This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft
File:                     3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft (raw, json)
Hash identifier:          KBDe9KmabDBUsjsz7+iTMHZdLdIA2T3xA0FQTSEZp5I=
Subject key identifier:   14:CA:5C:F1:B1:ED:5E:AA:69:2D:E2:26:C6:1B:B5:E6:A0:97:68:97
Authority key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49
Certificate issuer:       /CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8
Certificate serial:       010D0C9F4328584C63C6C999749E364691641840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft
Manifest number:          010D0C9F4328584B120BDF6A0EF65D42B2E15C01
Signing time:             Fri 02 Jan 2026 09:00:08 +0000
Manifest this update:     Fri 02 Jan 2026 09:00:08 +0000
Manifest next update:     Sun 04 Jan 2026 09:00:00 +0000
Files and hashes:         1: 3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl (hash: 5ns8bP/Hp8JD+fzxuNlwRxFq9mX4w2YS4CHdk6CoE4I=)
                          2: 3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa (hash: 4ByDDVolduusAlJL1/a+YmrXktsAlqrjL8XOuIfVw5Q=)
                          3: 99f33a63-94ff-3938-870c-e85542261111.roa (hash: twRrJDy9QcJT2ZFY1i+K+tV9TLx5JYiSr/+nthr7Owg=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Jan 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:63:c6:c9:99:74:9e:36:46:91:64:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8
        Validity
            Not Before: Jan  2 09:00:08 2026 GMT
            Not After : Jan  4 09:00:00 2026 GMT
        Subject: CN=de041ad5-e896-416e-ba0c-db7d5e925b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:da:35:31:3f:8f:4e:2f:f1:67:96:6c:73:
                    26:9d:36:43:47:b4:6f:ba:f8:b6:f4:3d:9c:16:3a:
                    fb:9f:18:e2:30:e9:a2:07:c1:a6:90:a9:40:eb:f6:
                    0f:24:2f:12:87:49:25:4f:24:dc:05:80:4c:7a:99:
                    c5:5b:56:a3:30:10:01:15:d0:c2:d4:a8:c4:33:7d:
                    db:a5:d2:35:63:75:d2:e1:82:17:6e:c3:ed:88:da:
                    07:2c:dd:82:ec:96:22:ed:da:fb:3d:13:dc:a5:08:
                    6a:0d:fc:69:2d:66:dd:97:36:45:75:33:44:eb:4b:
                    ee:7a:ce:0a:be:5f:b5:15:37:9d:fc:a0:8c:7e:a9:
                    5c:0d:b0:ab:17:15:f9:73:18:b8:5a:a0:6f:67:80:
                    f6:01:a3:19:0e:2c:ed:c0:95:72:c4:0b:d9:c7:ec:
                    35:b9:66:ad:ec:a3:99:13:82:6e:f7:55:1b:b3:4e:
                    17:eb:43:dc:86:76:d2:76:93:c2:fe:5a:6f:2d:c3:
                    f6:91:44:da:34:a7:84:be:7f:00:f9:fe:62:86:e5:
                    01:a9:53:2a:01:dd:55:cb:cf:29:98:67:9f:0d:3b:
                    78:29:12:9e:5f:7d:f7:b8:7f:07:3d:59:25:0d:79:
                    ea:b8:9c:5a:cd:04:03:ee:fb:49:aa:cd:7e:07:9f:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CA:5C:F1:B1:ED:5E:AA:69:2D:E2:26:C6:1B:B5:E6:A0:97:68:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl

            X509v3 Authority Key Identifier:
                keyid:AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:66:8d:bc:8c:a2:0f:7f:51:fe:b6:99:ab:b2:e4:d1:32:
         73:bc:db:94:00:e0:75:0d:b8:c9:6c:c5:33:a0:83:c8:37:83:
         d5:d6:25:30:c9:c7:3e:cc:75:75:55:3f:04:d5:e9:d7:d5:30:
         fd:83:56:aa:ef:98:32:84:db:83:4f:6b:53:04:bb:82:e1:ee:
         9c:8d:bc:0e:8c:8b:8a:7e:da:46:86:19:52:2b:57:c9:ea:a7:
         95:56:b4:df:48:22:8a:42:ad:87:2b:62:ed:28:b1:22:d7:c8:
         24:d3:8a:1d:87:38:14:71:b0:8f:4a:c0:b2:bc:26:cb:26:84:
         68:2a:01:ad:22:cc:ac:5c:75:fc:71:62:cf:6b:b5:03:6c:7d:
         35:ef:38:8e:56:c7:e0:ba:11:81:47:e9:0a:69:b2:a5:bb:60:
         f8:f4:8b:5d:1f:ff:9e:e6:00:86:87:8e:47:d4:c3:00:21:ae:
         93:48:2c:d6:15:e5:87:65:00:d0:b0:9f:16:b7:3c:6c:da:92:
         79:85:46:7f:b9:d3:11:ca:93:91:af:78:4f:53:0e:6e:1c:ab:
         03:3f:b6:76:77:19:ca:d8:db:03:36:f2:df:76:6b:ca:1f:c3:
         fb:0d:6a:ac:ff:fb:0a:11:1d:f9:54:37:1d:2d:1f:60:9c:51:
         83:83:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 08:48:59 2026 by rpki-client