This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft
File:                     aa31a4a0-7b77-4f56-8f89-01525b506129.mft (raw, json)
Hash identifier:          9WNd+8XBxYjJAbkejGhgFwh3ADiiQeN0ADF02QV6TTg=
Subject key identifier:   D1:90:8A:4D:5C:CB:AD:AB:00:1D:F0:00:0B:93:6E:73:4C:AE:E2:4B
Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
Certificate issuer:       /CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Certificate serial:       010D0C9F4328584BF7B693D6C99E9546079CF260
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft
Manifest number:          010D0C9F43285848025535B12A6F9EF4C012B5BA
Signing time:             Mon 24 Nov 2025 16:00:08 +0000
Manifest this update:     Mon 24 Nov 2025 16:00:08 +0000
Manifest next update:     Wed 26 Nov 2025 16:00:00 +0000
Files and hashes:         1: 08ad9252-a414-3b87-84d9-259b7e5e27cf.roa (hash: X6yC3JFAqDwl7ZXoE/P1tu95ctj2a4NKJPDkpqemLIE=)
                          2: 2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa (hash: dift3bCya9tS0h/VXBnlTNTzu7QRRcGGnQMK5A81K+U=)
                          3: 3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa (hash: qSc/wiMPPMOC4bh9I0pqIXQzlB1BZbMBBiu+PDvOfDk=)
                          4: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (hash: ufnB4wNVDI3H/r7mgzOEaI9eQrMhuvI27pxN0dyZmKM=)
                          5: 5c4f117d-45b9-3f38-be81-53b231ffe933.roa (hash: YyZuos4Qflttx6phU02lCHxcvgoLGnPUwj3mPcS8s/E=)
                          6: 918523ba-c151-3f99-b377-2e0bfbd7897c.roa (hash: HzGZk5wCaprO2/SIeztSz4b72hQVQ5QIO9LgEDhqq0w=)
                          7: a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa (hash: R6k/sRP8LvL9HNtUDw5y+RcUptyqUlKWTaNxpLGX2bE=)
                          8: aa31a4a0-7b77-4f56-8f89-01525b506129.crl (hash: qo3mjk6iUxtr8pIwGzFdj4nY2lJy/IHLyK9tcqxeEbE=)
                          9: ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa (hash: WQP0333LWBo3JU6rYUj2jMeH/02lTEo7oVfm+zBLeVo=)
                          10: c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa (hash: I+CQSsU3P880CBvS3h2GWeCCCjwf21UFjcPf2klhcDY=)
                          11: d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa (hash: PiOK7pc38oi0cjia0H9NVLtdfxNz6Tcg0FMS3ubs+q8=)
                          12: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (hash: mC9XdF83rIjAp0TSDJOCmkmlkICAenkSQjyfJTdDqVE=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f7:b6:93:d6:c9:9e:95:46:07:9c:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129
        Validity
            Not Before: Nov 24 16:00:08 2025 GMT
            Not After : Nov 26 16:00:00 2025 GMT
        Subject: CN=d4e2c084-e4cc-42e9-8bc8-eb3043811146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:85:14:1a:4b:71:bd:1a:99:42:f7:b6:03:26:
                    25:9e:76:c9:89:12:b8:04:4a:cb:e3:ab:65:e7:90:
                    f4:c5:29:0c:93:b1:3b:22:05:03:69:e2:b3:24:4a:
                    4b:e3:6b:f0:cc:af:32:82:6c:d2:3c:40:a9:fe:7d:
                    ca:11:03:fd:f8:92:bf:e8:91:28:5e:7a:50:fb:d2:
                    8a:3c:4c:d8:4d:10:d0:d1:80:f8:5f:b6:23:af:3d:
                    95:10:49:76:c3:f5:9c:78:83:eb:e6:3e:e4:7c:f1:
                    17:65:6c:b8:95:e8:41:c2:d3:2d:27:a9:89:ff:73:
                    4d:fc:05:6f:00:f6:61:f1:46:85:e6:e4:02:e0:0d:
                    51:cc:34:bd:39:f8:51:46:9f:81:1f:42:4e:ce:37:
                    3a:a9:db:3b:33:77:f8:98:a6:58:16:2b:df:d1:12:
                    4a:3d:59:97:1f:5f:5e:31:33:b1:f4:dd:8d:e3:cc:
                    09:14:ad:fb:fd:b7:1b:11:26:f2:e6:f4:45:90:53:
                    6f:83:e4:71:28:f6:ec:73:09:76:0a:16:5a:4d:cd:
                    69:86:4c:ad:98:fd:1b:16:5e:9a:01:a2:cb:bc:86:
                    85:21:db:69:89:24:24:11:89:2a:5b:e8:9f:93:fb:
                    e7:a1:56:df:d6:83:3d:de:71:fa:40:3a:89:3c:76:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:90:8A:4D:5C:CB:AD:AB:00:1D:F0:00:0B:93:6E:73:4C:AE:E2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl

            X509v3 Authority Key Identifier:
                keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:0d:51:ab:ec:85:92:11:b6:2a:c7:ce:9d:90:9e:e9:4d:c5:
         76:7e:bb:f1:4f:93:6d:b7:2d:a0:0d:bf:76:36:67:63:5a:db:
         aa:43:e6:ad:a6:a2:75:7a:ab:eb:68:ca:45:dd:2e:97:bf:2c:
         08:56:f8:95:64:09:56:5e:30:6b:72:79:71:93:fe:1b:57:3a:
         e7:46:22:9f:90:1f:f2:9f:23:b6:b1:a7:4f:a9:d3:d5:2e:80:
         8f:24:32:26:69:ed:9c:df:fd:c1:ea:93:be:4e:69:f5:01:26:
         13:05:8c:e0:0a:72:58:48:7b:4b:1a:07:ff:18:8c:7f:2d:81:
         46:a4:bf:21:37:8d:b9:2b:01:3f:bb:fd:7c:58:24:8d:93:bf:
         27:32:ef:7b:15:5f:08:7e:7b:86:18:28:90:4b:97:7e:10:bc:
         17:5a:50:8b:28:a3:0a:e9:62:11:90:d6:40:11:ab:77:d9:2c:
         df:78:cf:b0:6b:90:db:e2:72:64:e0:a5:81:63:b3:25:98:c1:
         e1:4f:93:62:e0:cd:a7:ba:4c:f1:1a:8b:b8:6c:68:a0:7f:bc:
         ab:25:b7:47:23:3a:f7:e7:68:84:30:6e:68:73:09:4a:50:84:
         ed:27:b6:0f:04:2e:ce:89:dc:18:cb:c7:7a:3e:ce:d6:b8:b0:
         4e:a9:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 06:36:58 2025 by rpki-client