This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft
File:                     99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft (raw, json)
Hash identifier:          5xfuB9SxjTzBtAlfRVlZCS5LYrCHr8y9pjzJ4I0R4KI=
Subject key identifier:   FF:5E:3D:3C:3B:30:85:1C:58:24:C4:CB:E5:C2:12:56:14:CC:A7:41
Authority key identifier: 06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF
Certificate issuer:       /CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012
Certificate serial:       010D0C9F4328584C57E956239843D1D7FDAF53C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft
Manifest number:          010D0C9F43285845256AC2B6C96EB8E1D8D75639
Signing time:             Mon 29 Dec 2025 03:00:03 +0000
Manifest this update:     Mon 29 Dec 2025 03:00:03 +0000
Manifest next update:     Thu 01 Jan 2026 03:00:00 +0000
Files and hashes:         1: 73d252ea-14b2-39d0-bf0f-0733665369b3.roa (hash: ba1ShJvVfBCJd7VI+psmjJa5M6TiPAOJLJyH9nDOYxQ=)
                          2: 99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl (hash: NNPioMzq0InckpSUC+uYtYTv0M5wwxoyk1orI848Tdg=)
                          3: ae0ba1b7-c72f-3a09-8a99-015352bfd2b6.roa (hash: +5oieHwUw0qLmvvECoyAxhFYygHZaI5p3Nol7TlJO/8=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:57:e9:56:23:98:43:d1:d7:fd:af:53:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99642cf5-82f7-4be3-a68e-1d29c5c2d012
        Validity
            Not Before: Dec 29 03:00:03 2025 GMT
            Not After : Jan  1 03:00:00 2026 GMT
        Subject: CN=d100b72b-a4e4-43f4-940d-74243798f1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:36:c3:f6:a9:85:30:79:b0:60:09:18:ca:cd:
                    80:62:ae:b3:40:63:a9:c5:a4:b7:9a:35:4e:16:b5:
                    f1:c6:59:88:de:6f:7e:ec:12:b9:e1:a2:b9:eb:c8:
                    c3:4d:09:e5:33:87:07:71:80:65:d1:14:52:6c:14:
                    5a:44:25:f5:33:0c:a3:c7:52:04:83:a7:44:12:c9:
                    33:48:bd:37:1d:04:cf:5b:56:04:24:a2:c8:da:8d:
                    11:55:d0:9b:9b:c9:8a:18:ac:84:a6:c2:d5:8e:b7:
                    d9:b2:9a:24:f8:46:5d:88:c3:5a:90:34:d1:e7:36:
                    0b:e5:53:2c:b1:c7:f7:4e:3c:30:bf:35:d7:9b:13:
                    50:7c:45:ab:cc:ff:2b:c7:ef:c4:45:3c:2b:9d:d4:
                    d1:be:dd:d0:91:a7:74:69:36:ee:ca:91:68:07:a9:
                    7b:45:05:b7:f4:cf:1b:36:aa:21:fa:ae:4f:03:98:
                    f8:83:72:9a:1c:02:58:19:36:97:ea:89:2d:66:12:
                    73:d6:fc:cc:f3:95:5a:dd:4c:f5:f7:18:5f:c0:0d:
                    89:1d:55:7f:ac:50:39:23:57:ea:4b:ca:37:87:53:
                    43:5c:8c:7a:85:4b:fe:f2:27:8a:97:9c:6c:8f:5e:
                    ac:08:8a:90:b8:10:ae:c0:10:02:7f:bf:d0:ce:a4:
                    85:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5E:3D:3C:3B:30:85:1C:58:24:C4:CB:E5:C2:12:56:14:CC:A7:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012/99642cf5-82f7-4be3-a68e-1d29c5c2d012.crl

            X509v3 Authority Key Identifier:
                keyid:06:57:24:AF:C5:CB:A1:55:D8:EA:78:14:9C:25:BA:61:5C:7C:5E:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/99642cf5-82f7-4be3-a68e-1d29c5c2d012.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:fa:09:fd:8a:03:3a:06:75:28:96:88:41:be:eb:01:5d:7d:
         cc:3c:ab:11:46:72:57:38:7d:8f:40:7f:a0:b5:0e:f6:fc:bc:
         4d:0f:42:39:7d:ea:c0:90:ab:fc:87:40:4e:9d:18:4e:4e:94:
         19:df:c1:3e:b1:c4:6b:15:89:91:31:5a:9f:ce:15:81:f8:74:
         64:0e:eb:7f:c7:a5:ee:0d:7e:29:d9:4f:74:ba:7e:9a:65:1e:
         c1:12:18:a0:c4:96:14:11:e7:9d:59:6f:04:1c:54:7f:2c:09:
         6f:b7:5f:5b:1f:d3:e6:14:ac:da:4c:1f:67:26:e8:9d:2e:15:
         e0:c2:e9:40:ea:41:a1:df:b6:46:c2:a5:f8:70:94:d6:91:b3:
         23:db:c9:f8:c2:8f:0d:37:b8:d1:ab:02:6b:db:03:95:23:4a:
         4e:46:e0:7a:14:da:b5:ac:99:b8:06:2f:b8:17:98:7a:a4:04:
         9f:1d:fd:82:29:45:11:09:be:6e:ee:b6:ee:68:81:fe:e8:d5:
         a9:6a:6b:6c:c2:62:4a:a4:9d:0c:23:ec:11:6c:96:94:41:53:
         e7:85:cc:c7:00:8d:61:9f:6a:30:8e:e8:86:34:d9:59:8f:91:
         10:f1:84:83:b0:8a:4a:c0:41:ac:a1:87:37:a9:59:17:aa:4a:
         25:3f:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 22:38:21 2025 by rpki-client