This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.mft
File:                     9d2a8ad1-bebe-444b-bb31-0d266efbde9e.mft (raw, json)
Hash identifier:          GqWAL8KFOWRqwOy9/9QQZOR/xYMlfFuYNFgUVWPGWak=
Subject key identifier:   6C:A9:BB:07:61:70:9F:E8:EF:36:2F:51:A9:C4:AC:32:76:D1:9C:44
Authority key identifier: 29:82:77:D5:CE:BA:AA:F9:5A:EE:FA:C8:CE:E6:9C:BB:C4:D8:BB:14
Certificate issuer:       /CN=9d2a8ad1-bebe-444b-bb31-0d266efbde9e
Certificate serial:       010D0C9F4328584BF20362A324458F0D60472680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.mft
Manifest number:          010D0C9F4328584B60EFA78BA7992220A98BD2F5
Signing time:             Sat 22 Nov 2025 15:00:03 +0000
Manifest this update:     Sat 22 Nov 2025 15:00:03 +0000
Manifest next update:     Tue 25 Nov 2025 15:00:00 +0000
Files and hashes:         1: 27fcef07-84e5-36f4-97f4-b2e2cbc98ada.roa (hash: +8rDc2l5R8PHKV1we7apiHzvuKQPawyPbESdqBIi7wM=)
                          2: 9d2a8ad1-bebe-444b-bb31-0d266efbde9e.crl (hash: XdXgy2dd0A/6jl2lzZjWUDNNnTCCcFyYIVNp7NNnZSM=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f2:03:62:a3:24:45:8f:0d:60:47:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d2a8ad1-bebe-444b-bb31-0d266efbde9e
        Validity
            Not Before: Nov 22 15:00:03 2025 GMT
            Not After : Nov 25 15:00:00 2025 GMT
        Subject: CN=d91a3dec-2acf-4153-a768-45c214f26498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:c9:99:b6:1f:7e:44:73:d3:3f:8f:1c:e9:
                    66:1c:b5:16:7e:4e:d4:0a:ca:45:7e:1d:77:8c:26:
                    cf:3c:4e:06:bb:01:b5:28:0b:b3:62:12:7c:d4:c7:
                    e4:b4:fc:d7:91:5b:13:0f:0c:c9:5a:7c:2d:6c:b9:
                    f4:60:cf:e8:88:a4:70:a0:60:b2:08:71:41:bb:e7:
                    85:b1:e4:4d:3e:f8:c5:fa:c6:4c:23:db:ba:f4:42:
                    a6:65:7c:f2:7d:d8:b8:66:2d:29:33:e3:f1:64:33:
                    ec:83:88:5c:e0:00:e2:ae:3a:46:e9:15:69:1c:aa:
                    56:bd:ec:6e:12:2c:2a:ea:0b:be:1d:c4:c6:a9:c0:
                    79:ea:0d:c8:91:c3:3f:7b:ba:ea:97:71:07:8e:f0:
                    c7:15:8f:0a:6e:cd:44:f3:d4:8e:01:e5:ef:0f:fb:
                    e4:80:30:3e:a4:0a:50:ed:cf:0b:f8:23:60:44:6a:
                    80:f1:17:12:26:f0:13:1e:c0:0e:03:88:f3:c4:40:
                    7c:88:12:80:c2:8a:09:54:61:a6:86:81:55:09:3f:
                    bc:df:00:6b:d9:5f:6a:32:ae:80:7a:da:91:67:c5:
                    30:e0:f7:5a:9b:ec:ea:4d:f3:5f:43:b9:18:5b:66:
                    e6:cc:c6:8c:95:aa:be:b7:3a:27:84:18:82:92:90:
                    97:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A9:BB:07:61:70:9F:E8:EF:36:2F:51:A9:C4:AC:32:76:D1:9C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.crl

            X509v3 Authority Key Identifier:
                keyid:29:82:77:D5:CE:BA:AA:F9:5A:EE:FA:C8:CE:E6:9C:BB:C4:D8:BB:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d2a8ad1-bebe-444b-bb31-0d266efbde9e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:f7:e3:db:10:65:e7:e5:3e:62:d2:51:56:5a:f4:01:59:f6:
         2e:20:07:36:0d:73:8f:c1:da:ea:00:f6:6d:2d:87:ed:6d:ac:
         ad:5f:06:3d:7b:bd:86:eb:88:7f:cb:50:2d:34:15:63:70:83:
         89:a5:70:95:47:15:4d:7e:aa:dd:65:57:bb:e3:c5:39:87:fb:
         c3:84:3a:5f:6e:86:b6:06:32:99:2a:a3:37:7c:22:c6:dc:a5:
         3c:ba:7a:af:9c:3d:6d:d8:17:fe:de:66:ad:d2:e2:9e:a2:20:
         c4:1e:27:91:2e:6c:39:81:71:85:24:c7:3c:ef:f5:ae:23:74:
         c9:6e:2e:13:c9:84:22:d8:d0:ee:34:c9:c7:40:5e:9e:83:3e:
         f9:44:27:4a:55:c5:4c:9c:43:1f:d4:44:91:bc:24:8c:e1:9f:
         70:e0:ed:3a:5d:e5:23:e5:cd:f0:f8:0e:08:d1:1c:70:8f:98:
         72:48:dc:d9:ed:03:bb:8f:5e:89:86:b2:68:5b:64:db:66:7a:
         cf:4b:da:13:1a:b2:23:d4:92:d4:87:e4:3b:62:c6:fe:58:19:
         f5:24:69:b9:fc:b1:00:78:72:c6:79:62:d8:4e:39:42:d5:06:
         1f:08:6b:8d:65:1d:c2:eb:22:db:8a:fe:2d:7d:63:d2:d5:53:
         ec:cc:0f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:17:02 2025 by rpki-client