This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.mft
File:                     b3cdb9f9-485f-42c4-879d-31049b91d87f.mft (raw, json)
Hash identifier:          ElU48KnR6cHHTGhJ6Zmol6JMFTvzOMOxvD+ubtaOD8Y=
Subject key identifier:   C5:E9:30:FF:21:3C:3E:8B:E6:C8:E0:A6:C2:83:9D:E0:0B:86:68:6C
Authority key identifier: D4:7E:B6:52:60:9A:D1:06:CE:3E:0B:4F:A6:C9:D9:C3:D5:EF:7D:3C
Certificate issuer:       /CN=b3cdb9f9-485f-42c4-879d-31049b91d87f
Certificate serial:       010D0C9F4328584BF0092D9DBB784E5326B2CC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.mft
Manifest number:          010D0C9F4328584B5EFA64EBDA4A8CED35E7FC35
Signing time:             Fri 21 Nov 2025 22:00:08 +0000
Manifest this update:     Fri 21 Nov 2025 22:00:08 +0000
Manifest next update:     Mon 24 Nov 2025 22:00:00 +0000
Files and hashes:         1: 6c551a98-24cb-390f-b208-fe3707946577.roa (hash: 2f2aWs9kE0KQH/1irSAGKTCrACLdyrIxYdAC6DX5LUc=)
                          2: b3cdb9f9-485f-42c4-879d-31049b91d87f.crl (hash: 69f9jeY4pkFVA/Vh+faXkl9VSVr9Iz7xsg9IDxikgk0=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f0:09:2d:9d:bb:78:4e:53:26:b2:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3cdb9f9-485f-42c4-879d-31049b91d87f
        Validity
            Not Before: Nov 21 22:00:08 2025 GMT
            Not After : Nov 24 22:00:00 2025 GMT
        Subject: CN=ffb6b428-c7d6-49df-b9bf-0200bbd827f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:97:4d:f9:5a:0e:91:84:c7:44:cb:1e:14:5f:
                    07:a5:f3:9f:bd:c0:9b:87:e3:70:74:a1:01:43:47:
                    65:c9:79:06:8c:cc:fd:22:57:cc:7a:67:b4:2a:71:
                    31:a2:ef:84:a8:79:06:ac:b2:c9:e0:9c:e3:99:4c:
                    ad:ad:99:27:d3:e6:6e:9d:81:c7:8a:0f:47:4f:8a:
                    26:6a:01:f7:a3:56:88:b2:fd:99:36:89:a8:9f:5a:
                    d8:4a:1d:06:f9:4f:1c:53:a8:f7:02:01:bc:c8:b1:
                    25:70:2e:96:b3:f2:79:f8:e2:18:08:d9:cd:b0:1b:
                    db:95:3c:fb:09:9b:a4:12:5f:56:6f:19:40:c6:30:
                    7a:d8:f6:a8:19:fa:dd:b7:ca:c1:b1:50:f5:9e:38:
                    a5:38:76:31:cc:ce:22:d2:54:71:7c:46:14:6b:cf:
                    59:d0:3a:e3:74:00:2b:49:67:91:7e:a6:83:ab:7c:
                    83:ed:6b:df:71:86:c5:84:b0:f7:53:00:b2:1e:7a:
                    9a:08:96:e1:fe:b3:b0:77:50:84:cd:47:2c:20:48:
                    c1:c2:fa:cf:fb:00:a2:d8:4b:07:25:1e:5c:20:5d:
                    f6:d1:bf:80:db:30:2d:df:b5:63:b3:20:c5:2d:20:
                    73:4e:c8:90:b8:d0:0e:14:5b:7f:38:c6:ce:bf:05:
                    9c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:30:FF:21:3C:3E:8B:E6:C8:E0:A6:C2:83:9D:E0:0B:86:68:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f/b3cdb9f9-485f-42c4-879d-31049b91d87f.crl

            X509v3 Authority Key Identifier:
                keyid:D4:7E:B6:52:60:9A:D1:06:CE:3E:0B:4F:A6:C9:D9:C3:D5:EF:7D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b3cdb9f9-485f-42c4-879d-31049b91d87f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d8:a8:74:b6:97:e5:54:01:a7:86:a4:35:18:d2:46:46:37:
         12:4a:8a:b2:de:1e:77:a1:79:9f:83:a9:a0:0a:a1:0f:a8:32:
         ef:80:79:aa:25:9f:19:42:60:81:1d:20:34:0c:04:b4:04:30:
         4d:3e:dd:b8:e2:37:93:57:dd:32:d6:86:d6:8a:a1:47:2a:30:
         e7:17:61:29:15:7f:6b:eb:16:33:74:f5:63:5a:5b:9d:97:9c:
         20:13:fa:c7:a8:5a:06:99:15:cc:94:c5:f7:04:04:d2:ad:65:
         d8:ea:b0:b9:60:e5:21:63:f7:8f:0a:59:5a:09:dc:9a:b3:c2:
         48:5d:9a:54:45:f5:72:14:49:f5:68:06:e4:0b:0d:6b:1d:b1:
         b9:b1:6b:e9:84:40:53:58:a7:4d:a8:fa:b0:1e:e1:d2:ef:13:
         ea:fa:1c:29:4c:01:f1:44:48:60:4f:85:c1:6b:cc:62:ec:05:
         e2:41:36:ea:1c:3f:53:6d:c7:d8:ca:21:4d:b0:db:ec:1e:9c:
         85:eb:4c:c6:5f:a4:c0:8f:e5:69:b0:43:1d:30:08:a2:5f:c7:
         31:d4:48:53:b6:0a:e5:bb:a7:22:a2:94:b6:c0:f1:53:9f:49:
         88:b0:d7:7f:0e:04:b2:ff:6c:b9:a7:d2:08:a9:f4:2b:57:2f:
         95:f5:ed:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:09:37 2025 by rpki-client