This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.mft
File:                     0ff683ee-75b9-4ed9-9e48-e74a8e810428.mft (raw, json)
Hash identifier:          vR4GoS1bwusDsEm7IpdYJ88gXBnMOEti3oXJ+nhIpE0=
Subject key identifier:   2A:40:C4:33:E7:34:73:7A:FF:38:DF:85:BD:41:C4:D0:71:23:57:CD
Authority key identifier: F4:B5:1C:88:5E:B7:42:18:B6:70:88:4B:A6:32:76:12:14:5D:9B:7A
Certificate issuer:       /CN=0ff683ee-75b9-4ed9-9e48-e74a8e810428
Certificate serial:       010D0C9F4328584BF580C6CF5F2BAC7989E27C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.mft
Manifest number:          010D0C9F4328584073A82970A2BB1DF6D709952E
Signing time:             Sun 23 Nov 2025 21:00:08 +0000
Manifest this update:     Sun 23 Nov 2025 21:00:08 +0000
Manifest next update:     Tue 25 Nov 2025 21:00:00 +0000
Files and hashes:         1: 0ff683ee-75b9-4ed9-9e48-e74a8e810428.crl (hash: RTnVR3UqiE6Dpmk7BpjikPVfGHgt0hehmhXrst3oGRc=)
                          2: 66c81a00-98a5-31d0-9c73-7e2cbd4aa428.roa (hash: 3gtUmV7K4b1dlfQDZzc+45XcGFEXxgniHUrPJnkfCMQ=)
                          3: b069bc6d-2896-361b-b980-b843594f7a86.roa (hash: s/NysyGQn5Jw+hAMJEyMj+uxrEQ+tOR8dDbujlhPPqQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f5:80:c6:cf:5f:2b:ac:79:89:e2:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff683ee-75b9-4ed9-9e48-e74a8e810428
        Validity
            Not Before: Nov 23 21:00:08 2025 GMT
            Not After : Nov 25 21:00:00 2025 GMT
        Subject: CN=dac34cff-bd3e-4397-85d3-844250f723e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:97:5c:70:38:19:51:d7:05:3b:0f:14:65:d1:
                    ca:64:1f:16:ae:65:1d:39:d6:6b:c1:5b:a2:89:f0:
                    39:3a:d2:a2:07:57:cf:71:21:a7:a8:86:1d:f0:7c:
                    3e:53:f4:91:58:07:28:f2:d2:2f:37:87:da:23:cf:
                    1c:0c:30:b3:11:e9:f9:f1:55:07:43:99:39:55:9e:
                    6b:c4:f7:db:49:49:6f:d1:cf:c0:2c:54:97:5a:8e:
                    24:cd:81:84:be:b1:3c:e5:4a:a3:d8:ae:b6:e8:b3:
                    3d:38:9f:29:d6:98:35:e6:c1:b5:55:1f:e5:ff:fe:
                    e8:e5:bb:c2:6f:38:a3:fc:9a:9e:ad:c5:c1:5e:5c:
                    ab:ee:a4:5e:54:29:4d:69:55:4f:c2:37:6e:64:45:
                    11:93:d5:1d:78:d2:f8:c5:aa:5d:d5:ed:e1:54:23:
                    2b:89:8e:c9:51:80:ed:a7:7a:1b:a9:70:2e:ff:ea:
                    01:6b:d5:3c:8e:ea:99:48:20:db:9d:ab:42:f5:f7:
                    44:3d:2a:ab:5d:32:e5:00:00:35:1a:97:12:ee:35:
                    80:bc:13:7a:49:50:c9:dc:c4:9c:83:49:ec:08:a6:
                    cc:a6:00:61:6a:2d:da:ce:89:66:18:55:fe:ed:cb:
                    df:01:6b:a2:45:1c:b8:b9:c2:8a:e1:3b:47:68:89:
                    d1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:40:C4:33:E7:34:73:7A:FF:38:DF:85:BD:41:C4:D0:71:23:57:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428/0ff683ee-75b9-4ed9-9e48-e74a8e810428.crl

            X509v3 Authority Key Identifier:
                keyid:F4:B5:1C:88:5E:B7:42:18:B6:70:88:4B:A6:32:76:12:14:5D:9B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0ff683ee-75b9-4ed9-9e48-e74a8e810428.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0f:51:a4:40:7b:a4:e9:94:84:6b:3b:aa:56:3f:3c:54:8b:
         11:be:60:1c:18:0f:2a:ad:e7:63:44:5c:b7:3c:72:7d:79:9c:
         3c:64:cd:62:73:56:26:0e:dd:54:e2:76:d6:11:be:42:ea:2b:
         48:41:00:9c:f1:3e:de:c0:19:da:98:46:c3:32:36:07:7d:38:
         b9:82:b3:36:5c:43:93:19:58:3e:33:5a:bf:aa:3a:de:4d:6f:
         70:1a:c7:88:4c:ef:4a:8b:32:6f:56:d6:04:da:53:49:a2:f7:
         d4:ed:ed:8c:65:b6:82:82:4c:45:f4:40:20:66:45:7d:bc:c2:
         fa:e2:b7:17:b2:77:35:5d:ba:32:1b:a0:71:db:60:b5:92:ba:
         11:f2:65:28:4c:37:44:c3:25:0c:fc:29:6e:e4:e4:d6:b4:d0:
         0f:12:f6:23:a5:30:f7:4e:2d:a5:67:ca:a1:8b:e8:d2:04:91:
         4a:ed:ea:f9:0c:c4:d5:c1:d5:29:ae:e0:b9:f7:c2:47:e2:9c:
         57:6d:8c:ab:41:d2:14:ab:f5:cd:7a:de:74:0d:e4:48:35:3a:
         c3:9a:b2:ed:17:1b:c1:33:3c:c8:74:fc:b6:3e:b9:cc:ce:47:
         f6:f4:07:0f:cb:f2:5f:c6:49:4b:f9:9a:05:ae:46:a8:e6:53:
         a9:b0:a9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 24 20:41:36 2025 by rpki-client