This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft File: ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft (raw, json) Hash identifier: yG+m5xqtv592qsFpR3xYcI/ekDzhFU1R72EFlYu8+jo= Subject key identifier: 0A:57:91:E9:28:28:82:D0:84:89:36:30:EE:D4:16:8D:7C:9D:1B:9C Authority key identifier: F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 Certificate issuer: /CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Certificate serial: 010D0C9F4328584BF8A4CF59B6719A9B8568DEE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft Manifest number: 010D0C9F43285849286C32D062B377DCDAAACD89 Signing time: Tue 25 Nov 2025 00:00:09 +0000 Manifest this update: Tue 25 Nov 2025 00:00:09 +0000 Manifest next update: Fri 28 Nov 2025 00:00:00 +0000 Files and hashes: 1: ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl (hash: 0jPjqHLke5qBKEHv6otIMWZXr6E34hZD4X61a/B/eMc=) 2: f17090ed-14f3-32d9-9d34-9fc6bed092d1.roa (hash: NZTCpna1/YSIhzLI4Nc4vGXKNDe4AimgvGtuDTUyrKY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:a4:cf:59:b6:71:9a:9b:85:68:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddf98c7a-ee22-4693-8170-c9b197bc9da0 Validity Not Before: Nov 25 00:00:09 2025 GMT Not After : Nov 28 00:00:00 2025 GMT Subject: CN=a44cc065-490f-4be1-ada5-c6d89a89a590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9f:9e:a1:66:2e:d5:86:af:d2:e9:bd:ea:19: e1:0b:29:82:a2:6f:7f:ca:23:75:3d:81:17:b8:66: 2d:68:9f:1a:e4:ac:dc:98:df:3b:a5:0a:36:71:41: 5d:77:2e:c5:e5:17:f4:b5:41:de:a9:f8:da:f4:25: 6e:c3:e4:97:b0:6d:1e:8c:f0:0a:ad:e6:35:c0:68: 0b:7f:4e:ba:55:8e:87:ea:de:9a:db:80:70:d0:5d: d6:ff:36:fe:55:cf:51:14:0c:1a:9e:3d:e7:2c:82: 65:92:47:8a:ab:db:c4:b9:59:02:14:6e:d0:7c:dc: 91:7f:6b:2e:32:03:8c:ea:c1:91:d5:56:7b:c2:ac: 2c:38:38:60:e4:c5:73:b8:7c:d4:0e:5c:65:1f:41: fc:e1:ad:82:e9:08:48:4a:51:a6:88:13:63:5e:11: db:5b:05:57:f5:d4:c0:c8:a9:7b:05:02:7d:fb:48: 20:15:a1:93:8f:2c:9a:38:e8:84:77:30:e6:12:eb: f4:a3:d4:14:00:cb:4d:f0:3a:51:5a:7e:c6:2c:5f: 16:bd:1c:19:08:1e:b8:2d:cd:3a:6a:9d:a3:d8:73: fc:49:67:d4:be:5c:97:9b:61:db:2d:02:f2:1b:d2: 2e:cc:4e:63:7e:20:61:b1:e4:11:be:6c:f6:de:b9: 2b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:57:91:E9:28:28:82:D0:84:89:36:30:EE:D4:16:8D:7C:9D:1B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0/ddf98c7a-ee22-4693-8170-c9b197bc9da0.crl X509v3 Authority Key Identifier: keyid:F6:56:13:C6:17:1B:30:8D:E2:86:D6:42:AC:2B:1D:F8:3C:DE:43:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ddf98c7a-ee22-4693-8170-c9b197bc9da0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c4:0a:86:c6:63:04:5c:dd:04:40:14:7a:25:f7:e2:3e:f9: 56:c5:dd:15:27:cf:82:da:b4:dd:61:b2:af:ab:58:1b:91:f4: 2a:64:e9:76:85:63:85:14:02:6b:fc:db:87:b3:7e:9b:62:15: 9e:d1:57:02:39:9a:b3:83:a2:fc:62:38:f7:49:79:7f:66:11: 8d:94:38:58:b0:04:04:79:f5:f7:bf:65:4f:5a:e4:6a:25:a9: d9:96:8c:78:42:ed:94:f1:d4:ce:6f:be:70:9d:dc:02:16:80: a9:72:5e:e3:37:c5:a3:c8:73:01:e2:75:7f:77:8f:19:eb:93: 8a:94:49:0a:7e:92:24:2c:99:7f:18:3f:dc:db:31:ee:91:9d: b5:0f:38:5a:3d:2b:70:c9:88:87:cf:4c:bf:ed:ab:cc:89:d3: 4f:a2:bc:62:f6:3c:b1:c1:3e:a5:e5:af:0b:74:89:7c:be:4c: 40:ba:1c:30:4f:83:e1:0e:3d:dd:06:f6:ab:d5:d2:12:0b:1b: 82:fc:af:35:46:a6:1e:a9:08:34:9d:51:76:a8:8c:7b:7e:28: 98:20:0c:bf:e2:69:03:68:59:74:f3:ab:5a:31:0b:39:39:45: ab:84:3f:81:b3:81:ba:d9:39:c3:98:64:d0:56:ef:8d:c4:fb: 11:b5:52:f2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4pM9ZtnGam4Vo3uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRmOThjN2EtZWUyMi00NjkzLTgxNzAtYzliMTk3YmM5 ZGEwMB4XDTI1MTEyNTAwMDAwOVoXDTI1MTEyODAwMDAwMFowLzEtMCsGA1UEAxMk YTQ0Y2MwNjUtNDkwZi00YmUxLWFkYTUtYzZkODlhODlhNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp+eoWYu1Yav0um96hnhCymCom9/yiN1PYEX uGYtaJ8a5KzcmN87pQo2cUFddy7F5Rf0tUHeqfja9CVuw+SXsG0ejPAKreY1wGgL f066VY6H6t6a24Bw0F3W/zb+Vc9RFAwanj3nLIJlkkeKq9vEuVkCFG7QfNyRf2su MgOM6sGR1VZ7wqwsODhg5MVzuHzUDlxlH0H84a2C6QhISlGmiBNjXhHbWwVX9dTA yKl7BQJ9+0ggFaGTjyyaOOiEdzDmEuv0o9QUAMtN8DpRWn7GLF8WvRwZCB64Lc06 ap2j2HP8SWfUvlyXm2HbLQLyG9IuzE5jfiBhseQRvmz23rkr0QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFApXkekoKILQhIk2MO7UFo18nRucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5 OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIxOTdiYzlkYTAvZGRmOThjN2EtZWUyMi00 NjkzLTgxNzAtYzliMTk3YmM5ZGEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGRmOThjN2EtZWUyMi00NjkzLTgx NzAtYzliMTk3YmM5ZGEwL2RkZjk4YzdhLWVlMjItNDY5My04MTcwLWM5YjE5N2Jj OWRhMC5jcmwwHwYDVR0jBBgwFoAU9lYTxhcbMI3ihtZCrCsd+DzeQ3EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kZGY5OGM3YS1lZTIyLTQ2OTMtODE3MC1jOWIx OTdiYzlkYTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8xAqGxmMEXN0EQBR6Jffi PvlWxd0VJ8+C2rTdYbKvq1gbkfQqZOl2hWOFFAJr/NuHs36bYhWe0VcCOZqzg6L8 Yjj3SXl/ZhGNlDhYsAQEefX3v2VPWuRqJanZlox4Qu2U8dTOb75wndwCFoCpcl7j N8WjyHMB4nV/d48Z65OKlEkKfpIkLJl/GD/c2zHukZ21DzhaPStwyYiHz0y/7avM idNPorxi9jyxwT6l5a8LdIl8vkxAuhwwT4PhDj3dBvar1dISCxuC/K81RqYeqQg0 nVF2qIx7fiiYIAy/4mkDaFl086taMQs5OUWrhD+Bs4G62TnDmGTQVu+NxPsRtVLy -----END CERTIFICATE-----Generated at Tue Nov 25 07:24:59 2025 by rpki-client