This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft File: d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft (raw, json) Hash identifier: s/BAt1ITTkhCS364ClJbO4Ll2+SaAz2u3yHchI4Iucs= Subject key identifier: 6F:D4:FD:20:B3:D5:AE:52:72:D8:0F:78:E8:F7:9E:00:5D:8C:AD:0D Authority key identifier: 47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F Certificate issuer: /CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Certificate serial: 010D0C9F4328584BF0803FEC9ABE577359204980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft Manifest number: 010D0C9F4328584073A836239D3A75822B1705B7 Signing time: Sat 22 Nov 2025 02:00:03 +0000 Manifest this update: Sat 22 Nov 2025 02:00:03 +0000 Manifest next update: Mon 24 Nov 2025 02:00:00 +0000 Files and hashes: 1: 454c9603-4dfb-34e7-9bc2-02242c547e78.roa (hash: CH2nkMXNpGOEdgNktVxA2gKTPaekUJjMddaLTnxl3hY=) 2: 7c69f6d0-f92d-3ea9-91d2-5d8a53da8b6b.roa (hash: 3HVCaoUAgEypQT42N2PJkh5mCE/yY2Aj+8mG5qGxHZk=) 3: d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl (hash: jL35Hm6Hk6OzG47vJEe9ctMsbttHoLzbDny0P4DyrZk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:80:3f:ec:9a:be:57:73:59:20:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Validity Not Before: Nov 22 02:00:03 2025 GMT Not After : Nov 24 02:00:00 2025 GMT Subject: CN=02237fe9-687e-4da6-8170-e2abd598d686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:33:43:e0:56:97:bc:f2:9c:15:03:93:99:6a: b5:61:94:49:b8:4a:70:6c:ad:9d:77:fe:5c:c6:65: 11:a0:f5:22:07:98:9d:a7:fe:f7:05:c1:63:31:ed: 4d:7e:1c:9f:33:fd:3a:dc:8c:8e:5f:3e:62:03:ec: 13:18:aa:d6:27:9d:7a:ed:93:ea:6f:16:ec:26:3f: ec:50:9d:41:c0:bb:ad:7b:61:09:2a:b4:8e:00:08: 9a:6c:b0:bb:bc:d4:f3:f8:1f:c1:9b:7e:fb:0f:4f: 83:fd:f1:b5:94:e2:dc:43:ad:42:fd:e6:c4:bb:cf: 0c:f0:61:52:a8:73:82:9a:e6:3d:22:5d:0d:fc:ee: 4f:4e:27:7f:06:d9:3a:e7:c8:08:11:f9:90:aa:5c: e1:3e:c3:0a:bd:05:82:ce:7a:c4:87:0a:09:32:76: d0:7f:b8:39:d1:3a:76:6e:95:05:d3:45:9c:df:51: 0e:92:b7:7f:3c:84:ec:bc:d8:a4:10:d1:2c:1c:45: 39:19:83:cf:06:b5:2e:3a:bf:12:38:00:0d:88:cf: a5:60:01:fa:53:2c:d3:38:2d:55:23:7d:f5:93:3b: 6a:3b:4a:bb:6a:73:43:77:d1:fe:08:a6:8e:13:e1: 06:9e:4c:8c:fc:01:12:7d:8a:c5:f6:71:11:04:ef: 7e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D4:FD:20:B3:D5:AE:52:72:D8:0F:78:E8:F7:9E:00:5D:8C:AD:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl X509v3 Authority Key Identifier: keyid:47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ce:99:3b:a7:26:28:74:0d:99:4c:fb:47:b9:4d:ea:f3:22: 53:5c:02:1c:ac:b3:4a:b0:8b:ef:e7:77:e8:b4:00:1a:31:69: 2c:56:ec:f6:54:56:a2:c0:c9:8e:d4:6e:69:a7:d5:2e:8a:c4: 81:5e:fd:8b:b8:7b:a7:c9:e7:f6:07:21:08:2b:30:74:a7:dc: 39:7d:2e:95:3a:ff:6a:76:5c:c4:c3:78:fe:bf:f2:6d:a3:cd: eb:c2:2d:7b:f0:c4:d9:7a:cd:1c:e9:5b:9b:96:06:52:37:7c: 65:e3:04:a7:27:65:f1:d2:18:ee:4a:76:29:b1:4c:33:93:60: 4d:5d:99:af:f1:a8:b5:2d:84:53:86:f6:09:fd:a1:f5:a5:6f: f4:ea:74:a9:5b:dc:69:d6:08:80:50:14:a5:86:c0:d5:34:1b: ef:d0:7d:f3:c0:72:d1:b3:61:1b:51:ef:9b:1e:27:12:a9:4e: 77:2c:05:ab:de:5f:5d:9f:3c:16:6d:71:8c:1e:fd:41:65:d1: 05:9a:f4:a9:fa:48:0d:d6:54:63:c7:57:57:0f:48:22:46:72: 57:11:22:c4:41:d7:96:ab:14:dd:77:a2:fc:8b:f3:43:7d:93: 24:38:4f:6a:7c:a5:cf:2f:25:71:dc:12:bc:4b:e0:fb:24:8a: 7d:f0:39:08 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvwgD/smr5Xc1kgSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3MWU5NWMtZTQ4NC00YjUzLTkxZmYtZTE0ZDMzZWFh MmE2MB4XDTI1MTEyMjAyMDAwM1oXDTI1MTEyNDAyMDAwMFowLzEtMCsGA1UEAxMk MDIyMzdmZTktNjg3ZS00ZGE2LTgxNzAtZTJhYmQ1OThkNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTND4FaXvPKcFQOTmWq1YZRJuEpwbK2dd/5c xmURoPUiB5idp/73BcFjMe1NfhyfM/063IyOXz5iA+wTGKrWJ5167ZPqbxbsJj/s UJ1BwLute2EJKrSOAAiabLC7vNTz+B/Bm377D0+D/fG1lOLcQ61C/ebEu88M8GFS qHOCmuY9Il0N/O5PTid/Btk658gIEfmQqlzhPsMKvQWCznrEhwoJMnbQf7g50Tp2 bpUF00Wc31EOkrd/PITsvNikENEsHEU5GYPPBrUuOr8SOAANiM+lYAH6UyzTOC1V I331kztqO0q7anNDd9H+CKaOE+EGnkyM/AESfYrF9nERBO9+VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG/U/SCz1a5SctgPeOj3ngBdjK0NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcx ZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRkMzNlYWEyYTYvZDY3MWU5NWMtZTQ4NC00 YjUzLTkxZmYtZTE0ZDMzZWFhMmE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDY3MWU5NWMtZTQ4NC00YjUzLTkx ZmYtZTE0ZDMzZWFhMmE2L2Q2NzFlOTVjLWU0ODQtNGI1My05MWZmLWUxNGQzM2Vh YTJhNi5jcmwwHwYDVR0jBBgwFoAUR9sbpctPjkRcwmwsWddit+ypMW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcxZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRk MzNlYWEyYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1zpk7pyYodA2ZTPtHuU3q 8yJTXAIcrLNKsIvv53fotAAaMWksVuz2VFaiwMmO1G5pp9UuisSBXv2LuHunyef2 ByEIKzB0p9w5fS6VOv9qdlzEw3j+v/Jto83rwi178MTZes0c6VublgZSN3xl4wSn J2Xx0hjuSnYpsUwzk2BNXZmv8ai1LYRThvYJ/aH1pW/06nSpW9xp1giAUBSlhsDV NBvv0H3zwHLRs2EbUe+bHicSqU53LAWr3l9dnzwWbXGMHv1BZdEFmvSp+kgN1lRj x1dXD0giRnJXESLEQdeWqxTdd6L8i/NDfZMkOE9qfKXPLyVx3BK8S+D7JIp98DkI -----END CERTIFICATE-----Generated at Sat Nov 22 21:37:47 2025 by rpki-client