This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft File: caf19008-048f-4580-9101-f0d1eb7fc3ae.mft (raw, json) Hash identifier: CRe10AJ4lX0BusC77V7BIusNtag5mrHWl9tj27OSP70= Subject key identifier: AB:B9:81:9C:D5:FC:D6:5A:A0:31:B4:3B:C3:1B:6F:AF:18:59:7E:0B Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584BF3DFE2E40977E1215251C780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft Manifest number: 010D0C9F4328584073A84561B07C62D8C8FAA1B8 Signing time: Sun 23 Nov 2025 07:00:09 +0000 Manifest this update: Sun 23 Nov 2025 07:00:09 +0000 Manifest next update: Wed 26 Nov 2025 07:00:00 +0000 Files and hashes: 1: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (hash: LprQpzEECX+liWqilk9BrMHjerkbBN2z+kCpe43yrxE=) 2: a45902da-9e70-3943-a932-51f817256e75.roa (hash: YOPIAP9M3QnL9vkDsrBvzxiagMzIO5nJt4NR/B12uFE=) 3: caf19008-048f-4580-9101-f0d1eb7fc3ae.crl (hash: tSljcKCxh0cPrpACxxm+5G+BK0ddoWgvOA5zZbn+Mo0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f3:df:e2:e4:09:77:e1:21:52:51:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Nov 23 07:00:09 2025 GMT Not After : Nov 26 07:00:00 2025 GMT Subject: CN=e6faa1db-2a3e-463d-af1e-26096642bd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6d:11:6b:08:9d:e5:2f:a5:58:8d:03:9c:14: 42:c0:8c:39:4f:bb:c2:33:1a:aa:5c:7e:3c:bc:df: 0d:0b:bb:06:0e:2f:2c:fb:e6:f0:bf:22:9d:3a:aa: a0:64:f6:69:50:78:fe:d5:a6:c3:64:33:3d:87:69: 32:6d:e1:27:70:1a:2a:81:84:b3:eb:ba:67:4b:17: 45:f1:13:e8:2b:4d:0b:1e:9e:45:d3:74:ad:18:20: 48:18:e5:d4:f4:02:1d:e8:c6:5c:59:05:0a:a4:8e: c0:90:8b:c6:fb:e7:88:10:1e:fb:18:52:d8:90:8d: 72:48:b0:75:1c:75:25:0f:ae:9f:67:b6:14:81:3a: 9f:77:a5:21:40:fd:93:4d:12:ec:6b:dd:06:29:d7: 26:5f:69:d7:a1:65:f5:45:84:e5:52:8a:61:8b:bd: 31:89:cd:0f:e2:e9:ff:3c:1a:b6:0d:cf:52:aa:2c: 2c:74:6b:67:22:fc:e7:3b:8b:a4:02:55:94:67:2a: 8a:a2:83:26:0b:b7:0c:e5:74:44:da:4d:d7:55:07: bf:bd:1f:b5:fd:40:57:fd:51:a5:cd:89:9b:97:5e: 7a:f2:46:66:d9:7b:0f:04:3d:f1:9a:f9:9a:cb:96: 03:b7:c8:f0:fa:73:2f:f8:53:77:c7:79:9b:7c:9a: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:B9:81:9C:D5:FC:D6:5A:A0:31:B4:3B:C3:1B:6F:AF:18:59:7E:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:5e:4a:c6:ba:c3:22:e2:f8:33:b9:8f:4e:40:44:4f:62:8e: 45:6b:54:a2:61:e4:e9:37:39:aa:7e:ec:0e:f4:a1:05:5d:42: 5e:90:3c:3a:24:ac:99:25:0b:75:5f:31:99:bc:98:ff:b1:21: 63:86:b5:54:a9:d1:57:b8:bc:30:1b:4f:81:b5:b6:fc:62:d8: 78:77:86:d4:d9:ad:6e:62:60:af:fd:4e:e3:47:c9:bd:d4:84: ce:81:86:32:80:54:97:25:95:cd:49:23:24:73:0c:12:1d:05: 79:bf:f5:69:ec:a4:ea:a3:20:90:54:fd:71:63:d2:45:03:ba: 05:b1:3c:5b:0f:2b:46:e9:51:67:fc:d3:17:19:28:06:5b:20: e0:ef:72:15:9f:9d:ea:2f:0e:a9:ec:2d:79:43:91:e0:6e:46: df:38:2a:07:42:5c:da:40:80:ff:9c:df:b6:a1:94:43:8d:4b: 9d:20:8e:98:c9:d0:56:2c:91:d1:75:6a:70:7b:30:e7:d0:7f: dc:45:d4:e6:35:01:74:ea:1f:20:60:f0:9c:ce:ba:d6:bd:40: f7:71:6b:3e:bb:d9:73:64:28:a5:55:f6:c1:38:a7:c7:fb:83: ba:ad:19:57:00:00:08:06:5a:32:c4:d8:a2:eb:33:21:31:aa: b8:a6:4c:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvz3+LkCXfhIVJRx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI1MTEyMzA3MDAwOVoXDTI1MTEyNjA3MDAwMFowLzEtMCsGA1UEAxMk ZTZmYWExZGItMmEzZS00NjNkLWFmMWUtMjYwOTY2NDJiZDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG0Rawid5S+lWI0DnBRCwIw5T7vCMxqqXH48 vN8NC7sGDi8s++bwvyKdOqqgZPZpUHj+1abDZDM9h2kybeEncBoqgYSz67pnSxdF 8RPoK00LHp5F03StGCBIGOXU9AId6MZcWQUKpI7AkIvG++eIEB77GFLYkI1ySLB1 HHUlD66fZ7YUgTqfd6UhQP2TTRLsa90GKdcmX2nXoWX1RYTlUophi70xic0P4un/ PBq2Dc9SqiwsdGtnIvznO4ukAlWUZyqKooMmC7cM5XRE2k3XVQe/vR+1/UBX/VGl zYmbl1568kZm2XsPBD3xmvmay5YDt8jw+nMv+FN3x3mbfJqipwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKu5gZzV/NZaoDG0O8Mbb68YWX4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvY2FmMTkwMDgtMDQ4Zi00 NTgwLTkxMDEtZjBkMWViN2ZjM2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCbXkrGusMi4vgzuY9OQERP Yo5Fa1SiYeTpNzmqfuwO9KEFXUJekDw6JKyZJQt1XzGZvJj/sSFjhrVUqdFXuLww G0+Btbb8Yth4d4bU2a1uYmCv/U7jR8m91ITOgYYygFSXJZXNSSMkcwwSHQV5v/Vp 7KTqoyCQVP1xY9JFA7oFsTxbDytG6VFn/NMXGSgGWyDg73IVn53qLw6p7C15Q5Hg bkbfOCoHQlzaQID/nN+2oZRDjUudII6YydBWLJHRdWpwezDn0H/cRdTmNQF06h8g YPCczrrWvUD3cWs+u9lzZCilVfbBOKfH+4O6rRlXAAAIBloyxNii6zMhMaq4pky+ -----END CERTIFICATE-----Generated at Sun Nov 23 23:34:03 2025 by rpki-client