This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
File:                     58d2b29f-1da9-4b65-a82f-389822bed566.mft (raw, json)
Hash identifier:          OkcbhsW7loc1UKAEMR1Tto8CJ0J6wkaeq5Uu85gQRkI=
Subject key identifier:   72:67:3E:34:ED:BA:11:BF:DD:21:91:0A:6A:F6:40:75:8D:F4:CD:C4
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Certificate issuer:       /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial:       010D0C9F4328584C3E6FD7C5334F4F57CF752380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
Manifest number:          010D0C9F4328584073A83131CEA859470E17A897
Signing time:             Sat 20 Dec 2025 00:00:03 +0000
Manifest this update:     Sat 20 Dec 2025 00:00:03 +0000
Manifest next update:     Mon 22 Dec 2025 00:00:00 +0000
Files and hashes:         1: 0e46189f-6763-3c78-85f7-44b980d57254.roa (hash: IZk7NXljZUzarQvSRJ7fiXM5aFm+dyU6STqnDqVnWtU=)
                          2: 1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa (hash: wy8+GyI3iLs7CLmkoS7DzTbfKefSIXhcw63sf7Jqyt8=)
                          3: 2590657a-d799-3169-b7a8-d40b15429e02.roa (hash: Hk3UMsVSdz4W1emQqUaWSYQHhdSEZBg0gFAKUnAN7OU=)
                          4: 516d9441-73c0-35d1-af65-73c07b29f9c3.roa (hash: FSg6Xi0DTx25GBQYubp9YOx3IMjkwZW6z2w5o5N+HNQ=)
                          5: 58d2b29f-1da9-4b65-a82f-389822bed566.crl (hash: 4n1KTsLWQiCcDge6cmzyYinAgnxSO+djFp7bkO5fp7I=)
                          6: 5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa (hash: 7Ju7UbCzokjEgrEGxbi+NJdmOBtXKVjoILDHN8Onios=)
                          7: 6f35d33f-3b25-3848-9287-a755ae18fa87.roa (hash: JOEb0qaBe2q+XCPeQb0AXDsM9iad8R0GFNFNo74Q2DU=)
                          8: 894a95d5-8d7e-324f-86dc-996779abcf7f.roa (hash: ZJOLta6SLyX4mng1jUsFATEE75+Wl3CMdisS5l6zeeY=)
                          9: a0f53c24-196c-3044-ab68-255cff40ec0c.roa (hash: XQ4SMkDOiEtvlR5iKxVFGIPrrTYMESyF3j/p96ByYQI=)
                          10: a5eff7b2-f77b-3a6f-953a-48c6eccb51de.roa (hash: wPkQMGbPCSsH06ZPQquv4PWjIQw5R/GDMpwUvfwOXCM=)
                          11: aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa (hash: lREzO4KHJ8en7YRKi/oeJvVVxJbuC+CsZv31fcFDGL4=)
                          12: c1ec8d09-5670-3d88-8368-60f557c12759.roa (hash: ocDrRg7lOO5Yofq3ZMySLRBqmkuWu6ByvVvazzcejCg=)
                          13: c534c6ce-25a2-3890-9411-9deda0cc8b45.roa (hash: fYwkZcbAN3sVK4LuEUfMkhFbpBoArA452wVUg7Rg/+M=)
                          14: cfef727c-7d86-3e20-90da-9631286575b4.roa (hash: xlSugjvduRHJkdWxAgWT78z27gpkbz8G8bjVL2p2chY=)
                          15: dc0da51e-bddf-385a-bee9-51758d38ce9e.roa (hash: Gy9HjY36+H0xVAu9luNC8+Pq86jbbMbamSE84a9J9MM=)
                          16: dc287312-eccd-3850-9465-849bc58be72d.roa (hash: Uop+WbyRxbihqufaEBn51hQKHNRwvcsGEss/xBivsjE=)
                          17: e10be919-601f-3120-a397-03955d29b5b8.roa (hash: ty9z5e8YsNEAdJ7neDMhxTqn+FqSmKxsQFcTPJIa6fs=)
                          18: e242c2b3-77a9-3afd-b359-a2a88e22709d.roa (hash: 50TExn+u5V1yVlnTPeV7z15Jh/GMYQ5qSrOhBzFWd5Y=)
                          19: ea249163-4763-355b-bc29-66594b81396f.roa (hash: miuViMXg8Mw0RTYPOTGkaetY922Qe7VL9Pc3w70lPf0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:3e:6f:d7:c5:33:4f:4f:57:cf:75:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
        Validity
            Not Before: Dec 20 00:00:03 2025 GMT
            Not After : Dec 22 00:00:00 2025 GMT
        Subject: CN=c11233f7-6c8e-4d5b-9a84-6179a6d39f25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a5:f7:10:86:03:83:95:3b:47:db:9f:65:c6:
                    2b:66:4c:97:45:33:a6:3e:12:9f:84:0c:48:0f:94:
                    42:ef:3c:c5:5c:b2:64:6a:8b:e4:15:1c:1e:8c:ab:
                    9e:dd:b3:56:68:b0:10:96:1f:60:f1:90:a2:ba:0a:
                    32:a1:21:cc:47:5d:69:05:2f:73:46:e2:a5:8a:ef:
                    e1:77:5a:43:c2:02:ee:ea:70:5b:4e:36:b9:03:85:
                    15:cc:46:93:54:07:41:8d:ad:96:3d:57:35:77:fe:
                    3a:ce:d1:0f:21:a0:88:31:2f:f8:b9:65:88:24:22:
                    8b:50:11:93:17:59:43:e3:92:96:6d:33:b8:8e:63:
                    58:ba:58:24:54:db:30:c7:d7:31:cf:0b:c6:27:9f:
                    e5:ab:d7:fe:7f:a9:5c:a1:1c:24:1d:59:08:4f:29:
                    f4:96:b8:ec:52:c0:5e:a3:da:bf:67:61:39:84:37:
                    fd:f3:a2:46:36:20:51:8c:fe:ae:03:c0:28:60:90:
                    f5:60:03:db:03:48:a1:7a:7e:9c:18:99:b7:3d:40:
                    1f:d9:03:50:f8:fd:1e:41:70:c8:af:8b:11:e9:ad:
                    c2:c7:f0:6b:ea:03:c8:81:1f:55:f6:6c:d8:2d:49:
                    40:8e:b8:15:04:33:33:07:5b:80:dc:89:86:ed:f8:
                    67:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:67:3E:34:ED:BA:11:BF:DD:21:91:0A:6A:F6:40:75:8D:F4:CD:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:40:98:ad:6b:90:59:2a:7c:0e:fd:35:98:ba:18:57:69:a8:
         a0:31:02:88:d7:68:1d:e8:ee:0d:15:3f:18:65:67:77:a0:8c:
         ac:5c:f2:84:3c:b9:84:54:9f:a0:0a:01:0b:54:7c:b7:3a:61:
         dd:d6:c4:61:ed:5e:96:b1:5b:c6:54:9d:79:fc:51:b4:26:70:
         94:a7:b4:74:02:6f:b8:e6:64:81:dc:3b:ce:13:32:32:08:a8:
         73:e4:3a:b8:64:7d:7d:c9:ac:af:c4:2f:4a:e0:ae:7c:f5:36:
         0e:ed:77:ed:26:df:8c:bb:f4:4f:7d:e0:6c:e3:f0:7c:3b:ea:
         e3:db:b1:3d:c7:2e:15:a7:89:e3:2a:8a:af:60:cb:f4:7c:9a:
         24:63:f5:44:39:f1:b4:46:3a:9a:0e:37:a0:10:b4:5f:16:39:
         27:e8:34:79:55:f9:34:53:5c:d3:0f:dc:45:d1:a1:fd:6f:6b:
         ef:5d:5a:05:e5:e6:3b:74:cb:78:53:9d:76:ff:80:01:f2:36:
         a8:cf:6b:bd:01:7c:50:a2:e9:32:ed:d1:fb:ca:61:e8:57:b6:
         e6:37:71:79:3c:84:2f:28:4f:56:f5:d6:10:42:6c:9a:52:e1:
         b8:52:55:6b:9b:7e:d7:c3:f5:38:cd:36:39:48:95:6d:70:46:
         b0:91:fa:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 10:26:05 2025 by rpki-client