This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.mft File: aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.mft (raw, json) Hash identifier: hqBit0HuT2RlJn4TKbHEKHF8KL8T5Hb1vMPehpSW9lI= Subject key identifier: 52:12:3C:0B:CF:67:51:27:81:4C:71:D4:46:C1:69:F7:68:D5:87:10 Authority key identifier: 5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49 Certificate issuer: /CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae Certificate serial: 010D0C9F4328584BF82DA20A01A6F7BB04783F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.mft Manifest number: 010D0C9F4328584A742291B2DE63EBE5BA3DF792 Signing time: Mon 24 Nov 2025 20:00:03 +0000 Manifest this update: Mon 24 Nov 2025 20:00:03 +0000 Manifest next update: Wed 26 Nov 2025 20:00:00 +0000 Files and hashes: 1: 440c4003-c877-35d5-8850-db2208d28191.roa (hash: s4EjuvMqKmuo40RZ06w33jl1ee1NLJEcuiPAzGSSs5M=) 2: 82aa7469-b46a-3167-8e78-9245178a8cee.roa (hash: /fgkFQ+TlGrFAdITtY+tFeGwmWeg1wjHiU0rHSEUdGY=) 3: aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl (hash: nCt3dEwyfvlDaR2neBFvR/sQbDpJnq/O8rUUymwQJYI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:2d:a2:0a:01:a6:f7:bb:04:78:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae Validity Not Before: Nov 24 20:00:03 2025 GMT Not After : Nov 26 20:00:00 2025 GMT Subject: CN=a413957b-7a74-4cc0-b64f-3fbf0d0b30dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4b:08:f7:f8:5c:31:92:df:17:fa:3c:5f:f9: d9:6a:89:7e:01:44:d1:73:99:6f:1e:5e:69:7c:2f: 08:bc:ef:bf:45:ba:5a:50:d8:a6:12:41:85:28:79: 0d:21:25:51:f6:1a:d3:b4:b1:e9:d3:8a:d7:40:f1: 8e:e6:3d:d6:7d:53:46:0b:65:aa:fe:a8:ba:3e:e1: 03:b1:3c:ba:ce:b9:35:85:d0:50:13:5d:bf:2e:84: 49:f6:d0:e0:a5:56:e6:9e:9d:62:0b:7e:fb:92:24: c2:b9:b3:36:50:cf:ea:65:ea:34:79:ac:4e:5c:49: 4a:62:4b:63:82:79:96:cf:e8:01:ef:7e:c4:a3:04: 86:20:80:99:13:7c:4f:e4:1a:fd:b5:7c:c0:14:a4: f0:73:3d:78:a8:3a:f9:9d:a7:8d:81:3b:8a:63:1b: bd:a7:9d:d8:d2:d6:88:5f:a5:77:aa:a5:8b:9f:56: 48:87:89:fd:7d:e0:5c:30:f7:84:d8:c7:4c:47:7f: fb:9f:7e:08:32:ec:64:0a:48:54:82:c9:81:ad:ec: 8d:96:98:73:df:3b:d9:56:9c:03:0d:14:ee:e5:85: d2:08:3e:f0:dc:29:05:4e:b5:fb:39:bb:b0:6b:64: 99:75:1c:c3:4d:9a:fc:77:b0:21:fa:e4:53:5b:a9: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:12:3C:0B:CF:67:51:27:81:4C:71:D4:46:C1:69:F7:68:D5:87:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl X509v3 Authority Key Identifier: keyid:5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:4b:60:41:ea:14:ba:64:d1:7a:cf:97:1a:ee:98:d8:4c:23: e7:18:79:44:49:39:86:91:ee:38:83:10:7a:be:c7:39:d6:9f: d1:d6:59:41:89:29:3f:c9:ce:ff:65:74:04:c9:87:e3:94:ef: 19:9e:87:0f:0c:0e:10:af:3a:91:4d:6d:de:b4:ea:8a:e5:93: 4c:de:72:1a:d2:c4:f4:8b:df:8d:00:7d:45:7f:01:30:b4:b0: 50:63:a6:24:ff:df:e4:8d:50:79:61:3a:54:64:7f:71:94:96: a9:9d:54:83:30:fc:0e:74:03:2b:ea:c7:26:d5:82:20:68:d1: b7:75:39:3f:f7:1c:1e:21:8f:da:70:9b:e6:8a:63:c3:bb:01: e7:89:06:7d:4e:47:c9:92:9f:b6:bd:88:47:bc:79:a8:ea:2a: 4d:b7:1c:ec:f8:4e:d3:5b:e0:25:d8:41:14:d0:07:97:2d:9a: a1:29:95:65:e7:2b:fd:10:60:70:c9:a0:50:40:49:bc:bf:0a: e0:25:26:33:9a:86:a1:51:f3:85:6e:41:aa:45:3b:8c:f9:98: 39:0e:01:4d:ed:87:25:ae:dd:a6:65:44:ae:dd:64:ac:e4:f9: 87:32:0c:f0:4c:7d:df:c5:5f:65:b9:7f:4f:4e:79:25:97:ad: 47:24:3c:8c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4LaIKAab3uwR4P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjZDFjYzUtZWQzZS00ZjllLTgxMjktOWQ0ODgzYzBh N2FlMB4XDTI1MTEyNDIwMDAwM1oXDTI1MTEyNjIwMDAwMFowLzEtMCsGA1UEAxMk YTQxMzk1N2ItN2E3NC00Y2MwLWI2NGYtM2ZiZjBkMGIzMGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEsI9/hcMZLfF/o8X/nZaol+AUTRc5lvHl5p fC8IvO+/RbpaUNimEkGFKHkNISVR9hrTtLHp04rXQPGO5j3WfVNGC2Wq/qi6PuED sTy6zrk1hdBQE12/LoRJ9tDgpVbmnp1iC377kiTCubM2UM/qZeo0eaxOXElKYktj gnmWz+gB737EowSGIICZE3xP5Br9tXzAFKTwcz14qDr5naeNgTuKYxu9p53Y0taI X6V3qqWLn1ZIh4n9feBcMPeE2MdMR3/7n34IMuxkCkhUgsmBreyNlphz3zvZVpwD DRTu5YXSCD7w3CkFTrX7Obuwa2SZdRzDTZr8d7Ah+uRTW6mu5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFISPAvPZ1EngUxx1EbBafdo1YcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYWNk MWNjNS1lZDNlLTRmOWUtODEyOS05ZDQ4ODNjMGE3YWUvYWFjZDFjYzUtZWQzZS00 ZjllLTgxMjktOWQ0ODgzYzBhN2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWFjZDFjYzUtZWQzZS00ZjllLTgx MjktOWQ0ODgzYzBhN2FlL2FhY2QxY2M1LWVkM2UtNGY5ZS04MTI5LTlkNDg4M2Mw YTdhZS5jcmwwHwYDVR0jBBgwFoAUXy5MbZ2JsVhvEqmOhYq6stgeakkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYWNkMWNjNS1lZDNlLTRmOWUtODEyOS05ZDQ4 ODNjMGE3YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBVS2BB6hS6ZNF6z5ca7pjY TCPnGHlESTmGke44gxB6vsc51p/R1llBiSk/yc7/ZXQEyYfjlO8ZnocPDA4QrzqR TW3etOqK5ZNM3nIa0sT0i9+NAH1FfwEwtLBQY6Yk/9/kjVB5YTpUZH9xlJapnVSD MPwOdAMr6scm1YIgaNG3dTk/9xweIY/acJvmimPDuwHniQZ9TkfJkp+2vYhHvHmo 6ipNtxzs+E7TW+Al2EEU0AeXLZqhKZVl5yv9EGBwyaBQQEm8vwrgJSYzmoahUfOF bkGqRTuM+Zg5DgFN7Yclrt2mZUSu3WSs5PmHMgzwTH3fxV9luX9PTnkll61HJDyM -----END CERTIFICATE-----Generated at Tue Nov 25 09:11:45 2025 by rpki-client