This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.mft
File:                     7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.mft (raw, json)
Hash identifier:          q3DvbIF0K6DPymqM8vE+Xrg5+OU7USkkMaQ3Baa7jDY=
Subject key identifier:   C2:FA:B3:7E:D3:79:4A:BD:F9:47:D6:EE:2F:58:90:88:ED:F7:AC:1A
Authority key identifier: 42:3A:B5:4A:C8:C1:10:E5:4F:0C:54:B8:AC:07:47:2E:55:97:6A:A1
Certificate issuer:       /CN=7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770
Certificate serial:       010D0C9F4328584C79FE7AD4D69454F8C75D9C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.mft
Manifest number:          010D0C9F432858480F713ADAC39F43FF1FE3D96B
Signing time:             Sat 10 Jan 2026 08:00:09 +0000
Manifest this update:     Sat 10 Jan 2026 08:00:09 +0000
Manifest next update:     Mon 12 Jan 2026 08:00:00 +0000
Files and hashes:         1: 0af5f989-aa8c-36d8-9466-953b7bfe27ab.roa (hash: WkNJYxm0/TSGmWNvrcNXvy7QDvRk3cBQKKmaR6LFTro=)
                          2: 697051ee-d03e-3ba9-936f-b028b5af5118.roa (hash: 30D3uiTUkKI2Fz12P9RDeyRgxi2K6dyqI6wiKvnCqaI=)
                          3: 7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.crl (hash: IDfqYhlfpKvWtgDLEg3qF8QAEsRrKFRZ5QN7y5y4l+c=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Jan 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:fe:7a:d4:d6:94:54:f8:c7:5d:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770
        Validity
            Not Before: Jan 10 08:00:09 2026 GMT
            Not After : Jan 12 08:00:00 2026 GMT
        Subject: CN=21b3648a-f3f0-441d-b1b0-d39991fcf547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d2:f3:e3:67:c1:56:cf:f6:43:38:40:22:9b:
                    30:83:5a:86:4a:7e:2b:6b:e9:26:3c:d5:e4:04:dd:
                    dc:2c:1c:70:a2:c9:de:17:90:d3:32:6b:8e:5e:70:
                    fc:74:02:44:a3:24:60:2c:74:c2:a0:9e:3d:21:66:
                    e9:00:02:8f:b0:37:fa:8d:73:77:47:9e:1e:4c:c0:
                    ff:2e:ae:c6:e5:b9:cd:1b:1c:b4:70:9a:ff:16:e8:
                    83:e8:b9:70:5f:68:f0:ae:d0:3e:cb:e5:35:67:60:
                    7e:94:66:97:0c:47:39:6b:1d:af:ff:01:c5:71:b0:
                    58:a1:d7:ec:73:28:0c:c6:5e:a8:77:9c:f4:20:fc:
                    0d:2a:90:93:be:62:6d:64:de:c4:42:2e:de:bf:cd:
                    1f:71:46:11:8e:25:8a:c8:ba:57:2f:10:28:2d:36:
                    9b:03:fe:c8:ed:2c:f8:88:9b:a2:d5:e8:06:08:94:
                    b7:4f:46:3e:d5:84:03:b9:06:35:e3:9a:5d:7f:fe:
                    b4:9c:34:a8:86:27:dd:65:d3:45:32:15:58:02:e9:
                    85:29:f0:05:90:5f:73:57:34:96:a2:3f:b3:d9:bf:
                    89:dd:02:86:ce:b2:9c:70:4b:ff:06:24:a2:7e:a0:
                    01:de:7e:aa:6f:b5:b0:03:0d:13:75:34:6b:be:8d:
                    62:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:B3:7E:D3:79:4A:BD:F9:47:D6:EE:2F:58:90:88:ED:F7:AC:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.crl

            X509v3 Authority Key Identifier:
                keyid:42:3A:B5:4A:C8:C1:10:E5:4F:0C:54:B8:AC:07:47:2E:55:97:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ea:9e:e2:ef:0d:19:d5:3c:c1:59:19:95:05:f5:f8:f6:0c:
         60:26:6a:51:b7:a7:74:72:a2:83:dd:8c:01:73:43:fc:84:d7:
         b9:02:e9:8a:7f:c8:1f:05:57:4d:42:3b:c9:0e:c3:f0:d9:bf:
         4b:bf:30:01:94:63:3c:92:8c:f8:1f:6f:d9:d1:a9:81:f8:38:
         6d:9d:61:79:f0:42:89:f2:70:e2:49:cd:10:27:2b:1e:da:99:
         51:7b:27:b9:57:7a:cc:a5:90:24:95:65:8d:3c:20:03:1f:f2:
         d5:86:ce:bc:bd:57:59:00:e7:98:8e:16:9c:ba:ca:c8:7e:7e:
         8d:78:ba:82:d4:b8:80:f7:dd:f9:03:45:b0:8c:97:7f:5f:18:
         91:21:b1:60:e6:da:ba:fd:0c:e4:7c:76:36:71:e1:ca:0d:67:
         0e:23:93:e0:40:56:45:a9:05:ef:eb:62:8c:d0:2c:97:42:e4:
         00:31:a3:df:2c:1a:b0:12:2c:6b:77:9a:21:fb:5c:df:8e:61:
         a1:cc:87:b4:3a:f6:c9:cc:8d:4c:b3:29:ef:2f:00:86:56:c5:
         d7:54:44:97:e3:3b:42:ad:d6:34:41:55:1c:6f:bb:88:5b:05:
         b3:c9:f8:22:98:1f:64:dc:a8:79:d8:e6:94:ea:54:b6:e5:f0:
         e8:0d:81:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:17:58 2026 by rpki-client