This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.mft
File:                     d28e4965-df1a-4ee0-91f8-24c72779af73.mft (raw, json)
Hash identifier:          Mbbp8nMDoWLzN1g5RGL4LVSbzm2KalPF0Uk6cVLROoM=
Subject key identifier:   88:DC:B1:78:44:00:5B:FC:30:93:3E:CA:28:49:D2:56:F8:1F:DA:24
Authority key identifier: 13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F
Certificate issuer:       /CN=d28e4965-df1a-4ee0-91f8-24c72779af73
Certificate serial:       010D0C9F4328584C083C0F4C541AC2CC9A990700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.mft
Manifest number:          010D0C9F4328584073A829DBFEFB1748C00D2BE2
Signing time:             Sun 30 Nov 2025 14:02:03 +0000
Manifest this update:     Sun 30 Nov 2025 14:02:03 +0000
Manifest next update:     Mon 01 Dec 2025 21:00:00 +0000
Files and hashes:         1: 2fecfb56-a7bd-3805-90cc-ffcacd30a74a.roa (hash: m7zfqA7vtVjCXcsxjRhY7PvJifBrF8MusBAMw1YGRSU=)
                          2: 8b84e6e7-aff8-3cd7-a0cc-6edd298126d4.roa (hash: Zn7HEnA5VlsBAhSWEA2w7/NzVcyqggpszPwIA5zFm4k=)
                          3: 8c8d0b17-5f96-3b2e-b888-95fdc95f187e.roa (hash: 5SB+vp0CVCH9IiEVekVCtWCKo5NaGXDtRKWr2uOMXIc=)
                          4: d28e4965-df1a-4ee0-91f8-24c72779af73.crl (hash: C1ket1GA/dXM2Ysjag/6BohyKEHIBWLe3jFgtJx2hLY=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:08:3c:0f:4c:54:1a:c2:cc:9a:99:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28e4965-df1a-4ee0-91f8-24c72779af73
        Validity
            Not Before: Nov 30 14:02:03 2025 GMT
            Not After : Dec  1 21:00:00 2025 GMT
        Subject: CN=7008e294-7750-4b6f-bbdc-04ec6db32027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:d6:15:c9:da:03:d1:73:35:1a:9d:23:52:
                    63:28:12:39:0e:fe:57:34:9f:33:9f:cc:1f:84:06:
                    f2:b2:43:20:ce:ef:79:7f:42:11:db:02:bb:b2:fb:
                    89:dd:c7:dd:d9:43:36:83:ed:9d:0d:63:ef:65:6d:
                    58:49:00:67:47:b6:13:70:7a:d5:eb:9d:73:5f:6c:
                    15:ca:f6:73:1d:3a:8b:85:68:59:92:fe:8b:12:bb:
                    d3:da:9f:59:19:83:08:87:7e:77:5d:05:a6:4c:08:
                    bf:83:d4:0e:8a:c3:14:7c:a3:dc:66:8a:89:00:58:
                    27:7e:be:80:36:50:d2:cf:56:5a:ed:3c:03:39:3b:
                    0f:67:5e:2e:56:19:2c:51:a5:90:4e:d1:b0:d6:02:
                    95:4b:91:5b:18:3f:d7:cd:4c:db:40:1b:ff:40:83:
                    6d:00:46:d8:28:07:5c:83:ef:96:9c:bb:67:fd:f9:
                    ed:4b:3f:c3:54:d6:a2:97:cd:85:a0:2d:78:87:6b:
                    f8:9f:1a:f8:d1:90:6c:6b:c4:7c:a7:10:31:a3:2d:
                    c3:cd:fd:59:4f:22:3c:8b:5a:ad:db:a3:43:ae:2d:
                    80:87:0c:52:3d:86:0f:87:0a:a9:4d:2d:fb:74:9f:
                    79:81:6c:60:f1:7f:63:3e:b4:6e:54:25:e6:fe:dc:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:DC:B1:78:44:00:5B:FC:30:93:3E:CA:28:49:D2:56:F8:1F:DA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73/d28e4965-df1a-4ee0-91f8-24c72779af73.crl

            X509v3 Authority Key Identifier:
                keyid:13:DC:6C:27:24:03:F7:89:82:D4:B0:D4:E8:6E:7D:37:AC:A0:8E:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d28e4965-df1a-4ee0-91f8-24c72779af73.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:cc:79:2c:5f:05:2f:5b:0b:c4:57:dc:da:a2:94:70:68:58:
         b9:a8:25:ab:7b:8d:bb:1d:41:9a:b3:11:3e:97:0f:71:6b:3b:
         20:b7:64:f5:18:f5:95:48:26:75:83:6f:46:73:b9:86:c2:83:
         dd:f8:75:67:04:b1:5e:2f:55:9c:09:fa:98:77:53:5e:c6:73:
         a8:56:9e:2f:e5:19:57:44:0c:1c:56:b0:94:b5:8a:d6:15:d2:
         14:a3:df:05:e6:64:86:c9:f9:01:87:ec:53:00:6f:af:33:3d:
         9b:ec:c8:d5:e2:a3:ca:92:bc:2d:53:d0:b6:20:ad:d5:22:b9:
         4b:fd:88:97:d4:3c:eb:63:0b:4c:7a:64:12:68:f4:27:86:88:
         63:e1:72:5e:9c:a7:32:59:e1:3e:ff:5f:46:a8:5d:31:dd:6e:
         cd:1b:71:86:86:ec:7b:cc:1d:24:7b:4a:fb:6c:54:e3:c3:26:
         62:98:96:1f:9e:10:8f:58:13:87:b8:e8:c2:8a:03:c7:68:51:
         06:bb:7d:8d:eb:7f:7f:87:e1:1a:62:ba:ef:f6:9c:42:02:ff:
         6f:b5:f3:49:dd:da:83:2b:fe:6e:ad:75:1e:28:44:93:03:c6:
         4d:84:7b:60:44:52:74:eb:f5:e2:9f:3e:4d:5a:b6:b1:5e:bf:
         41:8b:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 15:42:07 2025 by rpki-client