This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.mft
File:                     1004cebd-7023-4e63-b006-53f0c227de79.mft (raw, json)
Hash identifier:          kCY/avcf4GV9anZ2vjFo0fQTGARcpLbOZlopiUryE5E=
Subject key identifier:   FB:B7:9E:39:5F:8F:51:6F:72:21:DE:73:5B:4C:B8:AB:06:B3:85:F4
Authority key identifier: C6:B2:A0:E8:24:20:8F:EA:00:6E:7F:16:CE:CB:34:8B:BF:8C:CA:94
Certificate issuer:       /CN=1004cebd-7023-4e63-b006-53f0c227de79
Certificate serial:       010D0C9F4328584BF8693039BB53CB2F457C9B40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.mft
Manifest number:          010D0C9F4328584073A82DC16DFE3217BB06F993
Signing time:             Mon 24 Nov 2025 22:00:03 +0000
Manifest this update:     Mon 24 Nov 2025 22:00:03 +0000
Manifest next update:     Thu 27 Nov 2025 22:00:00 +0000
Files and hashes:         1: 1004cebd-7023-4e63-b006-53f0c227de79.crl (hash: E8ewyuvaTzG4GxWRn8xB8q22898ubthltqsUMSAhUpI=)
                          2: 260a2078-e965-3fca-bdff-75ded175222d.roa (hash: e0tRZk3knVG0xNVhk91113KlOV0iI7cY0B6A1usym+g=)
                          3: 399a551a-3180-3b89-a86e-097565c00cec.roa (hash: YBsWl5iRF5LY2hVCLRVCMmWa+IZoBdRhrHs5ulWGWsk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:69:30:39:bb:53:cb:2f:45:7c:9b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1004cebd-7023-4e63-b006-53f0c227de79
        Validity
            Not Before: Nov 24 22:00:03 2025 GMT
            Not After : Nov 27 22:00:00 2025 GMT
        Subject: CN=16876a90-e43c-4a48-a554-444058042b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:d7:40:24:ce:f2:ae:3d:a7:63:e0:c5:c5:
                    1e:34:65:fe:5c:3c:8b:82:aa:8c:ee:55:15:9a:ee:
                    73:df:c6:ea:1d:95:07:0e:63:56:96:86:00:1a:4d:
                    1a:25:4d:ad:72:ec:a1:bc:4b:ea:af:86:60:bc:f8:
                    d0:c3:6d:9e:b5:ce:de:3b:c3:e7:73:b7:34:f7:9d:
                    8c:3b:87:0f:45:2e:28:7c:c3:5a:14:de:fb:4b:c8:
                    d9:84:e6:5c:60:5f:09:f6:0d:93:9f:1b:30:8b:44:
                    96:79:e0:64:5e:6f:9a:5a:76:24:67:d9:15:6f:8a:
                    e3:d1:82:1a:3a:9c:1d:57:80:df:d3:46:c0:6b:82:
                    b9:82:a7:c8:6e:a7:33:aa:ee:79:6d:14:de:45:bf:
                    62:bd:df:f7:2c:b8:4e:41:4a:26:bc:4a:cc:cb:1b:
                    92:07:e4:4e:12:72:c1:0e:08:77:8e:de:17:01:41:
                    22:bc:bd:43:98:b0:0e:83:19:c6:2d:89:01:a0:41:
                    c8:d0:b2:f4:a8:b4:a9:81:5b:ea:66:03:1b:d2:62:
                    34:99:34:51:fa:4e:95:3b:d3:fb:aa:df:6c:90:4c:
                    8f:81:a2:bd:29:de:07:99:41:0e:f7:8a:b0:79:43:
                    73:78:74:66:ec:cd:c5:c2:fd:2c:28:c8:29:9e:18:
                    ed:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B7:9E:39:5F:8F:51:6F:72:21:DE:73:5B:4C:B8:AB:06:B3:85:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79/1004cebd-7023-4e63-b006-53f0c227de79.crl

            X509v3 Authority Key Identifier:
                keyid:C6:B2:A0:E8:24:20:8F:EA:00:6E:7F:16:CE:CB:34:8B:BF:8C:CA:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1004cebd-7023-4e63-b006-53f0c227de79.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:32:8a:18:59:1f:27:08:d0:a4:a0:34:d3:47:9f:8b:d3:64:
         50:5b:fb:0a:98:64:00:bc:88:d9:40:9a:43:23:14:41:a8:fd:
         c3:de:f6:b3:87:4e:31:45:7d:d9:65:8d:0f:5e:3e:01:8c:64:
         14:f4:7e:7a:7d:df:f6:be:03:3d:1c:2a:f2:76:1a:1c:79:f2:
         84:4d:0d:07:a6:d0:b6:22:8c:64:a4:98:f5:da:34:18:f1:f1:
         55:66:66:db:96:49:ed:ff:00:d2:f3:94:56:32:3b:b4:17:84:
         68:ac:72:b4:ff:fd:10:7b:7b:8e:a1:59:71:a7:6b:0c:16:01:
         79:e9:e6:92:51:e4:41:e7:bd:13:6a:69:8e:14:6b:28:b9:db:
         2d:c6:08:f8:40:31:3a:44:7c:dd:2b:27:64:e9:21:a4:7b:5c:
         8b:ae:0c:b9:ac:47:2e:52:3d:5c:b5:8f:52:c0:c2:cc:c8:07:
         07:f5:a9:2d:de:1e:84:00:e9:93:ce:b6:ca:3b:a0:cd:c9:66:
         65:b1:dc:0d:b4:97:fd:b1:39:75:0e:9d:9d:7e:1d:85:37:e9:
         9b:4c:af:9e:09:a4:e8:f8:97:0a:01:1f:7c:d3:0d:d7:d3:99:
         f2:98:9a:93:67:94:b0:fe:0a:4b:4f:d7:4a:8b:b7:ca:a0:e7:
         16:e6:d2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 16:18:59 2025 by rpki-client