This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.mft
File:                     cda72809-682a-4951-9ff4-248386ec2d4b.mft (raw, json)
Hash identifier:          hAhuHMlfTNHBF+WqVji7NGIGUqdh3WUtvOQPqNdJprQ=
Subject key identifier:   3A:61:D1:6F:76:41:A3:03:48:8E:01:7D:3E:9F:46:EC:52:57:5A:B0
Authority key identifier: 3D:E4:60:D2:33:1F:F3:81:94:09:E7:2E:5C:59:69:94:DB:DA:8B:D5
Certificate issuer:       /CN=cda72809-682a-4951-9ff4-248386ec2d4b
Certificate serial:       010D0C9F4328584BF7F21FED5463E3D9161CF180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.mft
Manifest number:          010D0C9F43285848618DDFF44FDC9CBA36979EF3
Signing time:             Mon 24 Nov 2025 18:00:08 +0000
Manifest this update:     Mon 24 Nov 2025 18:00:08 +0000
Manifest next update:     Wed 26 Nov 2025 18:00:00 +0000
Files and hashes:         1: 0a9e4563-a3f4-3fa1-885a-82c2c7cf6754.roa (hash: w9arPIVfZGjzWnsgHwJfLKqd5SmKV2SBDHFBq/wbPko=)
                          2: 37222472-cf79-3fd0-8500-a35f8d0f77e7.roa (hash: 6tRGb5jRxpKNnbEDkMJYEtacfoHqB236JmN6AAMx5K4=)
                          3: cda72809-682a-4951-9ff4-248386ec2d4b.crl (hash: pM72JJQIx4XE+yHcG/ln2zrQneP9vKd7Pu14f1IeEAY=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f7:f2:1f:ed:54:63:e3:d9:16:1c:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cda72809-682a-4951-9ff4-248386ec2d4b
        Validity
            Not Before: Nov 24 18:00:08 2025 GMT
            Not After : Nov 26 18:00:00 2025 GMT
        Subject: CN=cd67e420-d3f4-4799-8c0f-3295263c340a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:cc:1b:09:96:dc:f4:9c:1c:1f:e5:35:29:
                    36:28:01:e3:c5:0c:67:dc:26:68:bf:98:7d:bb:7b:
                    04:5b:93:4a:1f:e2:b9:43:e5:18:91:7a:1c:02:6c:
                    1a:7f:66:b5:0c:66:f0:81:df:86:13:42:d2:39:c2:
                    d1:f2:40:17:d5:96:df:5a:77:a4:b9:84:47:75:ff:
                    f6:9e:6f:2b:5c:f1:24:91:1b:5c:ad:e6:24:3e:35:
                    7f:06:27:73:65:6d:1a:78:92:3b:13:05:e2:d8:e6:
                    5e:aa:46:e7:d2:cf:8d:33:f9:da:d6:b0:87:13:c9:
                    da:ff:cb:88:f9:60:68:b7:c6:29:6e:de:b5:2e:45:
                    94:76:c6:77:35:12:62:1b:c0:7a:61:ea:20:44:94:
                    e0:65:f8:02:e4:0d:7f:31:ea:e6:8a:ec:eb:be:6b:
                    f0:e9:ee:03:9b:a6:2a:41:12:28:c9:80:d6:94:13:
                    28:86:1b:78:5b:09:5c:70:5e:2e:db:47:ce:03:95:
                    7e:7f:8b:52:70:c9:30:6e:c4:5e:6d:69:10:9e:65:
                    ee:41:4f:d7:96:d3:82:7b:e7:9e:02:0f:db:b9:81:
                    2e:b0:fc:71:12:8f:97:d5:6e:74:f9:de:39:c9:0b:
                    21:44:c8:f0:ac:3c:07:6a:97:8e:50:35:55:d0:8c:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:61:D1:6F:76:41:A3:03:48:8E:01:7D:3E:9F:46:EC:52:57:5A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b/cda72809-682a-4951-9ff4-248386ec2d4b.crl

            X509v3 Authority Key Identifier:
                keyid:3D:E4:60:D2:33:1F:F3:81:94:09:E7:2E:5C:59:69:94:DB:DA:8B:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cda72809-682a-4951-9ff4-248386ec2d4b.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:ce:69:1b:5b:77:20:eb:b6:fb:58:9c:e1:7a:cf:31:13:0b:
         b5:c8:64:4c:9e:e2:93:96:16:95:0c:20:5e:eb:bb:ab:32:d1:
         75:d4:22:78:ba:3a:78:ff:d2:3a:14:a0:45:d6:05:b6:de:5b:
         04:40:0a:13:8b:98:26:a8:45:f9:a1:e7:a5:4d:fb:80:5d:50:
         14:54:d0:bb:6b:0f:96:38:9f:52:d3:7f:36:7e:9f:ff:b6:e4:
         40:3b:23:d1:b5:98:0b:0f:3a:22:d1:b5:f4:51:68:64:45:b2:
         c9:a2:bc:86:c4:1c:e6:32:59:be:22:fd:8f:f7:6e:ac:86:64:
         e5:70:8a:de:0d:5b:6e:ec:98:59:bd:68:96:5c:d8:9a:a4:f1:
         09:0c:8b:37:df:7a:86:c5:1a:1c:26:36:d3:30:b9:17:c9:37:
         12:68:7d:e4:f7:22:e7:f0:61:1c:4c:1a:2e:78:6f:cc:a8:c0:
         06:84:12:d0:e6:45:39:4f:af:31:a1:8c:97:10:ae:63:13:cc:
         41:42:57:78:01:88:cb:2d:82:1c:d0:5a:89:b2:c9:64:37:2d:
         2c:45:68:2b:4c:f5:b9:26:f4:98:48:e3:f7:09:a5:e5:d8:a2:
         60:87:7e:26:fe:0f:f1:0e:65:df:2b:01:40:0a:c3:ee:f9:1b:
         10:f4:cb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 08:17:18 2025 by rpki-client