This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft
File:                     989afb89-021f-486a-9386-ea5ad2a85eb3.mft (raw, json)
Hash identifier:          iBKvYdOTCh9Ho+Fu+OZPOF1PrKCi3uP0gYxv8xOv2wU=
Subject key identifier:   94:F8:71:BB:3E:CB:13:C7:83:4E:F5:C0:2F:A9:B6:17:C6:33:2E:61
Authority key identifier: C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52
Certificate issuer:       /CN=989afb89-021f-486a-9386-ea5ad2a85eb3
Certificate serial:       010D0C9F4328584BF1E59A9636ABDCE0F776CA20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft
Manifest number:          010D0C9F4328584AB3B971372E2FC2C294D1E7FE
Signing time:             Sat 22 Nov 2025 14:00:03 +0000
Manifest this update:     Sat 22 Nov 2025 14:00:03 +0000
Manifest next update:     Tue 25 Nov 2025 14:00:00 +0000
Files and hashes:         1: 24ff25e6-fb53-31cd-9980-92a2e33cb078.roa (hash: pUiy2UzYFiv/NrKCS/A4KxaEojnQDEorLFjzRS5HaOk=)
                          2: 4bd87949-f415-39b3-9d62-cda131cadecc.roa (hash: JCy6rVoyDmrfMnTUJUqPQLWcgI01HDqeE1TOorvAb4Y=)
                          3: 84a820e8-2494-3391-a8ed-9f54f9e78765.roa (hash: ebcfApQDaKNYk7bRt+ZecRu4+UImn8WRgGAvWHxeDIM=)
                          4: 86f9e25e-c248-3933-9ce8-4e4b4097a657.roa (hash: LPxaf4VXVJ4wOKiQbPtEGMqxTkBHwuwxAJuoUYYoiic=)
                          5: 989afb89-021f-486a-9386-ea5ad2a85eb3.crl (hash: OpHkQeMj0/TEfscgPgCFt51taQBTCtSbjp8OSqUTp6s=)
                          6: e17bd202-be79-3815-9fd1-b952c78144fc.roa (hash: jPiuKGrwYPrJ4510ipotolKjywz9VbAYm3HwACVSAxY=)
                          7: fc2d25ca-0dfa-3092-aef3-a1e8c3cc11a6.roa (hash: av3rQ6IfAwCAZ8mXg6b3cRN/EmqqWMFWsdJ/P0rUfrk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f1:e5:9a:96:36:ab:dc:e0:f7:76:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=989afb89-021f-486a-9386-ea5ad2a85eb3
        Validity
            Not Before: Nov 22 14:00:03 2025 GMT
            Not After : Nov 25 14:00:00 2025 GMT
        Subject: CN=4f1a24d7-9cb9-4a73-a618-6a1202fe88b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:96:bc:c1:8a:2d:2c:0b:d3:bb:6d:99:57:ad:
                    1f:58:3a:22:f2:6b:ca:8f:6e:73:7e:46:7e:06:13:
                    00:83:d1:f0:ac:e0:34:b8:0b:b1:c4:a6:5e:c0:d1:
                    f3:d8:78:3f:a3:19:ba:45:4a:fc:86:5a:8b:53:99:
                    ec:00:8d:92:28:86:dd:84:02:dc:00:44:1b:2a:93:
                    ff:4f:a9:5c:9b:3d:e3:81:9b:b7:12:1a:f2:1d:07:
                    a8:f0:fa:31:71:2b:3d:ab:34:91:cc:38:bd:85:18:
                    31:59:40:4d:f6:bb:19:11:4e:b5:dd:05:f6:d2:65:
                    ec:e1:6e:ea:96:89:a8:da:dd:6a:51:41:7a:d4:f8:
                    1d:1c:1d:aa:91:ca:e7:31:05:78:b8:3b:ca:1a:11:
                    a4:46:0d:72:eb:50:f9:c3:58:42:b3:7a:e6:48:61:
                    1c:a7:a1:bb:a8:fb:94:ae:a4:d7:85:80:3c:dc:0e:
                    ca:9e:49:fa:19:4e:f3:16:a2:a3:e7:12:43:fa:0c:
                    d3:d7:c4:a1:c7:c2:df:b0:e0:57:10:cd:07:f7:a4:
                    39:4c:ea:87:7d:39:5b:b3:56:fb:e5:2e:2f:30:3b:
                    78:3e:44:49:c9:cb:2e:b2:e0:a4:a3:dc:83:74:85:
                    33:c7:45:fa:b8:38:60:b3:42:11:55:01:47:22:a8:
                    54:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F8:71:BB:3E:CB:13:C7:83:4E:F5:C0:2F:A9:B6:17:C6:33:2E:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3/989afb89-021f-486a-9386-ea5ad2a85eb3.crl

            X509v3 Authority Key Identifier:
                keyid:C8:B3:AD:AE:75:39:83:2D:10:4E:01:6B:67:FF:1F:8B:DD:56:66:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/989afb89-021f-486a-9386-ea5ad2a85eb3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:44:4f:9a:8b:e2:f6:72:75:dd:0d:51:79:61:3b:f7:de:ef:
         98:e4:a0:0a:97:97:b4:80:dd:56:b4:5f:ef:64:5c:e0:67:0b:
         96:6a:bd:76:98:42:8b:35:23:a4:db:55:81:2e:e2:09:24:5b:
         bf:ae:eb:da:92:a2:e2:01:5b:5a:d1:7d:0b:4a:47:99:50:7e:
         e9:43:ee:d8:f5:a6:3f:00:43:eb:9b:a9:83:87:03:77:74:ca:
         91:66:40:e6:0b:75:4a:67:73:0a:b0:ca:b4:9c:34:0f:46:45:
         bc:cd:c0:2c:3f:f1:b6:1d:c2:d0:a8:73:7c:d9:97:e8:77:28:
         f9:b7:02:5a:7b:ab:1b:30:82:ec:ba:72:56:3f:e9:91:12:dc:
         e5:3f:c7:10:31:61:27:fa:78:f5:c2:18:4d:99:64:be:0d:32:
         7c:a0:01:3c:cd:15:03:b0:50:db:3a:e1:05:52:d4:96:d9:94:
         cf:ec:09:aa:8e:3d:d7:75:b4:6f:74:5e:1d:7c:cc:04:d9:9d:
         f9:31:88:f1:4d:ec:7a:bd:7e:e2:d4:41:fd:db:e5:18:5f:83:
         88:3b:21:49:4a:b8:d3:71:c1:8f:fa:c1:6d:dd:cb:2b:c9:25:
         6d:9b:35:d2:d2:98:65:b5:8a:29:96:bb:41:53:bd:93:ee:03:
         85:82:04:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:13:24 2025 by rpki-client