This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
File:                     aa9d650e-309d-4772-a1ee-ed762e147583.mft (raw, json)
Hash identifier:          H68yVzpcoeD0Dllx9cRUXsn5gBy1eyRaeqDDyD24a3g=
Subject key identifier:   0F:D0:7E:EF:5B:11:89:56:47:A6:6B:D5:36:B0:FA:30:01:1B:2A:2F
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Certificate issuer:       /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial:       010D0C9F4328584C463B0022AF16149A6BB1FB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
Manifest number:          010D0C9F4328584498E15C62F61CD05A98DC4FA8
Signing time:             Mon 22 Dec 2025 19:00:03 +0000
Manifest this update:     Mon 22 Dec 2025 19:00:03 +0000
Manifest next update:     Thu 25 Dec 2025 19:00:00 +0000
Files and hashes:         1: 0059afbf-c64a-3c76-afa3-75508b064e07.roa (hash: 2wqbW+fDD6hxa494ZP38arR5UM119UbRYhlOjj7D9Z8=)
                          2: 133bdf8b-94cc-3b4b-a2da-8f00947c052b.roa (hash: Sr2VvzgDe7243iDDSgWTnLDyxMQUR37KKbBsrSICemc=)
                          3: 239f9ee1-7d02-3155-ac48-c07b2ad31858.roa (hash: Wu+H2/kWFXp2iYMjQzOzAqzfa3CozEt0utggVKDcBgc=)
                          4: 2468da7a-22c9-3d02-82b7-e3469b49cdec.roa (hash: fW28sfHhA2LoH3Mdu/UaBQnQsjoEtPYbTLcf+VCJYfs=)
                          5: 36ed5009-067b-3549-a4b1-cde6d2e13b3f.roa (hash: iRZF9bRpLOp40EGwqIHmdLnC2Jt0JHiOvg0VMoxhHcI=)
                          6: 3804b9ed-e081-3a86-97c7-15444867c326.roa (hash: SNi5Rna+pokGFGQbJYC+X10ewppWR+WeIkNO5bxJn1o=)
                          7: 61e047c0-059e-39d0-8a9c-aa85bb357fd0.roa (hash: NfBzEMtBV3vBPwxQEqwy9UEPpMS/xLa/wLrMqO/WXvY=)
                          8: 63460249-2220-32c5-9955-6a43a0eaaf99.roa (hash: h25WEgFkJxuiM8J471JAjdLnYwAhEobk8OIkJG58Gww=)
                          9: 91e209b9-b6c8-3e97-9a5f-30eb162f680b.roa (hash: WpjLEA8oM/avIWE7MszLgcK05m1Yu0aXviBoGX/iTmQ=)
                          10: 9a6c4241-4967-3a10-984a-6f62096d0f3c.roa (hash: IxyhZG8o4ZMxYtZed3BCdFeUc9PfOgbxRso0DOUBUuc=)
                          11: aa9d650e-309d-4772-a1ee-ed762e147583.crl (hash: 9uBUHQXy1ENT880/SW5phBgUG8kaMF8lpmkhKuGepAE=)
                          12: ae4d48e4-7215-3edb-8bf1-57fcff00d990.roa (hash: 6biwYyNYZnIzIRFFzlycqFV5lm32O81rX/AM7Uwg56I=)
                          13: bedb330f-36ca-3b2f-a920-a4a4d73d7354.roa (hash: izQDUkJs5RXQCKDdgGJh1lChenfnWnr1x6bL/o/hDFI=)
                          14: ff0084c6-b5ca-3f33-9a00-23a7ffef8353.roa (hash: 9PkEDd43q3Z2oNcl5OVW434L6eG/HeBQNwboCNrUxgg=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:46:3b:00:22:af:16:14:9a:6b:b1:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
        Validity
            Not Before: Dec 22 19:00:03 2025 GMT
            Not After : Dec 25 19:00:00 2025 GMT
        Subject: CN=f1566642-8b01-47c0-bd57-d1e8097dd0e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a2:60:f3:05:84:f0:0a:94:e5:72:9f:fc:cc:
                    42:98:5a:22:f7:31:b1:18:1a:8b:a5:0d:ff:3f:d6:
                    ae:ad:a7:8c:72:ce:92:de:c6:f3:a5:04:8b:ea:09:
                    eb:6e:e3:c8:e8:90:61:d7:07:88:18:00:ba:b3:28:
                    66:e6:a5:b0:52:f7:5f:92:35:80:e5:c5:2d:ee:17:
                    9f:3b:68:a1:f3:dc:a4:85:c8:fa:b8:76:b3:8d:df:
                    a1:c3:dc:03:49:1a:2c:8f:bc:97:70:66:e6:6c:a3:
                    cf:a3:17:b2:a3:de:09:c3:26:d9:4c:08:d3:b5:d6:
                    4a:34:6b:6e:0e:66:42:f2:e1:09:46:d3:cd:7a:ed:
                    d4:ce:e2:86:d4:b1:97:1d:05:29:44:aa:d0:48:ba:
                    bd:5e:21:fc:87:0a:d6:5d:45:31:0f:b2:52:f9:01:
                    37:ea:89:54:4b:c6:52:d9:e7:30:29:ec:08:3b:18:
                    22:d4:8c:72:d0:97:2d:68:69:29:32:b1:7d:34:b7:
                    2a:a2:66:0d:76:85:03:e7:f7:68:6a:33:1a:1f:37:
                    f8:4d:72:db:e5:38:8e:9d:99:f6:e6:b4:ec:4d:a7:
                    c5:2b:94:5b:50:ed:ff:ac:8c:48:d5:60:b9:de:91:
                    fb:af:19:9b:95:6e:e8:15:f1:31:c4:c5:49:01:10:
                    2d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D0:7E:EF:5B:11:89:56:47:A6:6B:D5:36:B0:FA:30:01:1B:2A:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl

            X509v3 Authority Key Identifier:
                keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:16:c2:d7:0d:95:59:26:53:aa:9b:83:8c:b9:38:15:13:07:
         02:19:40:ae:dc:86:c9:04:9d:ba:69:88:3a:e9:41:5b:75:3d:
         bd:54:2b:b7:09:8f:30:3e:64:66:05:b1:f6:1b:d5:e3:87:c3:
         61:7c:65:c1:26:08:e5:53:a6:ff:26:b4:a2:d6:0b:90:b9:15:
         15:a7:36:f3:39:0b:6c:78:c8:45:b8:d9:da:45:f4:5b:f2:3b:
         32:0c:72:66:7c:1f:8f:68:6f:d5:d7:cb:7d:bd:db:3a:e7:0c:
         5f:97:84:9a:13:a9:13:91:75:24:5d:04:ef:30:8e:6e:9c:cb:
         1e:c9:c6:61:66:8f:09:67:d7:36:b1:5a:82:3b:43:1b:8b:68:
         26:ec:3e:56:31:d4:a4:21:81:0f:d2:65:cd:28:61:78:44:e3:
         37:e0:81:4c:eb:5a:a2:c7:af:13:1b:3f:58:6c:bd:f0:d8:4c:
         d4:ec:58:18:2f:ec:2e:58:99:0b:41:c9:b7:ff:ed:68:31:11:
         05:d5:c0:59:50:fd:2b:e8:5b:9c:d0:ab:ff:c9:50:ae:42:02:
         39:f1:7f:14:0d:a9:52:db:8e:97:d3:d7:60:4b:07:21:0e:80:
         a8:03:69:65:89:08:8e:ba:af:28:7e:40:11:45:3a:3d:0f:45:
         3f:6f:2d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:47:04 2025 by rpki-client