This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft
File:                     dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft (raw, json)
Hash identifier:          o8XJPBV090oJj1L4fEHV8DuDofao8wivk5Q7faM/qhY=
Subject key identifier:   87:0E:F4:5F:4B:55:DA:A4:09:AC:A4:2D:24:74:D7:36:66:33:0A:2A
Authority key identifier: CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39
Certificate issuer:       /CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9
Certificate serial:       010D0C9F4328584C3FF2F8BE1FC0E4FE074E4D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft
Manifest number:          010D0C9F4328584BAECF559CAD54E20FCAA1A977
Signing time:             Sat 20 Dec 2025 13:00:04 +0000
Manifest this update:     Sat 20 Dec 2025 13:00:04 +0000
Manifest next update:     Tue 23 Dec 2025 13:00:00 +0000
Files and hashes:         1: 22b65cf7-195a-34e9-8bf2-d56ee3010ea2.roa (hash: RSSpFoqOK6rfTU7e8JuipPqd4U8XnjJ4Wtcb0qhBagQ=)
                          2: a73f0f41-ec9a-31f4-aa4b-c820fa15255a.roa (hash: QvAwvJovEakQwJ6VVlwBfQNSH2cWToYliBdx3ODFY+w=)
                          3: b4c49167-4119-3416-b7e9-256453bf1aaf.roa (hash: lgP+1yYq2ZTEwVFhRN+ApGA+KVWcbwRhLucj2UpHmZU=)
                          4: b8d109dc-5aab-3d45-bca0-e06cc45ec919.roa (hash: zdEkeezmXqKQ5hq9IOQyUfOsFWNabgrtjyFlcm9D+qo=)
                          5: dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl (hash: 3KHebuPmepT7d+bK+lqjLd+/67ppF1Csszrr40V2Htw=)
                          6: fa77f979-11b5-30ea-8497-cb0986fdf69f.roa (hash: k+ap79WybdNdgJ9aYgg2KayXgAz3Q7KcN7A+oPKN2vg=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3f:f2:f8:be:1f:c0:e4:fe:07:4e:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfcb4aec-a66c-407b-8cba-7dee47a6c6b9
        Validity
            Not Before: Dec 20 13:00:04 2025 GMT
            Not After : Dec 23 13:00:00 2025 GMT
        Subject: CN=a8aea9e4-315f-4a45-9c3f-6b7a972a0148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:29:23:f8:37:d6:18:8a:4b:a5:06:9e:9d:
                    b6:b5:66:8e:86:12:ec:02:69:2f:af:3e:33:31:ce:
                    b2:61:06:b8:d7:34:f1:a5:ca:80:47:5e:62:b1:9b:
                    f1:12:f8:e7:4d:5d:90:21:2d:66:0d:9b:e5:b2:97:
                    6e:1e:1f:9b:c3:4b:f8:c1:47:65:70:ee:5d:00:ee:
                    33:d7:0a:ea:f8:12:23:32:2a:1f:ae:a4:cb:d8:b8:
                    c4:e5:7a:f7:85:22:b3:42:d8:43:1d:a5:35:ee:0f:
                    35:f6:0c:60:b6:61:00:55:74:b7:0a:b2:ab:e8:4f:
                    5c:a5:e6:42:03:71:2a:66:38:16:85:04:fe:93:f7:
                    bb:83:8d:fd:5d:aa:aa:04:f1:ec:4e:25:36:b6:29:
                    fa:e1:fe:ad:02:02:2d:8e:fe:6d:04:e9:d6:b7:b8:
                    21:61:ed:81:64:a9:41:c7:f4:11:9c:bf:9a:01:42:
                    cd:7d:26:7b:55:c6:c9:60:82:40:b7:ac:b2:e1:64:
                    e3:ba:fe:ef:4e:a1:28:fa:ed:da:9f:83:9d:0e:e0:
                    3e:9b:50:d7:ca:d6:ce:af:c7:e7:27:49:8c:e9:f1:
                    82:69:5e:62:87:d6:12:e1:81:27:cc:1d:51:d4:5b:
                    ae:6d:30:70:8f:8d:84:97:72:32:64:23:29:9a:f5:
                    70:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:F4:5F:4B:55:DA:A4:09:AC:A4:2D:24:74:D7:36:66:33:0A:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.crl

            X509v3 Authority Key Identifier:
                keyid:CC:01:25:42:C2:EB:BB:14:5A:1F:2E:49:57:1B:80:25:B3:A9:99:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dfcb4aec-a66c-407b-8cba-7dee47a6c6b9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:96:30:92:73:ad:34:69:8b:a3:10:fe:58:8a:f3:f0:8f:62:
         ed:4e:1d:09:78:8e:61:7e:69:21:d1:b9:4d:63:2d:d2:e2:31:
         b3:54:e0:dc:e7:42:61:03:7e:77:38:a7:f8:59:37:98:34:3a:
         88:b1:d9:90:79:29:30:96:6b:ed:46:9a:4b:3a:ff:bd:e3:da:
         f8:dc:1c:3b:97:a9:24:de:bb:93:89:6e:c9:c2:94:9c:89:0e:
         8e:3d:ad:38:d1:15:3a:fe:79:46:ca:83:b0:4a:b4:29:8b:65:
         99:0f:6e:a4:b8:d2:dd:a4:e1:74:9b:eb:c5:64:09:7f:a2:7e:
         97:b0:9e:0b:03:24:72:70:63:02:d0:31:a1:39:c0:a7:a0:db:
         92:b7:de:ed:6d:ef:05:48:37:4d:49:26:de:0f:a8:1e:09:b2:
         16:29:ee:60:31:ea:f9:56:7f:b1:ff:5a:5b:d7:7d:60:7d:7a:
         35:d1:c5:d2:97:f4:91:aa:da:af:b0:9a:09:cf:49:54:91:93:
         33:a8:a8:42:53:71:bc:8c:5c:f0:52:be:d7:3c:30:f8:31:eb:
         47:65:e0:bb:20:18:37:f0:65:1b:d3:08:c8:cb:d0:c2:85:02:
         41:a3:d6:e1:f3:37:9d:8e:7a:b5:b7:7a:f0:e0:c0:7b:f5:6e:
         43:7c:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 03:05:32 2025 by rpki-client