This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.mft
File:                     bedc9df8-596e-4e33-b8ac-6857cf7f56cf.mft (raw, json)
Hash identifier:          6Y040gC1IOiTDU0rtpBMAnSEqt7idr/qUb0k0GlxJPc=
Subject key identifier:   C1:60:1E:7C:9C:CD:0D:65:A1:D3:55:69:27:F9:F2:DD:2E:EE:1A:48
Authority key identifier: 82:FF:3A:E8:D5:48:36:54:D3:40:AD:86:77:D4:7E:66:C9:6B:E1:99
Certificate issuer:       /CN=bedc9df8-596e-4e33-b8ac-6857cf7f56cf
Certificate serial:       010D0C9F4328584BE42BBDE424F86D95B0218A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.mft
Manifest number:          010D0C9F4328584242F9DD62514644A57FEF0FAA
Signing time:             Mon 17 Nov 2025 16:00:03 +0000
Manifest this update:     Mon 17 Nov 2025 16:00:03 +0000
Manifest next update:     Wed 19 Nov 2025 16:00:00 +0000
Files and hashes:         1: 00f35a85-6612-37e4-9324-4fba70edc479.roa (hash: ws//Hwt68apFUmUxpmckqFrTDuL8nihtKcgxr0MZRWw=)
                          2: 01e5b1f0-5d86-3f06-aef1-563471c3540e.roa (hash: ZjMoOa1JQf/RlKZVSxmCqrVYvqA1tpMdRT6fd/RBPnQ=)
                          3: a2dea053-001b-3bdf-98f6-9dbb8b4944b3.roa (hash: MBpzANsZvVvr7m2pnqpEmL+U5gQVpKieGUOdb8fIQQc=)
                          4: bedc9df8-596e-4e33-b8ac-6857cf7f56cf.crl (hash: LqIOVIx8dviV/iWo0lLLtRI5JZ/rdZ91mBl8QxAKfJw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:e4:2b:bd:e4:24:f8:6d:95:b0:21:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bedc9df8-596e-4e33-b8ac-6857cf7f56cf
        Validity
            Not Before: Nov 17 16:00:03 2025 GMT
            Not After : Nov 19 16:00:00 2025 GMT
        Subject: CN=f35d0a6a-bd9d-40e7-8556-ed527dfd8ddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:8a:56:bb:0a:cf:3e:6d:6c:71:ca:96:fd:
                    45:f3:e5:fe:c4:ce:c6:b5:b9:9d:c6:81:fc:c3:38:
                    b4:4b:99:fa:33:78:eb:79:c4:b2:37:c7:84:e8:91:
                    2d:1e:42:a3:28:79:b9:87:c9:b3:1f:47:4f:aa:17:
                    99:e5:fc:4e:e2:af:7b:38:2b:49:e1:91:2a:d6:fe:
                    03:75:c4:0e:c9:a2:8d:55:16:bd:7f:74:4e:a8:0e:
                    09:a9:5f:d0:3c:13:69:ff:a3:fd:03:b3:bc:75:68:
                    11:05:f4:6b:bc:0a:07:25:39:f2:4b:8c:2c:f0:b8:
                    65:c6:b3:aa:ee:a2:89:b9:07:d5:ee:74:f2:c5:05:
                    3a:51:ad:dd:50:88:44:7f:4c:26:44:d1:dd:ed:85:
                    79:e5:20:40:14:01:7b:5b:65:3c:15:f1:2b:96:b1:
                    16:e5:8b:e2:bd:e2:3f:e3:a7:c2:3c:14:d6:c9:c3:
                    84:b9:e0:9a:43:6d:72:6e:53:43:0d:30:26:db:c4:
                    b0:8e:7f:8c:dd:37:1b:bb:db:b9:5d:9b:4d:32:08:
                    a6:82:ac:ec:5f:7a:0f:48:bd:89:25:89:a8:e7:85:
                    51:b2:fc:b4:ce:01:8a:28:38:63:1d:d0:71:af:40:
                    3e:c1:d8:c4:06:34:a7:5c:76:41:b7:9d:8c:af:56:
                    c5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:60:1E:7C:9C:CD:0D:65:A1:D3:55:69:27:F9:F2:DD:2E:EE:1A:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.crl

            X509v3 Authority Key Identifier:
                keyid:82:FF:3A:E8:D5:48:36:54:D3:40:AD:86:77:D4:7E:66:C9:6B:E1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bedc9df8-596e-4e33-b8ac-6857cf7f56cf.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e8:21:98:39:c8:8d:f4:1a:66:36:00:c1:9d:20:e0:2d:28:
         b3:0b:44:da:25:c1:aa:7f:d0:a4:43:f1:57:99:1d:f1:c7:21:
         c0:89:ee:cd:d2:bc:ce:51:83:12:94:36:1b:ac:fd:db:41:43:
         cb:7b:70:0e:37:a1:7e:15:37:91:64:27:e7:69:55:81:6c:d9:
         65:21:54:7e:fa:76:f7:b9:66:71:77:05:86:43:00:16:53:ee:
         38:80:2c:bf:f1:e6:bf:af:cb:3e:e1:cc:10:15:7b:51:cc:b8:
         15:0f:c5:4c:a1:4d:8a:28:53:a5:4a:ff:eb:49:77:40:48:d3:
         72:dd:bf:b4:b4:01:e5:0c:7e:a1:52:fb:a4:12:5b:e0:07:ef:
         b2:03:06:b1:af:c3:74:6c:e5:66:a6:09:86:0f:d0:fc:d4:a0:
         f6:2e:24:92:1d:b6:50:7d:b4:4f:a8:11:dc:b0:5d:b8:78:30:
         a4:1b:3a:34:b3:37:37:90:d9:c0:93:ad:b3:8f:79:96:78:63:
         55:6c:50:88:7a:f6:60:01:54:28:b6:84:e9:99:ab:19:b9:24:
         cb:15:80:87:fa:12:ad:3d:b5:94:4b:b5:2b:a1:d9:63:65:5e:
         e6:3f:69:0e:fb:cd:cf:df:f8:78:88:cd:dc:9d:6a:75:74:34:
         f3:e3:d2:07
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvkK73kJPhtlbAhigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmVkYzlkZjgtNTk2ZS00ZTMzLWI4YWMtNjg1N2NmN2Y1
NmNmMB4XDTI1MTExNzE2MDAwM1oXDTI1MTExOTE2MDAwMFowLzEtMCsGA1UEAxMk
ZjM1ZDBhNmEtYmQ5ZC00MGU3LTg1NTYtZWQ1MjdkZmQ4ZGRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpWKVrsKzz5tbHHKlv1F8+X+xM7GtbmdxoH8
wzi0S5n6M3jrecSyN8eE6JEtHkKjKHm5h8mzH0dPqheZ5fxO4q97OCtJ4ZEq1v4D
dcQOyaKNVRa9f3ROqA4JqV/QPBNp/6P9A7O8dWgRBfRrvAoHJTnyS4ws8LhlxrOq
7qKJuQfV7nTyxQU6Ua3dUIhEf0wmRNHd7YV55SBAFAF7W2U8FfErlrEW5YviveI/
46fCPBTWycOEueCaQ21yblNDDTAm28Swjn+M3Tcbu9u5XZtNMgimgqzsX3oPSL2J
JYmo54VRsvy0zgGKKDhjHdBxr0A+wdjEBjSnXHZBt52Mr1bFxQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFMFgHnyczQ1lodNVaSf58t0u7hpIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZWRj
OWRmOC01OTZlLTRlMzMtYjhhYy02ODU3Y2Y3ZjU2Y2YvYmVkYzlkZjgtNTk2ZS00
ZTMzLWI4YWMtNjg1N2NmN2Y1NmNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmVkYzlkZjgtNTk2ZS00ZTMzLWI4
YWMtNjg1N2NmN2Y1NmNmL2JlZGM5ZGY4LTU5NmUtNGUzMy1iOGFjLTY4NTdjZjdm
NTZjZi5jcmwwHwYDVR0jBBgwFoAUgv866NVINlTTQK2Gd9R+Zslr4ZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZWRjOWRmOC01OTZlLTRlMzMtYjhhYy02ODU3
Y2Y3ZjU2Y2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBE6CGYOciN9BpmNgDBnSDg
LSizC0TaJcGqf9CkQ/FXmR3xxyHAie7N0rzOUYMSlDYbrP3bQUPLe3AON6F+FTeR
ZCfnaVWBbNllIVR++nb3uWZxdwWGQwAWU+44gCy/8ea/r8s+4cwQFXtRzLgVD8VM
oU2KKFOlSv/rSXdASNNy3b+0tAHlDH6hUvukElvgB++yAwaxr8N0bOVmpgmGD9D8
1KD2LiSSHbZQfbRPqBHcsF24eDCkGzo0szc3kNnAk62zj3mWeGNVbFCIevZgAVQo
toTpmasZuSTLFYCH+hKtPbWUS7UrodljZV7mP2kO+83P3/h4iM3cnWp1dDTz49IH
-----END CERTIFICATE-----
Generated at Sun Dec 7 20:09:09 2025 by rpki-client