This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft
File:                     b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft (raw, json)
Hash identifier:          Fau29hj2Z5qcF5TE4fCFpm3VYE9X2Bn9jrMUukxtcMc=
Subject key identifier:   16:D5:78:6D:C4:F9:1C:97:C4:B8:E7:B5:E2:96:82:58:96:6A:72:A8
Authority key identifier: 99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B
Certificate issuer:       /CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d
Certificate serial:       010D0C9F4328584C587E3B4368334F4882B8C6E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft
Manifest number:          010D0C9F43285849454543919A61720C4440F823
Signing time:             Mon 29 Dec 2025 08:00:03 +0000
Manifest this update:     Mon 29 Dec 2025 08:00:03 +0000
Manifest next update:     Thu 01 Jan 2026 08:00:00 +0000
Files and hashes:         1: 0a8b671e-a1c5-34fc-989f-ddcd5503d85e.roa (hash: /cEo9KKw7peSDisFbfOYAtfZumbcKvbw/Wef06hqPno=)
                          2: 4965ad2d-fd25-3b71-9c94-b4653ef1c5e1.roa (hash: RQhI7RoE1YLMC/6MtGcPFy507S6H5W9aA1KAKWS9G6o=)
                          3: b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl (hash: fsrXZo6fxh+5JD6fZCulgzDh2wRxnxqmjsx0Ul7Nmec=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:58:7e:3b:43:68:33:4f:48:82:b8:c6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f3a854-344b-48e8-a9ff-7e128dbd261d
        Validity
            Not Before: Dec 29 08:00:03 2025 GMT
            Not After : Jan  1 08:00:00 2026 GMT
        Subject: CN=b4d948b6-aa24-4055-94c3-711d3d05419b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:08:8f:c8:3d:d3:3c:04:31:96:6a:0a:3d:1e:
                    47:24:22:91:5b:75:36:ed:bc:83:c6:76:82:bd:6f:
                    0f:d2:a2:6f:04:24:0f:76:95:0b:da:c0:92:9c:57:
                    36:97:ad:c1:60:5a:f0:03:40:20:d6:5a:84:b4:fd:
                    c6:34:c8:2a:79:1e:42:53:8b:7a:e3:fa:53:e6:bd:
                    47:0a:b8:09:40:05:3f:4c:88:85:a6:03:1f:24:95:
                    59:1e:a7:4e:3a:5f:91:73:a9:c5:a3:d2:23:1a:8b:
                    9a:8d:f3:13:2a:3a:7e:44:69:43:8f:a0:56:70:7a:
                    4f:90:83:fd:46:af:5f:d9:c1:0d:32:07:dd:2b:08:
                    57:d2:d9:95:b1:32:67:fb:4f:10:06:4c:b2:3d:77:
                    38:51:d7:1a:20:a1:7f:34:3b:63:ea:d7:83:1d:fe:
                    e3:87:7b:d6:4a:73:bb:51:07:b1:58:55:d3:50:22:
                    95:b7:cc:13:1c:78:bf:a7:b5:3e:50:ad:f3:ea:62:
                    3a:82:31:c3:51:d2:a2:f9:15:d8:0a:67:fb:ec:78:
                    48:3b:d3:85:95:66:4d:b8:d9:ac:a0:39:ff:8b:62:
                    86:cb:d2:17:bc:48:0a:03:59:ae:59:70:91:ab:12:
                    34:66:b5:8b:ea:56:53:71:ad:4e:96:64:3e:b0:60:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D5:78:6D:C4:F9:1C:97:C4:B8:E7:B5:E2:96:82:58:96:6A:72:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d/b2f3a854-344b-48e8-a9ff-7e128dbd261d.crl

            X509v3 Authority Key Identifier:
                keyid:99:19:2E:F1:DE:93:EA:99:7F:EC:6C:13:BA:4E:CF:6F:05:D5:C9:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b2f3a854-344b-48e8-a9ff-7e128dbd261d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:2d:ad:43:57:e6:10:9c:f1:ad:81:17:0c:df:db:ae:7c:47:
         71:1b:0c:7f:b1:19:3a:b6:3e:9d:4e:af:b4:4c:58:6e:34:da:
         e5:f0:65:36:c2:18:89:93:ea:90:c1:ed:5f:ba:90:da:b5:01:
         31:1f:e4:9d:a3:fc:c3:f9:0c:2e:dd:f4:8e:32:57:8e:51:24:
         f9:20:59:19:99:3b:e2:96:44:1f:2c:a6:07:c0:d3:20:92:5d:
         8e:d7:be:7e:95:2e:9d:a7:37:a8:2c:76:f2:af:91:b5:88:5b:
         ac:ba:ff:63:80:f5:9c:ec:9e:a5:4f:08:18:c6:55:c0:5b:fd:
         54:26:3c:bc:db:10:a8:04:26:f6:0f:96:e8:b5:ad:c2:3a:88:
         2e:f6:ac:e4:8e:77:ff:41:c5:fe:cb:00:b1:04:9c:d5:0b:20:
         98:ea:80:d0:1c:17:fe:eb:3c:82:56:e2:54:6e:71:3d:06:0d:
         1a:da:48:0a:dd:6d:4e:1b:cb:db:8a:11:50:d2:f1:48:be:f2:
         66:82:57:4a:cd:35:ce:f7:0e:77:6f:06:8f:f0:5e:14:d1:9d:
         ed:cc:29:a3:90:f7:4d:b7:83:20:d9:d7:e2:02:88:fb:b3:48:
         3c:02:32:e0:04:bc:09:8a:70:a4:5d:e2:78:97:45:ec:65:19:
         3a:d0:31:e3
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExYfjtDaDNPSIK4xuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmM2E4NTQtMzQ0Yi00OGU4LWE5ZmYtN2UxMjhkYmQy
NjFkMB4XDTI1MTIyOTA4MDAwM1oXDTI2MDEwMTA4MDAwMFowLzEtMCsGA1UEAxMk
YjRkOTQ4YjYtYWEyNC00MDU1LTk0YzMtNzExZDNkMDU0MTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwiPyD3TPAQxlmoKPR5HJCKRW3U27byDxnaC
vW8P0qJvBCQPdpUL2sCSnFc2l63BYFrwA0Ag1lqEtP3GNMgqeR5CU4t64/pT5r1H
CrgJQAU/TIiFpgMfJJVZHqdOOl+Rc6nFo9IjGouajfMTKjp+RGlDj6BWcHpPkIP9
Rq9f2cENMgfdKwhX0tmVsTJn+08QBkyyPXc4UdcaIKF/NDtj6teDHf7jh3vWSnO7
UQexWFXTUCKVt8wTHHi/p7U+UK3z6mI6gjHDUdKi+RXYCmf77HhIO9OFlWZNuNms
oDn/i2KGy9IXvEgKA1muWXCRqxI0ZrWL6lZTca1OlmQ+sGD1IwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFBbVeG3E+RyXxLjnteKWgliWanKoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMmYz
YTg1NC0zNDRiLTQ4ZTgtYTlmZi03ZTEyOGRiZDI2MWQvYjJmM2E4NTQtMzQ0Yi00
OGU4LWE5ZmYtN2UxMjhkYmQyNjFkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjJmM2E4NTQtMzQ0Yi00OGU4LWE5
ZmYtN2UxMjhkYmQyNjFkL2IyZjNhODU0LTM0NGItNDhlOC1hOWZmLTdlMTI4ZGJk
MjYxZC5jcmwwHwYDVR0jBBgwFoAUmRku8d6T6pl/7GwTuk7PbwXVyXswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMmYzYTg1NC0zNDRiLTQ4ZTgtYTlmZi03ZTEy
OGRiZDI2MWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWLa1DV+YQnPGtgRcM39uu
fEdxGwx/sRk6tj6dTq+0TFhuNNrl8GU2whiJk+qQwe1fupDatQExH+Sdo/zD+Qwu
3fSOMleOUST5IFkZmTvilkQfLKYHwNMgkl2O175+lS6dpzeoLHbyr5G1iFusuv9j
gPWc7J6lTwgYxlXAW/1UJjy82xCoBCb2D5bota3COogu9qzkjnf/QcX+ywCxBJzV
CyCY6oDQHBf+6zyCVuJUbnE9Bg0a2kgK3W1OG8vbihFQ0vFIvvJmgldKzTXO9w53
bwaP8F4U0Z3tzCmjkPdNt4Mg2dfiAoj7s0g8AjLgBLwJinCkXeJ4l0XsZRk60DHj
-----END CERTIFICATE-----
Generated at Mon Dec 29 23:44:42 2025 by rpki-client