This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft
File:                     25a4f200-c007-4476-b7c6-b306830b991d.mft (raw, json)
Hash identifier:          tJ9BfV8Oauu0oIyl86iqZMIhdz4esJc7rMiYjwxR54A=
Subject key identifier:   89:D5:36:43:EE:F0:BA:A4:D5:6D:AD:EA:1D:87:FF:64:AA:55:40:07
Authority key identifier: A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC
Certificate issuer:       /CN=25a4f200-c007-4476-b7c6-b306830b991d
Certificate serial:       010D0C9F4328584BF27A7AE2964114DBA2FE1100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft
Manifest number:          010D0C9F4328584AE956642DBB94A1019AE0B2A1
Signing time:             Sat 22 Nov 2025 19:00:03 +0000
Manifest this update:     Sat 22 Nov 2025 19:00:03 +0000
Manifest next update:     Mon 24 Nov 2025 19:00:00 +0000
Files and hashes:         1: 087748f0-1dfe-3009-a1dc-390079e6b5d8.roa (hash: FDdLRAqFkGcwPeQdBBHxXLlfp0nl+QLT5S2cLAhCy3M=)
                          2: 25a4f200-c007-4476-b7c6-b306830b991d.crl (hash: ds8SEjxPmUOGklWmyUQTULLMDu7h49UfrlHGJI+jy0E=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f2:7a:7a:e2:96:41:14:db:a2:fe:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25a4f200-c007-4476-b7c6-b306830b991d
        Validity
            Not Before: Nov 22 19:00:03 2025 GMT
            Not After : Nov 24 19:00:00 2025 GMT
        Subject: CN=c568370f-b058-41cb-9665-c0999f2032b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ca:ae:b9:33:9b:e4:d5:d4:1b:74:a5:88:cb:
                    17:f6:4d:d8:80:eb:7b:16:4c:3e:14:4c:69:ed:4c:
                    0d:dd:0c:26:4d:91:50:3f:50:8d:b0:13:72:23:2a:
                    db:c9:1f:73:61:b2:da:23:e5:86:20:b2:ba:ae:26:
                    74:37:e1:0a:70:d0:6d:57:fc:26:14:ed:bf:d6:5f:
                    1a:6e:3e:7a:14:23:f4:5f:cf:af:8f:d2:6d:f8:3f:
                    22:b3:a7:10:0f:56:96:8f:1b:bd:43:66:70:d3:8d:
                    ca:8a:99:1d:84:95:46:6c:96:e0:77:83:4f:56:63:
                    d3:b6:31:59:ea:3b:21:22:23:4a:2f:49:02:ab:76:
                    d9:ab:c2:c3:81:95:f5:2b:a6:df:e1:a9:4d:a8:94:
                    2b:c4:ac:95:07:17:b7:88:d3:83:94:94:00:6b:56:
                    83:59:a5:b7:1c:51:39:a2:a3:1f:4e:1d:59:4b:c5:
                    a2:34:94:5a:e4:63:27:a5:53:18:67:27:db:6d:35:
                    66:90:d7:0d:c0:5f:ac:5b:e8:9a:00:81:94:3f:77:
                    90:9a:7b:25:81:74:85:d2:f8:23:e2:37:2c:06:ed:
                    5d:22:14:ff:71:e8:e2:95:3f:96:ee:b1:3f:0f:3e:
                    ac:88:4c:42:6f:da:2b:7c:3c:25:c5:38:3b:05:ad:
                    7a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D5:36:43:EE:F0:BA:A4:D5:6D:AD:EA:1D:87:FF:64:AA:55:40:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d/25a4f200-c007-4476-b7c6-b306830b991d.crl

            X509v3 Authority Key Identifier:
                keyid:A0:D9:04:58:93:D9:D7:A8:E8:A0:7A:B2:03:B4:16:8A:D8:17:22:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/25a4f200-c007-4476-b7c6-b306830b991d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:94:20:33:92:fb:cb:4d:84:31:fe:b7:4e:d9:58:d6:71:
         50:c8:73:e4:3a:cc:7c:07:4c:70:9b:64:06:32:24:8b:05:d2:
         72:98:55:79:55:36:39:26:68:47:af:d2:93:dd:cb:22:f4:a1:
         6f:ce:6c:d7:92:51:4f:d8:96:1c:06:14:3e:8c:6d:14:c8:be:
         d3:1c:68:bc:1a:95:1b:e4:15:97:65:4a:dc:e6:5a:e8:8c:97:
         fd:eb:34:f2:ce:03:28:96:d5:89:e5:3b:d8:84:c7:e5:e9:83:
         ac:fd:f3:38:ea:d6:01:7b:fa:3c:7e:d4:0a:12:af:28:4d:72:
         c9:e6:80:f7:79:3b:0b:d5:94:4d:a9:d4:9e:00:3c:46:36:f9:
         e3:e8:b9:3b:24:09:f6:41:08:c6:f3:6e:83:13:f1:7d:2f:31:
         3f:45:11:48:56:85:30:93:7c:cc:fa:1a:5d:c3:46:8e:9c:92:
         20:2f:fe:20:6e:62:46:78:5a:7a:73:ee:78:69:ca:f6:06:5b:
         cf:1a:a5:01:e8:c5:ee:54:70:68:0d:34:40:d8:85:40:69:63:
         9a:de:c5:33:c5:e8:5e:9c:d4:3b:58:5e:89:d6:08:48:a7:e3:
         36:63:37:f7:7c:58:aa:e9:e9:68:1b:a5:cf:d1:7f:8b:7d:40:
         ed:4c:11:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----