This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft
File:                     823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft (raw, json)
Hash identifier:          ZTehuWu3oDECfT/ncJ6pVfskqOlA2DRn6qgmrmp5MKg=
Subject key identifier:   D2:EB:B8:7C:E4:6B:A6:32:A8:00:33:0E:00:D2:CC:68:BA:60:05:7E
Authority key identifier: 0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C
Certificate issuer:       /CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39
Certificate serial:       010D0C9F4328584C58071BEE1C79A1016B8D2D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft
Manifest number:          010D0C9F432858421237B5114163604AF3D10B09
Signing time:             Mon 29 Dec 2025 04:00:03 +0000
Manifest this update:     Mon 29 Dec 2025 04:00:03 +0000
Manifest next update:     Thu 01 Jan 2026 04:00:00 +0000
Files and hashes:         1: 39a94270-c119-3ad5-843c-1350f228e9b2.roa (hash: kKQh89rZx0tLuG0ovelgt24dU67DrBwpqcpJutDeHD8=)
                          2: 823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl (hash: TBmqfcEnbzpDUqDhHT6RU7dEdBqKVP5Jo/BrqO3WEJQ=)
                          3: 9bea7452-63e0-35f4-8552-3d2fb19d0f7c.roa (hash: Ajn81mj779lVrtGfeaYzVvRPAxtlI38NRCFo69Ol+Js=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:58:07:1b:ee:1c:79:a1:01:6b:8d:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=823e9778-e6e3-4d85-a2e2-7e92cbc99f39
        Validity
            Not Before: Dec 29 04:00:03 2025 GMT
            Not After : Jan  1 04:00:00 2026 GMT
        Subject: CN=ccdaa671-e6bb-4c86-a911-4e36475ffa95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cb:4b:ad:4f:01:bc:25:6c:b5:40:76:c3:25:
                    ae:8b:94:27:68:41:b4:ad:23:00:b9:50:c6:69:58:
                    2e:e7:02:d3:68:2a:17:69:89:9e:71:92:53:93:22:
                    db:aa:56:e6:af:35:e9:75:87:d5:b9:34:d9:fc:23:
                    02:1a:c2:e3:c3:d0:3c:9a:2c:47:d2:e6:4e:9e:6e:
                    98:21:d1:25:bb:0e:37:55:81:6a:d8:de:7d:cb:b0:
                    6c:c5:dd:d5:62:ed:e3:bd:1e:0b:93:f4:9a:fb:66:
                    85:00:40:b3:0e:b8:77:50:c7:bb:a2:54:82:fa:8b:
                    b6:3a:aa:74:62:16:3a:ba:a9:64:90:9c:f2:31:b7:
                    f4:9c:ca:68:91:a6:94:a6:59:30:49:da:d9:7f:7c:
                    b4:1f:c4:bf:8d:8f:4b:6f:63:19:30:fa:eb:e0:dc:
                    c9:e2:32:f3:b8:70:cf:94:22:72:04:ec:31:2d:7c:
                    c4:88:20:b4:cf:9b:6b:96:5a:e1:c8:27:b2:12:37:
                    61:5b:b8:00:ea:5e:d6:2a:d0:3e:5d:5c:8b:c5:9a:
                    67:2a:53:24:f2:ea:07:50:41:d0:f8:26:f8:14:5f:
                    a0:48:49:61:db:49:b1:fb:f5:84:22:3d:e5:75:bd:
                    5f:04:53:77:c0:88:18:34:ae:9a:57:d2:04:d1:53:
                    96:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EB:B8:7C:E4:6B:A6:32:A8:00:33:0E:00:D2:CC:68:BA:60:05:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.crl

            X509v3 Authority Key Identifier:
                keyid:0D:38:03:4E:C1:C3:CE:A7:F1:ED:C0:C2:D6:BE:CF:44:BD:DA:E3:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/823e9778-e6e3-4d85-a2e2-7e92cbc99f39.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:2d:86:a7:04:d9:a6:ad:18:8e:d0:76:86:ae:ab:b8:a9:2a:
         ca:7d:e4:86:e1:37:ae:c0:55:63:1c:ff:6c:ec:a6:66:bf:36:
         01:b8:59:14:8f:67:70:e6:f6:cc:29:84:6a:08:df:f1:07:17:
         69:c1:94:6f:10:1c:8a:f1:59:17:ab:8a:4d:f9:c5:b1:79:a9:
         23:97:19:9f:48:36:00:c3:25:10:f6:08:b5:59:c5:6b:b1:01:
         b5:97:55:a8:64:57:46:31:ca:be:96:2c:e1:65:b5:3a:9f:b1:
         4b:6e:05:34:06:40:e1:6d:2f:88:bf:d7:16:78:c4:9b:6b:90:
         dc:7d:ad:55:11:55:b0:0e:21:11:1e:06:12:d7:7c:a6:d0:0f:
         d9:ba:df:48:a1:87:ae:5b:9c:b4:4d:5b:90:ed:6b:ea:a1:58:
         04:cd:88:d3:88:72:4c:24:04:1d:b1:15:fe:37:18:2b:5a:4b:
         7a:39:31:ae:b4:ba:36:c9:a5:4a:53:4f:a4:d4:dc:81:22:9f:
         2b:e2:af:ec:aa:66:a6:75:bf:da:2d:f3:fe:09:92:c7:b8:56:
         78:81:59:60:c2:e2:1f:45:5e:b9:88:df:1f:89:ed:76:79:18:
         3a:0c:90:0f:1e:b1:2a:4c:ed:9b:ff:24:6a:c4:59:ef:7b:22:
         5f:cd:93:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:11:54 2025 by rpki-client