This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft
File:                     c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft (raw, json)
Hash identifier:          ymctKnHmN16ShHm4sOmD/g0XmnNfJkm8IEDxUFDGDUk=
Subject key identifier:   CF:A9:8B:0C:C9:C1:BD:1E:21:04:7A:FB:44:9B:09:39:E6:A2:B8:2F
Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B
Certificate issuer:       /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b
Certificate serial:       010D0C9F4328584BFB16175EBDE12BAA9688AE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft
Manifest number:          010D0C9F4328584073A829E3051185C1AED5ACA6
Signing time:             Tue 25 Nov 2025 21:00:03 +0000
Manifest this update:     Tue 25 Nov 2025 21:00:03 +0000
Manifest next update:     Thu 27 Nov 2025 21:00:00 +0000
Files and hashes:         1: 1404fac3-bbc2-308f-8af1-df72ff2c55be.roa (hash: lAu5HclHr33tnh10VXR6FGnp2WEmJNF88Y0e8VOGEBA=)
                          2: 175486fd-ca0f-3f0b-8fde-5143519bfdfe.roa (hash: ZgCYMKm3zJ3chzg6laCFh9FNzxMvDTHlw+SVtauCNuA=)
                          3: c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl (hash: ErYhgB6EvAiXZeYzn3BEX0whUtFTxCtFezYlgq6SaSk=)
                          4: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (hash: 8CXn6s+BacMLoNvRk27F0PK6Bt+JGr8Y0PjEofsuS50=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:fb:16:17:5e:bd:e1:2b:aa:96:88:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b
        Validity
            Not Before: Nov 25 21:00:03 2025 GMT
            Not After : Nov 27 21:00:00 2025 GMT
        Subject: CN=0c986b93-eb0d-467b-b390-732654b6de69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ac:6e:20:14:52:d1:a8:19:dd:95:c4:ce:cc:
                    27:81:48:7e:02:a5:58:70:b7:4d:ee:df:d7:c4:aa:
                    5f:e2:51:df:1d:d0:3c:4c:13:fc:59:23:31:e1:99:
                    af:38:e6:6e:89:6d:bf:63:3c:60:42:34:38:fc:80:
                    c4:5a:f8:d4:1e:45:4b:e2:56:9b:4f:e5:82:44:0d:
                    2d:3c:10:73:7c:53:45:34:81:b3:67:8b:aa:f3:0e:
                    83:1b:d1:a4:12:3e:50:68:98:e5:1c:63:9a:75:8b:
                    63:30:7f:5b:5b:95:70:68:c7:6d:77:c4:11:a5:aa:
                    08:63:f0:c8:56:b0:07:83:02:5f:cf:80:93:6b:4d:
                    1e:65:a3:83:c4:00:95:69:ca:dd:7a:fb:6c:4c:70:
                    0a:c9:b9:18:4e:8d:8a:37:c1:0d:a1:f3:ff:02:b6:
                    01:85:86:51:fa:3a:b3:1c:b9:25:73:db:41:4d:fa:
                    a3:f4:dc:18:3a:5c:dc:44:db:60:2c:dc:9c:5f:60:
                    e1:24:5b:2f:37:71:62:b6:cd:c8:ad:49:f7:99:91:
                    62:eb:20:6a:f3:c8:5e:46:d7:7f:3f:7c:1c:5d:3b:
                    fc:23:42:e2:7d:bf:bd:28:af:50:9b:54:c5:e4:03:
                    0b:54:3b:f3:2f:39:fa:06:49:c5:18:75:58:c4:22:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A9:8B:0C:C9:C1:BD:1E:21:04:7A:FB:44:9B:09:39:E6:A2:B8:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl

            X509v3 Authority Key Identifier:
                keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:a2:04:66:a1:10:9a:86:c7:be:cd:56:10:8b:f6:86:1a:b0:
         94:bd:06:64:94:ee:95:a3:a9:c2:36:d3:4d:e6:61:8e:98:cb:
         1a:89:9d:7f:f6:0d:7a:42:42:79:cc:1c:99:3a:69:51:78:69:
         2b:53:08:a5:b8:d6:42:59:c4:e6:25:7e:5f:3d:52:da:5f:68:
         81:48:01:15:6d:e6:eb:68:ef:46:f2:5a:db:50:23:63:d1:8f:
         96:17:72:54:f2:a2:b3:11:5c:b6:9d:18:98:cf:49:7a:85:c5:
         6c:cc:60:db:1f:71:71:b7:b4:9e:a0:77:45:c0:ed:fb:46:00:
         d3:b3:0f:3b:2a:2e:b6:1d:b3:f8:3b:13:9b:59:93:0a:5e:e0:
         12:9e:04:04:31:53:06:ae:58:87:3d:44:fd:a4:33:11:ca:22:
         ff:d4:33:03:3f:04:b8:fe:19:e6:39:4e:5a:86:7f:a9:7a:b5:
         a2:79:b2:1c:e7:7a:bd:b1:ab:61:08:c4:52:b1:83:5e:9c:f3:
         f8:0e:74:53:02:38:f7:d1:c2:36:ee:d8:7b:4a:71:94:fb:0c:
         60:84:77:36:f9:70:8a:b9:af:59:ce:83:80:59:e3:6e:2a:7c:
         aa:87:f4:ca:db:35:c5:4c:11:d8:6b:43:fd:ff:03:3b:7f:53:
         62:bb:c5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 26 02:34:48 2025 by rpki-client