This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft
File:                     c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft (raw, json)
Hash identifier:          icXBy5hEetoy+y3NfJ6arVwsqtnrAZvrZTPW8S1XCxc=
Subject key identifier:   69:7A:AF:A3:43:DD:8D:60:EE:F1:A2:41:C7:87:30:62:1C:1D:D5:0A
Authority key identifier: FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD
Certificate issuer:       /CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9
Certificate serial:       010D0C9F4328584C2F50A55AAFD801946DFDF626
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft
Manifest number:          010D0C9F432858428327A7A02D0C74A0E50571F9
Signing time:             Sun 14 Dec 2025 14:00:03 +0000
Manifest this update:     Sun 14 Dec 2025 14:00:03 +0000
Manifest next update:     Tue 16 Dec 2025 14:00:00 +0000
Files and hashes:         1: 25b113c9-c697-36b0-bd01-55f4b2111952.roa (hash: UzaXn/lmlr8JhxvjZOI2IJw2KI9lquOns/nz87cLVpo=)
                          2: 2973c52c-5659-3596-8301-dc3e576e7381.roa (hash: SLzFIivfWsZWkgY9kMeQ9ER5TRq9M7bdpoIecY495kE=)
                          3: 2cde8d05-e5d7-30e3-ad36-2a409531c8fc.roa (hash: avDao0NJB9+b1S6+aGQ3MDGUswHH5kP0xl9gQsC8wYw=)
                          4: c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl (hash: ROcJ7mv+tICzRGJ0zWvDVDx3MmRLoL0CBzJsok+EsJY=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2f:50:a5:5a:af:d8:01:94:6d:fd:f6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9
        Validity
            Not Before: Dec 14 14:00:03 2025 GMT
            Not After : Dec 16 14:00:00 2025 GMT
        Subject: CN=7bf8f85b-c203-4356-b39f-2cc6a42e44a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:7c:9f:62:84:20:d7:cf:52:9a:d7:2b:5b:
                    b1:ea:6d:3f:c9:11:65:67:f8:6f:e6:eb:c1:c1:04:
                    d2:35:30:20:15:8b:5f:85:91:23:01:7d:83:63:d0:
                    7a:fa:3e:7c:37:a6:8c:2f:fd:d9:5a:99:db:93:70:
                    38:a6:fa:dd:eb:ca:f1:5d:67:85:fe:65:37:13:6a:
                    c4:6d:66:79:9f:ec:46:cb:a1:64:07:df:63:df:71:
                    4a:69:df:d2:15:08:e7:01:6f:34:1a:f4:45:56:7e:
                    37:fa:56:ee:aa:59:1e:0d:7c:0d:8d:be:6c:d8:28:
                    4e:b6:35:3e:6b:bc:49:e9:b6:b3:de:2e:63:4a:3f:
                    98:06:6f:39:70:45:77:be:c2:29:1b:13:07:98:fd:
                    e9:07:1c:31:4c:7d:81:b2:82:9e:7b:88:cd:4f:63:
                    33:a3:fc:be:65:f6:1f:4d:2d:fb:8f:1c:09:f4:bb:
                    1a:09:11:21:9a:4e:57:93:91:1e:2c:80:18:37:75:
                    ab:3f:70:c3:c8:03:f8:bb:42:5d:fc:e4:96:bf:dc:
                    7e:b1:9b:3d:53:63:5b:46:a3:9c:92:ed:95:fa:da:
                    5e:1f:5e:ab:de:a1:33:11:cc:f7:b5:16:5a:86:3e:
                    8a:45:97:30:92:0e:ab:1b:3a:77:f2:34:c8:2c:04:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7A:AF:A3:43:DD:8D:60:EE:F1:A2:41:C7:87:30:62:1C:1D:D5:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl

            X509v3 Authority Key Identifier:
                keyid:FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d6:72:10:86:55:ae:c2:f0:4a:c8:f4:b4:ff:b2:62:79:1c:
         b3:91:b0:68:5f:b4:e2:5c:eb:b2:03:51:f9:6c:f9:0e:6a:6a:
         01:34:7a:8c:97:38:80:10:47:4c:a3:c6:d8:a9:13:49:74:16:
         31:32:c5:92:05:b3:52:af:41:85:a6:cb:c3:70:2b:71:11:46:
         58:2c:47:e6:85:50:d4:4e:b6:7a:52:38:75:81:d6:a2:3b:c6:
         f5:29:73:a1:fc:84:2b:9f:48:d2:e5:8a:28:1e:2a:5c:4c:30:
         12:f9:de:09:78:3f:0a:ae:7a:45:ec:9f:c9:c3:d5:10:03:a6:
         f9:c5:ad:c9:8e:17:f2:1f:21:60:4c:d2:37:78:f5:92:a8:b8:
         69:a8:f2:41:ec:22:cc:d3:72:50:ca:88:38:65:5b:0f:18:8b:
         fb:82:24:06:62:a1:56:f9:7a:ba:8d:fc:9a:d4:37:5d:4a:bc:
         7d:ff:5b:d6:87:d9:77:34:d4:d5:a4:23:61:e4:44:81:d8:d5:
         c6:2d:59:f1:d8:23:7b:ac:11:72:b2:cf:69:5a:d0:8b:53:11:
         b0:77:d3:34:b9:13:51:97:37:bf:2b:87:c2:2b:cf:a0:c2:67:
         40:5d:28:30:53:e6:74:02:75:55:04:9f:e6:c1:2a:bd:22:ed:
         e8:f9:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 04:56:59 2025 by rpki-client