This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.mft
File:                     a88fcb86-473d-4a31-8a0d-95a046cda9a9.mft (raw, json)
Hash identifier:          oqUCaG+9knXmhczUBPVt8UOA4yy3pWgZs5GX8O1EUlU=
Subject key identifier:   55:F4:73:81:8E:A2:80:66:BC:55:7E:18:C8:7F:2F:96:30:25:E1:E0
Authority key identifier: 18:A4:B8:64:43:CB:19:79:9D:00:ED:69:10:B2:C3:93:50:C6:26:4D
Certificate issuer:       /CN=a88fcb86-473d-4a31-8a0d-95a046cda9a9
Certificate serial:       010D0C9F4328584C5842AD0599B340BF5E4AE080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.mft
Manifest number:          010D0C9F43285849B4B607E32407F1DEFCF4595F
Signing time:             Mon 29 Dec 2025 06:00:03 +0000
Manifest this update:     Mon 29 Dec 2025 06:00:03 +0000
Manifest next update:     Thu 01 Jan 2026 06:00:00 +0000
Files and hashes:         1: 03390a9b-34f9-3186-9774-52af4ff94ca8.roa (hash: sF3PJTTkNqekHKSZp27F/OmMVrue+mjLri/U3OK9oIE=)
                          2: 34e49ef5-cd98-32d3-b7da-7f4da275f803.roa (hash: /GVTp3frSWfOXIqmRqNCLdWT3wooAlT5KK4/6Vwx28s=)
                          3: 61c62c9c-0cee-33b9-b9ca-63b8f0dea5b1.roa (hash: g1Ey67jPe8SrluwGKylryqlLnhIUmZImVtyso0xT6UA=)
                          4: 75942eed-9ca7-36a2-8b67-8da2f6e13da5.roa (hash: GLilzvVpOzeGvUCou8Z3B3cK+RWmjZMoO91aQzBIOD0=)
                          5: 926dd37d-5549-3a7e-b870-336d400f37f8.roa (hash: GNwosv0qwIhLCyQ1JOz+oh7zUCukEM7+ww7fK68KypQ=)
                          6: a88fcb86-473d-4a31-8a0d-95a046cda9a9.crl (hash: WIK7vCsqlgOZ+BohcAVaUBQquhA1gV772nUHYPKPjwo=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:58:42:ad:05:99:b3:40:bf:5e:4a:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a88fcb86-473d-4a31-8a0d-95a046cda9a9
        Validity
            Not Before: Dec 29 06:00:03 2025 GMT
            Not After : Jan  1 06:00:00 2026 GMT
        Subject: CN=23ec80a5-68bd-41c6-bc50-a49ea5b615a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:1d:7b:b2:5d:17:cc:0a:98:20:4c:61:d8:
                    c2:03:36:60:b7:39:29:f9:0e:0c:ba:82:a2:e6:c4:
                    73:ff:7d:54:47:bc:71:af:58:5a:2e:83:f5:3c:d8:
                    81:b3:70:11:b0:ca:98:bb:e2:9f:91:a3:07:e3:f1:
                    79:36:77:96:e0:c9:77:d4:b9:2d:76:e8:4b:5e:a9:
                    fe:80:da:0c:c7:1a:38:21:fe:53:37:82:05:03:17:
                    a0:54:3b:f1:41:3b:96:fe:0f:f7:a1:41:17:b7:02:
                    d6:3a:f3:e3:dd:a0:13:66:b8:f5:51:d9:c3:08:83:
                    77:77:89:5a:dc:36:2c:d8:3b:96:87:86:48:73:15:
                    7e:fe:b5:a9:78:a0:2f:2e:e3:3a:e6:35:15:60:ab:
                    9d:85:86:2a:73:f0:80:47:25:00:cd:9f:61:3a:5b:
                    ba:eb:8c:cd:4c:29:99:49:39:0c:ed:c0:9f:0b:79:
                    58:63:8f:82:73:01:e3:ee:7e:20:80:4f:17:9d:6a:
                    d8:96:d5:cb:e6:21:82:63:1d:37:47:5f:ec:6e:27:
                    53:9e:c6:33:68:29:ec:78:32:10:89:ee:08:47:a8:
                    bf:89:8b:77:89:5d:9b:f4:2d:d7:fd:3f:6a:f0:a6:
                    e6:ae:d4:ca:ef:41:92:20:bd:02:b2:95:7f:72:22:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F4:73:81:8E:A2:80:66:BC:55:7E:18:C8:7F:2F:96:30:25:E1:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9/a88fcb86-473d-4a31-8a0d-95a046cda9a9.crl

            X509v3 Authority Key Identifier:
                keyid:18:A4:B8:64:43:CB:19:79:9D:00:ED:69:10:B2:C3:93:50:C6:26:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a88fcb86-473d-4a31-8a0d-95a046cda9a9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:71:c0:e9:15:8f:87:7a:cb:1c:68:d3:8f:e3:35:50:76:da:
         a2:57:00:47:11:e2:7e:86:5d:43:61:32:fe:ad:fd:63:1a:63:
         84:64:bb:65:05:0e:97:b6:b0:e4:f0:9c:ae:16:35:cb:87:9d:
         6e:5a:16:6b:ae:f4:89:4e:b0:23:8e:c4:42:22:c4:19:f4:25:
         db:b2:19:8e:48:e7:ba:78:f0:85:5c:a2:fd:91:a1:e1:43:b3:
         3b:42:72:d6:6e:40:2d:b9:0a:63:73:68:5d:02:e9:03:eb:94:
         23:7b:88:b4:1b:63:86:c6:32:f1:2d:c9:42:6a:49:ff:43:50:
         fe:de:b0:d7:b3:9a:cf:6b:de:3b:a5:eb:a4:e4:ff:c1:53:e3:
         84:ad:6e:f4:c2:cb:96:58:34:cd:a0:81:f3:2b:1c:33:5e:06:
         9b:06:9b:ec:c0:25:61:49:ac:a8:91:f8:4d:87:ee:5c:a7:58:
         11:1b:1b:75:a8:7d:fd:57:f9:b8:80:cc:3b:dd:92:e8:e8:fa:
         23:65:9a:eb:1a:d3:3c:4d:73:2d:10:fa:64:be:d5:0f:65:b4:
         01:f0:9f:54:63:f3:f8:f0:c1:4f:a4:74:d0:66:3b:da:9f:93:
         0e:2b:4e:c2:35:d6:09:91:7c:14:50:31:5c:ab:54:4d:ab:0e:
         0a:bd:2d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 01:32:07 2025 by rpki-client