This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft
File:                     ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft (raw, json)
Hash identifier:          3k8Mpuphw8q0lNnoHHHID4M6IweX/w4xbdPGXEtQr6o=
Subject key identifier:   28:CF:64:29:25:10:80:1D:5F:3D:2D:A5:A9:E7:3A:54:7E:47:E2:5D
Authority key identifier: 49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C
Certificate issuer:       /CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38
Certificate serial:       010D0C9F4328584C56DD64189CEA035069042F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft
Manifest number:          010D0C9F432858452F858565F837B3C661B1B228
Signing time:             Sun 28 Dec 2025 18:00:08 +0000
Manifest this update:     Sun 28 Dec 2025 18:00:08 +0000
Manifest next update:     Wed 31 Dec 2025 18:00:00 +0000
Files and hashes:         1: 35d3f806-ab98-3711-84ee-81f48a1a9349.roa (hash: mdfUlmGtAgdTfSO/gXfF30zwutTwo4mmoZbMYBx6Ky8=)
                          2: 79f5998a-9c67-3633-9ae6-274922dd2fed.roa (hash: 3VzyQvqwsvAllaTNNZwIx93kNTt8QPmJEg/OaRB936E=)
                          3: ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl (hash: s/g/ojrP83ROx1A//DQJ2PdqIhLNjGjR5LlEC08a+X0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:56:dd:64:18:9c:ea:03:50:69:04:2f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38
        Validity
            Not Before: Dec 28 18:00:08 2025 GMT
            Not After : Dec 31 18:00:00 2025 GMT
        Subject: CN=45c0cbf5-3d1a-4183-a441-fb385f01e4ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:19:b1:f9:db:75:a7:58:24:ab:33:b4:8a:
                    bc:73:9c:d3:83:78:ae:2f:24:0a:09:f5:01:60:74:
                    00:a2:f3:7d:71:a0:73:4e:5e:f4:c5:8c:9d:e9:48:
                    38:db:e5:72:fd:03:c5:87:0a:65:d1:fd:13:d3:93:
                    33:39:f7:f5:76:50:f6:f3:de:f5:fe:17:60:7c:9c:
                    8a:79:16:6e:2f:81:de:24:f8:03:7c:90:6e:73:20:
                    72:70:09:94:49:e6:fe:af:fd:70:85:6a:4c:34:e1:
                    99:97:dc:47:a6:de:71:61:20:68:b2:bf:c9:44:67:
                    5c:b8:5f:d2:16:ec:99:e1:75:7a:a9:a8:43:49:ee:
                    d2:79:d6:14:6e:0a:22:e5:21:01:09:27:e8:26:65:
                    2f:b7:6c:0c:87:60:77:e2:3c:0d:55:50:df:b7:0a:
                    62:57:ae:77:00:90:4e:0f:f8:1a:66:42:cb:0a:bc:
                    1b:6b:d1:5f:f2:ef:dd:81:a8:f1:f7:ac:57:8a:88:
                    ab:d5:ba:56:4c:d1:68:f9:22:ae:d2:6c:61:d1:f0:
                    0e:6a:95:fc:d3:6d:d6:ac:0c:cd:d9:9a:19:cd:bf:
                    1d:7f:bd:55:4f:c1:48:aa:8b:68:3d:15:e7:42:ec:
                    d8:c1:5e:3c:5e:c1:68:3d:bf:cd:30:63:72:94:fc:
                    5b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CF:64:29:25:10:80:1D:5F:3D:2D:A5:A9:E7:3A:54:7E:47:E2:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl

            X509v3 Authority Key Identifier:
                keyid:49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:a0:6d:3a:58:42:78:9d:27:da:64:a2:82:85:63:12:01:4e:
         73:15:98:09:7c:37:5e:cc:b2:4a:2c:b3:c1:29:72:fe:96:23:
         96:4d:21:b9:39:bf:99:b7:05:2b:64:05:3d:74:6d:39:05:12:
         96:a5:ab:d8:fa:a6:72:21:31:e7:25:39:4f:26:51:f3:3a:e3:
         18:ef:a4:2e:95:42:0f:8b:67:21:8a:69:ca:0a:c1:c0:74:7e:
         25:de:4b:04:38:46:9f:55:16:65:16:61:f4:26:97:8f:8a:ee:
         9b:d7:20:ab:6a:e7:53:f5:ce:11:a0:b9:2d:92:4e:4e:72:a1:
         fd:e1:41:d6:9f:59:3e:0a:57:44:37:fe:b1:88:42:b6:ab:6d:
         28:27:a5:4f:34:d7:67:5f:9d:cc:6b:37:1a:86:b0:d9:1c:a6:
         73:a4:23:65:34:8c:a1:7b:23:a3:e7:38:ea:86:f3:e6:1e:a4:
         c2:77:04:b8:b2:3d:bf:3c:ce:46:04:76:36:5a:cd:f6:06:17:
         25:8e:08:e6:55:73:b8:1f:72:0e:1e:a7:44:17:c2:75:34:ba:
         32:74:87:56:d4:d9:df:1c:08:f9:36:e9:01:72:cd:11:0b:8a:
         6d:4d:5e:fb:af:f6:8c:d2:ec:15:01:4d:61:a4:f3:b0:31:70:
         e9:6e:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 00:04:58 2025 by rpki-client