This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft
File:                     42eee53c-f373-4efe-aed3-4c501c9dde78.mft (raw, json)
Hash identifier:          bKzW8yI/1vqOXDhs5XwAvm2gQkBCprmSW7DNkiPoYIQ=
Subject key identifier:   01:70:69:3B:5E:A9:74:D3:42:BF:36:AE:B5:4B:90:D2:26:C0:FE:63
Authority key identifier: A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7
Certificate issuer:       /CN=42eee53c-f373-4efe-aed3-4c501c9dde78
Certificate serial:       010D0C9F4328584BF798C9E2904DAD7F0531AF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft
Manifest number:          010D0C9F4328584815D60D31A5FF2574BB17B86D
Signing time:             Mon 24 Nov 2025 15:00:09 +0000
Manifest this update:     Mon 24 Nov 2025 15:00:09 +0000
Manifest next update:     Thu 27 Nov 2025 15:00:00 +0000
Files and hashes:         1: 2bc1d232-678d-3ea3-a298-e5c3ade73a2d.roa (hash: rGREIRszTwE4hcGaTlHXf2SmCsQHCXjk6n93n0C0sRo=)
                          2: 42eee53c-f373-4efe-aed3-4c501c9dde78.crl (hash: EcsC7Yy4ZToPw1cxBEcB9RC0WAHtC7TIJ2Rx37Gjo2s=)
                          3: f2b2ef5e-e197-3273-9721-b9a575e1ad08.roa (hash: jhULa1IceYNjsnoaVmXxA93Ng4ecD4CGP+yt03IdCE8=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f7:98:c9:e2:90:4d:ad:7f:05:31:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42eee53c-f373-4efe-aed3-4c501c9dde78
        Validity
            Not Before: Nov 24 15:00:09 2025 GMT
            Not After : Nov 27 15:00:00 2025 GMT
        Subject: CN=a2b152d8-21ee-4fbb-849d-dc6d92d63f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:4e:77:57:cd:c3:87:9b:f1:42:98:d3:3b:
                    af:9f:d0:20:33:08:48:0f:de:b5:8b:08:7f:10:25:
                    dd:a9:77:10:60:dc:66:ad:a8:f7:1d:df:ba:60:84:
                    32:43:5f:48:8c:22:14:91:87:c6:8a:56:9f:e5:3b:
                    b6:6f:c7:59:3d:5c:10:ed:1e:ef:28:cc:86:13:f3:
                    c8:a1:e2:36:b1:9e:c7:d4:1a:db:d2:ff:e7:4e:0d:
                    5b:70:28:53:23:4e:51:13:19:36:3d:a1:83:73:59:
                    f7:89:1d:47:a3:86:3a:88:02:e9:c4:09:2b:99:3a:
                    83:79:52:dc:ce:9e:02:0b:95:b4:59:72:b3:fb:78:
                    ac:3d:a1:d5:50:cb:15:24:cb:40:97:4a:86:8f:3e:
                    59:8b:87:74:38:41:1f:cf:9e:d8:ce:f8:31:1a:c8:
                    54:b0:5d:e5:37:68:95:89:26:77:02:31:c8:5e:34:
                    6b:fc:05:d1:ad:0e:98:dd:83:06:15:30:1d:b8:2b:
                    cb:d1:dd:f1:c8:26:47:61:ae:35:a7:19:3b:49:44:
                    0b:0f:36:50:ee:17:67:e9:72:b2:83:ed:ff:dd:ba:
                    18:6f:31:25:86:55:ad:ae:ec:cd:34:38:7d:38:55:
                    26:d2:ee:05:0e:ed:39:38:15:de:9d:35:f4:ad:71:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:70:69:3B:5E:A9:74:D3:42:BF:36:AE:B5:4B:90:D2:26:C0:FE:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78/42eee53c-f373-4efe-aed3-4c501c9dde78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:35:2C:B8:0B:B4:72:AB:EE:B9:9C:1B:4A:68:ED:08:B8:A1:FD:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42eee53c-f373-4efe-aed3-4c501c9dde78.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:91:ae:0b:ab:96:f0:0a:af:80:3b:00:b8:ce:bc:75:e5:29:
         8a:46:58:cb:f9:dc:39:42:4a:a9:c0:61:34:d6:de:0a:cd:ad:
         ec:1a:63:b9:0b:21:bb:ec:01:0e:c9:50:5a:3e:98:0e:3a:79:
         31:3c:1b:1e:62:94:be:88:f1:95:22:35:6e:48:66:24:2e:e5:
         ab:4b:2c:bb:5f:57:c0:e4:fc:1f:6a:27:c7:24:5b:02:c2:40:
         4f:74:b5:59:fe:93:86:06:00:44:93:05:c5:e1:cf:0f:32:09:
         eb:fe:ed:e7:37:e9:af:b8:75:d0:94:db:7c:73:96:ee:40:22:
         0b:c3:8e:19:ca:dd:6a:3b:3c:3e:c5:2f:c1:95:af:0d:69:4f:
         f6:31:f4:54:c8:08:c3:76:0f:1d:4d:e2:0c:fa:53:c9:f6:8a:
         28:03:89:99:29:d3:22:24:2c:f1:90:e8:d3:e7:af:99:8b:15:
         df:7e:1c:e6:6a:e4:e5:dc:36:ad:ea:17:d0:46:64:6f:a1:58:
         5a:a5:ce:94:34:58:ce:c5:e4:bc:6e:3a:28:fb:72:63:12:0c:
         8e:1f:1f:ba:48:1f:5e:c7:80:37:9e:cc:d7:06:65:fa:7b:b4:
         90:b6:03:96:59:8b:2f:aa:2c:37:56:c1:db:27:50:92:e5:98:
         55:7d:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 09:50:29 2025 by rpki-client