This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft
File:                     5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft (raw, json)
Hash identifier:          XhgK61j+QpVXRZYOig2wX9/3KZoxEWbMtKNT8/dnfnk=
Subject key identifier:   B9:B7:0F:C2:3B:BC:6F:00:B5:84:93:90:88:7B:CC:B4:63:25:5B:D5
Authority key identifier: 93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0
Certificate issuer:       /CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04
Certificate serial:       010D0C9F4328584BF2035E0D79B122D5C50EACC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft
Manifest number:          010D0C9F4328584A97E27F4BEEA764DA256688BF
Signing time:             Sat 22 Nov 2025 15:00:03 +0000
Manifest this update:     Sat 22 Nov 2025 15:00:03 +0000
Manifest next update:     Tue 25 Nov 2025 15:00:00 +0000
Files and hashes:         1: 1bc62835-53d3-3758-ab64-28f4099871ce.roa (hash: xNgLIVOIe+8ZB3Tem3NtnQYfF7HaVIJXfwQaGh9l1M4=)
                          2: 5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl (hash: 8KGCMdUq29yfiUgVmy4Q/X0r2ZEP1UeKhZb0Y1AtuI8=)
                          3: e6bc8b59-9ec0-3bce-9613-5085d606d708.roa (hash: neIj+lWlWD+g2FBD8N3l2wnLd13J76OOOaqRwcFV7rQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f2:03:5e:0d:79:b1:22:d5:c5:0e:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04
        Validity
            Not Before: Nov 22 15:00:03 2025 GMT
            Not After : Nov 25 15:00:00 2025 GMT
        Subject: CN=84e9182f-b962-48ce-bad8-d380146543ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:d8:2c:4b:ca:7e:ff:0e:15:ce:3a:13:7f:
                    c6:9a:da:5c:28:3d:93:9c:9f:c7:f0:aa:c2:cf:32:
                    8c:0b:05:bd:6b:3a:3e:6d:ca:b0:96:7b:77:4c:50:
                    32:d2:d3:81:6a:06:59:a5:64:3b:3f:e9:5a:80:34:
                    a5:70:74:60:ae:e4:66:2e:b8:6f:84:3b:bd:91:46:
                    83:2d:c0:90:1c:d0:37:94:4c:51:65:49:83:5f:5b:
                    81:57:65:3f:65:cb:46:19:40:3b:67:49:eb:9c:86:
                    90:80:9d:44:95:44:38:54:ec:ee:9f:87:8e:05:0e:
                    2a:0d:01:8e:a0:73:4b:74:de:4b:1c:14:0d:5d:6e:
                    f3:80:f2:ef:f8:33:d7:c5:c9:a0:19:68:ae:8d:88:
                    df:9a:59:4a:2f:83:76:ef:8a:cd:1e:84:ca:ee:f4:
                    9c:1c:67:0e:58:bd:18:df:4a:40:0d:5b:09:0c:2f:
                    58:88:81:4d:2f:1c:ae:5a:3c:74:89:ae:5b:51:05:
                    f7:68:8e:ce:52:2b:b7:a5:36:ac:63:ec:ab:27:d4:
                    8a:f8:3f:48:1e:62:f5:1c:14:86:ae:7e:fe:9a:f7:
                    14:99:3f:19:eb:2e:d0:e9:2e:57:ac:86:b2:e2:86:
                    13:33:de:a6:f5:27:11:b4:d4:d7:83:e5:64:38:5b:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:0F:C2:3B:BC:6F:00:B5:84:93:90:88:7B:CC:B4:63:25:5B:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl

            X509v3 Authority Key Identifier:
                keyid:93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:f8:ce:3a:6f:ac:8c:4e:04:ef:37:81:f1:f4:8f:60:a6:0e:
         8e:36:c4:fe:6d:ba:1f:2b:4f:42:4b:a7:c5:00:ee:bf:d9:98:
         b4:fc:9d:2e:d4:36:c4:f3:22:45:64:bc:d2:7c:f4:c1:8a:bc:
         b0:23:ef:02:8e:cd:6d:10:fb:71:e1:3e:c6:ac:af:cf:6a:36:
         ff:e8:d8:4a:1e:b9:bf:b6:d2:d6:a3:94:8f:26:cc:6b:12:f4:
         7b:89:5e:3d:a2:c3:f0:f0:98:5c:22:98:75:09:36:8d:40:a4:
         f7:9b:e2:1e:80:1b:2a:6e:4b:a2:06:6e:b0:90:82:fc:14:7b:
         d1:d8:55:56:c8:53:2c:b1:14:90:71:d9:c6:12:41:66:7b:26:
         5f:f3:a9:57:52:35:da:dd:b4:13:24:5a:28:0e:37:80:6f:44:
         3c:9b:c7:ff:00:fb:55:b2:1c:05:77:6f:88:e0:e9:44:83:3c:
         0f:25:ff:36:1d:52:58:6e:97:a0:e2:03:14:7a:36:54:b6:e9:
         42:ae:11:d1:cc:31:a6:ec:4d:cf:58:72:32:ed:2e:76:5e:33:
         b1:5c:f2:23:7c:7d:a0:8d:b4:4c:82:25:24:9d:01:5c:47:38:
         31:da:0e:51:d0:ec:c8:de:7a:af:78:29:c7:66:97:af:a0:da:
         02:a8:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:16:28 2025 by rpki-client