This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft File: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft (raw, json) Hash identifier: LhljSDRaXeKXE1J44sJb8BvhljQM0T7f5/RyqTPHQjg= Subject key identifier: F3:32:D1:5E:6C:93:F9:9F:A4:47:13:0B:D0:4D:4B:5C:62:9D:2E:37 Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F4328584BF9CE85DCF30AC5F4668B8630 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft Manifest number: 010D0C9F4328584073A84EB6BC7F2571415E20D0 Signing time: Tue 25 Nov 2025 10:00:03 +0000 Manifest this update: Tue 25 Nov 2025 10:00:03 +0000 Manifest next update: Fri 28 Nov 2025 10:00:00 +0000 Files and hashes: 1: 5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa (hash: LP3/ITAunRzg+nL5d1UdfdX97Uzf//EFGBlyxedS5uA=) 2: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl (hash: zoZMvIznIo1zObkXegT8YdZuvx5Hlv4gGfFTaWUKo1c=) 3: aea4ee67-2699-3a0b-a978-13a7b345b89d.roa (hash: 7ur0wr6sk6AI8afJbB5KyGyww3DHt81fgqMXeZm0q9I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f9:ce:85:dc:f3:0a:c5:f4:66:8b:86:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Nov 25 10:00:03 2025 GMT Not After : Nov 28 10:00:00 2025 GMT Subject: CN=ca8f1001-a797-4545-bcda-bfb7d7fa4fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:76:61:e9:33:e2:68:11:87:38:5e:c5:83: bf:a3:d4:34:6f:c5:36:15:7a:d6:37:cc:89:2c:6a: ca:dc:03:77:34:48:38:30:58:82:c2:73:1a:9d:c9: d1:8c:0a:1a:80:a7:3f:00:9b:53:bf:b7:78:13:b0: 78:a4:f8:73:c1:9f:1d:9d:fc:ef:47:69:31:2b:3c: 4c:88:b5:9f:40:17:95:d8:a1:01:09:cc:66:cb:b7: 5c:c5:ea:90:df:5c:c1:5e:c3:c9:6b:62:ec:89:1c: 29:02:1c:eb:7d:ec:68:bc:6d:28:f7:b7:04:87:9c: 29:21:1f:c3:28:91:78:5e:31:76:0e:6c:d6:cb:86: 7c:94:19:0d:e7:4d:db:a7:63:9f:09:c1:9f:98:1b: 8b:70:58:5f:ef:1c:94:6b:46:b4:c1:32:f6:ef:fc: 63:c7:74:20:12:80:40:52:36:50:de:a6:06:98:67: e7:fb:4c:cd:b2:fb:29:b1:8a:4f:40:c7:99:53:94: 44:02:69:bc:16:0f:ef:6b:1e:35:79:4f:50:97:af: 14:93:95:3d:70:d6:f5:03:bf:e8:f2:85:46:24:a8: 76:b0:aa:5b:a8:42:b8:0f:f2:b8:e2:dc:69:5b:7d: da:97:de:cf:11:9a:53:4a:b6:64:9a:11:f8:13:b8: 35:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:32:D1:5E:6C:93:F9:9F:A4:47:13:0B:D0:4D:4B:5C:62:9D:2E:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b8:e5:c4:c4:4d:c8:fe:1b:6c:95:a1:1e:df:15:c0:3e:ba: 33:39:54:d1:de:d4:ab:83:e3:56:a3:6e:3e:57:84:7e:7c:fb: bf:01:db:32:09:e4:1b:b0:45:96:e7:22:11:9c:46:3a:d0:e3: 3d:ef:3b:32:ae:5d:79:27:bc:83:45:23:60:4e:fb:22:51:c8: 11:dc:5e:b0:ff:73:00:45:c9:6a:99:ea:f3:44:ac:24:a1:60: 5c:3a:0d:56:62:41:f1:7a:62:8f:f9:9e:8c:5e:ea:7e:9e:c8: 88:80:2c:34:d7:63:32:52:8e:ff:78:0e:97:a8:af:88:12:f3: 32:77:82:26:31:d0:2f:87:bd:bc:e5:8b:b4:c7:eb:1d:8f:77: a6:b8:9a:d7:58:52:b5:f7:f1:e3:45:19:8b:4b:1b:78:2a:58: 62:2f:2a:9f:94:d6:6d:cd:22:b4:97:36:98:58:99:3a:af:db: 5b:9a:98:02:c6:40:1e:2a:79:7b:de:38:77:7d:27:f8:19:53: d7:ee:6e:9b:89:39:0d:18:de:57:cc:47:ae:9c:30:82:8f:21: ca:23:87:d6:81:cd:e6:cb:00:3f:7f:f9:d0:5f:aa:82:1b:af: 94:14:fa:ae:00:41:cf:13:bc:e1:c0:91:e8:fe:c3:df:cd:ac: 12:22:ac:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv5zoXc8wrF9GaLhjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI1MTEyNTEwMDAwM1oXDTI1MTEyODEwMDAwMFowLzEtMCsGA1UEAxMk Y2E4ZjEwMDEtYTc5Ny00NTQ1LWJjZGEtYmZiN2Q3ZmE0ZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaR2Yekz4mgRhzhexYO/o9Q0b8U2FXrWN8yJ LGrK3AN3NEg4MFiCwnMancnRjAoagKc/AJtTv7d4E7B4pPhzwZ8dnfzvR2kxKzxM iLWfQBeV2KEBCcxmy7dcxeqQ31zBXsPJa2LsiRwpAhzrfexovG0o97cEh5wpIR/D KJF4XjF2DmzWy4Z8lBkN503bp2OfCcGfmBuLcFhf7xyUa0a0wTL27/xjx3QgEoBA UjZQ3qYGmGfn+0zNsvspsYpPQMeZU5REAmm8Fg/vax41eU9Ql68Uk5U9cNb1A7/o 8oVGJKh2sKpbqEK4D/K44txpW33al97PEZpTSrZkmhH4E7g1zQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPMy0V5sk/mfpEcTC9BNS1xinS43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvYWEwNDNlNTUtZTVkMi00 ZDcwLWJmZTgtN2Y0MTE0ZDNmYzJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIuOXExE3I/htslaEe3xXA ProzOVTR3tSrg+NWo24+V4R+fPu/AdsyCeQbsEWW5yIRnEY60OM97zsyrl15J7yD RSNgTvsiUcgR3F6w/3MARclqmerzRKwkoWBcOg1WYkHxemKP+Z6MXup+nsiIgCw0 12MyUo7/eA6XqK+IEvMyd4ImMdAvh7285Yu0x+sdj3emuJrXWFK19/HjRRmLSxt4 KlhiLyqflNZtzSK0lzaYWJk6r9tbmpgCxkAeKnl73jh3fSf4GVPX7m6biTkNGN5X zEeunDCCjyHKI4fWgc3mywA/f/nQX6qCG6+UFPquAEHPE7zhwJHo/sPfzawSIqzR -----END CERTIFICATE-----Generated at Tue Nov 25 11:58:56 2025 by rpki-client