This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.mft
File:                     c555aac9-439a-4358-a9be-500d9810368f.mft (raw, json)
Hash identifier:          JSOu1KUcPt45P5HKcUjifgS7vsB7PJ3yZX12d+88d2w=
Subject key identifier:   FD:41:29:95:E9:EF:80:4D:D2:5E:84:C4:08:CD:35:23:CE:71:8F:E3
Authority key identifier: 79:01:DF:C8:C2:64:8C:6B:21:E7:9C:25:74:F9:5B:73:A6:34:11:DF
Certificate issuer:       /CN=c555aac9-439a-4358-a9be-500d9810368f
Certificate serial:       010D0C9F4328584C59C5CA8B7A7F7DEB04B3A300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.mft
Manifest number:          010D0C9F4328584A36AD8C5BAB83125620801189
Signing time:             Mon 29 Dec 2025 19:00:03 +0000
Manifest this update:     Mon 29 Dec 2025 19:00:03 +0000
Manifest next update:     Thu 01 Jan 2026 19:00:00 +0000
Files and hashes:         1: 33052445-97be-3c23-8f5a-c93af4994487.roa (hash: 4Dj77BEgm39aZFLm8viXCOvWFM8W5a6L8ySobK9GkvY=)
                          2: c555aac9-439a-4358-a9be-500d9810368f.crl (hash: +NpDiUh7ndUGg/RLnvlk6/U9rN/WRAIiHC9lJSekKO4=)
                          3: fe92713a-e16d-375d-ac58-ffb52f2f876e.roa (hash: 9zrh0IxS7eEqwbingYjcNjMO4qsG8FsDFXouKZHE0l0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 31 Dec 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:59:c5:ca:8b:7a:7f:7d:eb:04:b3:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c555aac9-439a-4358-a9be-500d9810368f
        Validity
            Not Before: Dec 29 19:00:03 2025 GMT
            Not After : Jan  1 19:00:00 2026 GMT
        Subject: CN=5b3e57f8-02fd-408d-8f0a-1fc63ae41218
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:fc:1a:45:96:be:59:0e:d6:9a:eb:5a:c8:c0:
                    aa:60:09:ec:15:bd:1f:3d:6f:b8:b7:00:25:b1:26:
                    03:0f:6f:1e:d1:0c:73:cb:4e:a2:ab:36:de:ed:7f:
                    78:ba:40:ea:f3:85:f2:dd:88:10:57:80:71:fe:7e:
                    3e:0f:c0:cf:77:b2:cc:cd:88:4e:8f:c9:9f:75:09:
                    97:72:10:5f:1f:13:2f:e2:12:70:8e:0c:4d:cd:f0:
                    2c:bd:4c:0a:2c:9a:9f:38:73:bd:3d:2d:59:4c:7e:
                    dd:76:d9:1a:ec:0c:47:3d:ad:08:e0:55:6b:b4:a0:
                    5d:c4:d2:04:ad:ea:8c:d1:06:de:18:44:16:a0:67:
                    44:0c:5b:88:56:49:ca:3d:a4:e3:2a:61:c3:b1:79:
                    d9:75:f6:52:57:aa:64:ce:b5:e5:a2:24:ff:da:b9:
                    15:f7:b3:7b:ea:51:f2:a0:82:58:ac:1c:c2:91:9f:
                    5c:5b:0b:84:16:80:ff:1f:fa:f9:93:4f:bd:37:94:
                    c2:67:e9:9c:7b:42:b2:d8:d4:40:a4:e1:4c:ba:59:
                    9d:47:3c:d3:91:31:3c:aa:3e:fe:fa:82:d2:a8:4b:
                    ac:16:10:41:e8:32:11:22:23:d3:20:df:04:f1:63:
                    bf:7c:b1:eb:ed:de:ad:a5:3b:bd:f8:03:8c:04:36:
                    5c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:41:29:95:E9:EF:80:4D:D2:5E:84:C4:08:CD:35:23:CE:71:8F:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f/c555aac9-439a-4358-a9be-500d9810368f.crl

            X509v3 Authority Key Identifier:
                keyid:79:01:DF:C8:C2:64:8C:6B:21:E7:9C:25:74:F9:5B:73:A6:34:11:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c555aac9-439a-4358-a9be-500d9810368f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:95:c1:04:ad:16:cb:fd:84:87:3d:24:93:19:4d:ea:13:12:
         ec:26:05:bc:68:48:94:5c:42:42:a4:d8:2f:aa:03:8d:f8:37:
         d3:9d:87:28:99:20:59:db:8e:dc:ef:17:ab:01:b5:e9:1c:13:
         bb:51:37:23:9d:2c:e5:1d:f8:bd:6a:57:40:88:c6:8f:1f:bb:
         3d:15:03:1e:f6:29:97:4b:2b:32:8d:1b:98:3b:98:22:90:af:
         1b:9e:98:25:46:87:4a:54:e7:95:17:ba:97:1a:9c:c5:c5:fb:
         39:42:18:8e:f0:3b:a3:cb:f0:8a:7b:79:ba:ec:d7:c0:7a:6e:
         b2:8a:2a:9a:f8:e2:a1:0f:b2:83:f3:3d:88:b5:48:8e:80:c2:
         19:1c:a5:40:20:3d:78:e5:7d:ad:45:75:4b:ce:86:04:28:31:
         9c:0e:b0:aa:9a:18:da:fb:a4:1b:58:6e:38:5c:75:8a:3c:c8:
         be:97:c3:fd:14:da:ae:69:23:f6:41:df:41:cf:93:b9:ff:b7:
         e9:c7:83:80:1b:62:ed:03:5f:ef:b4:00:25:4f:77:5e:d4:a2:
         87:c6:60:a5:fa:41:8f:fc:99:b3:45:6b:e1:bd:63:67:9b:23:
         12:4a:16:05:a5:66:08:8a:7c:68:dc:e2:72:a2:d7:23:3e:65:
         e5:86:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 04:56:34 2025 by rpki-client