This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
File:                     df45c214-cd13-454c-ac2d-2978c76c6f7f.mft (raw, json)
Hash identifier:          tVkwI28FeVDi5uzYVqY5Wr9XvG8/TbEibtFLXvxeHKQ=
Subject key identifier:   52:19:D9:08:DE:84:C4:62:2A:C9:16:37:71:7F:DF:58:C4:E5:7F:70
Authority key identifier: D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8
Certificate issuer:       /CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
Certificate serial:       010D0C9F4328584C791041DCEE10370CFD2E68C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
Manifest number:          010D0C9F43285848F622F2E67C320CBC33518353
Signing time:             Sat 10 Jan 2026 00:00:08 +0000
Manifest this update:     Sat 10 Jan 2026 00:00:08 +0000
Manifest next update:     Tue 13 Jan 2026 00:00:00 +0000
Files and hashes:         1: 278765ee-7e37-387f-89f2-66a24d12e07c.roa (hash: Zd+DDgEf/zdTwJkF4B4Si/lGWWfmypIwKQNUJdZcLGg=)
                          2: 58d18a9d-961e-38a1-898a-cab3732b33e7.roa (hash: LTBBvSYQQ6NiFd1nhts75qWsnQq3UuK1Qzgi/fWwn9Y=)
                          3: df45c214-cd13-454c-ac2d-2978c76c6f7f.crl (hash: kE+LG8G9rm+bh0B721pdIWG3XvN/0L1ymTOXTRMLTsQ=)
                          4: e3d9753b-d297-3f28-8411-a24b30d79d35.roa (hash: tg2InwlQTFwKr8EqaMfr1Sere5M+xSff1M5jfFEzZtM=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Jan 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:10:41:dc:ee:10:37:0c:fd:2e:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df45c214-cd13-454c-ac2d-2978c76c6f7f
        Validity
            Not Before: Jan 10 00:00:08 2026 GMT
            Not After : Jan 13 00:00:00 2026 GMT
        Subject: CN=4750a4c0-af0d-4a31-b363-3eae5e672fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3d:67:f7:4b:ff:c5:f6:09:2a:cb:f6:2b:05:
                    b4:a4:7d:51:b9:45:5a:c1:bd:af:a8:d8:71:be:96:
                    75:be:2e:df:6c:4d:9b:07:d1:52:d8:8c:fd:cd:b5:
                    9e:e1:f1:ad:fd:25:ba:06:82:74:18:71:db:ec:c0:
                    c6:69:5e:7d:14:e1:a3:86:49:17:64:ff:18:7f:d6:
                    40:03:50:16:b9:86:d5:03:ae:d8:ed:82:b2:13:8d:
                    03:d1:0c:1e:04:e5:2e:3d:ce:4b:9d:ed:fc:1f:71:
                    16:0c:5b:79:1f:7e:83:57:0c:81:90:e1:70:ae:38:
                    01:2e:53:74:13:ae:38:1e:78:31:a8:87:62:c9:fc:
                    8f:0f:b9:ad:41:82:e0:b2:83:43:30:38:62:22:31:
                    68:3e:3d:ae:c5:6e:f0:29:4b:ef:70:ab:95:ae:05:
                    f7:c9:63:35:44:40:50:13:23:72:b4:1a:63:12:d1:
                    04:10:e7:37:9b:63:39:67:88:1a:a4:a0:18:3b:05:
                    5b:a5:5e:00:8c:1d:9e:74:0c:bb:51:14:75:72:91:
                    40:22:20:04:af:5f:43:5f:55:d4:a8:95:d1:b3:0c:
                    d1:0b:16:a5:d0:93:0b:d5:a2:0b:b0:b7:90:be:bf:
                    1a:7d:0f:72:02:82:38:c2:07:c1:99:d3:fb:39:f9:
                    e6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:19:D9:08:DE:84:C4:62:2A:C9:16:37:71:7F:DF:58:C4:E5:7F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f/df45c214-cd13-454c-ac2d-2978c76c6f7f.crl

            X509v3 Authority Key Identifier:
                keyid:D8:2F:F5:F6:19:80:33:AB:69:54:1A:B3:28:6A:5E:90:45:D5:62:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df45c214-cd13-454c-ac2d-2978c76c6f7f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f5:98:c1:3c:f4:3d:9b:94:08:8f:27:76:53:82:ad:3b:03:
         d3:1c:ca:38:98:07:09:51:28:d2:80:7c:26:1f:ed:87:bc:df:
         b3:13:cd:66:c7:77:1b:37:8b:e6:9b:50:e6:86:b3:f0:90:98:
         32:b9:95:fb:11:ea:d0:13:d1:d1:8f:2d:f8:5f:9d:75:01:82:
         34:8e:34:47:fb:04:3a:6f:11:65:2d:90:80:b6:2b:1d:f2:1b:
         01:ae:02:5c:9c:a2:8a:6d:07:1c:06:0f:63:00:6d:39:58:bd:
         3b:71:f9:c5:f1:f7:c5:09:91:cd:dc:97:d6:03:1d:44:d2:39:
         be:53:b7:b6:5c:4a:fe:7a:55:77:32:14:ca:c8:bf:ed:67:71:
         6c:1f:d4:39:17:ff:56:d6:ee:b3:31:e3:91:40:58:7a:2c:ae:
         92:4b:92:1d:74:e6:a4:80:9a:e5:5b:ee:30:d6:47:a7:1c:a6:
         bb:2c:9b:dd:44:a6:2c:3e:68:0f:a7:b0:7c:d9:c4:ac:49:f8:
         da:c2:18:9f:d2:52:94:f2:50:05:b2:37:f5:d5:9a:91:f9:ed:
         c9:0c:35:46:5b:1f:ac:a1:a4:a0:20:47:4e:e2:ba:db:23:14:
         99:a8:37:cb:ce:be:59:f7:ca:d6:38:6e:94:ea:78:88:e3:19:
         20:09:62:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 22:20:31 2026 by rpki-client