This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.mft
File:                     58256eb6-85b9-455c-a9f6-3b446c5688f3.mft (raw, json)
Hash identifier:          99cgtYx2CnFJIBT9nGDaL3baJwHzIJvnL9viOOqbw8U=
Subject key identifier:   F0:9C:EC:80:28:52:4E:73:96:83:E6:56:B2:D1:FB:1B:81:EB:82:38
Authority key identifier: 3E:F8:B9:0A:CE:E0:C1:63:D3:30:C2:46:64:2A:51:CB:B9:F0:1E:43
Certificate issuer:       /CN=58256eb6-85b9-455c-a9f6-3b446c5688f3
Certificate serial:       010D0C9F4328584C5824EF6A52D92BD16567FD40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.mft
Manifest number:          010D0C9F4328584A1EB53A732A1340E7E331EB52
Signing time:             Mon 29 Dec 2025 05:00:09 +0000
Manifest this update:     Mon 29 Dec 2025 05:00:09 +0000
Manifest next update:     Thu 01 Jan 2026 05:00:00 +0000
Files and hashes:         1: 026e5fce-3561-3755-8142-3a1f5a088b3d.roa (hash: oGpDO3rTZBtK4PdlxkmUQTqcyu04vQ7Gy3XAVavaUJA=)
                          2: 12641930-7901-30cf-88d3-fbee6b75170a.roa (hash: 8c+lkebCtsXuOMzmyipzUphu3O5tkCPRnK3KFippIYg=)
                          3: 58256eb6-85b9-455c-a9f6-3b446c5688f3.crl (hash: oVYQVAUPF2YaPWT3u/ZtsYSxRd7NZciiUaEB9R/bdEQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:58:24:ef:6a:52:d9:2b:d1:65:67:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58256eb6-85b9-455c-a9f6-3b446c5688f3
        Validity
            Not Before: Dec 29 05:00:09 2025 GMT
            Not After : Jan  1 05:00:00 2026 GMT
        Subject: CN=98648ae9-2a30-41b6-abe1-3f89fcb8c8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e4:ed:9f:8f:10:cb:85:3a:8b:0c:be:65:3e:
                    36:8f:4a:e2:13:73:19:31:92:8d:ad:70:df:ae:7e:
                    d4:ed:62:09:c8:32:50:48:38:27:c2:a8:b7:6d:fe:
                    0d:92:b1:c7:77:d7:40:7b:6f:82:27:fb:31:01:0f:
                    5b:4e:3c:b5:93:43:46:1a:e0:ea:74:e2:59:0b:e3:
                    59:71:0f:98:b3:2c:ad:30:61:73:b7:c3:43:bf:28:
                    d7:8d:7c:1c:9e:1b:f3:ca:7a:3b:00:fc:f4:fa:20:
                    b7:fe:d1:b2:5f:8f:d0:18:19:09:47:06:0b:ce:2e:
                    ad:98:d8:6f:40:0e:f1:a6:45:0f:98:fc:9f:1d:50:
                    41:7b:22:b2:0e:b3:bf:98:18:91:d6:e7:b9:71:5b:
                    84:e1:32:7b:f8:85:a1:c8:94:f2:15:b0:38:55:b5:
                    31:e9:cb:6c:8d:f8:99:47:24:f3:43:24:1f:ec:32:
                    b8:4f:da:15:f3:90:b9:b8:91:b6:d5:4b:20:db:ba:
                    70:7c:0d:ed:70:87:e7:c3:ba:e1:c1:79:1f:bb:c0:
                    77:a6:a1:9b:81:ee:f6:72:60:4d:47:e8:93:77:34:
                    a5:01:35:14:38:7a:47:78:d7:a8:44:e0:11:a8:fe:
                    aa:b9:be:f9:59:7d:4c:94:c1:30:e1:22:df:f4:83:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9C:EC:80:28:52:4E:73:96:83:E6:56:B2:D1:FB:1B:81:EB:82:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3/58256eb6-85b9-455c-a9f6-3b446c5688f3.crl

            X509v3 Authority Key Identifier:
                keyid:3E:F8:B9:0A:CE:E0:C1:63:D3:30:C2:46:64:2A:51:CB:B9:F0:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/58256eb6-85b9-455c-a9f6-3b446c5688f3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:09:51:71:e3:6a:ab:fd:08:7a:f2:58:dc:c9:7a:4e:d4:
         05:9d:2d:8e:ac:67:ee:36:98:5f:2f:c9:c7:c1:c2:b9:ed:dd:
         53:5e:09:c7:09:b8:a7:5a:89:56:79:db:a4:36:f6:81:31:eb:
         1c:73:52:b6:20:b0:9d:1c:b4:c2:c6:11:6e:ef:08:0b:ad:ee:
         7d:fc:35:2f:7c:45:21:e9:f2:e2:30:00:95:91:b4:4b:41:7a:
         59:98:5c:20:b7:4d:0b:d3:5d:78:88:92:c6:73:fd:bd:27:b5:
         0c:9a:90:3d:28:4d:c5:bd:ef:66:c5:ae:3e:bb:36:9e:3a:e1:
         a8:1e:f6:df:94:e4:98:d0:02:76:9c:28:ca:aa:a6:f2:88:ad:
         03:1f:d9:38:a9:16:15:d2:f3:81:ee:54:8c:ee:65:3a:2e:32:
         a5:74:87:9f:1e:b9:07:6a:b6:4a:fe:6e:78:25:e1:85:fc:54:
         43:a7:d8:a8:29:ba:f3:cf:8b:db:40:5b:18:de:2e:3d:35:0c:
         ac:c3:7d:df:49:cc:cb:b6:c8:86:88:dd:f4:22:5c:c9:87:22:
         21:d5:c5:e7:30:84:5f:35:fd:63:13:b7:60:c8:7d:8b:53:b6:
         b7:9b:f5:23:24:d2:c5:69:5f:39:f0:72:89:1d:a2:a5:42:47:
         92:68:fe:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 01:33:28 2025 by rpki-client