This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft
File:                     ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft (raw, json)
Hash identifier:          fTP7d+U6tQl7kkOFAdfl12BbeB03RpXvBD88DjX56QA=
Subject key identifier:   1C:52:AB:E6:05:7B:6A:2C:8B:4B:D8:C6:38:02:43:D6:E8:35:8E:BB
Authority key identifier: 8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63
Certificate issuer:       /CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de
Certificate serial:       010D0C9F4328584C07FF81542C60CE0081F330E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft
Manifest number:          010D0C9F432858496A0C3C15BC9330CA323C2538
Signing time:             Sun 30 Nov 2025 12:00:03 +0000
Manifest this update:     Sun 30 Nov 2025 12:00:03 +0000
Manifest next update:     Wed 03 Dec 2025 12:00:00 +0000
Files and hashes:         1: 25011387-72eb-330c-8418-a7095dd54d97.roa (hash: rpyYqUzgZrA6nodAmVkAC27QZArxSkFYMjG+YlDJHWY=)
                          2: 9ad5f257-d034-30d5-9781-af4a5f8619f4.roa (hash: z8edSdccrJE8PV96ld3PINjhomBidAq651tKEt9Qoc4=)
                          3: c80c6de4-1fae-3db8-b512-f8b77f106309.roa (hash: U0XVeAjafZ5YpzdhJ7ArkkZlH90Y+mP1JFnaGFohchE=)
                          4: ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl (hash: Pu9tkCOWA4NpAM39cFYpnWe5IA2JiIBVJpHDtFmqnBA=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 01 Dec 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:07:ff:81:54:2c:60:ce:00:81:f3:30:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef5c1789-96e4-4a63-9ba3-f0ef903cb0de
        Validity
            Not Before: Nov 30 12:00:03 2025 GMT
            Not After : Dec  3 12:00:00 2025 GMT
        Subject: CN=bfa3f00f-460c-443d-9fe7-d9ec919bf79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4d:2a:ad:bc:6f:8a:ba:ec:c9:f1:a4:e0:c3:
                    89:00:73:25:52:3e:00:54:22:d9:e1:6f:70:41:b8:
                    65:a2:ef:10:ff:b7:87:2d:3e:e6:80:3a:f2:03:b8:
                    09:07:5b:8f:35:63:4c:f3:16:c2:ae:ff:5f:65:a6:
                    ef:50:d5:4b:28:4b:27:f3:f7:f7:04:82:e7:00:46:
                    01:94:2d:1b:9f:a3:fb:3f:d1:47:cd:71:04:0f:68:
                    65:91:6c:ba:6d:76:4e:59:a9:5e:71:72:38:2e:68:
                    9a:aa:da:db:88:d2:36:a2:85:65:e6:bb:61:59:c5:
                    db:81:9c:35:29:e8:bb:01:a1:ff:59:2e:e4:e5:bc:
                    88:35:30:26:4a:52:6a:6d:e1:0e:0b:00:15:7e:4f:
                    1b:8d:9d:c5:5a:24:c3:d6:a9:35:2b:c0:9f:7e:08:
                    09:11:c6:77:53:58:51:e7:df:c2:6a:a4:10:2a:58:
                    ff:2b:97:18:5a:3c:34:d0:f7:03:fd:66:de:92:95:
                    81:50:99:89:58:e6:43:ee:6d:06:f7:49:e7:d3:e9:
                    92:b6:f7:5f:c8:51:cd:01:42:1d:8c:05:09:11:38:
                    c9:c6:ae:b6:1f:4d:2e:de:23:d0:bd:d2:e5:da:03:
                    14:d5:56:9d:6a:5b:2c:13:13:42:bf:d2:2a:15:3c:
                    79:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:52:AB:E6:05:7B:6A:2C:8B:4B:D8:C6:38:02:43:D6:E8:35:8E:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9B:FD:39:5A:35:D2:4A:95:36:C7:BB:98:35:6C:D3:E7:7A:4B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ef5c1789-96e4-4a63-9ba3-f0ef903cb0de.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:80:6e:7d:0e:79:fb:e8:ae:2e:8e:e5:15:86:25:a7:c9:08:
         83:dd:4d:7b:00:03:cb:37:45:44:ec:9f:db:46:cc:b8:f8:b7:
         77:99:ac:42:98:a3:dc:33:4d:bd:c4:0e:33:cd:73:d7:72:99:
         e0:da:f1:58:dc:2c:0d:fa:cb:59:66:9f:d9:6a:ce:0b:61:13:
         56:a2:e0:92:9b:2f:51:30:eb:0b:b3:0f:20:21:c7:56:90:2a:
         81:3e:5d:91:cc:82:a6:6c:ec:7e:3e:bc:30:af:fe:23:23:17:
         f8:6e:db:66:ae:17:c5:98:c4:15:0d:23:e3:85:ab:c3:c0:24:
         5d:02:1c:e4:fd:ea:0e:42:c8:a7:f3:ec:db:47:69:7b:be:1f:
         0b:7a:87:e1:64:e6:60:75:0b:14:d6:35:08:9c:32:2c:4f:8f:
         fb:c5:5c:56:4d:da:eb:65:c7:0d:0f:d4:c5:2c:06:8d:2e:ae:
         13:54:40:be:e2:50:bc:9a:58:2f:fe:3f:e0:ef:32:b5:64:cf:
         24:53:d3:0f:38:7e:75:ba:65:6c:58:92:84:09:56:ab:88:e1:
         7e:63:3e:19:be:91:d1:ea:bb:2e:8d:16:9b:24:ab:41:f7:5b:
         11:31:3d:ca:ba:2e:c2:50:61:c3:f3:5f:53:29:1d:ee:d2:f0:
         ec:d4:94:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 30 15:42:05 2025 by rpki-client