This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
File:                     aa34647f-3229-480c-9b05-3cf0b00fa173.mft (raw, json)
Hash identifier:          ZaIFKkg8mbTZJGrjVDkTz1vnEEFzaiw9o3v7u49H+cg=
Subject key identifier:   C3:F9:F9:01:9E:EF:DC:B4:A5:FF:0F:82:51:DB:A0:07:A8:80:8F:4D
Authority key identifier: F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6
Certificate issuer:       /CN=aa34647f-3229-480c-9b05-3cf0b00fa173
Certificate serial:       010D0C9F4328584C42BDB3244D06B7F2AE0BAE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
Manifest number:          010D0C9F43285849B8591A0A2626962C4503E974
Signing time:             Sun 21 Dec 2025 13:00:09 +0000
Manifest this update:     Sun 21 Dec 2025 13:00:09 +0000
Manifest next update:     Tue 23 Dec 2025 13:00:00 +0000
Files and hashes:         1: 4fe2d74c-64d7-395a-abab-0763e4a39a98.roa (hash: hJlHuhzXaNdaPh4DpUs2jyldh59brT3kYX8G/ChyKmc=)
                          2: 6bef6a91-06e6-310f-bedc-e4ed84f07de3.roa (hash: 7G/ORjjDfCPpTa0KCW498dnFjepc2/2EszlT9ItN5yg=)
                          3: aa34647f-3229-480c-9b05-3cf0b00fa173.crl (hash: 99bgyM5KZ4BokgAodwNE0hsXh9RhL3ae1Rj/DQFuKwg=)
                          4: c6ed17f1-34cb-3ce9-8d06-e0a16d240510.roa (hash: +7yij2cQXB2DUwe4S2A1j3ySHkFrWTCv6xShWJJysqY=)
                          5: eba3c881-4793-3d27-b8a0-c5d10a55657a.roa (hash: qNcEBKfj15mncSGtvWyAHfTezgrG2+3nLDePwwA6+5k=)
                          6: fd883ffd-d0d1-3bb0-a0a4-6a08bc30817a.roa (hash: g9HNrHm/7uyyMQWhJUSLd09BGNxqvjrtbWNHutWs+7s=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 23 Dec 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:42:bd:b3:24:4d:06:b7:f2:ae:0b:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa34647f-3229-480c-9b05-3cf0b00fa173
        Validity
            Not Before: Dec 21 13:00:09 2025 GMT
            Not After : Dec 23 13:00:00 2025 GMT
        Subject: CN=b4b5916f-a937-4927-ac71-e2fdbab1134a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5c:57:0c:9d:d9:cd:6e:b7:85:f9:c1:29:82:
                    03:82:3c:58:e2:3d:9f:a0:8d:11:45:1c:16:ed:1a:
                    b9:b9:04:7a:e2:3d:1d:b8:2a:78:e5:5d:11:fb:8c:
                    bb:54:3d:72:21:ce:32:b3:73:9b:a7:22:c3:4d:14:
                    d9:c6:e2:10:b8:c9:46:14:a9:49:9a:c1:0e:d7:60:
                    3e:5c:00:1e:4b:09:17:67:14:d6:3b:6c:70:0d:68:
                    aa:63:d9:92:8b:75:c8:1b:e2:b2:b5:06:12:d1:0d:
                    de:1c:6a:d3:1e:5a:fb:48:44:87:7c:39:3e:48:de:
                    d5:fa:e6:c6:2a:08:34:82:e5:96:34:96:ca:52:1b:
                    bc:b9:c7:49:39:80:d7:33:38:bf:00:8f:e8:46:b2:
                    96:08:00:1d:da:8a:aa:4a:6b:87:ef:99:e8:c2:2d:
                    d9:88:c0:e6:ca:7a:5a:90:d1:d7:e4:3b:49:66:7a:
                    32:8a:e8:f7:d7:fd:09:41:96:03:95:46:fb:47:9f:
                    be:5e:55:25:6f:7b:68:94:cb:79:e3:27:31:51:ab:
                    ec:c7:d0:a7:88:60:35:38:16:7e:a1:b6:ca:10:cc:
                    df:a9:41:33:1e:ff:14:83:34:b6:dd:48:85:67:06:
                    df:cc:43:12:e4:81:31:02:e4:a0:ca:07:1c:fe:cb:
                    da:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F9:F9:01:9E:EF:DC:B4:A5:FF:0F:82:51:DB:A0:07:A8:80:8F:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173/aa34647f-3229-480c-9b05-3cf0b00fa173.crl

            X509v3 Authority Key Identifier:
                keyid:F6:64:CD:56:E5:2F:5C:B7:81:9C:2B:48:FB:1B:CD:5B:9C:C7:FA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/aa34647f-3229-480c-9b05-3cf0b00fa173.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:bf:96:f2:c9:12:54:4f:64:42:2a:87:e7:04:f8:ce:b0:07:
         eb:fc:4d:d1:70:06:bd:c6:39:13:59:57:73:67:4f:1f:23:52:
         96:9b:c6:5b:6c:85:d7:e7:a9:24:73:97:f1:3e:c6:be:14:f7:
         16:88:d3:4b:04:b7:e4:d0:c8:6a:fd:5a:1f:be:13:a8:84:3d:
         35:71:8f:fd:b0:36:a0:be:f5:ab:5c:03:44:ec:8e:32:41:b2:
         ba:de:d7:cf:b7:e3:0d:49:9e:d8:ca:ac:63:bc:56:02:c1:f0:
         85:a4:e5:75:c2:50:a6:fd:85:36:b7:c7:05:15:fa:f2:9a:80:
         41:c3:3d:bb:62:15:03:7b:59:fd:76:64:52:25:5c:66:36:0a:
         cf:95:16:b5:f0:d5:c9:1b:ea:81:15:3b:a3:f3:e1:0e:1b:97:
         b3:39:74:3c:88:c4:63:c9:bb:62:80:4e:f2:93:9d:b6:8f:90:
         b9:52:5b:c7:3a:b8:c7:3f:c3:f6:2f:0f:a3:51:4d:9f:f9:56:
         c4:eb:09:14:2d:db:70:c1:53:56:35:bf:20:1f:b3:39:a8:3a:
         0b:4d:e4:ab:af:04:53:ec:8c:28:48:cd:9d:76:d9:30:b5:b0:
         56:52:8a:8f:61:a7:b7:03:bf:3d:a5:1d:e8:d6:ca:23:58:c7:
         3e:d8:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 02:17:07 2025 by rpki-client