This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: Gh8baHP73A/7U/4ASFjS+XHS1B5P+LPBHPtIJ/dgNR8= Subject key identifier: B3:F6:F8:AF:F4:99:3D:8F:63:C8:3E:BE:C2:AB:B7:AF:D5:71:B3:1D Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584C04F945BC9846BF4EEFB63A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026CBF Signing time: Sat 29 Nov 2025 10:00:03 +0000 Manifest this update: Sat 29 Nov 2025 10:00:03 +0000 Manifest next update: Tue 02 Dec 2025 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: xKS5dDL4uvITst9UbO+LG4cGqgdrvmgMi89oisspobc=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: b040IrCLiTAZOu/+2I006r7/Ow9XmJ+jVOVUk/b03vg=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: tyu/ZwC6SFzUuLpdo6IDvjF0vSqzmXyC9vxaQWTYx/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Dec 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:04:f9:45:bc:98:46:bf:4e:ef:b6:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Nov 29 10:00:03 2025 GMT Not After : Dec 2 10:00:00 2025 GMT Subject: CN=954d4e3d-dd72-4fb7-92e0-684aed20eda4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:9d:d3:04:46:ba:12:6e:6e:9f:d9:de:dc:02: 58:bf:de:86:ed:75:e9:83:00:45:b8:86:d0:0d:48: 2a:2a:7a:e6:56:22:eb:ea:29:ab:7e:2c:db:67:87: 3e:cd:51:32:27:f0:6a:03:00:7e:12:a1:39:60:a0: ac:9e:79:8a:84:bb:c3:8f:a0:d5:82:e3:4b:14:35: a0:1a:9b:e3:42:27:ca:54:36:09:c6:36:60:14:36: e2:c9:c7:e7:1d:04:16:48:e2:71:ff:c5:46:62:67: 5e:08:53:2a:2e:de:8b:30:94:7c:d1:10:c0:31:5e: ae:61:4e:b6:01:ce:f7:4c:a1:97:77:b0:72:6c:7f: f7:20:ad:b0:94:df:a7:01:57:cc:dc:71:e6:c6:f0: be:c3:d6:a6:14:06:c1:30:a3:c0:30:8e:af:34:d2: 5f:19:a3:bc:8f:2a:9f:e2:23:9d:f8:f0:fe:ee:83: 61:c9:5f:17:53:13:ac:d7:2a:63:c6:01:58:82:b9: 5b:57:1e:80:54:f6:b0:e6:a6:98:f4:f4:20:08:8b: 63:2e:0b:50:40:2f:9f:f2:a5:7f:40:d7:cc:5a:83: 72:d4:25:5f:9d:e1:36:b3:fa:c4:a0:80:42:11:57: 7c:b4:43:ae:b4:09:d9:dc:fe:cd:be:e6:e3:da:3e: e8:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F6:F8:AF:F4:99:3D:8F:63:C8:3E:BE:C2:AB:B7:AF:D5:71:B3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:88:ec:d9:bd:c1:bb:b1:fb:b7:bb:d4:2e:03:ed:07:93:25: 03:b3:25:bc:06:cd:b2:45:63:6d:97:e2:2b:71:3e:09:b9:7f: 94:20:31:6f:51:d9:72:7a:1a:5d:2c:2d:d3:f8:95:a7:b5:dd: 87:aa:f9:ae:f4:9f:3f:ba:36:c5:60:e0:4e:e1:07:4d:35:3f: 9e:1c:bf:e4:6c:ec:07:6a:e9:b0:f8:9c:07:0c:5d:50:3f:8e: 9f:4f:4c:1a:f0:2b:4a:ff:1b:e9:b7:b1:98:1f:f4:a0:28:df: 9e:5d:7c:6a:e3:f2:ef:90:91:52:72:03:3d:3a:40:94:99:9c: 56:d1:b7:a5:39:f5:f8:db:50:db:03:20:69:9b:dd:79:74:0f: 6b:ce:7c:bc:26:60:92:5a:cf:be:56:5b:a2:04:06:d6:ee:95: 53:47:f3:8f:32:e0:84:4a:18:63:5d:5f:87:6e:67:69:dd:b3: 82:22:c5:46:52:11:e9:37:49:33:e7:6e:3a:39:aa:af:92:23: 02:d9:ec:4a:65:73:23:0d:94:68:64:12:3c:93:91:b7:10:38: 00:5d:98:1e:ee:a2:6c:81:63:f4:5a:6d:5e:7a:59:ff:03:63: d5:79:f1:ab:7d:4b:61:ec:fb:cb:7f:07:55:ca:7d:d1:cf:23: 9c:1a:5e:a5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwE+UW8mEa/Tu+2OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MTEyOTEwMDAwM1oXDTI1MTIwMjEwMDAwMFowLzEtMCsGA1UEAxMk OTU0ZDRlM2QtZGQ3Mi00ZmI3LTkyZTAtNjg0YWVkMjBlZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp3TBEa6Em5un9ne3AJYv96G7XXpgwBFuIbQ DUgqKnrmViLr6imrfizbZ4c+zVEyJ/BqAwB+EqE5YKCsnnmKhLvDj6DVguNLFDWg GpvjQifKVDYJxjZgFDbiycfnHQQWSOJx/8VGYmdeCFMqLt6LMJR80RDAMV6uYU62 Ac73TKGXd7BybH/3IK2wlN+nAVfM3HHmxvC+w9amFAbBMKPAMI6vNNJfGaO8jyqf 4iOd+PD+7oNhyV8XUxOs1ypjxgFYgrlbVx6AVPaw5qaY9PQgCItjLgtQQC+f8qV/ QNfMWoNy1CVfneE2s/rEoIBCEVd8tEOutAnZ3P7Nvubj2j7o5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLP2+K/0mT2PY8g+vsKrt6/VcbMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkiOzZvcG7sfu3u9QuA+0H kyUDsyW8Bs2yRWNtl+IrcT4JuX+UIDFvUdlyehpdLC3T+JWntd2Hqvmu9J8/ujbF YOBO4QdNNT+eHL/kbOwHaumw+JwHDF1QP46fT0wa8CtK/xvpt7GYH/SgKN+eXXxq 4/LvkJFScgM9OkCUmZxW0belOfX421DbAyBpm915dA9rzny8JmCSWs++VluiBAbW 7pVTR/OPMuCEShhjXV+Hbmdp3bOCIsVGUhHpN0kz5246OaqvkiMC2exKZXMjDZRo ZBI8k5G3EDgAXZge7qJsgWP0Wm1eeln/A2PVefGrfUth7PvLfwdVyn3RzyOcGl6l -----END CERTIFICATE-----Generated at Sat Nov 29 21:44:52 2025 by rpki-client