This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft
File:                     7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft (raw, json)
Hash identifier:          kS2pPeCmlLD2MwxzfEY7Klk1tjXnYTud2UMIhgi2meU=
Subject key identifier:   BA:F8:2C:43:46:85:35:63:FA:71:CA:4C:1C:EE:44:61:B4:7D:8F:AF
Authority key identifier: 48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D
Certificate issuer:       /CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
Certificate serial:       010D0C9F4328584CAA448E959A9BC84E7892A880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft
Manifest number:          010D0C9F4328584656EF05666EB8D5205C6B23D5
Signing time:             Tue 27 Jan 2026 15:00:08 +0000
Manifest this update:     Tue 27 Jan 2026 15:00:08 +0000
Manifest next update:     Fri 30 Jan 2026 15:00:00 +0000
Files and hashes:         1: 7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl (hash: c77RquMXRCYD6NZOE8uJJPGcBDYjAQgnChEKaC4FB7M=)
                          2: 8457e11b-32d1-34c0-81ea-624f8e85267e.roa (hash: XO3QjbgZjkW34a0lvv+VSHQfE6ZyFaYbRV3MWGa0CXQ=)
                          3: f4d8a2fb-b1ee-3843-85c5-8cd472065071.roa (hash: mlvggs6ngtJfGYFmlOyOG4/rpzCjLssRseigrXO5nC0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:aa:44:8e:95:9a:9b:c8:4e:78:92:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ff6878d-3b7e-4c67-a91a-e21f1042f9e8
        Validity
            Not Before: Jan 27 15:00:08 2026 GMT
            Not After : Jan 30 15:00:00 2026 GMT
        Subject: CN=004888b5-4d3d-4d80-baf2-f22bda46b2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3e:79:b9:e7:db:19:74:33:4f:3f:85:7a:89:
                    0e:64:45:b8:75:e8:3b:91:50:8a:10:76:29:8d:cc:
                    b2:8d:cc:25:60:3f:c9:89:cc:53:ca:72:42:b6:53:
                    89:d5:ca:a8:66:86:92:3f:b6:a4:80:73:c2:66:fa:
                    0a:4c:94:d2:5e:c6:1a:8f:d2:89:fc:06:94:da:04:
                    cc:27:ed:2b:7d:bf:59:a2:d4:c8:f9:29:2c:e8:a6:
                    b7:66:20:ce:77:4f:11:9c:4f:56:e9:ea:8d:61:cb:
                    5e:bf:2c:8a:ed:58:e5:4d:95:82:6b:24:8e:78:ba:
                    6f:8e:a0:b4:8a:5b:6a:be:61:a0:4e:f6:b6:74:fa:
                    c1:cd:2f:b2:db:46:14:ad:95:91:dd:6e:b7:ce:3f:
                    63:4e:9c:d2:ba:a8:40:40:eb:46:91:c2:76:7d:b2:
                    bf:8f:54:fb:57:16:ac:6f:f4:c3:bb:93:93:15:9a:
                    16:b7:82:eb:3d:02:80:52:09:5c:e8:5c:cd:2f:59:
                    1b:0d:ba:60:51:76:60:05:17:b2:5d:ac:ad:dc:98:
                    2a:df:46:79:92:ea:a0:37:bd:ff:39:4c:87:a2:25:
                    e8:9a:20:7c:04:36:2b:93:51:8a:1b:4e:73:35:1d:
                    93:2c:87:24:6e:b8:43:21:3a:79:53:5d:b7:c4:44:
                    c1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F8:2C:43:46:85:35:63:FA:71:CA:4C:1C:EE:44:61:B4:7D:8F:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.crl

            X509v3 Authority Key Identifier:
                keyid:48:84:03:73:7A:40:DD:51:C9:F1:4B:CD:11:48:90:6D:E1:DD:0C:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ff6878d-3b7e-4c67-a91a-e21f1042f9e8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:82:10:c5:7a:55:d4:ec:d3:60:48:61:80:f9:88:c5:f6:c9:
         1f:d3:9c:c7:7b:fb:dc:50:ed:62:d3:a9:61:2b:f9:1c:c2:d9:
         c5:a2:20:d8:48:53:ef:1a:58:01:3b:48:1a:dc:2d:57:38:ce:
         f5:da:10:f1:ca:ae:43:71:7d:f6:0d:bb:f8:7a:1d:2a:c4:a8:
         be:c5:a4:7d:bc:02:0c:95:72:1d:6e:33:93:26:1f:1b:21:92:
         fd:b0:2a:85:1a:a9:00:51:d9:58:79:0f:a7:82:4b:f0:18:77:
         7e:ca:db:6e:f2:b9:80:cd:06:24:16:04:1f:de:be:e5:23:52:
         89:b1:c8:d8:66:14:5f:57:7c:c8:ea:54:ca:a6:d1:7f:e8:1d:
         35:66:ac:47:d2:17:ea:c6:07:d7:22:57:39:68:32:a0:af:e8:
         2c:50:68:ad:18:e4:31:8d:34:a5:9d:91:e1:78:84:72:1b:c0:
         d9:dc:d8:57:e2:6b:88:e4:05:a4:4e:72:05:4a:47:c3:4d:dc:
         44:00:ac:05:67:9f:94:a4:21:0a:a4:d8:ac:72:12:34:cb:74:
         28:fc:06:d2:a6:f1:43:dc:5c:6f:34:57:cd:0c:ea:6e:56:c2:
         a0:d9:f8:93:48:ea:28:22:e4:87:ae:5b:25:43:de:3a:e1:2a:
         15:f3:42:34
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyqRI6VmpvITniSqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ZmNjg3OGQtM2I3ZS00YzY3LWE5MWEtZTIxZjEwNDJm
OWU4MB4XDTI2MDEyNzE1MDAwOFoXDTI2MDEzMDE1MDAwMFowLzEtMCsGA1UEAxMk
MDA0ODg4YjUtNGQzZC00ZDgwLWJhZjItZjIyYmRhNDZiMmVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD55uefbGXQzTz+FeokOZEW4deg7kVCKEHYp
jcyyjcwlYD/JicxTynJCtlOJ1cqoZoaSP7akgHPCZvoKTJTSXsYaj9KJ/AaU2gTM
J+0rfb9ZotTI+Sks6Ka3ZiDOd08RnE9W6eqNYctevyyK7VjlTZWCaySOeLpvjqC0
iltqvmGgTva2dPrBzS+y20YUrZWR3W63zj9jTpzSuqhAQOtGkcJ2fbK/j1T7Vxas
b/TDu5OTFZoWt4LrPQKAUglc6FzNL1kbDbpgUXZgBReyXayt3Jgq30Z5kuqgN73/
OUyHoiXomiB8BDYrk1GKG05zNR2TLIckbrhDITp5U123xETB4QIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFLr4LENGhTVj+nHKTBzuRGG0fY+vMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ZmY2
ODc4ZC0zYjdlLTRjNjctYTkxYS1lMjFmMTA0MmY5ZTgvN2ZmNjg3OGQtM2I3ZS00
YzY3LWE5MWEtZTIxZjEwNDJmOWU4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvN2ZmNjg3OGQtM2I3ZS00YzY3LWE5
MWEtZTIxZjEwNDJmOWU4LzdmZjY4NzhkLTNiN2UtNGM2Ny1hOTFhLWUyMWYxMDQy
ZjllOC5jcmwwHwYDVR0jBBgwFoAUSIQDc3pA3VHJ8UvNEUiQbeHdDJ0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS83ZmY2ODc4ZC0zYjdlLTRjNjctYTkxYS1lMjFm
MTA0MmY5ZTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoghDFelXU7NNgSGGA+YjF
9skf05zHe/vcUO1i06lhK/kcwtnFoiDYSFPvGlgBO0ga3C1XOM712hDxyq5DcX32
Dbv4eh0qxKi+xaR9vAIMlXIdbjOTJh8bIZL9sCqFGqkAUdlYeQ+ngkvwGHd+yttu
8rmAzQYkFgQf3r7lI1KJscjYZhRfV3zI6lTKptF/6B01ZqxH0hfqxgfXIlc5aDKg
r+gsUGitGOQxjTSlnZHheIRyG8DZ3NhX4muI5AWkTnIFSkfDTdxEAKwFZ5+UpCEK
pNischI0y3Qo/AbSpvFD3FxvNFfNDOpuVsKg2fiTSOooIuSHrlslQ9464SoV80I0
-----END CERTIFICATE-----
Generated at Wed Jan 28 14:58:21 2026 by rpki-client