This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft
File:                     cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft (raw, json)
Hash identifier:          Q7OPohIlAfDMkluvzpAlMrH9sPrIhSxWTqeRIOt1NJw=
Subject key identifier:   FC:33:6F:8E:F6:9F:F3:57:C9:36:6E:0C:8F:BB:A9:B8:76:CA:33:55
Authority key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49
Certificate issuer:       /CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c
Certificate serial:       010D0C9F4328584C7DF2F4C16692C66C5356CB40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft
Manifest number:          010D0C9F4328584C72DC04738F61ECAAC4343E85
Signing time:             Sun 11 Jan 2026 18:00:08 +0000
Manifest this update:     Sun 11 Jan 2026 18:00:08 +0000
Manifest next update:     Wed 14 Jan 2026 18:00:00 +0000
Files and hashes:         1: cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl (hash: gWpRDVC5kUDvSupROnJPfw3yvhsoBua++0SNOoA399A=)
                          2: dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa (hash: Mj5ln4gIVd7xGAAoCIqaJRS9uIrroPPBVUYOnngu8vA=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:f2:f4:c1:66:92:c6:6c:53:56:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c
        Validity
            Not Before: Jan 11 18:00:08 2026 GMT
            Not After : Jan 14 18:00:00 2026 GMT
        Subject: CN=c885a818-f7bb-4728-96bf-3b5e9b1cd82a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:84:be:ff:22:75:46:c6:c6:0a:26:c8:6b:
                    c0:18:53:2d:7a:04:b2:49:f4:4b:3b:bf:c8:86:39:
                    37:35:0a:08:7d:6e:8d:f5:83:ae:29:0b:95:3e:de:
                    57:c9:3a:50:3f:84:5b:b1:d4:fe:58:cf:2f:ed:86:
                    37:fe:52:4a:92:a3:1b:32:1b:8f:a8:fb:ad:39:32:
                    b6:5b:35:b6:74:3a:95:4e:94:83:89:df:38:2a:97:
                    b2:4b:a1:85:c7:ba:fb:ab:e0:27:39:3a:e4:8e:4a:
                    52:71:60:1e:6f:f9:ba:0a:31:89:05:17:83:66:eb:
                    cc:eb:f8:90:6b:75:46:2b:8c:c3:8f:5f:b1:2b:4c:
                    c1:af:12:e8:58:2a:be:04:7a:58:a3:f7:9b:2c:e7:
                    df:9f:1c:59:d2:3f:0f:99:de:3e:cf:2d:a4:3c:fa:
                    d0:1f:1e:87:2d:65:05:71:f9:4d:e4:f6:da:9b:a9:
                    b0:9a:18:79:c1:0e:1f:a8:46:42:38:b6:74:cc:54:
                    c1:b7:46:53:cd:ac:96:37:98:3e:e7:60:d5:fd:d6:
                    61:c2:fc:c6:39:9e:7a:17:d9:e8:e5:e9:cd:6f:5c:
                    30:78:ba:4b:b4:4b:ec:14:79:d1:c8:8c:bb:f3:4a:
                    8f:3a:b4:61:5b:d2:1c:fe:0e:72:71:fe:00:bd:ed:
                    6c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:33:6F:8E:F6:9F:F3:57:C9:36:6E:0C:8F:BB:A9:B8:76:CA:33:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:2b:e2:3c:14:81:5b:fe:9e:0d:14:e2:e1:2f:fa:d1:38:36:
         2d:fd:00:c4:fd:a0:87:d3:37:85:f6:d2:36:7d:23:64:aa:d0:
         34:ab:10:79:cb:fa:8c:03:b4:c4:6e:20:3e:13:35:5f:c9:be:
         1c:a3:a7:90:34:9e:94:26:45:f5:cd:04:9c:24:54:3a:d7:a3:
         bb:e1:38:ce:0a:ac:bb:73:01:10:8a:e3:3d:98:cf:41:a6:5e:
         f9:b3:fe:b8:7e:77:99:c0:e5:20:11:04:48:c7:7e:18:08:0a:
         73:82:60:c5:b3:f6:a9:e2:c5:a0:3d:32:e3:81:4c:5b:d7:85:
         5f:0d:81:1f:ea:3a:b2:4b:50:5e:85:6f:51:40:04:48:1e:8e:
         8c:9c:da:8c:37:34:34:f2:e3:a8:5b:2f:5c:fe:cb:0c:66:96:
         c8:67:96:c7:12:09:e8:24:41:03:e3:af:dd:b1:02:0d:55:77:
         3b:21:49:1e:b5:27:22:9a:5e:33:e7:1e:d6:49:45:f1:d1:80:
         5a:ea:8a:22:61:f8:d2:ef:44:95:d0:1d:3a:33:a2:8f:be:7e:
         d7:5c:53:de:90:fa:12:3e:13:43:bb:40:f2:71:7e:db:13:99:
         54:7e:15:82:e1:8d:e8:48:87:65:ac:02:dc:05:ea:0d:ed:c6:
         37:97:ed:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:56:22 2026 by rpki-client