This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft
File:                     d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft (raw, json)
Hash identifier:          8TexCWS4vvzwZjsLCNwl88QKMd4d1xJIs4PRiQ/GZcs=
Subject key identifier:   BC:51:51:89:ED:6C:4C:F0:D9:D5:5A:4E:A1:0B:30:7F:1C:15:5F:D7
Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F
Certificate issuer:       /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb
Certificate serial:       010D0C9F4328584BF2213163CBCC27646F6D5500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft
Manifest number:          010D0C9F4328584B2ECE132C6AE5C59EACD9EB47
Signing time:             Sat 22 Nov 2025 16:00:08 +0000
Manifest this update:     Sat 22 Nov 2025 16:00:08 +0000
Manifest next update:     Tue 25 Nov 2025 16:00:00 +0000
Files and hashes:         1: 19dc87c2-d464-34e5-b947-58aae145ee40.roa (hash: 8a5IpfJX3x2RbhMK0nZKFzo6/fx6AK1QCvIHLhSjMEY=)
                          2: 7ca1b234-cb9f-3eac-9ac5-a53bb3cd6429.roa (hash: IvVT6J1PvtrznmNE0NVMYm5HMRQwPMkx6oJY0xOrOtk=)
                          3: a96cb05b-0c60-3552-884a-bbc614e95519.roa (hash: kXuiLKaAQNFqZc8JyJ9LJpf+o2+Eq/rvi83S9ix4oVk=)
                          4: cf261d6c-a652-301a-9b41-868da8fbfa85.roa (hash: lFtSKui/6jtOF8PlN3OCPy+5iSAtIr9VjlPu8e7J7d4=)
                          5: cf91ca11-443d-3cf8-bc30-6bb96e36d272.roa (hash: rzSfwu7RyPsmuQpdPsO3sJm/f30DDzdJoRUShyKSSY0=)
                          6: d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl (hash: nwMAG1dWwXqqYWBnIRIGc1Ns1sttAOm8+f0B6gg+ex4=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f2:21:31:63:cb:cc:27:64:6f:6d:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb
        Validity
            Not Before: Nov 22 16:00:08 2025 GMT
            Not After : Nov 25 16:00:00 2025 GMT
        Subject: CN=c2f36be2-7358-4079-8d96-823f4fb81150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:7b:d3:1d:80:df:b2:02:e5:5f:45:4f:c4:
                    90:87:9d:ac:41:e8:c1:54:bf:4a:d3:9c:5d:d5:72:
                    7d:17:14:0a:fd:60:45:63:1e:dc:c2:95:e0:23:61:
                    3a:73:75:fc:dc:b1:76:8e:e3:c1:5f:fa:46:3d:83:
                    1d:1f:a3:4d:95:c9:71:ba:b7:88:7c:2d:df:b3:1f:
                    a6:ee:f0:d7:5e:f1:be:86:35:56:75:ec:60:1b:12:
                    4d:7c:4c:eb:e9:7a:87:75:e5:92:90:8a:b0:8d:06:
                    c3:a6:82:8e:ab:bf:24:53:07:8e:c5:48:cf:8a:0f:
                    10:24:27:ab:2b:7e:a4:96:30:5a:fa:f5:e5:3d:83:
                    64:7a:a4:7c:4c:67:06:e6:e1:3d:89:e5:aa:a2:45:
                    de:58:a6:b9:29:2a:4e:2a:22:a1:f6:65:2a:aa:e6:
                    83:20:17:d4:68:ef:a1:13:01:bd:c2:f7:f9:7e:a9:
                    9b:91:0d:71:b5:38:bc:b3:6e:8a:25:76:c2:a8:c2:
                    82:8f:1f:0d:84:a1:c0:56:fe:69:ce:44:52:9a:30:
                    03:7d:ff:27:e6:71:a2:fc:3c:aa:05:e0:3c:85:c9:
                    1c:bf:b3:c2:d0:74:0e:58:f6:a8:a9:09:d9:3e:64:
                    72:cc:d8:bb:c8:d9:69:ed:a7:3f:ac:d6:2f:32:59:
                    de:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:51:51:89:ED:6C:4C:F0:D9:D5:5A:4E:A1:0B:30:7F:1C:15:5F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl

            X509v3 Authority Key Identifier:
                keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:06:87:df:e0:bd:3c:86:c1:80:b0:00:97:54:89:0e:cd:03:
         b7:46:88:b4:a7:6f:e1:d4:a2:59:e5:e2:fe:9c:fa:f2:57:bd:
         09:87:cc:54:bc:60:1d:80:ca:a3:40:c2:4a:90:73:ca:8f:3f:
         4c:20:5d:20:9e:bf:5d:e2:24:8e:0e:b8:2c:5f:a2:3e:df:2a:
         44:51:96:e5:30:89:03:6e:4c:9d:89:10:42:c2:20:ca:ee:a8:
         9a:ee:db:52:45:b1:36:de:bf:46:ca:58:5d:e0:f6:3f:2b:dc:
         17:ea:59:2a:dc:6d:d5:d7:a9:12:3f:38:5c:e4:eb:46:2d:31:
         05:8b:02:bc:b2:0b:0d:9d:ce:ef:34:9b:63:cb:12:fa:c9:a2:
         18:f1:65:d9:8b:9e:e8:c5:c5:cc:01:34:1f:44:ee:bf:ab:9e:
         83:0c:95:95:0a:59:90:40:77:23:99:d9:35:bb:65:38:54:41:
         bc:7e:52:1b:a9:a8:ee:c0:7e:d0:52:17:0a:3a:70:b8:36:ce:
         c8:e2:b5:b0:a3:b7:7d:bc:34:b2:d5:b7:68:10:2a:60:0e:c2:
         de:49:ab:e5:04:e7:c0:9e:83:15:1d:79:fe:e4:b2:56:ea:ac:
         5e:01:93:a3:8f:8f:e3:42:08:73:d2:5a:18:33:40:c9:9f:a1:
         3d:4a:ae:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:20:48 2025 by rpki-client