This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft
File:                     badf1586-901d-41a7-b0f3-521998d53931.mft (raw, json)
Hash identifier:          bbSmSYlCTaBrq7Hf7sLCG/05RY+L1+U0mSIM9cUvS8E=
Subject key identifier:   20:BE:50:61:F9:4A:F2:AE:7A:55:A0:9D:4B:08:DF:3E:99:E3:F1:B0
Authority key identifier: 17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E
Certificate issuer:       /CN=badf1586-901d-41a7-b0f3-521998d53931
Certificate serial:       010D0C9F4328584C5A3DE670196660DD330AB700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft
Manifest number:          010D0C9F43285849873AAB6DCBFD842767CBBE8F
Signing time:             Mon 29 Dec 2025 23:02:03 +0000
Manifest this update:     Mon 29 Dec 2025 23:02:03 +0000
Manifest next update:     Wed 31 Dec 2025 23:00:00 +0000
Files and hashes:         1: 072f8713-d6b1-3633-b393-407d3f1fb9e4.roa (hash: IXM1cuIWQ/WbrQ+ykK5qv4HDTGxUR+8BYPwt68fcMlQ=)
                          2: 0b2f707f-9939-3241-b3bb-e7142b139a1d.roa (hash: i3M3w+stZXfhxJh/NKu79PDDXE7+LNwwxvVj6D+l3RA=)
                          3: badf1586-901d-41a7-b0f3-521998d53931.crl (hash: SfHx9nXQhajg7DguDtcoZ52CenYYgCf5ezmUOPOaMAY=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:5a:3d:e6:70:19:66:60:dd:33:0a:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=badf1586-901d-41a7-b0f3-521998d53931
        Validity
            Not Before: Dec 29 23:02:03 2025 GMT
            Not After : Dec 31 23:00:00 2025 GMT
        Subject: CN=37508a21-0054-4611-8064-8125444b0c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:09:35:3b:10:8c:5f:8a:c3:56:e4:cc:ca:
                    40:ce:e5:ba:5f:b6:5e:24:48:e5:45:ef:e7:34:40:
                    58:29:3a:dd:f2:16:13:b4:8e:ab:b3:ca:29:5f:67:
                    93:45:fa:e5:1a:75:6a:22:c2:b7:50:db:71:98:57:
                    90:1a:1a:89:90:4e:43:23:09:8b:17:19:42:b0:d2:
                    0d:0a:93:f7:c0:a6:7a:07:5b:37:39:5d:3a:e2:48:
                    ea:18:ce:72:50:ef:e0:15:89:78:10:8f:c4:6d:62:
                    52:78:eb:a8:59:af:c2:ce:74:bd:88:2a:4f:ee:24:
                    b6:f8:92:b3:c4:c0:c6:73:ab:8a:12:1b:6c:bd:2b:
                    1d:11:4b:d5:b4:29:88:a7:ef:52:fc:78:4c:50:84:
                    a0:0e:b3:08:54:d4:08:27:af:e8:3c:13:16:76:52:
                    7e:06:e7:0a:be:9e:bb:78:09:a3:e7:19:4f:3e:aa:
                    e5:32:e6:84:51:d9:83:6a:95:ce:dd:a6:01:91:93:
                    86:92:e6:bf:36:cb:a6:66:db:0c:9f:e2:b8:87:39:
                    4f:83:77:c4:22:82:42:91:37:dd:f9:f6:b7:60:24:
                    0d:da:7b:b8:76:c4:9b:4b:0e:e0:91:24:da:37:bd:
                    d1:6e:eb:6c:9f:10:35:1f:51:1d:79:1d:5d:30:90:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:50:61:F9:4A:F2:AE:7A:55:A0:9D:4B:08:DF:3E:99:E3:F1:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931/badf1586-901d-41a7-b0f3-521998d53931.crl

            X509v3 Authority Key Identifier:
                keyid:17:DD:BE:D5:1B:27:91:56:B0:48:C7:7E:3D:0E:D9:4F:FA:37:AB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/badf1586-901d-41a7-b0f3-521998d53931.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:66:fa:c7:8b:aa:71:3c:03:07:99:32:0d:2b:fb:67:c7:a6:
         ec:e5:f9:a2:85:75:da:01:ed:e5:77:85:20:6b:65:f0:e6:26:
         1c:53:40:e2:70:59:10:08:f9:3b:5f:2a:0d:16:53:b1:46:32:
         db:39:ee:43:84:4a:ed:46:3c:25:ab:de:d1:27:d9:43:8e:5f:
         11:a0:85:fa:14:d5:d9:d9:37:a9:91:3d:87:62:2a:a6:cd:01:
         29:8b:06:07:2c:67:de:e6:ec:c2:c1:5a:b0:95:d0:1f:b2:c3:
         27:62:8d:51:14:25:1d:37:a6:3a:97:b4:07:39:b7:7e:e2:5b:
         d1:c3:35:82:64:85:1f:1e:06:ac:18:33:01:33:4c:84:a0:20:
         70:ae:35:a5:fc:71:a9:35:62:2a:7c:47:a3:00:35:4f:fb:de:
         da:49:50:b2:2c:e0:8b:4b:ec:02:68:00:56:b8:84:23:9d:7c:
         c8:8c:6c:49:04:8d:fc:bc:dd:06:e1:f7:37:20:ab:c3:64:e4:
         5d:32:9a:54:17:d9:ff:d6:9d:05:d2:b3:9c:11:89:33:40:0b:
         e9:45:a9:ae:a5:1c:6c:a2:e3:b8:ae:d8:87:7f:b6:c1:52:91:
         5f:a6:3c:fb:62:1f:e5:ed:06:13:b7:8d:ae:ca:c0:42:cb:24:
         c8:7d:6b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 01:36:49 2025 by rpki-client