This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: 8UwL6iIOc1QAqgAgUK5cnysX3+nyK94F9/ka3eZ1m7Y= Subject key identifier: 15:17:DA:6E:DB:57:94:D7:11:13:C6:A4:F6:F3:8E:A4:29:F7:8F:1C Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584BF1C7CFA2AC18EF32FF560780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11BF6 Signing time: Sat 22 Nov 2025 13:00:03 +0000 Manifest this update: Sat 22 Nov 2025 13:00:03 +0000 Manifest next update: Mon 24 Nov 2025 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: tgMdEvw3hihtfknRLFdH7kxkAJ/beP+5DxnJwEX+yUo=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: oXJPllBEnIzyJfL6IkXRw9B81+Fnp/CTsEmS30+gyY8=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: nh+kWIbdKhZOMAE1+gOCXS/38s7VP5r/HUozmAcdeVA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:c7:cf:a2:ac:18:ef:32:ff:56:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Nov 22 13:00:03 2025 GMT Not After : Nov 24 13:00:00 2025 GMT Subject: CN=0ea2e457-e1a0-4ce2-adf9-f926ec7e1bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:7c:74:ef:d7:db:89:c3:d2:24:e0:55:b1: 27:54:57:56:10:5e:ee:b2:50:bc:48:7b:43:81:3a: b7:bb:6e:18:fa:c7:70:a5:b3:f9:59:45:8b:25:b4: 91:52:a6:bb:d6:e8:18:0f:24:7a:73:0d:94:a9:d8: f4:bf:4a:a2:44:a1:b4:d9:22:5a:5e:d4:44:e9:b6: be:08:44:94:2f:7e:ce:43:3a:06:48:23:9b:e2:9b: c5:13:6c:ae:b7:4f:22:00:be:23:da:74:09:36:33: bb:0a:f9:2b:46:61:4d:ca:43:7d:91:32:3e:33:60: 72:d7:0b:48:d7:22:b3:06:a1:78:8d:d3:e1:5e:e0: da:17:d1:0e:62:f6:1a:df:d1:64:06:4d:85:50:cb: e2:84:9d:f8:29:a6:e6:01:85:33:dd:39:71:67:d9: 6f:47:36:c4:30:8a:08:6f:61:72:bc:8c:22:fa:59: d7:c0:5a:3c:28:9b:a2:1d:64:f8:e2:81:f0:c7:f3: c0:d4:58:65:17:76:a4:7b:29:bb:28:59:28:eb:65: 61:73:cf:79:c3:0b:84:27:3d:02:4f:1c:41:de:70: a3:04:d0:ff:4f:14:13:ec:63:91:ca:ac:16:c3:de: 2e:b4:7f:ff:97:e5:5c:65:4a:f2:51:e9:6b:fd:af: d8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:17:DA:6E:DB:57:94:D7:11:13:C6:A4:F6:F3:8E:A4:29:F7:8F:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:dc:13:77:e0:01:b4:30:ba:6b:4b:f4:3f:1c:e6:3b:3e:56: b6:1c:b5:c7:63:93:a0:4c:67:19:d3:f8:b7:05:7f:7f:18:5e: c7:79:6a:af:2e:21:87:39:06:bc:5c:1d:99:1f:07:2a:ff:59: 0e:66:10:b0:36:a6:37:b0:ef:b8:77:27:9a:28:e3:cf:ec:30: 4a:ce:e6:12:7a:89:30:83:3a:24:9c:7b:e7:49:db:ef:17:42: 40:2f:68:16:a8:42:f2:9b:b8:b2:aa:f1:dd:16:e9:83:c2:64: 6c:1a:3f:18:88:f6:31:51:84:66:cf:e4:a4:3b:1b:b2:4a:14: 95:50:94:e6:16:4f:e3:24:22:58:34:ea:45:fb:c3:7e:24:0c: d1:d6:9f:32:41:8c:b3:b6:de:e9:94:24:c8:18:90:2b:95:52: ba:87:b2:96:26:ab:ba:cf:c7:f5:04:11:96:7b:34:7e:56:20: dd:77:08:74:55:e4:04:2f:c6:f6:91:54:c5:fe:16:3a:5b:c2: 71:0a:5b:58:0e:26:d3:d5:f7:00:d5:e6:f9:8c:31:e0:50:a6: 44:59:f0:7f:50:fc:00:22:4e:9d:c6:7f:ba:16:56:cc:06:29: 86:45:df:db:26:3f:ad:e0:e7:18:57:c8:8b:8c:2f:e9:bb:3a: d9:88:80:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvxx8+irBjvMv9WB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI1MTEyMjEzMDAwM1oXDTI1MTEyNDEzMDAwMFowLzEtMCsGA1UEAxMk MGVhMmU0NTctZTFhMC00Y2UyLWFkZjktZjkyNmVjN2UxYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0N8dO/X24nD0iTgVbEnVFdWEF7uslC8SHtD gTq3u24Y+sdwpbP5WUWLJbSRUqa71ugYDyR6cw2Uqdj0v0qiRKG02SJaXtRE6ba+ CESUL37OQzoGSCOb4pvFE2yut08iAL4j2nQJNjO7CvkrRmFNykN9kTI+M2By1wtI 1yKzBqF4jdPhXuDaF9EOYvYa39FkBk2FUMvihJ34KabmAYUz3TlxZ9lvRzbEMIoI b2FyvIwi+lnXwFo8KJuiHWT44oHwx/PA1FhlF3akeym7KFko62Vhc895wwuEJz0C TxxB3nCjBND/TxQT7GORyqwWw94utH//l+VcZUryUelr/a/YDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBUX2m7bV5TXERPGpPbzjqQp948cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCv3BN34AG0MLprS/Q/HOY7 Pla2HLXHY5OgTGcZ0/i3BX9/GF7HeWqvLiGHOQa8XB2ZHwcq/1kOZhCwNqY3sO+4 dyeaKOPP7DBKzuYSeokwgzoknHvnSdvvF0JAL2gWqELym7iyqvHdFumDwmRsGj8Y iPYxUYRmz+SkOxuyShSVUJTmFk/jJCJYNOpF+8N+JAzR1p8yQYyztt7plCTIGJAr lVK6h7KWJqu6z8f1BBGWezR+ViDddwh0VeQEL8b2kVTF/hY6W8JxCltYDibT1fcA 1eb5jDHgUKZEWfB/UPwAIk6dxn+6FlbMBimGRd/bJj+t4OcYV8iLjC/puzrZiIDB -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:59 2025 by rpki-client