This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.mft
File:                     f4cb39e9-98be-46ba-abb7-91c4edafbe22.mft (raw, json)
Hash identifier:          R8NAFXamQP3pC00enNdc26lSCeSv2urwlH6oCnLqFgA=
Subject key identifier:   71:DA:97:C0:FF:6D:2A:EC:C2:F0:3B:F0:42:D2:EB:55:FF:B9:7D:7B
Authority key identifier: FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7
Certificate issuer:       /CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
Certificate serial:       010D0C9F4328584C6497361546125F4AA8B72D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.mft
Manifest number:          010D0C9F432858457AB06463497536F7B4BA450B
Signing time:             Fri 02 Jan 2026 16:00:03 +0000
Manifest this update:     Fri 02 Jan 2026 16:00:03 +0000
Manifest next update:     Mon 05 Jan 2026 16:00:00 +0000
Files and hashes:         1: 00326377-b50c-3d2f-881f-8d9f69318724.roa (hash: lVLZcLcjF9sinceaVKYt6yEYIIqf2SgnYz6dx08lTbI=)
                          2: 7ee92927-0260-3189-ac5c-a8f84ee0a71d.roa (hash: i+GbY3ZKyKCQ3dB5P0Mrlp+Ad3ZBXx2Y5DJFIDQxv2I=)
                          3: f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl (hash: uYGH+6bUjc6TxxYTd0PVukzj4fkqtvtnc0/VGbHMqs4=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Jan 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:64:97:36:15:46:12:5f:4a:a8:b7:2d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4cb39e9-98be-46ba-abb7-91c4edafbe22
        Validity
            Not Before: Jan  2 16:00:03 2026 GMT
            Not After : Jan  5 16:00:00 2026 GMT
        Subject: CN=15d9cbc0-bacb-4017-8600-daa85f5a7ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0d:2b:fa:ef:98:34:3b:ac:66:a6:c6:5f:00:
                    46:ea:fd:a0:6c:16:6a:21:df:92:d0:b3:92:72:db:
                    bf:30:8b:cd:da:09:17:e5:9f:1d:fb:e1:5d:0d:45:
                    4a:c1:df:fb:1d:2c:c6:2f:a2:ee:12:c3:06:d3:2c:
                    af:46:90:97:80:14:49:c2:2c:5d:49:ea:b7:ca:1b:
                    dd:4d:20:ca:1a:21:8f:e3:57:00:31:f6:ff:34:c7:
                    d0:af:8f:9e:dd:69:9b:01:79:b0:bc:78:1e:91:a2:
                    e3:0a:8d:e1:80:9d:ec:0f:4f:ae:65:44:3a:d7:5e:
                    e1:33:6e:29:0a:75:cc:d0:51:98:7e:85:df:53:09:
                    79:9f:e4:6c:0a:6d:01:3c:74:42:0c:84:85:f6:fd:
                    76:4f:4f:d8:52:80:4d:6a:49:f2:b2:4b:3d:87:28:
                    37:03:eb:8c:f0:b2:5e:bc:49:d0:fd:88:3c:5a:72:
                    46:1b:f9:2b:af:a6:f2:72:e9:8b:e9:a4:1b:48:d3:
                    67:48:94:04:63:6d:10:8f:74:95:1d:03:c1:cb:52:
                    49:fb:95:14:bf:78:71:d4:cd:21:5e:e1:9d:ac:f1:
                    17:0c:60:f4:58:7d:2b:56:b4:37:19:df:a1:db:3a:
                    b8:e1:61:10:a9:d9:b1:ff:54:ae:ec:51:8b:1d:94:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DA:97:C0:FF:6D:2A:EC:C2:F0:3B:F0:42:D2:EB:55:FF:B9:7D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22/f4cb39e9-98be-46ba-abb7-91c4edafbe22.crl

            X509v3 Authority Key Identifier:
                keyid:FF:49:33:63:43:FA:30:40:4C:0E:C1:8A:72:82:58:38:85:23:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f4cb39e9-98be-46ba-abb7-91c4edafbe22.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:8e:91:17:78:be:a5:0a:5c:d4:70:74:06:ac:99:84:d6:dc:
         a1:16:46:dc:5e:46:56:fc:ef:a0:5f:36:d7:a9:77:e1:51:65:
         61:90:88:fb:3a:50:e4:93:5e:1f:1d:bb:71:41:fa:8e:b2:fe:
         32:7d:56:f4:cf:d5:d4:d2:86:b2:6e:9e:1b:ee:6b:92:7e:5c:
         57:3f:a8:c7:8c:b6:9d:e2:f0:ad:4d:55:18:a2:0b:b5:60:9a:
         62:e9:0f:dc:0e:17:fb:8a:31:58:2c:d6:4c:ed:9b:ee:aa:2f:
         85:fd:80:86:33:32:00:c0:70:d8:ff:6d:23:a7:bb:d2:37:fc:
         da:0a:01:09:4f:24:22:3f:16:17:bd:be:a7:46:54:d2:6c:7e:
         9e:f7:18:ae:3e:66:53:52:68:b5:9d:15:77:68:22:01:e3:0c:
         6b:9b:70:8d:6b:de:ed:c8:a8:1a:be:bb:9b:d3:e9:86:5d:3e:
         67:54:a6:d4:87:1e:96:22:86:4b:e3:c5:64:25:74:22:f6:ba:
         86:cb:de:68:ce:08:09:1d:c0:3f:17:91:50:6c:83:43:dd:8f:
         ef:5e:9c:a7:d7:18:82:c3:6c:7d:9e:49:94:f4:99:c6:35:80:
         2d:8b:2b:62:5a:a1:dc:94:d6:c7:cd:9e:e2:9b:99:58:40:d7:
         11:da:79:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 12:20:00 2026 by rpki-client