This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
File:                     d3c880fd-17d6-4b37-9537-456ee6369ed4.mft (raw, json)
Hash identifier:          l1/2WNaCRRq9LsZNGX7nk2C0eX3oKVq1BgGniJV6xuk=
Subject key identifier:   DD:39:CB:41:EA:A1:0E:F3:0C:B4:E4:6E:E6:54:60:16:9D:3A:6F:C3
Authority key identifier: 62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00
Certificate issuer:       /CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
Certificate serial:       010D0C9F4328584C579000F3D8E532FE7BA1F920
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
Manifest number:          010D0C9F4328584265811E12FE6A7EB758CD1553
Signing time:             Mon 29 Dec 2025 00:00:04 +0000
Manifest this update:     Mon 29 Dec 2025 00:00:04 +0000
Manifest next update:     Thu 01 Jan 2026 00:00:00 +0000
Files and hashes:         1: 1ecb5a96-beee-34e1-bc86-f614d73d3b6b.roa (hash: OtSCY0xu1Knp8WXyXk/pYtPexW1Ya1sCqzuf4mzcePc=)
                          2: bd4d932d-834d-30f0-b0ad-9323bbf58df4.roa (hash: WW7HPJVwc1JBg5H4uIW0/jBycKQ3w0rLgDCp31lENbA=)
                          3: cc2dc27e-0b26-3fc4-a0d5-8e2b7962277f.roa (hash: x2JtEwS/IWGPitI45cG5jFKOVpho4hJ2kal/U+VOWcM=)
                          4: d3c880fd-17d6-4b37-9537-456ee6369ed4.crl (hash: X0Xt8ZJkmF+54hxWXKzuwWE8HiaJG20fzS3p8HCqtvk=)
                          5: dc8de600-5727-3add-9d95-4f3d4cae5940.roa (hash: OH6fu/CJUoG63F5okOc9vnj+B6pakK6N5xJXCKdiXFs=)
                          6: e50fe1df-73c5-375e-abca-cc7322425ce1.roa (hash: REZgjDArQAO3+aPSxBwGCr9o7Lxh3CrmBXWk7wibc/Y=)
                          7: ed3eb783-8f94-3d0c-9b5e-e26d751b90d7.roa (hash: IKE3IsmXuXQTyhGFpcTec0ceTpYo99A57rwY4ugjowg=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:57:90:00:f3:d8:e5:32:fe:7b:a1:f9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c880fd-17d6-4b37-9537-456ee6369ed4
        Validity
            Not Before: Dec 29 00:00:04 2025 GMT
            Not After : Jan  1 00:00:00 2026 GMT
        Subject: CN=da9ad7d9-07c6-4e6f-9337-011ce6d9a180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:71:fd:8f:0d:e9:55:b0:76:56:c0:6d:89:ec:
                    14:03:c4:29:79:f9:bd:70:11:b7:5f:1c:74:7b:c2:
                    b0:c6:40:86:df:83:b8:77:97:aa:c0:aa:a9:5f:a3:
                    c8:13:2b:fe:09:b5:08:cb:71:19:1a:ba:cf:7e:20:
                    2e:58:af:8d:8f:01:4a:0a:45:1f:95:7e:f4:e8:d5:
                    54:e9:f4:8e:90:7b:2d:af:cc:bb:49:03:83:e3:1c:
                    23:92:64:03:df:5b:21:7e:45:31:0a:54:2b:d2:35:
                    ce:78:c6:08:c5:77:08:bd:4d:63:b7:e3:76:57:7d:
                    49:c9:b6:02:fb:ac:11:cb:95:f2:c9:6c:6d:e6:2d:
                    a5:c6:ec:0e:22:18:7e:c9:ba:df:5e:8e:4d:cc:c1:
                    be:bb:d7:b5:fa:ab:fa:5e:23:fa:ed:7e:fb:f8:37:
                    df:a8:6d:82:a6:80:66:61:6d:a7:4a:3b:a5:38:6d:
                    75:ac:de:d5:94:01:28:20:19:cd:18:d3:ec:fb:32:
                    23:78:67:86:ea:ba:7b:2a:17:1b:d3:5f:57:ef:4e:
                    00:d4:c2:7f:f6:ed:97:99:32:12:bd:a2:7f:ea:8d:
                    03:2b:40:3d:c2:b1:4d:5d:5b:82:ae:1a:3f:38:38:
                    c3:55:e2:b3:9d:d2:d7:8b:65:3a:1d:a3:58:63:54:
                    9f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:39:CB:41:EA:A1:0E:F3:0C:B4:E4:6E:E6:54:60:16:9D:3A:6F:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4/d3c880fd-17d6-4b37-9537-456ee6369ed4.crl

            X509v3 Authority Key Identifier:
                keyid:62:F0:90:50:95:6D:09:D8:EA:93:D9:5F:50:8A:FA:E5:1E:79:13:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3c880fd-17d6-4b37-9537-456ee6369ed4.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:1f:9a:d4:27:eb:09:47:0c:4f:1a:6c:a6:bd:86:2a:80:11:
         17:5d:dc:aa:8a:d3:3f:85:f4:31:5e:d8:4d:15:99:b0:f4:ab:
         f5:b9:0c:cb:f3:f0:8a:90:37:6a:1c:a9:3d:88:08:0d:76:0e:
         f0:73:6f:d2:a4:3e:de:e4:4e:ab:e6:47:1b:dd:b4:07:0d:23:
         6f:47:63:ed:9b:a8:21:85:f9:43:4b:25:60:1b:78:0c:76:69:
         4f:9c:ca:e9:75:c6:2c:b8:9e:4b:2d:b8:51:cd:a9:c2:06:16:
         ff:9f:34:e8:37:e0:df:92:06:20:0b:d5:94:41:c2:bc:b9:8a:
         9d:28:de:5e:77:bf:d7:d3:a3:85:f7:4e:9f:a3:1e:66:b8:aa:
         0b:c3:67:2f:54:6b:59:07:c9:6b:ef:3b:ba:c6:6a:aa:42:93:
         77:83:25:58:c1:f6:c1:7b:c9:fc:d7:80:02:12:24:73:1e:cb:
         ab:23:cf:ac:49:5b:ca:a6:c9:e2:5f:87:89:28:f3:aa:dd:15:
         d8:dd:2a:d9:5f:21:9c:7e:fe:b2:1f:81:70:92:02:84:3a:2f:
         20:8b:41:e4:85:5e:eb:24:0c:fd:bf:bb:ad:f3:61:cf:d2:b0:
         f2:31:5a:23:ec:ed:74:69:9e:0b:a5:c7:17:f0:87:48:bc:8d:
         27:0e:e2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:17:22 2025 by rpki-client