This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/2071aafd-02be-44ff-9910-34e0c991304e.mft
File:                     2071aafd-02be-44ff-9910-34e0c991304e.mft (raw, json)
Hash identifier:          +9ukTye+J+PQwZhiHmAQiViyBnI7Nv5us4EMDOhFvR0=
Subject key identifier:   54:AA:19:FA:3F:74:1F:23:3E:DF:39:1C:8F:5A:30:31:9A:FC:6F:4E
Authority key identifier: 58:8F:CE:7D:EA:86:6C:D3:5F:BF:1C:BD:88:59:97:C3:2D:58:E8:2D
Certificate issuer:       /CN=2071aafd-02be-44ff-9910-34e0c991304e
Certificate serial:       010D0C9F4328584BF798CB062F60BFDD70F69E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/2071aafd-02be-44ff-9910-34e0c991304e.mft
Manifest number:          010D0C9F4328584BEC74FBA5CA9EEA11ECF8CA85
Signing time:             Mon 24 Nov 2025 15:00:09 +0000
Manifest this update:     Mon 24 Nov 2025 15:00:09 +0000
Manifest next update:     Thu 27 Nov 2025 15:00:00 +0000
Files and hashes:         1: 2071aafd-02be-44ff-9910-34e0c991304e.crl (hash: NWcGmFaTsjI5Lx0udMEkBIktN7nIGgYV3/AWbIfR38o=)
                          2: 28382ed1-a6b1-3a3e-b096-9dcdbb6a5c2c.roa (hash: uLFSysmSB69KBIFU5OtT6yMI3WS0dQ+6d3NuVP/ZqLY=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/2071aafd-02be-44ff-9910-34e0c991304e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/2071aafd-02be-44ff-9910-34e0c991304e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f7:98:cb:06:2f:60:bf:dd:70:f6:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2071aafd-02be-44ff-9910-34e0c991304e
        Validity
            Not Before: Nov 24 15:00:09 2025 GMT
            Not After : Nov 27 15:00:00 2025 GMT
        Subject: CN=72768860-fd09-4b4d-bd36-b2be5e492ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c5:1d:84:25:a0:64:98:c3:bf:d7:35:d7:28:
                    36:bb:27:1b:56:5c:54:5d:a9:c5:6c:bd:fd:49:2c:
                    5e:7a:0d:a8:cc:92:85:30:44:45:ba:ae:79:34:ee:
                    97:a5:11:87:ea:ec:e8:37:32:17:16:bd:14:67:57:
                    64:d6:1b:ec:38:b6:a2:44:fb:82:71:f9:b2:75:b2:
                    67:44:01:59:0c:09:a7:4c:5c:45:8d:63:5d:f0:3d:
                    67:a2:71:d8:f6:41:73:95:c5:e5:9e:55:90:5f:d0:
                    9a:63:d9:1a:64:42:9c:11:7c:ce:fa:7b:60:66:f9:
                    a2:e1:b4:2a:50:92:57:ff:e7:78:0e:7a:8c:a3:4e:
                    1c:e4:e5:bb:7d:18:06:ea:e9:5a:1a:87:d6:cd:8c:
                    69:10:78:3b:a3:30:bf:6f:6e:ad:46:a4:cc:9b:e9:
                    42:16:e1:48:76:60:21:1b:ec:cf:24:60:8c:7a:d6:
                    c8:12:ec:33:9d:6f:08:ff:73:88:1b:53:74:dc:75:
                    a5:4d:2d:51:f7:33:57:36:8f:33:da:d5:c3:e1:18:
                    67:3f:a5:2e:79:07:5a:14:43:f7:f3:b3:86:fa:b8:
                    b5:2c:34:fe:15:30:d6:2f:47:a5:11:0b:8d:c9:aa:
                    87:38:48:29:b4:b7:57:2f:50:ae:fb:fb:b3:40:51:
                    45:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AA:19:FA:3F:74:1F:23:3E:DF:39:1C:8F:5A:30:31:9A:FC:6F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/2071aafd-02be-44ff-9910-34e0c991304e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e/2071aafd-02be-44ff-9910-34e0c991304e.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:CE:7D:EA:86:6C:D3:5F:BF:1C:BD:88:59:97:C3:2D:58:E8:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2071aafd-02be-44ff-9910-34e0c991304e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:f6:d9:a8:65:4f:bd:5f:8c:d0:eb:8d:df:4b:1f:9d:41:89:
         42:9a:04:b9:ab:7d:ef:fd:9e:aa:47:4f:06:c3:fa:72:61:bc:
         20:2b:66:8b:c1:e3:e5:93:dc:c8:d3:a8:e6:48:d4:34:86:56:
         d1:44:27:f4:0d:77:dd:35:54:12:b6:d8:5c:14:46:d5:5b:dc:
         ce:3d:b1:b4:c9:18:b7:4f:0f:58:52:6f:95:ab:21:e1:5a:57:
         ed:d8:de:bc:3c:df:4f:a1:14:37:bf:2e:0c:fc:64:bd:6a:e5:
         12:82:2c:78:7c:38:0e:89:1d:e1:b8:7b:07:65:37:0b:71:2f:
         4e:e3:97:f9:8b:b2:cd:7c:7f:32:2a:3e:e4:ca:1f:da:d4:1c:
         f8:7e:5d:45:a2:e1:24:77:da:82:43:24:74:b2:21:12:47:53:
         b4:a0:71:92:d1:64:37:df:5b:96:be:b0:fa:2b:2c:84:60:49:
         ec:c5:e7:c7:09:26:80:a6:04:7e:85:2f:95:51:68:d3:60:e7:
         83:e7:04:c5:0c:ca:ee:e6:be:18:ca:db:03:58:00:4c:d7:ab:
         ae:03:c6:22:76:31:27:03:ba:df:fc:82:a6:d2:13:b5:22:dd:
         87:fd:27:7e:b7:9a:ab:72:36:29:60:63:a8:ed:0b:c4:78:e6:
         50:06:37:b4
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv3mMsGL2C/3XD2noAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA3MWFhZmQtMDJiZS00NGZmLTk5MTAtMzRlMGM5OTEz
MDRlMB4XDTI1MTEyNDE1MDAwOVoXDTI1MTEyNzE1MDAwMFowLzEtMCsGA1UEAxMk
NzI3Njg4NjAtZmQwOS00YjRkLWJkMzYtYjJiZTVlNDkyZWEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8UdhCWgZJjDv9c11yg2uycbVlxUXanFbL39
SSxeeg2ozJKFMERFuq55NO6XpRGH6uzoNzIXFr0UZ1dk1hvsOLaiRPuCcfmydbJn
RAFZDAmnTFxFjWNd8D1nonHY9kFzlcXlnlWQX9CaY9kaZEKcEXzO+ntgZvmi4bQq
UJJX/+d4DnqMo04c5OW7fRgG6ulaGofWzYxpEHg7ozC/b26tRqTMm+lCFuFIdmAh
G+zPJGCMetbIEuwznW8I/3OIG1N03HWlTS1R9zNXNo8z2tXD4RhnP6UueQdaFEP3
87OG+ri1LDT+FTDWL0elEQuNyaqHOEgptLdXL1Cu+/uzQFFF2wIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFFSqGfo/dB8jPt85HI9aMDGa/G9OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMDcx
YWFmZC0wMmJlLTQ0ZmYtOTkxMC0zNGUwYzk5MTMwNGUvMjA3MWFhZmQtMDJiZS00
NGZmLTk5MTAtMzRlMGM5OTEzMDRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjA3MWFhZmQtMDJiZS00NGZmLTk5
MTAtMzRlMGM5OTEzMDRlLzIwNzFhYWZkLTAyYmUtNDRmZi05OTEwLTM0ZTBjOTkx
MzA0ZS5jcmwwHwYDVR0jBBgwFoAUWI/OfeqGbNNfvxy9iFmXwy1Y6C0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMDcxYWFmZC0wMmJlLTQ0ZmYtOTkxMC0zNGUw
Yzk5MTMwNGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCU9tmoZU+9X4zQ643fSx+d
QYlCmgS5q33v/Z6qR08Gw/pyYbwgK2aLwePlk9zI06jmSNQ0hlbRRCf0DXfdNVQS
tthcFEbVW9zOPbG0yRi3Tw9YUm+VqyHhWlft2N68PN9PoRQ3vy4M/GS9auUSgix4
fDgOiR3huHsHZTcLcS9O45f5i7LNfH8yKj7kyh/a1Bz4fl1FouEkd9qCQyR0siES
R1O0oHGS0WQ331uWvrD6KyyEYEnsxefHCSaApgR+hS+VUWjTYOeD5wTFDMru5r4Y
ytsDWABM16uuA8YidjEnA7rf/IKm0hO1It2H/Sd+t5qrcjYpYGOo7QvEeOZQBje0
-----END CERTIFICATE-----
Generated at Mon Nov 24 20:40:56 2025 by rpki-client