This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
File:                     cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft (raw, json)
Hash identifier:          t/Oaz7tJY17LcwKO/eTkvKfcwGmIPnOUxRlPgwfBVRw=
Subject key identifier:   DD:88:C8:84:3A:B2:75:3A:DF:E3:B3:9E:D0:38:C1:14:60:DD:D6:94
Authority key identifier: 6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80
Certificate issuer:       /CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
Certificate serial:       010D0C9F4328584C1E9087CC4E33FBA60C09A400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
Manifest number:          010D0C9F4328584234FC80F1FA5751FA45558AE3
Signing time:             Mon 08 Dec 2025 14:00:03 +0000
Manifest this update:     Mon 08 Dec 2025 14:00:03 +0000
Manifest next update:     Wed 10 Dec 2025 14:00:00 +0000
Files and hashes:         1: 45a4e256-9acc-31cb-a5c5-b31a8fb7c7c5.roa (hash: W8A2l38BWtU4FMZgBQ86CBafRVn6V/ZgrONnid3ARJw=)
                          2: 45b4cca8-304a-3829-8684-121363defde7.roa (hash: BTuxaGV+as4Q0iUJH8MIZW1EcvechuGKuIPhsnqWEX4=)
                          3: 56ad6b5f-2cfc-38c9-bca5-90d7c02ce44d.roa (hash: gk5iLIscUzw5KOljueEKHiH0O/7D4E5UFbKKDkbT8DY=)
                          4: 722de295-886e-3bd9-9689-25f93d52f388.roa (hash: lAqS7BwPNP31qlQla3xk/DV/KpwENOZVcVJp6VWW82A=)
                          5: 7453b3b0-afef-3af5-a8dc-a8e555e342cb.roa (hash: 9G9u+he0ag29FBj4IKleRVoWRk2umZEkQt+yLfwF63o=)
                          6: 9b1b48c2-6737-3cd0-867b-5bde4d28de4e.roa (hash: p4LAmgHgaoYRLW2R/MUSGw7cEJM5pqJlwPe5qtrNRTo=)
                          7: b780a0ee-0d24-319f-ad59-98019ee54e2c.roa (hash: ZH71AZaBmKDD/sVeIkbvWP0djAPjEnvWy1rQ49cVwYM=)
                          8: c8028626-644a-36ff-94f2-e2b51d0032be.roa (hash: Im89FekRooFbDPlgScrKgppfmqLgwVnl4210sEgM/QU=)
                          9: cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl (hash: bJDY1x1Y2QC5xk9RRN+ZP30F4XzgPZ+FrKV17exn8FQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Dec 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:1e:90:87:cc:4e:33:fb:a6:0c:09:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd
        Validity
            Not Before: Dec  8 14:00:03 2025 GMT
            Not After : Dec 10 14:00:00 2025 GMT
        Subject: CN=900b6a11-bb6a-41ca-b84c-de07824f4b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9a:4b:7d:0a:6a:d5:65:be:a3:67:50:e6:bf:
                    b1:10:92:e7:13:a1:ce:ca:ea:65:7a:0a:45:1c:69:
                    a3:5a:a1:1f:36:73:c0:e9:41:53:a1:fe:91:64:4a:
                    94:7a:03:cc:a7:17:20:54:a2:ba:e4:dd:f0:6f:85:
                    83:29:2f:d2:58:3c:63:3c:0b:2a:80:26:57:48:89:
                    9f:0d:49:0d:6b:ec:3c:13:37:22:2c:ba:ae:14:ed:
                    6b:4f:6f:51:af:3d:86:89:1d:b5:5d:df:27:a8:e5:
                    ab:79:48:14:12:ab:5f:b3:02:12:87:61:a7:a3:0e:
                    14:26:e4:09:75:d0:1c:35:98:9a:c6:0a:b7:a3:2f:
                    26:16:a5:3b:74:06:8e:17:52:94:f5:3a:5f:d7:45:
                    b5:85:33:6d:ff:4c:00:41:20:9b:6d:c4:a9:36:95:
                    b1:99:78:59:36:63:d9:b0:4e:7a:7e:74:6a:7b:79:
                    b0:52:44:56:51:4d:2c:57:21:0a:8f:fc:2e:70:79:
                    b6:c3:af:fa:b4:91:2e:f1:d7:ae:86:4f:35:b4:07:
                    b8:d2:70:4c:22:98:f6:8b:87:78:57:60:aa:cd:77:
                    0a:72:fa:3a:a4:8e:51:c4:5b:b8:59:e6:9a:ee:08:
                    6c:c8:ef:39:95:d9:fc:d2:37:d2:29:69:5a:c4:4a:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:88:C8:84:3A:B2:75:3A:DF:E3:B3:9E:D0:38:C1:14:60:DD:D6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.crl

            X509v3 Authority Key Identifier:
                keyid:6A:E9:47:06:58:74:54:B8:65:74:FF:0A:EF:34:42:FD:D4:93:07:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cdb42f7d-a2a5-4ba3-9c57-d5c3ee2512bd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:58:e3:b5:8f:da:27:66:4b:21:92:97:ac:39:4b:91:76:57:
         c9:00:7e:4c:8a:e7:f0:85:14:2d:9d:09:93:b3:5e:80:18:28:
         b7:44:29:50:75:19:b9:4c:e2:e0:c5:0d:a6:9f:ff:30:72:a4:
         31:27:b1:03:11:8b:c9:8a:bb:0a:4d:30:f9:c9:3a:bc:be:f8:
         a6:25:c1:c3:9b:b6:17:7c:d8:32:9f:46:0e:28:52:e1:6e:6b:
         12:92:a0:67:21:b9:9c:18:38:ba:d9:2b:40:e6:dd:86:39:94:
         98:75:99:3d:4b:95:42:16:e6:02:a0:9a:35:3e:36:d7:90:d4:
         49:a1:7c:51:da:dc:e7:8f:97:02:08:02:ab:07:7a:1b:8e:66:
         de:dd:e6:ab:85:e6:65:b0:1a:28:1e:44:2c:88:6f:72:28:bf:
         d2:46:53:ae:19:97:77:a5:f9:e8:a1:e8:f3:1d:da:f8:bb:6f:
         28:a1:86:b4:9f:77:77:f4:5f:62:7f:b1:37:86:62:d2:bc:19:
         38:ae:e4:fa:cf:ef:87:69:97:37:c7:8c:fc:7c:dd:9f:1d:15:
         b5:ee:dd:79:b1:5c:38:40:09:8c:75:63:82:d7:0a:cf:5b:1a:
         95:8c:1c:fd:82:f2:02:2e:2c:f6:11:f7:d1:ab:9f:20:f2:3a:
         5b:fe:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:05:28 2025 by rpki-client