This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft
File:                     1af0a650-f612-4b2a-9af3-b8090917fefd.mft (raw, json)
Hash identifier:          t729vHZaBOwkz4t6RY8YLcHrmUfyx/kQlzxCAHL1uk8=
Subject key identifier:   47:A3:5D:6F:EF:D2:0A:8F:79:13:6D:23:4F:B9:96:49:E6:73:66:AA
Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D
Certificate issuer:       /CN=1af0a650-f612-4b2a-9af3-b8090917fefd
Certificate serial:       010D0C9F4328584C00C64C65E042EF51025AFE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft
Manifest number:          010D0C9F4328584BE67F5BDBA8BBD49634FD190A
Signing time:             Thu 27 Nov 2025 21:54:08 +0000
Manifest this update:     Thu 27 Nov 2025 21:54:08 +0000
Manifest next update:     Sat 29 Nov 2025 12:00:00 +0000
Files and hashes:         1: 1af0a650-f612-4b2a-9af3-b8090917fefd.crl (hash: MfqiV4SLpHf4wVUy8JrsjIqne0I/FXH3cmTRVev/KI4=)
                          2: a163ff4c-23b6-3304-be68-6017eeb9e220.roa (hash: Pf/B365zT6MABXsqQnlXoHX+HpGvmh5X1VsjGm24c+Y=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:00:c6:4c:65:e0:42:ef:51:02:5a:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd
        Validity
            Not Before: Nov 27 21:54:08 2025 GMT
            Not After : Nov 29 12:00:00 2025 GMT
        Subject: CN=5cdff3a1-2aa8-4e32-b7d2-b92e9162e157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bb:17:27:8f:c6:27:cb:75:30:8f:19:6a:0e:
                    84:f8:12:32:7f:4e:13:88:a0:7d:dc:41:04:70:73:
                    69:02:d0:14:ef:69:f2:d6:66:72:2c:9f:5c:3d:dc:
                    2d:77:fc:88:5a:b7:4d:58:e1:92:de:69:63:fd:72:
                    6e:c6:ef:db:9b:c0:99:f5:83:a8:ae:ed:9c:69:ae:
                    51:e5:ea:cc:5d:97:bc:ce:cf:8b:33:4a:e3:25:ce:
                    bd:1c:81:8f:43:fc:d1:20:14:a0:54:63:b3:dd:c1:
                    95:b8:de:da:c2:9d:d9:e8:1f:92:03:cb:a8:e5:7e:
                    7b:e6:e2:ac:dc:6e:5e:fa:d6:08:b9:b6:f5:cf:5e:
                    2e:f0:85:c0:18:b4:2f:80:bb:1c:8b:40:49:f9:0c:
                    bd:a3:fb:29:fd:37:22:c6:61:b9:48:42:38:11:01:
                    26:2c:70:b5:93:b2:21:9b:8c:7f:e5:41:d9:81:8d:
                    62:df:80:6f:f5:40:91:ec:9a:81:c9:fa:6c:36:52:
                    ee:67:a3:59:d8:05:4b:d1:78:29:fb:4e:e3:d1:97:
                    3d:ff:9a:aa:19:c1:3d:b0:ef:54:ba:9c:28:ff:b3:
                    56:80:75:7d:90:a7:5d:9f:48:5d:9b:f7:d5:3a:2c:
                    8d:ff:59:31:be:4e:9f:bf:f5:7e:9f:ca:cc:53:31:
                    7c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A3:5D:6F:EF:D2:0A:8F:79:13:6D:23:4F:B9:96:49:E6:73:66:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl

            X509v3 Authority Key Identifier:
                keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:69:38:40:67:0c:89:47:69:d2:a2:04:ae:bf:2a:25:8b:7a:
         d4:72:48:be:27:de:b3:a3:2c:93:b5:5b:9b:c1:23:23:cd:d8:
         42:df:78:41:32:47:c3:6d:c1:2a:17:a9:30:c7:e8:b7:f5:ce:
         c1:5b:e5:c6:86:c5:70:a4:1e:a0:b6:6b:c5:54:7e:a1:0a:35:
         bb:32:85:77:0c:72:53:67:e8:b7:24:2f:be:73:55:be:74:85:
         95:f1:2b:f9:11:d3:0f:33:61:50:41:97:0f:aa:46:de:3d:bc:
         b5:6a:a5:6c:72:d9:2a:5e:19:a5:48:a3:9b:92:b0:8d:9c:37:
         13:a4:a7:5f:b5:0c:86:b1:c9:38:ca:20:7e:d4:a8:9f:c9:06:
         1b:a6:11:ff:ce:dc:5c:b3:e6:90:62:83:b6:62:4f:be:a5:1f:
         94:05:77:de:8a:f2:6c:e9:11:fe:20:c3:9b:34:41:20:c3:b0:
         ac:a3:f5:8f:0a:6f:40:79:30:66:b4:b1:30:58:cd:53:28:1a:
         ce:62:1a:64:4a:31:85:eb:50:c2:2f:01:0f:3c:d0:07:99:08:
         61:52:d1:30:9a:b2:2e:c5:f6:6d:78:8f:fd:5f:59:6b:15:5c:
         9b:68:ba:c2:fa:3a:e3:16:de:08:9a:a0:33:34:b0:98:d9:06:
         ec:8d:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----