This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft File: c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft (raw, json) Hash identifier: UF0QukP2fRy2Shlc8mZv088yMInlVenXd2aEwth4IqU= Subject key identifier: 13:4B:B3:58:D0:A1:5F:EE:29:7D:3E:EC:23:14:74:E2:33:4E:DE:79 Authority key identifier: F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 Certificate issuer: /CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Certificate serial: 010D0C9F4328584BE485108B8BFCA1E35C854500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft Manifest number: 010D0C9F4328584182C9D2A8511793A84C4DECDA Signing time: Mon 17 Nov 2025 19:00:03 +0000 Manifest this update: Mon 17 Nov 2025 19:00:03 +0000 Manifest next update: Thu 20 Nov 2025 19:00:00 +0000 Files and hashes: 1: 8fb3012a-d947-3398-947d-9744cdd32093.roa (hash: EsOXidHOc9bJ4YV+lqOSCnrmppdHWKh88B9lmxjRPLs=) 2: c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl (hash: 28r8VKg/11+c+WhvRN3h3cEz4HBGYpcnDzS5/W4Lpb4=) 3: d5dbc3b9-a47b-3dc0-9d94-e66d19626956.roa (hash: 8UMlm3pPHBxvUfY1TTYAI975CkE0npxSZFYQYSuEsPc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e4:85:10:8b:8b:fc:a1:e3:5c:85:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9aa1567-89a9-4ce4-8bd7-e624999091e3 Validity Not Before: Nov 17 19:00:03 2025 GMT Not After : Nov 20 19:00:00 2025 GMT Subject: CN=8cd7cc35-296e-4b48-9456-dcbe1f649089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:12:27:f7:3e:30:90:87:1c:6c:bb:f7:c3: 27:ef:38:0b:90:e0:7c:cc:0c:fd:2f:65:93:56:88: 08:74:9a:df:64:fb:4e:d5:0f:ec:6f:4a:df:fd:bd: 8e:cb:31:c3:db:d9:d7:3d:c1:10:54:9d:74:b6:67: 7f:ec:f6:e6:7f:87:22:a6:c7:34:f9:e8:96:db:fc: 9f:1b:a5:c0:4c:84:38:c6:c3:15:58:a2:42:25:f3: 26:f5:8f:44:bf:fc:69:b0:07:3d:d4:cb:79:41:9c: 88:96:4a:4a:ac:43:88:e3:bf:46:7b:3d:48:22:1c: 52:99:0d:df:a5:49:39:2e:e2:b9:3c:ab:93:7b:db: bf:16:63:ae:01:c5:43:3f:06:e3:b1:53:5d:d7:d3: 93:37:bb:41:f5:13:8f:79:90:93:fc:13:ab:06:58: 77:ca:e8:9e:96:df:31:71:60:c3:ab:2a:d6:07:ef: 1d:4a:a1:48:a3:87:a4:33:a5:90:13:b9:9b:ea:b8: c4:03:51:30:a2:51:a9:9b:00:86:27:a1:59:f1:b0: 06:bc:0b:e7:99:0f:30:79:38:1f:72:bc:bb:ae:8c: 4e:42:85:84:12:c5:70:7c:45:3d:1f:8f:f7:91:da: c5:ab:a4:f7:33:0e:e5:83:9a:c5:c9:91:19:1c:b7: de:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4B:B3:58:D0:A1:5F:EE:29:7D:3E:EC:23:14:74:E2:33:4E:DE:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3/c9aa1567-89a9-4ce4-8bd7-e624999091e3.crl X509v3 Authority Key Identifier: keyid:F6:E2:9D:DC:F3:98:69:7C:13:B9:E8:52:1D:40:07:88:1D:21:4D:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9aa1567-89a9-4ce4-8bd7-e624999091e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5e:09:bd:54:ab:47:ac:b3:2b:3e:9d:3e:ce:55:58:06:74: 8f:15:43:41:d4:c0:c2:17:65:8d:58:9e:09:9b:95:57:1d:e8: fc:ba:f4:ca:4e:36:48:71:7f:29:20:f5:2d:4b:33:ec:4a:9b: 6b:45:50:19:a5:01:1c:9b:03:d9:c6:a1:c0:f3:9a:ed:66:12: 26:8d:02:e8:a7:a4:88:bd:6b:10:cf:6b:17:23:0b:fe:77:e0: 17:57:70:06:fa:65:fd:da:26:76:36:62:46:d9:ba:0b:de:72: 97:e7:fd:f9:b5:01:26:aa:20:63:5c:b1:bc:9c:66:60:31:97: d7:6f:aa:0d:ac:ec:c4:1c:c5:2f:ac:99:5f:82:42:40:d4:23: b4:06:0b:5c:e5:ef:be:d2:6e:3a:a1:c8:9a:22:73:aa:33:f6: 97:0d:79:ab:d5:e6:f0:9d:97:92:10:63:52:86:e0:88:c5:05: c9:eb:95:c3:68:50:bb:24:c2:04:27:0e:d3:9d:7a:7e:95:f4: 1a:b9:03:8a:ed:6f:a3:b2:5e:d3:81:b9:0f:cd:56:2b:cd:12: ff:35:52:a7:bf:aa:20:cf:14:5c:48:26:2e:eb:b5:36:f1:4f: bc:77:d5:08:a5:f0:57:b4:81:33:e6:3a:af:28:f0:92:4b:25: 8d:c0:f5:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvkhRCLi/yh41yFRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlhYTE1NjctODlhOS00Y2U0LThiZDctZTYyNDk5OTA5 MWUzMB4XDTI1MTExNzE5MDAwM1oXDTI1MTEyMDE5MDAwMFowLzEtMCsGA1UEAxMk OGNkN2NjMzUtMjk2ZS00YjQ4LTk0NTYtZGNiZTFmNjQ5MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvsSJ/c+MJCHHGy798Mn7zgLkOB8zAz9L2WT VogIdJrfZPtO1Q/sb0rf/b2OyzHD29nXPcEQVJ10tmd/7Pbmf4cipsc0+eiW2/yf G6XATIQ4xsMVWKJCJfMm9Y9Ev/xpsAc91Mt5QZyIlkpKrEOI479Gez1IIhxSmQ3f pUk5LuK5PKuTe9u/FmOuAcVDPwbjsVNd19OTN7tB9ROPeZCT/BOrBlh3yuielt8x cWDDqyrWB+8dSqFIo4ekM6WQE7mb6rjEA1EwolGpmwCGJ6FZ8bAGvAvnmQ8weTgf cry7roxOQoWEEsVwfEU9H4/3kdrFq6T3Mw7lg5rFyZEZHLfe4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBNLs1jQoV/uKX0+7CMUdOIzTt55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOWFh MTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0OTk5MDkxZTMvYzlhYTE1NjctODlhOS00 Y2U0LThiZDctZTYyNDk5OTA5MWUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzlhYTE1NjctODlhOS00Y2U0LThi ZDctZTYyNDk5OTA5MWUzL2M5YWExNTY3LTg5YTktNGNlNC04YmQ3LWU2MjQ5OTkw OTFlMy5jcmwwHwYDVR0jBBgwFoAU9uKd3POYaXwTuehSHUAHiB0hTQgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOWFhMTU2Ny04OWE5LTRjZTQtOGJkNy1lNjI0 OTk5MDkxZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBQXgm9VKtHrLMrPp0+zlVY BnSPFUNB1MDCF2WNWJ4Jm5VXHej8uvTKTjZIcX8pIPUtSzPsSptrRVAZpQEcmwPZ xqHA85rtZhImjQLop6SIvWsQz2sXIwv+d+AXV3AG+mX92iZ2NmJG2boL3nKX5/35 tQEmqiBjXLG8nGZgMZfXb6oNrOzEHMUvrJlfgkJA1CO0Bgtc5e++0m46ociaInOq M/aXDXmr1ebwnZeSEGNShuCIxQXJ65XDaFC7JMIEJw7TnXp+lfQauQOK7W+jsl7T gbkPzVYrzRL/NVKnv6ogzxRcSCYu67U28U+8d9UIpfBXtIEz5jqvKPCSSyWNwPWt -----END CERTIFICATE-----Generated at Tue Nov 18 12:07:18 2025 by rpki-client