This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
File:                     f70c9613-7def-4bc4-b860-f4e5374d76a7.mft (raw, json)
Hash identifier:          52bW32c21KFe9GAFaOJ0oBoHzs/KU9GPEw8GE4bePrQ=
Subject key identifier:   6D:89:7B:50:F3:60:EA:2D:1E:EC:3F:CE:1B:DF:55:A7:9C:D9:3B:BE
Authority key identifier: 5F:62:7A:32:F3:6B:A6:D8:48:46:D6:9F:3F:89:DD:9F:DC:7E:6A:70
Certificate issuer:       /CN=f70c9613-7def-4bc4-b860-f4e5374d76a7
Certificate serial:       010D0C9F4328584BF2035F18C2433B57262DD380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
Manifest number:          010D0C9F4328584ADAECCC6B7CD414BC5C31DD67
Signing time:             Sat 22 Nov 2025 15:00:03 +0000
Manifest this update:     Sat 22 Nov 2025 15:00:03 +0000
Manifest next update:     Tue 25 Nov 2025 15:00:00 +0000
Files and hashes:         1: 36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer (hash: hoH3TXEA6BTbabPlJALV/eJAeR0E0f+bNQ6sRRshY/k=)
                          2: f70c9613-7def-4bc4-b860-f4e5374d76a7.crl (hash: ZpmdJvNyU1ExmFoCgXdnsRsKNBnh43i5jsUx3rU7ggs=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:f2:03:5f:18:c2:43:3b:57:26:2d:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f70c9613-7def-4bc4-b860-f4e5374d76a7
        Validity
            Not Before: Nov 22 15:00:03 2025 GMT
            Not After : Nov 25 15:00:00 2025 GMT
        Subject: CN=9a2a207d-5051-472d-a042-8564b7a5cd44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:a7:a4:83:89:ff:be:1c:d4:4d:3a:dc:34:
                    00:b6:85:65:66:a0:39:82:b4:6d:f6:3f:0f:7e:32:
                    88:af:cf:2b:d7:d9:6f:d9:60:39:0c:33:0c:58:46:
                    eb:48:fc:7c:11:97:6f:c0:5b:e8:40:cf:ae:49:62:
                    25:51:aa:46:f0:1b:b4:51:a0:d1:68:8b:72:9c:62:
                    ca:5c:aa:17:6f:ba:47:7a:4f:c4:e5:8a:7e:86:52:
                    7e:bb:d9:51:e8:17:a0:a9:83:80:6c:6b:78:f8:43:
                    bf:20:4c:a6:40:aa:27:17:9a:7a:2a:36:71:3a:de:
                    b7:db:a3:a2:4e:10:cd:57:74:05:55:ae:5e:ef:71:
                    12:49:0a:b7:79:de:62:1f:14:1b:82:e6:3c:45:ea:
                    5f:68:87:70:23:3d:93:52:48:44:0e:7e:30:9b:7c:
                    8f:3d:51:f2:b9:52:a9:9e:bb:0d:99:ab:1a:dd:97:
                    7d:47:ae:f6:1e:d1:5c:05:7e:d4:82:39:1c:4d:8a:
                    96:da:48:db:3a:9a:aa:c0:d5:ff:1d:96:3a:1c:12:
                    dc:77:b7:d5:a3:7e:7b:7f:58:89:34:62:42:84:39:
                    60:fe:34:7f:de:64:0a:77:04:12:20:19:87:3b:db:
                    8d:06:a2:b4:58:54:cb:2b:0c:76:26:95:d3:f5:f7:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:89:7B:50:F3:60:EA:2D:1E:EC:3F:CE:1B:DF:55:A7:9C:D9:3B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl

            X509v3 Authority Key Identifier:
                keyid:5F:62:7A:32:F3:6B:A6:D8:48:46:D6:9F:3F:89:DD:9F:DC:7E:6A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:d0:d4:6e:7c:5e:8d:0b:f4:a0:18:b0:fd:6a:f6:e4:34:54:
         d5:43:93:ca:0a:22:90:39:b4:b0:00:62:81:57:16:7e:e3:66:
         e1:01:73:74:85:77:24:5a:ba:16:14:7e:6d:a2:6a:bb:4b:d8:
         83:8a:3d:c4:5d:af:3c:0a:99:24:47:23:10:d0:14:cc:91:81:
         a7:30:39:e6:3f:f5:14:e2:c0:ff:87:6b:d1:f6:35:5f:e4:7b:
         36:97:e6:f5:70:f8:fc:31:70:89:03:5c:52:dc:9e:49:b5:d2:
         e0:46:29:c9:b9:b2:84:7d:6f:f0:ae:ce:1a:b5:25:a9:30:8a:
         62:a0:2d:89:cd:50:52:76:ad:0c:81:a0:7d:7e:f0:22:c3:d6:
         36:47:44:d0:20:ad:22:ca:92:ef:c6:4d:ff:a9:63:4c:5e:06:
         eb:50:c8:2a:20:5c:d2:20:43:a3:ed:87:3d:c7:58:1a:d5:b9:
         ee:7e:26:78:4e:26:ce:68:27:97:73:e7:3a:17:d5:de:4a:35:
         5b:07:3c:3f:25:3e:42:07:14:9c:df:95:41:e9:90:58:e8:5b:
         e0:93:7d:5b:6d:f8:f6:dc:31:a5:59:c6:1f:2a:f7:1d:f8:f0:
         73:e9:24:3a:a0:94:de:a7:a5:37:23:7c:e6:7a:7f:3a:8f:3b:
         4d:af:21:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----