This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d811943d-d3a2-4cd1-9889-1ee16fed77b1/d811943d-d3a2-4cd1-9889-1ee16fed77b1.mft
File:                     d811943d-d3a2-4cd1-9889-1ee16fed77b1.mft (raw, json)
Hash identifier:          Mr+H/IFr4R3TGrbVgb8lFvNrxtCNwvg0Hta6kad1T7o=
Subject key identifier:   45:F7:26:45:CB:DB:6F:F2:DE:46:9A:BF:54:53:9A:84:96:3A:B4:41
Authority key identifier: AC:6A:9F:18:25:08:EA:C1:ED:E1:F3:56:0D:C8:AE:41:D8:E2:0E:09
Certificate issuer:       /CN=d811943d-d3a2-4cd1-9889-1ee16fed77b1
Certificate serial:       010D0C9F4328584C7E10B33AF14F5954EA607200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d811943d-d3a2-4cd1-9889-1ee16fed77b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d811943d-d3a2-4cd1-9889-1ee16fed77b1/d811943d-d3a2-4cd1-9889-1ee16fed77b1.mft
Manifest number:          010D0C9F4328584C3596AFCA5DC4E80B74D6FAFC
Signing time:             Sun 11 Jan 2026 19:00:04 +0000
Manifest this update:     Sun 11 Jan 2026 19:00:04 +0000
Manifest next update:     Wed 14 Jan 2026 19:00:00 +0000
Files and hashes:         1: 73b66bf9-d25b-32be-baef-103ea8fa243a.roa (hash: tBU8JbuZBuY2EHt9+kfdRNoiyQWsE2V2TpSS07fDalo=)
                          2: c1a84f3a-a4b4-319f-a321-c2a8cb99b42c.roa (hash: 4EzhWZyFtg6GOKDkp5gIbFgopGLZlqSOWvuXbGWhT3A=)
                          3: d811943d-d3a2-4cd1-9889-1ee16fed77b1.crl (hash: EHSdCqrMry3E3gZvOgDTIkSDxxCYNQGorCtJRQYhnrc=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d811943d-d3a2-4cd1-9889-1ee16fed77b1/d811943d-d3a2-4cd1-9889-1ee16fed77b1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d811943d-d3a2-4cd1-9889-1ee16fed77b1/d811943d-d3a2-4cd1-9889-1ee16fed77b1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d811943d-d3a2-4cd1-9889-1ee16fed77b1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Jan 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7e:10:b3:3a:f1:4f:59:54:ea:60:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d811943d-d3a2-4cd1-9889-1ee16fed77b1
        Validity
            Not Before: Jan 11 19:00:04 2026 GMT
            Not After : Jan 14 19:00:00 2026 GMT
        Subject: CN=e454c5ee-3a89-477a-9741-68223d2bdf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9f:ab:a0:14:f4:46:1e:a8:ce:4c:e6:20:11:
                    b1:eb:d4:e8:ed:65:c7:f9:d7:62:8c:fd:51:2c:9a:
                    90:37:c1:a0:76:86:72:f4:28:89:8c:f0:16:3f:ec:
                    0b:72:ef:b0:9d:bc:97:95:2c:d4:2b:24:25:17:4e:
                    12:89:09:a3:a1:84:07:58:85:c8:28:46:db:8c:8e:
                    ec:07:0c:f7:8d:c9:ad:78:10:43:ed:ec:2f:c1:dd:
                    bc:42:ff:3e:dd:08:44:46:0c:20:f0:3d:44:27:c9:
                    f9:49:fe:30:fc:d5:7c:77:2b:97:84:83:3a:36:39:
                    a7:3b:81:e4:4e:72:b2:ea:62:52:80:fc:6a:35:9d:
                    80:1e:5a:38:5a:e1:aa:eb:a9:21:6f:dd:d5:d3:5f:
                    41:41:ea:b7:39:91:0f:a7:a2:94:85:b5:57:d2:4b:
                    78:75:ce:a9:4a:45:0a:fd:20:68:86:fc:90:05:8e:
                    da:92:ca:26:44:a5:2e:2c:33:02:44:3e:e2:c4:6d:
                    73:f3:12:d0:a5:34:64:c2:61:98:61:a4:e0:a9:3f:
                    8c:f1:93:c8:dc:5d:90:d1:21:8e:69:ab:88:01:05:
                    38:a5:e9:7b:aa:37:c4:90:bd:da:61:f6:71:04:05:
                    b5:15:31:68:39:f2:74:38:7a:2e:80:b7:a2:51:a0:
                    ca:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F7:26:45:CB:DB:6F:F2:DE:46:9A:BF:54:53:9A:84:96:3A:B4:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d811943d-d3a2-4cd1-9889-1ee16fed77b1/d811943d-d3a2-4cd1-9889-1ee16fed77b1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d811943d-d3a2-4cd1-9889-1ee16fed77b1/d811943d-d3a2-4cd1-9889-1ee16fed77b1.crl

            X509v3 Authority Key Identifier:
                keyid:AC:6A:9F:18:25:08:EA:C1:ED:E1:F3:56:0D:C8:AE:41:D8:E2:0E:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d811943d-d3a2-4cd1-9889-1ee16fed77b1.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:39:89:46:87:44:50:67:7f:6d:17:82:2b:fb:92:44:c4:88:
         92:66:38:94:fe:f7:72:74:c2:8e:48:30:b1:e9:cc:0f:8a:1a:
         e6:62:ad:df:da:73:87:7b:a1:28:07:c3:49:eb:e1:ec:95:1f:
         06:dc:4d:35:ed:72:29:dd:f9:7f:f8:fe:d4:c6:dc:3f:43:a6:
         0d:86:8f:da:ea:d1:26:df:4e:54:fa:4c:ff:62:d5:d8:bb:ee:
         f0:31:41:fd:dc:4b:9d:88:02:be:f1:8b:04:f9:e9:cc:ac:16:
         67:24:53:d9:f9:17:1b:2d:78:2a:22:a3:06:89:88:11:59:a7:
         a0:01:4f:6c:90:c0:fe:a4:57:96:6d:c8:54:ac:b7:16:20:82:
         3f:71:fe:f9:9d:99:a1:cc:f5:f5:75:63:47:eb:8e:cf:59:cf:
         b8:b9:e0:a1:c3:31:46:3d:b6:e9:4b:47:ab:f5:48:ec:ec:a5:
         4e:2b:29:53:19:da:c1:5f:f7:8a:f4:2d:b7:f1:01:70:ae:2f:
         f8:f3:0a:99:f5:eb:ed:82:a6:3c:4f:50:3e:79:99:5a:4d:e3:
         e5:e3:01:da:ab:cd:c2:9b:35:5f:ee:46:6a:b8:9b:43:50:f5:
         90:1a:0f:03:9f:78:55:29:d1:33:c1:d8:18:fd:4a:68:c5:0f:
         61:78:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 14:56:20 2026 by rpki-client