This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.mft
File:                     540d1e8a-06b3-4df7-9d3b-58ec9faa2536.mft (raw, json)
Hash identifier:          H9bOk1Wf6Z+hvGQXbT+Ex+vrFLTXRNFLob/8eD2rsgM=
Subject key identifier:   0D:E3:3F:1A:2B:F1:49:05:11:83:B7:5D:7E:33:38:45:54:EE:FD:2F
Authority key identifier: FB:BF:F0:64:0B:D4:4A:CE:AC:23:47:45:C9:E7:9E:A1:D1:23:26:36
Certificate issuer:       /CN=540d1e8a-06b3-4df7-9d3b-58ec9faa2536
Certificate serial:       010D0C9F4328584BF27A7D3A21764EE0D25D9950
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.mft
Manifest number:          010D0C9F4328584AE687B2918235340E76FC6363
Signing time:             Sat 22 Nov 2025 19:00:03 +0000
Manifest this update:     Sat 22 Nov 2025 19:00:03 +0000
Manifest next update:     Tue 25 Nov 2025 19:00:00 +0000
Files and hashes:         1: 540d1e8a-06b3-4df7-9d3b-58ec9faa2536.crl (hash: ctebxIRvWR+LVX19GgVmTvv7tebmaxCsk0fzO2mS9nI=)
                          2: 7f4c0d59-a6c4-3d6a-aacb-a93217111fa7.roa (hash: 3alK5wa9plxL9mxuq5P0mATdk3D8NlxDDkMNqc5ZTf0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f2:7a:7d:3a:21:76:4e:e0:d2:5d:99:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540d1e8a-06b3-4df7-9d3b-58ec9faa2536
        Validity
            Not Before: Nov 22 19:00:03 2025 GMT
            Not After : Nov 25 19:00:00 2025 GMT
        Subject: CN=be8f9367-3634-4b23-9612-f2cdaed32bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:d3:21:af:85:b3:8f:8d:1d:d2:97:2f:a5:
                    93:7a:0b:1b:dd:23:77:57:f4:6c:07:34:b1:66:fd:
                    d8:2b:96:db:c1:88:4e:2d:98:1a:bb:08:a2:1a:8f:
                    ce:68:59:47:1e:4e:1d:4e:61:80:74:8d:b8:ad:97:
                    e2:4d:0e:55:c2:d0:31:27:7d:2b:3a:18:52:e1:f9:
                    b1:8a:19:11:c2:41:a4:b0:92:2a:f6:30:77:17:b9:
                    83:b5:4f:e3:c4:fa:c0:25:e5:48:01:92:2a:4e:62:
                    f2:4d:27:a5:5b:b3:db:e9:25:4a:30:8b:bd:a9:4f:
                    2a:98:71:b3:49:42:50:63:b1:da:49:80:3a:de:be:
                    80:b3:8b:84:fc:56:65:e1:48:78:97:0b:4b:c9:82:
                    b2:e2:71:49:1a:c6:3c:e4:8b:2c:9d:69:fc:c9:cd:
                    dc:5d:9e:06:b8:88:f0:27:b9:bc:55:0f:40:26:d7:
                    e2:f3:66:bb:7b:8a:f7:12:83:2a:75:7c:a2:46:9e:
                    14:63:2c:a6:fe:2c:e0:dc:25:65:4b:b2:8c:ec:dc:
                    fc:85:40:d5:33:14:b4:56:87:fd:3a:40:ce:e7:fa:
                    b0:55:73:52:69:c2:b9:6e:ff:06:58:b8:83:f8:06:
                    aa:7f:11:c0:74:97:47:d7:93:8e:b7:89:75:64:dd:
                    20:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E3:3F:1A:2B:F1:49:05:11:83:B7:5D:7E:33:38:45:54:EE:FD:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.crl

            X509v3 Authority Key Identifier:
                keyid:FB:BF:F0:64:0B:D4:4A:CE:AC:23:47:45:C9:E7:9E:A1:D1:23:26:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/540d1e8a-06b3-4df7-9d3b-58ec9faa2536.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:44:1c:15:35:ac:02:e9:39:f2:f8:b5:ea:38:12:3b:f7:
         03:50:31:d3:5c:f3:5d:eb:4a:d6:25:96:6a:a0:e6:32:7c:c8:
         05:de:e7:a9:37:31:bd:69:df:a8:51:0d:b4:9e:54:dc:dc:b3:
         73:18:60:09:20:19:98:25:34:64:59:89:74:63:0b:f1:a2:b5:
         54:7a:f2:ec:db:a8:c5:43:f2:34:bf:31:1d:43:e0:7f:f6:1e:
         92:66:5b:c7:8c:a2:cf:cc:0f:44:75:65:2f:f4:d8:2c:a0:cf:
         3e:0e:d0:3e:e9:db:4b:90:96:1c:6c:bc:7a:17:ae:2c:30:e7:
         5f:a9:f6:55:3c:07:b1:33:24:72:fe:e2:31:ee:c1:10:41:18:
         a4:ca:31:18:1c:b5:7d:15:85:f1:45:22:64:00:7d:18:26:97:
         71:69:8c:65:ee:c6:5d:4c:81:57:c9:09:03:9c:98:52:5c:02:
         91:03:e6:05:86:f7:5f:df:1b:32:1b:c1:aa:44:54:e8:6e:38:
         aa:0b:0b:b3:6d:f3:89:74:d2:ab:42:04:14:b6:92:ce:15:26:
         9f:5e:2d:6c:9a:f5:20:ab:ff:9d:9c:4a:61:8e:6d:71:56:62:
         bd:83:2e:c7:cd:90:8a:28:27:ec:9d:98:cd:ee:90:67:45:25:
         df:ed:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----