This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
File:                     cd8deff7-6be9-4d16-8349-9f6439775b0a.mft (raw, json)
Hash identifier:          E4urAPXbqD2PJ03jHIW42J/3AE+mkkHHZsJAYzWDWBM=
Subject key identifier:   AB:D9:7F:5A:9B:67:08:68:91:8E:62:4E:39:5D:F1:76:8C:BF:85:37
Authority key identifier: CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD
Certificate issuer:       /CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
Certificate serial:       010D0C9F4328584C454CD158312A0AB52DED6600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
Manifest number:          010D0C9F432858455B71E226BA6E1C5A8869458D
Signing time:             Mon 22 Dec 2025 11:00:08 +0000
Manifest this update:     Mon 22 Dec 2025 11:00:08 +0000
Manifest next update:     Thu 25 Dec 2025 11:00:00 +0000
Files and hashes:         1: 300a5a4d-5d0d-3e22-a9a1-e2591a8e363d.roa (hash: Nb26YBMdRQasVIIgOaLXbXoyvUsfpOk9v1OP8TYxHpQ=)
                          2: 92ecd3af-616b-30b8-8f04-b100fd223035.roa (hash: 5YzXeLfyZ+zeABsgj2FUhXFhtTiYNHsvgosaAr0EtTo=)
                          3: cd8deff7-6be9-4d16-8349-9f6439775b0a.crl (hash: C4CgnxHNJlDRYpIpiSppFddC/rSr4zAE4AXt/HWqd3c=)
                          4: d294f045-3323-3f7a-bd57-473408d74726.roa (hash: gd8cz3tJ8wrIxEIM8ESD6MEkepFvYwBLsvkdjsMbLdE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:45:4c:d1:58:31:2a:0a:b5:2d:ed:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8deff7-6be9-4d16-8349-9f6439775b0a
        Validity
            Not Before: Dec 22 11:00:08 2025 GMT
            Not After : Dec 25 11:00:00 2025 GMT
        Subject: CN=cd3228ec-4f40-4667-9c5c-140b6f88fd75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:2d:dd:0d:e7:cb:bf:56:83:d0:9e:54:51:
                    5a:7e:66:ec:32:24:b0:e5:3f:4a:c2:a9:73:0a:3f:
                    c1:ec:d6:dc:20:d0:d5:fd:1f:f8:76:f3:d5:1e:29:
                    e1:33:b3:08:f6:2b:41:37:00:81:ed:e5:b6:20:a9:
                    9b:88:f3:e7:a9:32:f2:13:f3:1e:c8:25:50:7e:dd:
                    fa:cc:aa:6e:9e:8a:2e:87:f3:57:bb:fa:0f:27:4d:
                    e7:01:fb:92:69:c7:1b:5d:60:ef:a6:91:f6:a9:9f:
                    5f:8c:5b:7e:48:51:04:76:68:d3:c2:ff:f4:2e:2b:
                    7c:6d:9f:f5:c9:2e:28:d2:53:5e:e1:25:f5:9a:18:
                    eb:da:75:bc:8c:87:55:63:75:af:5a:8e:fe:ff:0b:
                    ee:b5:16:e3:34:ea:3f:ef:49:1c:3d:bc:4a:38:36:
                    ef:b1:35:87:71:c9:49:c0:18:e8:f8:af:52:88:cf:
                    4b:94:05:41:a8:59:b6:aa:ec:fc:22:c1:2b:40:8f:
                    f8:52:fc:c4:11:b1:c1:1f:40:65:10:fe:65:4f:18:
                    8e:02:f8:f5:ad:30:af:ae:7f:c8:e2:13:d6:3b:d2:
                    b9:44:0f:c1:f9:14:ea:a2:e1:af:66:a3:43:7c:82:
                    fe:90:30:78:1a:d0:fe:9f:b8:c3:a8:66:32:1b:e8:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D9:7F:5A:9B:67:08:68:91:8E:62:4E:39:5D:F1:76:8C:BF:85:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a/cd8deff7-6be9-4d16-8349-9f6439775b0a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:14:25:01:6D:C5:67:B9:24:32:56:F1:DC:CA:9A:A3:B7:DD:74:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cd8deff7-6be9-4d16-8349-9f6439775b0a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:be:25:af:3a:37:f4:a5:ef:91:66:de:39:63:6a:61:17:cf:
         1e:e5:85:c0:82:09:c1:d7:92:8e:38:2c:bd:d9:e8:98:93:64:
         02:f4:9e:ad:3f:fd:55:3a:d8:06:20:20:99:68:f6:7e:d2:03:
         8e:6f:8b:d0:7c:4d:1d:c3:2f:83:43:9f:f1:84:32:24:b0:40:
         63:d6:c7:c4:a0:b9:6e:bb:fe:e9:c6:0c:05:fc:d3:2c:c8:c6:
         dd:dd:07:83:57:0b:8c:2c:24:5e:64:52:90:8d:95:ec:a1:ff:
         6d:da:f1:75:3d:9f:13:a4:56:ed:de:c9:2f:bf:e3:ae:b7:b9:
         a4:df:75:1e:85:68:f7:fa:0a:97:ea:41:95:3e:02:6d:bd:2f:
         86:59:60:cd:bc:3c:32:a4:85:4c:ec:4b:37:f5:46:2c:fa:a4:
         1d:e1:fa:93:bc:9d:c3:86:bc:dd:a6:00:aa:83:48:46:3b:de:
         b8:7a:eb:19:91:33:37:af:e2:74:74:26:cb:89:6c:05:fc:1b:
         d4:49:b6:76:58:a7:eb:c8:07:ad:38:6b:9e:b0:d1:85:9c:98:
         41:b2:27:0a:62:26:d8:1e:f8:70:e3:df:60:8e:a0:4f:90:03:
         b4:12:ea:c4:19:2a:37:e9:e5:8c:f6:e8:ee:c5:bd:df:89:b9:
         c2:9f:2c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 16:07:02 2025 by rpki-client