This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.mft File: a1ebd94e-8686-4da0-85d9-3d3935cc3951.mft (raw, json) Hash identifier: 4Hi44ipiHuBQYZMh30i/kysMR6U4B5jTQ4ae0gPa1k4= Subject key identifier: E3:7F:43:B4:22:40:3D:9A:E0:8A:8C:46:9E:CB:51:98:25:A5:E0:4F Authority key identifier: A4:7E:E4:B9:97:20:3A:EC:F4:91:29:17:72:30:ED:E6:50:B9:AE:93 Certificate issuer: /CN=a1ebd94e-8686-4da0-85d9-3d3935cc3951 Certificate serial: 010D0C9F4328584BF7F21D13A4906C8C6061AFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.mft Manifest number: 010D0C9F4328584073A81B0AE39EC8151387DD41 Signing time: Mon 24 Nov 2025 18:00:08 +0000 Manifest this update: Mon 24 Nov 2025 18:00:08 +0000 Manifest next update: Thu 27 Nov 2025 18:00:00 +0000 Files and hashes: 1: 0f7acc26-2509-366b-b3a8-4c637e179b79.roa (hash: VxmSrVdiuCDqMAhRmJC3HCLKc2WHuMlmyE/T+cdRsXI=) 2: 273db7a5-9c03-359a-a2e5-4a4b553e8662.roa (hash: 9sI5Bj33HobV+7OKQtnFQWO2eJPp8wxVFJVG5YS3+uI=) 3: a1ebd94e-8686-4da0-85d9-3d3935cc3951.crl (hash: qjIXG7z5IjhMigAA9cAoOtfgSO+gL7nmv3Z4DYKZt0M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:f2:1d:13:a4:90:6c:8c:60:61:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ebd94e-8686-4da0-85d9-3d3935cc3951 Validity Not Before: Nov 24 18:00:08 2025 GMT Not After : Nov 27 18:00:00 2025 GMT Subject: CN=f457f4b2-f598-40fa-93f9-52bd012ce393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:35:2d:25:29:99:d0:85:fa:4b:2e:5a:ce:f8: 0c:53:56:58:48:11:36:fd:32:06:66:76:a9:95:6d: bb:ae:4d:f8:6b:6f:98:b9:d9:19:c7:ca:5e:5d:44: dd:a8:cc:42:e6:93:da:8f:bb:c8:c0:ee:4f:ef:f5: bf:31:9f:c2:fe:ce:e6:6f:8f:11:8f:95:36:11:71: 66:3d:44:42:7e:97:de:c9:23:d6:b7:ad:1a:98:c8: d6:13:e7:92:72:e5:8e:e2:64:6f:1c:6a:3f:1d:85: c9:49:59:92:61:df:7d:e0:e6:7f:52:1c:5e:76:e5: c0:2f:9b:12:fe:c0:f8:4c:bc:af:02:9c:40:ff:e0: c1:09:f9:ff:87:fc:8f:c4:5e:18:f7:5c:07:9f:78: 55:f4:df:f5:4e:73:52:aa:de:7d:a5:74:4b:9b:4f: c2:d4:bd:47:5d:c6:89:25:bf:b6:3f:2c:52:8e:27: 77:6e:f9:09:0d:3b:81:b6:6c:03:fc:e5:d8:87:95: 11:ed:84:0e:4e:2a:1a:8d:6b:03:05:13:0a:86:c3: 8f:f4:49:f0:ae:25:54:4d:e2:f5:50:5b:02:79:9e: 83:7b:0c:06:c2:ae:f4:5d:98:fe:cc:7b:97:ca:65: 23:2f:49:45:64:2a:25:b7:b4:82:0d:08:96:e8:46: 17:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7F:43:B4:22:40:3D:9A:E0:8A:8C:46:9E:CB:51:98:25:A5:E0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951/a1ebd94e-8686-4da0-85d9-3d3935cc3951.crl X509v3 Authority Key Identifier: keyid:A4:7E:E4:B9:97:20:3A:EC:F4:91:29:17:72:30:ED:E6:50:B9:AE:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a1ebd94e-8686-4da0-85d9-3d3935cc3951.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:50:cf:49:88:4f:0b:27:e0:4a:df:0f:ec:2a:dd:69:ac:17: d0:a6:ee:19:44:ba:0f:0e:cd:0b:52:0c:93:d5:92:fa:05:9c: 56:6a:99:28:42:b0:24:87:ee:cc:e0:62:12:ce:d3:6f:22:de: 3c:66:23:e4:7b:c1:9e:83:b0:21:ab:b1:4d:50:4b:41:96:b9: 18:ea:8d:4e:5d:7c:05:70:4a:6c:32:ee:84:2a:18:ef:a3:dd: 2f:b2:79:fe:2c:6a:8c:e1:e9:50:49:e0:02:f6:ca:93:ff:68: f1:d6:b4:45:87:e3:d5:a8:13:65:ee:a1:a8:0a:ff:ea:41:58: da:fd:fc:55:2f:ae:8c:a0:24:54:c0:77:d4:bb:3d:ed:3b:b2: 4b:5f:c9:8c:d7:92:d2:c0:2e:ff:40:80:83:b4:d3:2f:80:f3: 5e:3b:52:ee:a6:f1:f2:18:5a:83:91:23:b0:3a:6e:f9:e0:96: 5b:c1:79:43:c7:19:73:fc:bf:12:a8:61:f9:54:c3:e4:d9:9f: 90:9c:4e:21:24:d2:50:10:4a:cc:e1:c1:36:de:e8:cb:3d:8a: 91:9b:05:83:b3:b2:88:30:c2:5c:6f:0a:0c:89:d1:a8:43:73: 7b:f0:72:a6:f2:c9:25:e3:e2:30:02:65:06:e1:87:15:23:3f: 9a:5d:9a:ca -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv38h0TpJBsjGBhr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFlYmQ5NGUtODY4Ni00ZGEwLTg1ZDktM2QzOTM1Y2Mz OTUxMB4XDTI1MTEyNDE4MDAwOFoXDTI1MTEyNzE4MDAwMFowLzEtMCsGA1UEAxMk ZjQ1N2Y0YjItZjU5OC00MGZhLTkzZjktNTJiZDAxMmNlMzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTUtJSmZ0IX6Sy5azvgMU1ZYSBE2/TIGZnap lW27rk34a2+YudkZx8peXUTdqMxC5pPaj7vIwO5P7/W/MZ/C/s7mb48Rj5U2EXFm PURCfpfeySPWt60amMjWE+eScuWO4mRvHGo/HYXJSVmSYd994OZ/UhxeduXAL5sS /sD4TLyvApxA/+DBCfn/h/yPxF4Y91wHn3hV9N/1TnNSqt59pXRLm0/C1L1HXcaJ Jb+2PyxSjid3bvkJDTuBtmwD/OXYh5UR7YQOTioajWsDBRMKhsOP9EnwriVUTeL1 UFsCeZ6DewwGwq70XZj+zHuXymUjL0lFZColt7SCDQiW6EYX6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFON/Q7QiQD2a4IqMRp7LUZglpeBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMWVi ZDk0ZS04Njg2LTRkYTAtODVkOS0zZDM5MzVjYzM5NTEvYTFlYmQ5NGUtODY4Ni00 ZGEwLTg1ZDktM2QzOTM1Y2MzOTUxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTFlYmQ5NGUtODY4Ni00ZGEwLTg1 ZDktM2QzOTM1Y2MzOTUxL2ExZWJkOTRlLTg2ODYtNGRhMC04NWQ5LTNkMzkzNWNj Mzk1MS5jcmwwHwYDVR0jBBgwFoAUpH7kuZcgOuz0kSkXcjDt5lC5rpMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMWViZDk0ZS04Njg2LTRkYTAtODVkOS0zZDM5 MzVjYzM5NTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADUM9JiE8LJ+BK3w/sKt1p rBfQpu4ZRLoPDs0LUgyT1ZL6BZxWapkoQrAkh+7M4GISztNvIt48ZiPke8Geg7Ah q7FNUEtBlrkY6o1OXXwFcEpsMu6EKhjvo90vsnn+LGqM4elQSeAC9sqT/2jx1rRF h+PVqBNl7qGoCv/qQVja/fxVL66MoCRUwHfUuz3tO7JLX8mM15LSwC7/QICDtNMv gPNeO1LupvHyGFqDkSOwOm754JZbwXlDxxlz/L8SqGH5VMPk2Z+QnE4hJNJQEErM 4cE23ujLPYqRmwWDs7KIMMJcbwoMidGoQ3N78HKm8skl4+IwAmUG4YcVIz+aXZrK -----END CERTIFICATE-----Generated at Tue Nov 25 07:25:02 2025 by rpki-client