This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft File: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft (raw, json) Hash identifier: Sr8T83dUEYrfpQvbW0h21/BEj/Bv1QqQbE9xpdlGBbY= Subject key identifier: CF:D7:64:5C:51:DF:56:46:87:26:73:E3:AD:D2:C3:4D:3D:49:51:4C Authority key identifier: 47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E Certificate issuer: /CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Certificate serial: 010D0C9F4328584BF8FE1562C5E071E4F2F1B900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft Manifest number: 010D0C9F4328584073A8387DE519A5D299924B38 Signing time: Tue 25 Nov 2025 03:00:03 +0000 Manifest this update: Tue 25 Nov 2025 03:00:03 +0000 Manifest next update: Fri 28 Nov 2025 03:00:00 +0000 Files and hashes: 1: ab75e324-5884-3478-bcb0-f1254ed9f0bf.roa (hash: tAPZ5HBHsx1AF2LrupybvJsREpYfXaXwaBBY5T0UEzo=) 2: d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl (hash: u5GcV0JU39NEUQt1K5DOMLilxLHmwpgnypV8uUmUB9I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:fe:15:62:c5:e0:71:e4:f2:f1:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d709b40c-fe09-46e6-a38c-9cfe44ccdea2 Validity Not Before: Nov 25 03:00:03 2025 GMT Not After : Nov 28 03:00:00 2025 GMT Subject: CN=316c1b20-3c96-42c3-8e71-f3242c8f9c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:33:5c:05:ce:13:94:88:e1:4f:a4:a7:e0: 84:50:1d:0a:bb:29:d3:e4:e1:ed:67:cb:20:1a:5a: f3:e1:8f:8f:81:15:06:99:46:05:30:9e:2a:bb:42: 04:49:ec:4d:a6:0a:a6:1a:b0:ed:91:4a:3b:d2:54: eb:9e:b3:35:99:0b:c2:0c:98:6c:42:6c:78:53:bf: 1c:a9:56:a4:9c:15:7c:2a:46:66:69:9d:16:fb:db: 15:da:26:fb:92:e3:9d:ac:ce:0f:f4:93:da:b1:07: 82:38:b2:fc:63:31:17:80:4a:42:5d:24:68:b9:1a: 8a:87:b3:17:1e:0a:1a:2f:d1:5d:75:75:8d:37:eb: bc:a3:f3:7c:8a:c3:48:bf:36:43:3a:6e:67:69:f4: 1c:e8:8d:04:3a:d7:fa:4a:ad:94:ea:38:95:27:a0: 2e:dc:bb:30:21:ef:79:f8:6e:95:11:ec:6f:11:7e: bf:54:8d:88:a4:f0:17:44:06:97:4b:ee:47:44:f0: d2:51:93:50:d2:b2:b7:8d:fe:ad:69:f8:35:35:fe: 0b:94:11:1e:e2:7f:30:3a:c4:4b:05:f7:13:07:5b: 89:5a:62:eb:d1:97:4a:43:c0:52:4a:39:24:74:36: 38:a3:e5:16:7c:8d:dc:58:9b:a6:0e:a5:05:20:63: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D7:64:5C:51:DF:56:46:87:26:73:E3:AD:D2:C3:4D:3D:49:51:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.crl X509v3 Authority Key Identifier: keyid:47:40:53:7B:7D:1B:E6:72:85:34:F3:D2:AA:65:E9:5F:67:8E:0F:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d709b40c-fe09-46e6-a38c-9cfe44ccdea2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:72:20:a9:f6:b2:3c:5e:09:8e:64:c1:fa:e6:97:27:4d:2f: 32:2f:88:96:69:67:55:c3:31:71:aa:5d:4c:34:db:86:26:84: 9f:4b:4f:d1:1b:1d:28:da:b1:8c:25:13:16:e8:8b:03:0d:3f: 8c:a3:d5:f0:f5:ec:e4:2f:04:7e:f8:a3:5d:10:13:53:7f:8a: 13:b1:03:f4:9f:0e:28:d9:a2:a2:97:65:05:40:f5:fe:54:82: 81:d7:ee:43:a4:31:cb:62:ec:54:b5:ab:6c:7b:99:9b:ee:03: ff:66:28:b0:fa:1c:31:96:98:34:ea:c5:26:05:82:f4:ad:fa: 67:60:7d:46:9b:d8:d5:97:fe:04:d8:b3:9a:a2:ab:9a:8d:a1: 59:0c:aa:78:3c:71:75:86:f0:cf:dc:fa:ff:76:d3:51:18:9f: bf:6d:ae:80:eb:55:ad:1d:ca:30:32:08:f2:30:61:cd:b1:05: 33:36:a5:31:dc:38:ba:3d:b8:27:1c:8d:1e:d0:5c:30:5b:43: 40:d1:5c:ac:a8:f1:2a:30:c2:b6:ac:8a:20:98:10:e4:c4:a3: a0:bb:6d:ec:31:04:cb:45:42:e7:0c:62:8c:2e:d1:2b:6b:c7: 9d:01:db:ec:e7:b1:dc:1b:2e:ec:3c:b9:ab:18:a9:04:2e:0b: f4:86:d2:11 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4/hVixeBx5PLxuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwOWI0MGMtZmUwOS00NmU2LWEzOGMtOWNmZTQ0Y2Nk ZWEyMB4XDTI1MTEyNTAzMDAwM1oXDTI1MTEyODAzMDAwMFowLzEtMCsGA1UEAxMk MzE2YzFiMjAtM2M5Ni00MmMzLThlNzEtZjMyNDJjOGY5Yzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMEzXAXOE5SI4U+kp+CEUB0KuynT5OHtZ8sg Glrz4Y+PgRUGmUYFMJ4qu0IESexNpgqmGrDtkUo70lTrnrM1mQvCDJhsQmx4U78c qVaknBV8KkZmaZ0W+9sV2ib7kuOdrM4P9JPasQeCOLL8YzEXgEpCXSRouRqKh7MX HgoaL9FddXWNN+u8o/N8isNIvzZDOm5nafQc6I0EOtf6Sq2U6jiVJ6Au3LswIe95 +G6VEexvEX6/VI2IpPAXRAaXS+5HRPDSUZNQ0rK3jf6tafg1Nf4LlBEe4n8wOsRL BfcTB1uJWmLr0ZdKQ8BSSjkkdDY4o+UWfI3cWJumDqUFIGMkGQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM/XZFxR31ZGhyZz463Sw009SVFMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5 YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2ZlNDRjY2RlYTIvZDcwOWI0MGMtZmUwOS00 NmU2LWEzOGMtOWNmZTQ0Y2NkZWEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDcwOWI0MGMtZmUwOS00NmU2LWEz OGMtOWNmZTQ0Y2NkZWEyL2Q3MDliNDBjLWZlMDktNDZlNi1hMzhjLTljZmU0NGNj ZGVhMi5jcmwwHwYDVR0jBBgwFoAUR0BTe30b5nKFNPPSqmXpX2eOD44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNzA5YjQwYy1mZTA5LTQ2ZTYtYTM4Yy05Y2Zl NDRjY2RlYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0ciCp9rI8XgmOZMH65pcn TS8yL4iWaWdVwzFxql1MNNuGJoSfS0/RGx0o2rGMJRMW6IsDDT+Mo9Xw9ezkLwR+ +KNdEBNTf4oTsQP0nw4o2aKil2UFQPX+VIKB1+5DpDHLYuxUtatse5mb7gP/Ziiw +hwxlpg06sUmBYL0rfpnYH1Gm9jVl/4E2LOaoquajaFZDKp4PHF1hvDP3Pr/dtNR GJ+/ba6A61WtHcowMgjyMGHNsQUzNqUx3Di6PbgnHI0e0FwwW0NA0VysqPEqMMK2 rIogmBDkxKOgu23sMQTLRULnDGKMLtEra8edAdvs57HcGy7sPLmrGKkELgv0htIR -----END CERTIFICATE-----Generated at Tue Nov 25 07:25:11 2025 by rpki-client