This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft
File:                     33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft (raw, json)
Hash identifier:          oqH26Xlk5ycFcxKuh7CRtQ04qxndXFri0vF9jGnLOzE=
Subject key identifier:   DA:C1:2A:D6:38:62:4B:87:FD:E4:F1:75:97:CD:CA:0E:CB:93:D6:70
Authority key identifier: 2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2
Certificate issuer:       /CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a
Certificate serial:       010D0C9F4328584BF75D404F820E1B5341A42700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft
Manifest number:          010D0C9F432858499C71461369702FC777490E5D
Signing time:             Mon 24 Nov 2025 13:00:09 +0000
Manifest this update:     Mon 24 Nov 2025 13:00:09 +0000
Manifest next update:     Thu 27 Nov 2025 13:00:00 +0000
Files and hashes:         1: 33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl (hash: mH/rfcoFuodqzZ93OOpz48tJuaTD3qceII04RpUmQHM=)
                          2: e5509d98-c8ea-38e0-88a8-99be28cd2866.roa (hash: TWK/I0B4FDzAzIni43q8yR1SBanzUokDEQ8nfo9oV0A=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f7:5d:40:4f:82:0e:1b:53:41:a4:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d1a6b4-9003-4c1d-9a48-0270be4af50a
        Validity
            Not Before: Nov 24 13:00:09 2025 GMT
            Not After : Nov 27 13:00:00 2025 GMT
        Subject: CN=ba3437a6-aff4-41f2-94b2-dc27b54cfd2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:11:c2:4a:7b:ca:77:49:70:e7:98:d9:e6:
                    ef:e4:02:bb:81:92:54:5c:0d:15:bd:9c:15:57:e5:
                    9c:f0:17:51:02:a2:b6:48:d6:0b:ae:99:5b:84:9f:
                    40:71:88:c0:5b:75:52:a3:11:c8:1a:fb:31:9e:be:
                    b3:f1:d8:3a:98:3d:6a:78:d2:98:44:ff:a7:36:d4:
                    8a:e4:8f:ae:ec:ea:70:60:80:16:80:95:eb:76:65:
                    1f:cf:88:07:80:62:3a:3d:af:f1:8c:35:f1:ab:be:
                    df:b0:b1:ec:76:dd:26:d1:df:7f:d5:e9:6a:06:fc:
                    27:34:2a:93:62:4b:61:b7:7c:bd:9a:99:7e:f1:87:
                    63:d5:6b:c3:f8:1d:d4:c7:fd:cb:12:4d:73:05:f9:
                    d7:99:54:70:fd:2a:57:83:90:69:64:eb:ea:f4:73:
                    c6:81:a0:2d:d7:1e:40:fb:39:af:e1:3a:e9:29:8f:
                    bc:da:44:78:14:49:6e:73:03:52:2a:07:44:df:f2:
                    2e:a2:49:48:7b:a3:d6:e1:5d:1f:ac:22:1a:93:bd:
                    06:bb:65:14:7b:f6:73:e1:6e:28:af:54:3e:10:4e:
                    ad:1c:12:3a:80:71:22:fb:b3:5f:30:c2:5a:c2:ee:
                    c2:f5:04:78:11:74:77:a9:a0:3f:c0:4d:a0:1f:05:
                    be:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C1:2A:D6:38:62:4B:87:FD:E4:F1:75:97:CD:CA:0E:CB:93:D6:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a/33d1a6b4-9003-4c1d-9a48-0270be4af50a.crl

            X509v3 Authority Key Identifier:
                keyid:2D:C3:B9:F7:14:B8:6D:B2:A5:60:A6:D9:47:0E:A0:83:36:05:45:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d1a6b4-9003-4c1d-9a48-0270be4af50a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:cf:0c:ae:0a:33:17:8c:b6:6f:d4:d1:b4:5c:8c:74:94:bc:
         9b:74:b8:02:a9:7a:da:3c:eb:17:3c:ff:40:ba:fe:e7:8d:83:
         bf:55:65:a6:e4:73:80:73:af:3b:86:18:9b:4b:d6:42:49:de:
         bd:f1:78:b8:b8:7b:b9:c7:2f:ea:bd:6f:6d:c9:4e:70:03:23:
         5d:dc:79:db:fe:75:7d:64:36:45:3a:d6:40:79:15:6d:36:e3:
         0c:ca:df:8a:12:3d:c4:e2:09:08:9b:a9:b4:f3:71:89:b5:37:
         3f:99:9c:9e:14:0f:cc:3e:ce:9b:3b:7f:65:f8:21:06:d8:eb:
         4b:f4:7a:b8:6b:ab:56:e1:aa:93:54:12:a6:bc:a5:ab:26:69:
         2e:d7:27:76:28:4e:19:f1:a6:5f:d3:6e:5d:7f:d9:c4:7a:08:
         41:47:09:e5:13:54:4b:79:85:68:1b:22:83:50:ba:18:14:18:
         04:f8:00:e6:85:d4:7b:5f:ce:3d:97:99:d3:35:56:75:4a:4a:
         f5:cf:63:3f:0c:35:46:42:c5:16:5c:bc:c4:ee:73:95:51:ab:
         b9:b8:29:8f:f6:3c:a2:fa:5c:8f:93:b6:b7:77:bf:ca:96:e9:
         70:98:91:b3:09:92:c8:14:fb:6e:6d:ab:14:fe:74:1a:c4:d2:
         a6:61:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----