This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.mft
File:                     b948afbc-0168-43ed-8e4b-a0cc5d0e1504.mft (raw, json)
Hash identifier:          +R152j0aLNg3gcr2F0CXPkNYNfSYI3ag98E4t6yd33w=
Subject key identifier:   77:C5:23:A0:05:5A:39:50:BF:CD:4C:BB:53:E2:65:17:AF:8C:AF:62
Authority key identifier: B3:96:53:40:70:6B:AA:B2:C4:E8:7C:D0:E5:00:AA:B2:ED:79:FE:79
Certificate issuer:       /CN=b948afbc-0168-43ed-8e4b-a0cc5d0e1504
Certificate serial:       010D0C9F4328584C5A015A136C094818F2897AC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.mft
Manifest number:          010D0C9F4328584A2E861EA643B70E8239BC6CCC
Signing time:             Mon 29 Dec 2025 21:00:04 +0000
Manifest this update:     Mon 29 Dec 2025 21:00:04 +0000
Manifest next update:     Wed 31 Dec 2025 21:00:00 +0000
Files and hashes:         1: 547db2f7-b235-3247-a2f5-f5afd418ff69.roa (hash: EiLY3LlbXMOGH6Y3K3eciyCmHoFUYZN7CaQGJ8xoeNY=)
                          2: b948afbc-0168-43ed-8e4b-a0cc5d0e1504.crl (hash: jr7VbxuPpVtAondJw82JmeAiWIr0epcNJJ24sbkw/Cw=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5a:01:5a:13:6c:09:48:18:f2:89:7a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b948afbc-0168-43ed-8e4b-a0cc5d0e1504
        Validity
            Not Before: Dec 29 21:00:04 2025 GMT
            Not After : Dec 31 21:00:00 2025 GMT
        Subject: CN=edd5c7ab-dbe7-4e1b-94a9-2c5fdb660bf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:21:ce:bf:b2:29:78:fb:3e:1b:03:44:4a:34:
                    ff:99:e8:fe:29:0d:08:b9:52:9a:48:bc:49:41:bf:
                    54:ee:f9:70:74:70:c5:39:93:d6:0d:54:e3:24:be:
                    1d:1c:82:7f:61:00:f0:2a:f4:54:a4:40:5d:6e:c6:
                    5d:7a:49:24:c5:0d:61:e5:51:b8:9a:a8:fb:2f:c6:
                    47:9b:97:95:18:23:4f:4a:78:fb:f4:1f:09:af:6d:
                    3b:c3:e7:96:18:d8:fb:ce:58:9c:86:e5:cd:35:99:
                    c0:da:7f:62:54:eb:d2:31:16:7a:bc:a3:50:7f:94:
                    aa:6a:0f:a7:c6:f2:47:3b:be:57:a9:cc:e9:ef:6c:
                    fd:53:7a:dc:14:88:1c:72:56:2e:7c:9b:4a:10:ec:
                    4e:0c:76:e2:eb:e1:b0:cb:33:96:13:19:13:4b:98:
                    15:11:f8:26:37:00:d1:2e:c1:bf:07:a4:d9:eb:78:
                    cf:aa:6b:bb:1f:62:01:5d:31:dc:77:57:c3:54:1a:
                    5c:af:77:23:86:c1:d2:e6:14:79:7e:37:c6:02:90:
                    f7:38:a5:f0:16:fd:c3:78:9f:f9:e6:33:8a:a3:a1:
                    db:6f:d1:c4:8a:fc:ea:05:f6:fe:99:de:38:0f:28:
                    fe:d4:3f:b8:1a:df:f4:81:4f:c1:83:48:02:48:f4:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C5:23:A0:05:5A:39:50:BF:CD:4C:BB:53:E2:65:17:AF:8C:AF:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.crl

            X509v3 Authority Key Identifier:
                keyid:B3:96:53:40:70:6B:AA:B2:C4:E8:7C:D0:E5:00:AA:B2:ED:79:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b948afbc-0168-43ed-8e4b-a0cc5d0e1504.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:be:7e:ac:c4:9e:d3:b0:bf:c2:d7:df:2c:7a:ca:22:9c:5d:
         84:d1:4f:6a:ec:c7:75:2e:c7:0c:fd:1e:6e:65:06:15:c2:43:
         2b:c4:9e:cc:bf:ce:e3:22:50:eb:a2:ff:28:a9:67:32:57:87:
         75:58:05:cd:79:21:9e:ef:98:2d:d5:6e:b9:05:15:96:84:cb:
         42:14:61:99:87:7d:1a:eb:7d:b5:38:d4:78:06:7c:bc:ce:1d:
         e6:42:d9:23:cd:4b:a5:28:19:c1:84:2d:8a:66:d2:05:26:65:
         a0:30:ef:14:80:b1:22:ff:c1:a5:73:15:4d:d6:5b:91:47:16:
         32:59:26:35:88:82:c1:bb:c6:16:9d:cd:dd:33:64:34:7f:e3:
         b5:c5:3f:1a:18:05:61:82:29:ef:74:09:8b:28:9d:05:10:65:
         e7:fe:54:89:b2:17:7d:c9:81:c6:34:f1:c7:71:0d:a2:11:3d:
         62:a9:8a:8c:3e:ec:a4:31:e5:a4:d3:6a:3a:16:27:55:17:ef:
         29:be:dc:01:fd:aa:4b:c5:4a:fa:c4:2b:6e:a1:34:38:de:7a:
         22:8b:66:1d:5b:97:aa:ac:5d:5f:46:cb:28:26:fc:b6:7f:c4:
         36:64:87:2b:06:95:74:eb:62:0e:01:ad:7c:15:ef:5f:36:b2:
         bb:c0:96:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 23:45:51 2025 by rpki-client