This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.mft
File:                     ddca76af-4c49-4bd6-b142-1774c42d55b2.mft (raw, json)
Hash identifier:          q7UouMxL06UtDCGHWxfpSuVIq7tPQRN2aWoTZo5GYDA=
Subject key identifier:   95:4D:7C:F6:0A:77:F8:D9:BE:F1:0A:B8:46:19:A1:7E:37:DE:3C:A4
Authority key identifier: C3:69:1A:4B:EC:52:26:1B:23:7C:5A:E5:B5:95:C9:D0:24:3E:D6:E2
Certificate issuer:       /CN=ddca76af-4c49-4bd6-b142-1774c42d55b2
Certificate serial:       010D0C9F4328584BF32D351A19437BE32087E580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.mft
Manifest number:          010D0C9F432858421FD2CD7B287F5C57B1D3DAE0
Signing time:             Sun 23 Nov 2025 01:00:09 +0000
Manifest this update:     Sun 23 Nov 2025 01:00:09 +0000
Manifest next update:     Tue 25 Nov 2025 01:00:00 +0000
Files and hashes:         1: 483ce819-3fef-3531-bbde-27a7a74cbf3c.roa (hash: AgFVoLyqczQKdtPtmad8VRg6dhVS9HrrquO8dJ5fXrA=)
                          2: 513709b4-c820-36da-976d-bc7487bb01cc.roa (hash: u8W/xuvIuj7+m5bgOB+yDY72msAXsENMKZ1ijMjgpUk=)
                          3: 6383ebca-73f5-3eb0-afe1-dd9509971aac.roa (hash: i/MCUPkMtyuzZBR3nDJCo0aXIBQLmpwIXWSfRoKjwjA=)
                          4: 921235d4-dca8-3fbb-acb6-08ba21924e2c.roa (hash: l6kQDmM9x6y2ppHKa/WLjuD+QKfpbxaamUwA1yjyPiQ=)
                          5: cb9993c9-ccf3-346e-86f5-731cdddeccd5.roa (hash: FdTAQqDoBpgxQ/5Y8YGMJD42tK54u0lV/7ufxsIeX3Y=)
                          6: ddca76af-4c49-4bd6-b142-1774c42d55b2.crl (hash: aitdDSCl2TG9jmospwQG4HUuhFfKy810N8h9KMHrPKM=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f3:2d:35:1a:19:43:7b:e3:20:87:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddca76af-4c49-4bd6-b142-1774c42d55b2
        Validity
            Not Before: Nov 23 01:00:09 2025 GMT
            Not After : Nov 25 01:00:00 2025 GMT
        Subject: CN=235b5cbb-d0c0-41df-8c0b-79be0243b780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b8:a8:08:d4:68:ee:83:89:e0:e8:69:0e:16:
                    9c:be:b0:38:67:c3:3f:14:c4:51:ba:4c:af:b9:92:
                    a4:9c:bf:84:e7:09:eb:3c:ff:2d:c9:4e:43:2f:17:
                    27:79:11:84:82:b9:a7:0c:52:5f:05:1d:be:6c:df:
                    29:ab:9e:64:d9:c0:8a:3a:5c:71:d4:97:88:96:9f:
                    3f:4c:fa:fa:24:d2:54:c9:26:27:5a:de:77:60:fa:
                    0f:e2:78:9e:82:6e:9b:1e:99:a7:12:7e:74:cf:ff:
                    a4:bb:fc:57:42:da:68:d7:15:4c:43:fd:3e:c3:87:
                    26:9e:b9:a2:f2:d9:b5:8a:e1:86:aa:0e:6e:ef:ce:
                    fa:d2:60:99:4b:0c:07:3d:c3:2d:32:1f:f3:75:16:
                    c2:88:90:da:af:44:36:08:90:69:aa:65:19:a1:29:
                    b0:fd:6c:a5:67:6b:7f:81:11:c6:0e:16:e2:df:16:
                    0b:ed:0c:4e:4a:4b:ea:c6:f7:3f:86:18:b1:9d:e0:
                    16:93:54:06:d8:c5:dc:f3:55:06:ef:c1:0e:78:09:
                    8f:0b:c1:dd:6e:6c:6f:a7:c3:7e:f7:bc:8f:85:46:
                    85:1a:1e:be:14:3c:d0:cc:60:40:15:86:56:18:8f:
                    73:04:be:62:26:a6:15:42:36:20:6a:7a:00:2f:9c:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4D:7C:F6:0A:77:F8:D9:BE:F1:0A:B8:46:19:A1:7E:37:DE:3C:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.crl

            X509v3 Authority Key Identifier:
                keyid:C3:69:1A:4B:EC:52:26:1B:23:7C:5A:E5:B5:95:C9:D0:24:3E:D6:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:27:b7:96:e8:2a:98:d0:ed:db:bd:07:c4:e8:7b:16:c4:9d:
         8c:aa:ee:e0:25:3b:5b:1f:8d:11:39:f5:33:17:6f:66:71:87:
         e0:f6:76:d7:4f:3e:35:31:07:ae:c1:7e:70:b1:d2:7a:1b:fe:
         f8:cd:b4:a0:02:7a:56:d1:d8:78:ba:26:07:3c:f1:5e:8e:cc:
         a7:81:3e:29:46:ef:d7:30:33:4e:3c:23:5a:0f:98:d3:41:65:
         d1:77:87:a1:69:e2:ff:f3:aa:fa:f4:7b:6f:7d:34:8e:e3:2b:
         87:9c:51:e8:99:41:5c:75:7c:a4:38:7a:2f:9a:f5:c8:e5:be:
         ec:07:9d:60:8e:d4:90:2e:5b:84:75:db:78:24:74:2b:21:ba:
         03:63:f1:e7:0a:e8:75:ce:82:1f:ff:61:81:23:27:47:71:37:
         d1:46:36:fd:6f:d8:b3:88:56:9b:89:48:c4:0f:bc:95:d7:ae:
         30:c1:50:74:8b:1b:44:e3:55:0c:ce:35:f1:5c:d0:55:d5:16:
         7a:76:fa:4c:e5:23:30:03:ee:ed:1e:aa:22:cc:d3:66:3d:e0:
         21:e5:d8:1a:6c:36:7d:89:0f:6b:0a:97:46:fa:30:5c:a0:cc:
         c0:2d:56:e0:21:d5:f2:7b:8b:67:95:32:08:4d:10:8f:69:dd:
         7f:24:e2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 18:31:41 2025 by rpki-client