This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft
File:                     df28494f-1d3f-4a45-8a74-bde41c2502a2.mft (raw, json)
Hash identifier:          lI5qNXLCULpVGnFmDJbJGR7Bd7z03+/2djIB/c5D8vw=
Subject key identifier:   EA:C6:7B:56:48:8C:CD:81:9D:EF:45:B5:4F:8D:A5:86:B6:67:B1:DA
Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A
Certificate issuer:       /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2
Certificate serial:       010D0C9F4328584C2AE51C9FEB66FFA4E5E3DB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft
Manifest number:          010D0C9F4328584073A83206E308BDBACFE90562
Signing time:             Sat 13 Dec 2025 00:00:10 +0000
Manifest this update:     Sat 13 Dec 2025 00:00:10 +0000
Manifest next update:     Tue 16 Dec 2025 00:00:00 +0000
Files and hashes:         1: 155f4b9b-4ca3-3b31-bf72-238f854d820f.roa (hash: tImT8gFXgEMPtQEBflFaWQmKxhyrrxHDv2x2UFQtZFQ=)
                          2: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (hash: DvUMJ0zP4TkzUZjc0vq3flmzj/0eN6CE1vYAntwA/cY=)
                          3: df28494f-1d3f-4a45-8a74-bde41c2502a2.crl (hash: xMg4w0aXhENGG5rqkk167jrVd6QmpmE8lLjOYaNqHpI=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Dec 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:2a:e5:1c:9f:eb:66:ff:a4:e5:e3:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2
        Validity
            Not Before: Dec 13 00:00:10 2025 GMT
            Not After : Dec 16 00:00:00 2025 GMT
        Subject: CN=6dc3e289-deac-4823-8b26-b5fd14cb2344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:f0:20:cc:4e:4b:7d:6a:f7:b0:89:26:62:
                    2f:da:14:2a:30:c1:55:15:81:2c:79:0b:2e:a9:aa:
                    8f:3a:c1:db:af:35:25:3d:45:7d:1f:e5:bc:de:b1:
                    5f:b3:b6:85:3a:00:8c:14:af:ff:1b:e3:84:dc:69:
                    77:9a:10:a0:4a:1b:53:a5:51:d5:b4:1b:ac:7d:a6:
                    01:08:58:95:ac:08:40:ce:f7:9d:88:7f:82:64:87:
                    36:61:23:04:c1:96:4a:ea:39:91:93:3b:dd:aa:a2:
                    16:fc:3f:da:68:55:71:67:6e:97:4e:e9:d6:22:87:
                    8d:f9:69:73:45:7d:7a:43:3c:e8:77:8b:d4:69:8b:
                    0c:2c:78:de:ad:5f:47:a4:70:ac:61:de:ce:02:79:
                    af:d3:53:bb:c6:97:b8:b8:85:4d:21:ad:dd:c1:57:
                    29:71:c7:f8:66:4d:bb:87:d5:a5:a6:04:72:35:d3:
                    6d:f8:45:bd:ab:74:72:69:0e:d9:a9:4a:fe:40:48:
                    32:8f:d6:8a:30:b2:b3:a2:36:79:d8:bf:ac:10:64:
                    18:68:0b:3f:7c:a3:cf:c3:b3:c9:cc:1e:bd:0e:28:
                    88:32:f9:e0:ea:93:46:39:e1:10:6e:b0:04:c3:28:
                    ae:fc:ef:32:da:a9:79:47:f5:04:54:f5:b1:47:74:
                    eb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C6:7B:56:48:8C:CD:81:9D:EF:45:B5:4F:8D:A5:86:B6:67:B1:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl

            X509v3 Authority Key Identifier:
                keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         eb:8c:59:47:6c:34:22:0e:b1:a6:21:8c:4f:55:a5:89:2a:66:
         f0:85:5b:1f:27:88:59:fb:61:31:8e:b4:a7:a3:f0:b9:55:c6:
         cf:b5:53:9a:a3:8b:f3:ec:cb:be:52:ec:59:b4:50:7b:20:74:
         ab:26:82:cf:12:02:12:9f:05:c7:1c:03:09:30:0e:97:2f:76:
         13:9c:66:71:b0:2f:5d:77:5f:77:50:c3:93:9a:df:16:42:e7:
         21:de:15:5a:9f:4b:88:2b:75:4c:cd:10:5b:4a:f2:37:8e:9d:
         3a:47:cc:78:5c:0a:51:c2:58:b9:7e:c0:16:3c:b2:c0:fa:9f:
         7c:84:9d:61:5a:d4:aa:bc:0f:56:62:ee:48:4f:c2:90:74:6b:
         d8:0d:55:d3:88:14:be:63:f3:d6:94:b3:8e:0f:79:61:20:d0:
         8d:b7:4e:7d:5a:a6:5b:fa:54:39:28:ed:0f:42:3a:b5:6c:33:
         8a:9e:9e:37:9d:f0:47:f8:43:47:09:d4:46:b1:e1:3b:e6:0b:
         68:ca:d7:ec:1a:34:0e:e1:93:14:e9:e8:b6:77:6b:e9:e9:20:
         14:0b:23:26:9b:67:96:bb:3e:ce:6a:41:5d:46:0e:af:b7:cb:
         45:d4:34:df:dd:07:0c:c4:2c:33:d8:f4:17:81:4b:67:91:8f:
         f6:77:63:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 04:04:53 2025 by rpki-client