This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft
File:                     17499469-12e7-4915-9db8-02bba626b87d.mft (raw, json)
Hash identifier:          7vvJJJPf7eQUD0gdLXBFLJlw7dAwl5ICGGlcD4au3pg=
Subject key identifier:   B9:85:DA:1C:A7:18:C9:96:89:11:45:C4:F0:8C:34:D1:F5:58:BB:1D
Authority key identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19
Certificate issuer:       /CN=17499469-12e7-4915-9db8-02bba626b87d
Certificate serial:       010D0C9F4328584BF703D7CBFE46D0FC3E554E40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft
Manifest number:          010D0C9F4328584073A84D6FD70EB173614F9E47
Signing time:             Mon 24 Nov 2025 10:00:03 +0000
Manifest this update:     Mon 24 Nov 2025 10:00:03 +0000
Manifest next update:     Wed 26 Nov 2025 10:00:00 +0000
Files and hashes:         1: 0a84462e-ebef-3601-aa9b-894d08e40b73.roa (hash: NEe76LxqIP9eIo1MqO3YjIOvJedFMZjpQzpZDaVJGNE=)
                          2: 0f5ca919-1048-3ed3-8151-9219cc8fed20.roa (hash: Na3bJ6/BYeEd8Zm1bwCgz5hJNLWzpifDsQf9stFLGFQ=)
                          3: 17499469-12e7-4915-9db8-02bba626b87d.crl (hash: dpqbOzbhzkxekyd6WrtiHAUQRNxHZ6yw9VLzgN0mH5k=)
                          4: 221f8c6f-f2af-3005-8b61-13c814ba56c4.roa (hash: 5jjzXAWjNJanhJKqdtK+b+A5a13sqEWPryeWIme2ytI=)
                          5: 781b8041-84c5-3c82-9447-ed915eeba71b.roa (hash: 509rjBXUco7LScRPICNWmK3/12wMVkZp3KSTLjPEL80=)
                          6: 8310a4d1-9c0d-3cb9-bff9-1b13b64391ae.roa (hash: GJw5KvMciqVMVKiGQQYmuExFIioDBMK5Y1FU6Ye3acw=)
                          7: 917dd06f-b3c3-3d3e-825f-4c74e7ab757e.roa (hash: yuWlLxk3c3u+XyjiiVgOMEvZYYtVPa8hBvhGYlM8JMU=)
                          8: fac8f7db-6874-362b-bb5f-273d40dfa07a.roa (hash: MocL2ufQuHmCtLP1MSUkXOQJ1msFZNEcknFEwoiw+Fo=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f7:03:d7:cb:fe:46:d0:fc:3e:55:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17499469-12e7-4915-9db8-02bba626b87d
        Validity
            Not Before: Nov 24 10:00:03 2025 GMT
            Not After : Nov 26 10:00:00 2025 GMT
        Subject: CN=509315c8-4853-44a1-a897-917885d49e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0c:f7:09:9e:e7:55:04:0a:9f:f9:4e:ed:fc:
                    fe:84:e2:3e:29:b7:3f:1b:0f:ba:94:c9:48:c6:0a:
                    f6:93:cb:ea:69:35:8a:c3:81:6a:8a:48:14:49:7a:
                    4b:1d:2e:ec:10:c9:b4:4c:7d:6c:df:b1:98:2c:13:
                    b3:ca:87:f9:f6:91:b8:71:2c:bd:43:3b:71:d7:1c:
                    25:cb:8c:5d:57:f4:46:32:63:65:71:93:a9:bb:a5:
                    dd:05:a8:f6:16:22:a5:17:71:9b:2f:29:fc:93:bb:
                    2f:5c:61:e7:aa:8d:b4:0a:3a:62:c9:e2:7d:e7:b7:
                    a8:03:ae:89:bd:9b:e8:5e:f8:b0:89:49:d3:9b:81:
                    20:3c:b8:9d:52:d7:b3:fb:07:48:55:ea:6c:a8:5c:
                    9f:89:61:6b:35:08:36:82:88:84:00:bf:9b:20:f9:
                    50:29:6d:9d:d5:6e:34:c8:cb:cc:e0:b4:17:2a:5e:
                    7e:8a:da:b9:32:85:bb:a4:8d:e5:2b:d2:00:79:c8:
                    b5:9a:e0:32:8a:59:d3:1e:2d:02:01:b7:f6:82:6f:
                    60:4d:39:ad:70:0c:65:25:67:de:2a:b2:d2:a0:6a:
                    df:41:1d:c3:6d:22:df:9a:bb:2d:82:a9:f1:d9:86:
                    18:34:ed:57:59:f3:08:09:42:30:f9:10:1f:98:e4:
                    67:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:85:DA:1C:A7:18:C9:96:89:11:45:C4:F0:8C:34:D1:F5:58:BB:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3a:1d:d6:1a:18:40:e2:31:65:27:41:ad:6c:a1:28:89:a7:
         7a:c1:bb:05:6a:7c:5f:15:c8:c4:85:82:02:8b:a6:fb:a2:53:
         3b:76:e7:ea:ec:df:fc:c4:99:2b:e0:0b:19:43:64:ac:89:aa:
         ba:46:56:27:95:a6:e3:9a:fa:6d:5c:7b:36:73:27:7f:24:23:
         a9:b4:0c:80:0a:fd:f6:52:5c:29:01:95:19:94:25:24:b1:8e:
         ae:b5:e5:80:1e:a6:f2:ec:b6:12:65:15:a9:6b:66:c6:a3:b7:
         8e:24:ad:20:95:51:75:32:ed:2f:17:b7:70:d2:0b:49:bc:e4:
         50:c0:77:42:0f:ba:cf:13:d1:f4:64:d2:cd:5e:b9:83:06:e8:
         df:b3:0c:f6:cb:0c:30:2b:a7:7f:65:5d:43:bf:8b:f4:41:08:
         f4:b0:1e:9f:87:a2:f2:53:93:37:2d:69:b3:ae:78:e6:d9:c2:
         d7:dc:7b:a0:fe:44:8c:d3:58:cd:65:61:1d:fa:6b:13:5e:5c:
         3f:9b:cf:bf:58:ad:3b:82:24:43:57:a8:56:49:a8:ed:5d:98:
         1a:9a:c8:34:47:7b:bd:bd:96:d5:36:50:e1:57:84:6d:27:7a:
         c7:11:3d:63:f8:a5:49:06:07:99:93:66:8d:5c:5f:06:b7:5b:
         4f:36:ec:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 24 20:41:38 2025 by rpki-client