This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.mft File: c939804d-392f-4714-a1f1-89eb4660daf7.mft (raw, json) Hash identifier: 5TONDn/3S5PEPuFze30AGKUv6t2fL1k+rgKV8trhZ14= Subject key identifier: A7:E6:4E:A6:71:47:D7:2E:16:FA:7A:C0:DC:EA:60:E3:D3:32:DE:D2 Authority key identifier: C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80 Certificate issuer: /CN=c939804d-392f-4714-a1f1-89eb4660daf7 Certificate serial: 010D0C9F4328584BF8E04BA9921A93469AC58AD8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.mft Manifest number: 010D0C9F4328584073A83681EFBE806041878330 Signing time: Tue 25 Nov 2025 02:00:03 +0000 Manifest this update: Tue 25 Nov 2025 02:00:03 +0000 Manifest next update: Fri 28 Nov 2025 02:00:00 +0000 Files and hashes: 1: 2953b610-a434-3572-bb79-1dcab516be48.roa (hash: K5Frr/fz+DgCWjleo01fNephCQe+gZAWA50PMfZOIP0=) 2: 9283e8b7-d4df-3aef-9968-49e89cc16c3a.roa (hash: YbipjqA8zmXJ5WbRs5j+I+oqH8Evs5zNfe3V2408JMc=) 3: c939804d-392f-4714-a1f1-89eb4660daf7.crl (hash: 6ycQdcT6IliI+YSL0fwQVb1aIa8kWcqYVSbfAU0kHzY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:e0:4b:a9:92:1a:93:46:9a:c5:8a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c939804d-392f-4714-a1f1-89eb4660daf7 Validity Not Before: Nov 25 02:00:03 2025 GMT Not After : Nov 28 02:00:00 2025 GMT Subject: CN=20b369cd-d935-4e24-8674-2edc62cb9767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:88:c1:0f:37:32:e7:25:63:6a:c3:7b:f2:c9: fc:ea:70:c0:5c:55:4e:a5:be:b6:5c:54:0b:ff:36: ad:c5:d9:50:18:85:6d:4b:0d:af:54:a0:15:c8:d4: dc:32:c6:e6:b5:7b:26:16:0c:77:0a:74:98:af:b4: 52:5d:b6:b8:e5:de:e4:e2:c0:40:78:14:18:f5:af: 6e:3a:b3:66:37:d7:0c:a8:b5:1b:dc:88:68:49:60: c0:2f:e7:04:2e:e4:da:53:2e:5a:a7:81:d1:1d:58: c7:54:9c:d1:dc:a0:fb:b8:22:67:69:fd:57:cd:f9: 38:64:e3:5a:07:60:8e:2f:c7:64:bd:b0:2b:bc:ff: a3:97:38:64:61:dc:8d:94:6a:5c:59:70:90:e2:c2: ce:ac:4f:11:95:d7:25:53:97:6c:a1:d3:21:ad:6b: 83:3d:88:fd:6b:fb:ae:fa:4c:6a:76:14:7a:4d:54: e6:bb:1a:11:53:80:24:3d:d1:41:ac:53:04:20:43: 6e:56:f6:0b:60:e0:70:6d:5a:93:e0:23:f9:e3:35: 39:08:bb:cb:4f:8c:23:2a:1a:6e:67:1d:68:1e:e3: 47:ee:91:13:91:32:d8:78:7c:04:5c:d7:e6:4d:1e: 65:2e:bd:0c:d2:53:c0:6d:6c:27:2b:2b:35:45:67: 9a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E6:4E:A6:71:47:D7:2E:16:FA:7A:C0:DC:EA:60:E3:D3:32:DE:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7/c939804d-392f-4714-a1f1-89eb4660daf7.crl X509v3 Authority Key Identifier: keyid:C6:FC:D1:09:1B:FA:5D:0F:A6:65:0C:1C:14:CA:66:B3:B9:99:A4:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c939804d-392f-4714-a1f1-89eb4660daf7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:82:b1:b3:1c:26:50:ba:af:2e:02:a3:05:00:f5:e7:b7:98: b9:0b:4a:e4:1a:b7:f0:3f:0f:77:2a:33:f5:29:16:af:36:cc: ca:55:6d:ec:2f:e6:d2:9e:b1:a6:0c:91:a9:4a:d3:0a:59:c7: 1b:3b:5a:7e:33:e1:f1:45:b3:65:af:42:88:9d:4b:dd:04:9a: bc:e0:1d:70:45:9e:2e:6f:c0:d7:0d:a7:55:9a:ac:25:b0:f4: 7f:12:70:ad:38:37:5e:f6:2a:48:8a:ee:6f:8e:44:00:29:53: 10:df:0c:1b:f9:9e:cf:b1:5b:86:33:9a:6a:cb:12:c5:92:5c: 8f:62:7f:f5:8b:92:35:fd:27:00:6f:f7:13:b4:e8:ea:8f:f3: 5a:1f:36:e8:01:10:8d:8d:6d:79:02:d6:e5:b7:3f:fd:9d:53: 70:70:71:e8:44:35:78:1f:2d:71:00:57:bc:18:ee:1d:00:06: 5f:9e:30:75:49:77:17:78:78:4d:27:b3:0c:67:ef:8d:71:28: 93:59:dc:03:ee:df:68:41:53:ef:1a:8e:44:62:dd:e8:60:ca: f0:5a:ac:e8:3b:dc:f3:74:55:29:7e:4b:41:3e:a0:4f:7d:f3: ae:f9:54:31:c4:e2:3d:4d:ed:6e:5d:b0:92:b3:1b:c6:ca:39: 19:44:0e:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv44EupkhqTRprFitgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkzOTgwNGQtMzkyZi00NzE0LWExZjEtODllYjQ2NjBk YWY3MB4XDTI1MTEyNTAyMDAwM1oXDTI1MTEyODAyMDAwMFowLzEtMCsGA1UEAxMk MjBiMzY5Y2QtZDkzNS00ZTI0LTg2NzQtMmVkYzYyY2I5NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIjBDzcy5yVjasN78sn86nDAXFVOpb62XFQL /zatxdlQGIVtSw2vVKAVyNTcMsbmtXsmFgx3CnSYr7RSXba45d7k4sBAeBQY9a9u OrNmN9cMqLUb3IhoSWDAL+cELuTaUy5ap4HRHVjHVJzR3KD7uCJnaf1Xzfk4ZONa B2COL8dkvbArvP+jlzhkYdyNlGpcWXCQ4sLOrE8RldclU5dsodMhrWuDPYj9a/uu +kxqdhR6TVTmuxoRU4AkPdFBrFMEIENuVvYLYOBwbVqT4CP54zU5CLvLT4wjKhpu Zx1oHuNH7pETkTLYeHwEXNfmTR5lLr0M0lPAbWwnKys1RWea9wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKfmTqZxR9cuFvp6wNzqYOPTMt7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jOTM5 ODA0ZC0zOTJmLTQ3MTQtYTFmMS04OWViNDY2MGRhZjcvYzkzOTgwNGQtMzkyZi00 NzE0LWExZjEtODllYjQ2NjBkYWY3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzkzOTgwNGQtMzkyZi00NzE0LWEx ZjEtODllYjQ2NjBkYWY3L2M5Mzk4MDRkLTM5MmYtNDcxNC1hMWYxLTg5ZWI0NjYw ZGFmNy5jcmwwHwYDVR0jBBgwFoAUxvzRCRv6XQ+mZQwcFMpms7mZpIAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jOTM5ODA0ZC0zOTJmLTQ3MTQtYTFmMS04OWVi NDY2MGRhZjcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCRgrGzHCZQuq8uAqMFAPXn t5i5C0rkGrfwPw93KjP1KRavNszKVW3sL+bSnrGmDJGpStMKWccbO1p+M+HxRbNl r0KInUvdBJq84B1wRZ4ub8DXDadVmqwlsPR/EnCtODde9ipIiu5vjkQAKVMQ3wwb +Z7PsVuGM5pqyxLFklyPYn/1i5I1/ScAb/cTtOjqj/NaHzboARCNjW15Atbltz/9 nVNwcHHoRDV4Hy1xAFe8GO4dAAZfnjB1SXcXeHhNJ7MMZ++NcSiTWdwD7t9oQVPv Go5EYt3oYMrwWqzoO9zzdFUpfktBPqBPffOu+VQxxOI9Te1uXbCSsxvGyjkZRA5f -----END CERTIFICATE-----Generated at Tue Nov 25 07:27:55 2025 by rpki-client