This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
File:                     efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft (raw, json)
Hash identifier:          PkX2Ud19zL8zLyf3gkjN7xGaTeGyzonBTGQ5vNl7pyU=
Subject key identifier:   23:BA:C4:E2:58:59:04:B9:71:B2:87:13:6A:B9:C6:9D:E1:45:4B:65
Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A
Certificate issuer:       /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
Certificate serial:       010D0C9F4328584BF8A4CF9443A65080E21721A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
Manifest number:          010D0C9F432858493EB9B9CE00E05F996F1F6DE4
Signing time:             Tue 25 Nov 2025 00:00:09 +0000
Manifest this update:     Tue 25 Nov 2025 00:00:09 +0000
Manifest next update:     Fri 28 Nov 2025 00:00:00 +0000
Files and hashes:         1: 15ded99e-0579-393e-b2ce-2dbf32e4162f.roa (hash: FhIE+hAve5U0WfkBvZ/Tdg4sx6uZ9/AMM5+94q1eycg=)
                          2: 1a6e9a2e-33db-3454-aed6-ff6f23be57e8.roa (hash: yS4E8kzJcenBNcca9VcxhfOj4X6+tFFE/rM9iCzydCA=)
                          3: 25bc85b0-8ee6-3007-babe-2bd9a0b4f676.roa (hash: qF26Af/k8sbeshBf+ta9jFDXxx613EOjqdYih7pdRZQ=)
                          4: 2a3a9889-4ec0-3e8c-ab6a-501a0b672d83.roa (hash: A3lAp9TaoTQby9BrWmHm0DjO0PrVeCTpx0vzifExa3M=)
                          5: dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa (hash: KX861UhyXteNkqoY5Qaviz+KlTFJilJet6P1iqe2OFc=)
                          6: efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl (hash: /MwzTOz4NyTd1ijpJlAx4to+nxRCymXGV/JTdeAAJRs=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f8:a4:cf:94:43:a6:50:80:e2:17:21:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30
        Validity
            Not Before: Nov 25 00:00:09 2025 GMT
            Not After : Nov 28 00:00:00 2025 GMT
        Subject: CN=a122782d-16de-4fbe-b4b2-4b5a988ee829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:7d:46:d3:84:2c:d7:cf:94:5a:da:db:54:
                    67:ed:60:dd:85:83:a2:7a:69:5f:89:9c:bb:4a:17:
                    14:7d:e8:f4:97:cc:50:9a:e8:ba:40:89:71:62:ae:
                    db:75:63:0a:9e:eb:4b:76:bb:59:de:f6:7d:c9:0d:
                    cf:8f:b7:17:76:a3:30:8e:33:00:91:68:fe:91:58:
                    9e:f5:3c:23:ee:b7:82:79:33:3e:8f:09:1c:4e:ee:
                    bb:9c:23:9b:b1:1b:48:9c:78:d5:aa:6f:2d:0f:14:
                    4f:70:3f:38:f2:e8:ca:53:d5:12:40:84:30:fa:c4:
                    39:49:d7:fa:5f:39:51:81:a8:6c:01:89:5b:b6:63:
                    1b:32:37:ca:24:6e:f1:0d:5b:bf:4f:3e:21:a1:4a:
                    1a:8b:04:b4:c6:7b:80:73:a9:99:54:fc:a1:03:c0:
                    7e:bf:49:32:f2:59:6f:ad:46:42:da:0f:b3:12:0b:
                    12:68:7e:51:c6:9f:d4:5f:4f:40:b2:00:f0:15:ff:
                    5c:12:0c:38:59:d1:46:3d:53:0a:f0:9a:6f:65:b9:
                    89:37:1c:bd:3c:b6:ae:96:f6:f2:c2:53:df:55:6d:
                    52:e2:51:b5:53:fa:7e:c4:54:17:de:8d:98:a7:c2:
                    4c:a6:9a:f7:80:21:1a:e6:46:b4:6f:c0:f1:73:1e:
                    6e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BA:C4:E2:58:59:04:B9:71:B2:87:13:6A:B9:C6:9D:E1:45:4B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl

            X509v3 Authority Key Identifier:
                keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a5:06:69:44:12:4b:00:f4:8e:36:fc:09:70:ee:c1:e9:f1:
         b9:66:6c:87:31:cb:c4:19:89:c1:f0:c1:fe:9a:50:b0:51:07:
         8b:b5:bd:a0:dd:c1:74:69:b6:b3:8c:fd:e9:af:58:ec:fe:40:
         c8:13:28:2b:72:2b:ce:b2:20:b6:c1:ae:19:26:f7:2e:bd:00:
         2b:bb:9f:a9:83:c0:27:9c:03:5f:6e:2d:da:10:89:d3:6f:38:
         b0:95:42:38:48:fe:53:9d:5f:a6:2c:d1:5a:38:db:be:00:06:
         62:8d:fb:12:a9:32:2b:ea:5f:56:c0:2e:c3:49:b5:17:65:90:
         8d:d6:3e:92:31:8e:1f:80:e1:2b:24:61:8a:3c:60:73:e4:18:
         aa:62:96:80:48:44:8c:dd:6e:78:38:f8:dd:a7:de:80:1e:d1:
         d4:68:b6:69:5b:ff:3a:c2:ff:33:15:2a:30:fa:bc:f1:72:62:
         70:a7:63:47:a1:50:c2:24:a0:09:ed:d6:3b:8c:0b:d4:1c:6b:
         d2:68:c5:ed:02:5a:ae:ea:26:0e:f1:0e:f0:d9:f5:38:31:c4:
         dd:06:78:da:bf:7f:d7:2a:b3:75:fa:f8:20:ea:ed:8f:7c:af:
         4c:5f:f7:ec:80:37:26:bc:4b:90:44:03:b5:4d:29:cd:8f:ef:
         d8:06:69:47
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4pM+UQ6ZQgOIXIaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWZiODc3NTktMzZjNC00ZTVhLTljMmItMzRlMDBjMGZi
YzMwMB4XDTI1MTEyNTAwMDAwOVoXDTI1MTEyODAwMDAwMFowLzEtMCsGA1UEAxMk
YTEyMjc4MmQtMTZkZS00ZmJlLWI0YjItNGI1YTk4OGVlODI5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmp9RtOELNfPlFra21Rn7WDdhYOiemlfiZy7
ShcUfej0l8xQmui6QIlxYq7bdWMKnutLdrtZ3vZ9yQ3Pj7cXdqMwjjMAkWj+kVie
9Twj7reCeTM+jwkcTu67nCObsRtInHjVqm8tDxRPcD848ujKU9USQIQw+sQ5Sdf6
XzlRgahsAYlbtmMbMjfKJG7xDVu/Tz4hoUoaiwS0xnuAc6mZVPyhA8B+v0ky8llv
rUZC2g+zEgsSaH5Rxp/UX09AsgDwFf9cEgw4WdFGPVMK8JpvZbmJNxy9PLaulvby
wlPfVW1S4lG1U/p+xFQX3o2Yp8JMppr3gCEa5ka0b8Dxcx5u3wIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFCO6xOJYWQS5cbKHE2q5xp3hRUtlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZmI4
Nzc1OS0zNmM0LTRlNWEtOWMyYi0zNGUwMGMwZmJjMzAvZWZiODc3NTktMzZjNC00
ZTVhLTljMmItMzRlMDBjMGZiYzMwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWZiODc3NTktMzZjNC00ZTVhLTlj
MmItMzRlMDBjMGZiYzMwL2VmYjg3NzU5LTM2YzQtNGU1YS05YzJiLTM0ZTAwYzBm
YmMzMC5jcmwwHwYDVR0jBBgwFoAUeLPdEjqK3NXQvmd/J/lBuR6hhiowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZmI4Nzc1OS0zNmM0LTRlNWEtOWMyYi0zNGUw
MGMwZmJjMzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAopQZpRBJLAPSONvwJcO7B
6fG5ZmyHMcvEGYnB8MH+mlCwUQeLtb2g3cF0abazjP3pr1js/kDIEygrcivOsiC2
wa4ZJvcuvQAru5+pg8AnnANfbi3aEInTbziwlUI4SP5TnV+mLNFaONu+AAZijfsS
qTIr6l9WwC7DSbUXZZCN1j6SMY4fgOErJGGKPGBz5BiqYpaASESM3W54OPjdp96A
HtHUaLZpW/86wv8zFSow+rzxcmJwp2NHoVDCJKAJ7dY7jAvUHGvSaMXtAlqu6iYO
8Q7w2fU4McTdBnjav3/XKrN1+vgg6u2PfK9MX/fsgDcmvEuQRAO1TSnNj+/YBmlH
-----END CERTIFICATE-----
Generated at Tue Nov 25 06:32:15 2025 by rpki-client