This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft
File:                     bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft (raw, json)
Hash identifier:          ar4IiRkASLvx0T6FD3vdswQ2end59S2UvMb4z7OWWsk=
Subject key identifier:   B1:74:DC:AA:C5:1B:77:F7:A4:26:E5:14:B2:59:5B:AB:F2:4E:FC:39
Authority key identifier: 2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2
Certificate issuer:       /CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9
Certificate serial:       010D0C9F4328584BF1AA09CE64722BA99A4DBE28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft
Manifest number:          010D0C9F4328584AB3740036000CA7473DAEBDFB
Signing time:             Sat 22 Nov 2025 12:00:03 +0000
Manifest this update:     Sat 22 Nov 2025 12:00:03 +0000
Manifest next update:     Tue 25 Nov 2025 12:00:00 +0000
Files and hashes:         1: 3146a355-4904-3716-8587-bfd701b63f6a.roa (hash: NaGYN0pv21KdwXEZ7QUrED8Y4VEd0DmJq9zFmQt1iQE=)
                          2: 52a98281-143a-37cd-966c-808bd9db6981.roa (hash: XGS3VBvkDvfYEAUjKK0UMgJn8GLlUllXF888X4R8s50=)
                          3: aff2f39e-faa0-3953-afbf-237b8e2372fa.roa (hash: FQfAI15t0tZktVzZBG+Kegmln/lXvgOtpg3LtcEz5Tw=)
                          4: bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl (hash: TkVsg2aVUpPcsx3S1dCnr2wwitq/l1JChvEIoo4w9Z8=)
                          5: ed573cf1-a596-38f3-ac33-bbb7d8ad9ca9.roa (hash: I5Q4goyWL9cSoDrKi9863++/5eYegTn5aSRC49A1XBQ=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f1:aa:09:ce:64:72:2b:a9:9a:4d:be:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9
        Validity
            Not Before: Nov 22 12:00:03 2025 GMT
            Not After : Nov 25 12:00:00 2025 GMT
        Subject: CN=b41b58c7-e7a9-40fb-ae26-5be263057d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:01:7d:4b:d5:52:57:b9:11:4a:49:b9:7c:bd:
                    1d:fd:0d:d1:58:d3:10:0b:40:2c:a0:36:f2:fa:86:
                    9f:4b:69:8b:23:ab:49:13:f7:af:df:aa:41:0c:73:
                    ad:5f:3e:79:46:08:10:3a:c3:70:fa:71:af:6f:37:
                    96:4c:e9:3f:eb:ee:ec:3d:6f:73:d0:30:66:63:aa:
                    f4:b5:b0:e5:74:c3:5a:e7:44:e3:d2:67:30:95:b2:
                    df:3f:d1:99:3c:ed:bb:5f:80:9d:a7:82:85:9c:e3:
                    a5:02:7d:4b:dd:2f:c7:92:95:d1:53:53:59:68:15:
                    1b:00:c3:eb:ee:18:b8:9f:66:5b:b5:7c:21:2e:2b:
                    7b:bf:6b:ae:b5:47:a0:5e:95:08:b8:9d:47:b2:1b:
                    63:97:eb:db:2e:d5:f8:51:f9:bf:dd:4a:53:77:fe:
                    83:46:53:2d:af:2b:20:6a:a6:bb:e2:45:a0:5c:62:
                    d4:33:5e:88:63:e9:24:76:56:db:03:a1:a7:68:ac:
                    37:fa:b1:58:20:df:3e:87:06:a1:79:5b:81:bb:4a:
                    6b:ec:c6:ec:cb:f4:3e:c8:79:22:df:56:01:4d:36:
                    13:87:ca:ec:d7:85:3a:0d:e6:a9:83:a8:96:70:d4:
                    2f:94:86:45:e9:91:c9:91:4c:0b:ac:cb:34:c8:7b:
                    4e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:74:DC:AA:C5:1B:77:F7:A4:26:E5:14:B2:59:5B:AB:F2:4E:FC:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl

            X509v3 Authority Key Identifier:
                keyid:2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:36:a0:65:34:ab:7f:8d:15:56:b6:92:d0:0a:65:01:69:97:
         2c:de:05:53:2f:37:fe:60:f9:88:7f:49:ab:d5:84:68:23:23:
         81:2b:e4:ad:93:55:10:57:41:6f:76:34:b3:7b:0c:40:0a:d5:
         37:f7:53:cb:13:e8:2e:53:a2:bd:69:7a:6a:97:d5:c8:d2:fb:
         12:e4:51:19:6d:ef:89:5d:9f:a4:03:bb:dc:09:2c:95:3b:d5:
         be:ef:e2:c4:18:15:69:cb:a6:8b:e4:bb:96:29:2d:ae:07:e8:
         67:71:f9:2f:c7:5f:f7:f9:81:64:92:70:a4:b2:ab:18:be:5d:
         08:ca:67:a4:3b:a3:80:32:06:7b:33:91:ed:03:24:3c:ea:ad:
         a3:0b:84:2c:70:d4:dd:ea:00:29:dc:91:df:2c:c0:b9:ea:66:
         01:ff:2d:eb:9b:72:79:f6:65:cf:57:5b:a8:bf:23:35:1e:14:
         69:b4:d8:87:84:b5:d9:6f:ea:1a:b4:0a:2e:2e:15:37:f7:17:
         26:f1:00:0a:4f:29:cd:6a:4b:10:c6:7f:a0:fe:6a:c8:3c:fe:
         1f:43:c1:0c:ec:84:7e:60:3b:aa:4d:3c:d7:a4:94:21:6a:e3:
         d1:0c:16:45:22:cb:2e:35:78:db:16:05:73:03:61:c2:ff:c5:
         4e:f7:0d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:12:44 2025 by rpki-client