This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.mft
File:                     970d9bca-40c5-40bc-9803-1ef81a602415.mft (raw, json)
Hash identifier:          iKPa/g4jr2IOoWaNPU/0PQ59JKz8TmVqbnrQ0FYKjQA=
Subject key identifier:   7F:2B:75:89:B0:64:55:45:E5:8A:5E:CD:9F:0A:BE:B0:60:06:27:F7
Authority key identifier: 0D:2F:9B:99:1D:D7:B7:CA:98:0F:30:C4:8F:14:B2:C3:85:23:DD:B2
Certificate issuer:       /CN=970d9bca-40c5-40bc-9803-1ef81a602415
Certificate serial:       010D0C9F4328584C41584F0B0A07891EE14C1280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.mft
Manifest number:          010D0C9F432858424420ACFF7CA908874CC42DB2
Signing time:             Sun 21 Dec 2025 01:00:04 +0000
Manifest this update:     Sun 21 Dec 2025 01:00:04 +0000
Manifest next update:     Wed 24 Dec 2025 01:00:00 +0000
Files and hashes:         1: 21f399f9-067f-317f-b9bd-40ac3a07c10d.roa (hash: wymNOgvqxsYd5pgiRFH5ZBNAdCtW2Loe5vPXvhrpQ9c=)
                          2: 6e7a68c3-0547-3263-8434-d888d57e10cc.roa (hash: owyMfIcbeWtHnMkcF7yiqTLOAgiQPdCFQfO3vCRvMFc=)
                          3: 970d9bca-40c5-40bc-9803-1ef81a602415.crl (hash: y0xNr4dYYj2Z6dSt0/CGnfqt54m+D3cCIv8WCCTV7NY=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:41:58:4f:0b:0a:07:89:1e:e1:4c:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=970d9bca-40c5-40bc-9803-1ef81a602415
        Validity
            Not Before: Dec 21 01:00:04 2025 GMT
            Not After : Dec 24 01:00:00 2025 GMT
        Subject: CN=6aaa7aae-72d2-4c64-a230-db1bbe3e058a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9d:ba:12:21:c4:ce:19:69:15:38:fd:39:6b:
                    a7:c5:c9:bc:2a:23:b9:96:c1:60:05:e0:bb:eb:bc:
                    69:7d:41:cb:68:b9:bd:7d:cc:12:38:24:df:9b:c5:
                    26:72:6f:56:c3:a8:c9:04:80:b2:c8:9b:cd:0a:e5:
                    b6:02:fa:1a:b3:94:5f:30:83:6d:22:e7:c9:1d:d6:
                    66:4c:93:e7:55:85:d7:8e:a8:83:5b:c5:31:90:0f:
                    47:2a:a4:24:f1:8f:2f:4a:a0:4a:79:68:25:93:85:
                    b9:d3:a6:41:ab:20:1f:ba:40:84:9d:b5:29:fe:e3:
                    ab:f2:01:db:13:a9:37:fc:c8:b2:1c:7e:73:6a:56:
                    40:6a:ba:b3:76:1b:92:38:1a:b9:9f:63:ce:d4:46:
                    2f:ed:3f:a7:fd:b4:5d:4a:c9:2b:91:cf:9a:1c:2f:
                    07:f3:cc:45:4e:e0:4a:29:e2:8e:75:0f:f7:7e:c6:
                    3d:e4:ad:2a:d1:77:e7:27:c3:31:be:47:1e:5f:b8:
                    4a:67:aa:89:71:00:be:b8:71:3a:ab:dc:bd:9e:75:
                    08:2c:d5:5e:af:a2:a6:36:4a:c1:01:fd:07:9f:66:
                    84:17:2e:5e:c5:69:1f:9b:25:d5:8f:ba:37:82:5d:
                    ed:ff:d5:4c:da:47:bc:fc:73:fd:bf:ac:2d:1d:01:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2B:75:89:B0:64:55:45:E5:8A:5E:CD:9F:0A:BE:B0:60:06:27:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415/970d9bca-40c5-40bc-9803-1ef81a602415.crl

            X509v3 Authority Key Identifier:
                keyid:0D:2F:9B:99:1D:D7:B7:CA:98:0F:30:C4:8F:14:B2:C3:85:23:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/970d9bca-40c5-40bc-9803-1ef81a602415.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:0a:fe:d6:89:a4:61:48:80:a7:32:e4:4a:bc:d1:e8:3e:f5:
         10:c0:e2:21:fc:31:e0:e9:01:9b:ea:a0:79:d1:22:41:bc:3a:
         a3:b3:45:82:a4:8f:51:b8:e6:ed:9b:fb:fc:d9:2f:bc:26:3e:
         b3:aa:df:4b:53:66:a2:b1:c9:8f:fa:07:df:92:35:cb:5e:39:
         cd:25:37:fe:23:e2:5e:0d:9f:43:bb:50:a7:8e:d9:dd:cf:ed:
         ba:8a:ce:64:fd:90:e7:f1:0e:12:07:ea:1b:e7:c4:f1:c8:e3:
         68:15:48:2b:31:46:80:1b:f7:7b:59:82:0d:1d:d2:9a:32:c7:
         2c:b2:0f:63:a0:c5:b4:37:44:cb:58:6b:ba:71:ec:f3:e0:d2:
         9a:a6:17:c8:08:c9:0b:5f:51:bb:a7:c0:74:39:18:e3:11:23:
         b4:1e:59:a3:59:48:b4:c9:20:ec:16:74:d3:23:6c:d4:72:c0:
         5c:b7:0a:5b:cf:89:8f:8d:35:b6:c5:6a:29:a9:94:b6:f3:53:
         93:66:cb:ec:5e:f0:2a:1f:13:52:e9:b1:df:27:54:2e:b4:9c:
         9a:3e:9f:c9:4b:e4:da:af:1f:8b:44:34:3f:f8:03:5d:9a:f2:
         10:b9:17:3f:1a:64:8e:13:71:96:aa:20:5b:24:59:b9:b1:d8:
         63:49:d8:ac
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExBWE8LCgeJHuFMEoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTcwZDliY2EtNDBjNS00MGJjLTk4MDMtMWVmODFhNjAy
NDE1MB4XDTI1MTIyMTAxMDAwNFoXDTI1MTIyNDAxMDAwMFowLzEtMCsGA1UEAxMk
NmFhYTdhYWUtNzJkMi00YzY0LWEyMzAtZGIxYmJlM2UwNThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p26EiHEzhlpFTj9OWunxcm8KiO5lsFgBeC7
67xpfUHLaLm9fcwSOCTfm8Umcm9Ww6jJBICyyJvNCuW2Avoas5RfMINtIufJHdZm
TJPnVYXXjqiDW8UxkA9HKqQk8Y8vSqBKeWglk4W506ZBqyAfukCEnbUp/uOr8gHb
E6k3/MiyHH5zalZAarqzdhuSOBq5n2PO1EYv7T+n/bRdSskrkc+aHC8H88xFTuBK
KeKOdQ/3fsY95K0q0XfnJ8MxvkceX7hKZ6qJcQC+uHE6q9y9nnUILNVer6KmNkrB
Af0Hn2aEFy5exWkfmyXVj7o3gl3t/9VM2ke8/HP9v6wtHQHQ8wIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFH8rdYmwZFVF5YpezZ8KvrBgBif3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NzBk
OWJjYS00MGM1LTQwYmMtOTgwMy0xZWY4MWE2MDI0MTUvOTcwZDliY2EtNDBjNS00
MGJjLTk4MDMtMWVmODFhNjAyNDE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTcwZDliY2EtNDBjNS00MGJjLTk4
MDMtMWVmODFhNjAyNDE1Lzk3MGQ5YmNhLTQwYzUtNDBiYy05ODAzLTFlZjgxYTYw
MjQxNS5jcmwwHwYDVR0jBBgwFoAUDS+bmR3Xt8qYDzDEjxSyw4Uj3bIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NzBkOWJjYS00MGM1LTQwYmMtOTgwMy0xZWY4
MWE2MDI0MTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYCv7WiaRhSICnMuRKvNHo
PvUQwOIh/DHg6QGb6qB50SJBvDqjs0WCpI9RuObtm/v82S+8Jj6zqt9LU2aiscmP
+gffkjXLXjnNJTf+I+JeDZ9Du1Cnjtndz+26is5k/ZDn8Q4SB+ob58TxyONoFUgr
MUaAG/d7WYINHdKaMscssg9joMW0N0TLWGu6cezz4NKaphfICMkLX1G7p8B0ORjj
ESO0HlmjWUi0ySDsFnTTI2zUcsBctwpbz4mPjTW2xWopqZS281OTZsvsXvAqHxNS
6bHfJ1QutJyaPp/JS+Tarx+LRDQ/+ANdmvIQuRc/GmSOE3GWqiBbJFm5sdhjSdis
-----END CERTIFICATE-----
Generated at Sun Dec 21 20:35:18 2025 by rpki-client