ef:9c:79:e8:de:4f:3c:7d:eb:76:1a:7d:57:35:c9:6a:
         3f:19:43:86:01:01:1e:28:18:30:5d:ef:ad:6b:15:90:6f:ea:
         17:f9:38:58:d1:ee:6f:ae:63:e9:06:ad:87:fb:12:63:bf:fe:
         12:13:68:ca:4a:a2:6e:58:ca:99:dc:f8:69:19:c0:ef:8f:9b:
         05:e3:fd:d5:29:c7:c1:43:af:8b:04:3e:f8:7e:f7:13:2c:a2:
         93:f8:50:36
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExXGOcgAJ4aM8KapoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzBjMWJmNjgtOWRjOS00ZDBmLWExN2ItM2QwZjg0NWJi
ZDBmMB4XDTI1MTIyODIwMDAwM1oXDTI1MTIzMTIwMDAwMFowLzEtMCsGA1UEAxMk
MzJiZjkwMGMtY2Q4OS00YmFhLWFhNDAtY2ViNzEzNDk1YTlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji5UU8Hxad/wpyPdu0Cli/+lbHkcibl/ASJy
q3rstFORCf2jQCG9f71GpMUDIo5lYSjVhwf7tI8SM1l6MTJdq7+mlklQEcqmFkyu
qNpl3Mah0uKQC9qkxZ6MhjV2ZIgCROhEbb08KQG7uHCw91xCjTZZ7ELz5TkF1apy
zATuzTZVr1hOffVL/RP7DnWDK0ynN4mseW/UcEk1MXZJNKG2+oEDFrHWhovZujPV
YgT4GkB1cyqLDMS+cU1MyUjRajY2rwx9DC2WiZIGdNZn0BQodAqHW55+gk3Qbkyr
8rW+NEhWkgY9t5Vn8Cg8MNzEduDKTj3JADtGpbd/QWjuu3CAjQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFFsWY0yt0a/ZutItEqN1kglnoS7BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MGMx
YmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBmODQ1YmJkMGYvNzBjMWJmNjgtOWRjOS00
ZDBmLWExN2ItM2QwZjg0NWJiZDBmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzBjMWJmNjgtOWRjOS00ZDBmLWEx
N2ItM2QwZjg0NWJiZDBmLzcwYzFiZjY4LTlkYzktNGQwZi1hMTdiLTNkMGY4NDVi
YmQwZi5jcmwwHwYDVR0jBBgwFoAUM7wGYFV++Ssa/p8C4ub26K0mMeAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83MGMxYmY2OC05ZGM5LTRkMGYtYTE3Yi0zZDBm
ODQ1YmJkMGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANkx9lzsudwWtBjNDlcsYa
kFpBneraAJZv33XY3y05U2SKP36J+kdXqTtfLdfslzOyUBYWbA4+BkZ3vE0gQ1Vw
faQPUy5VtFDMB38ueb3cP+7rwbbZ1QVWIPY4XScm50dw/1tyxSF6UsfK5R1J/gEI
2ojmlEU8OGv9cTG0J/ROvTGCVKU31gElbZjTswi8fX9oewn8G1mvxDEKaMLXidrr
n/MDMO+ceejeTzx963YafVc1yWo/GUOGAQEeKBgwXe+taxWQb+oX+ThY0e5vrmPp
Bq2H+xJjv/4SE2jKSqJuWMqZ3PhpGcDvj5sF4/3VKcfBQ6+LBD74fvcTLKKT+FA2
-----END CERTIFICATE-----
Generated at Sun Dec 28 23:54:25 2025 by rpki-client