This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft File: 9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft (raw, json) Hash identifier: pVh4Tvo6b9n48IUeKmKby+KsZuAExuNKZAdXxy6rKVw= Subject key identifier: F5:6D:5E:5D:1B:4B:43:A0:50:88:F6:A4:C2:39:A6:41:AF:19:52:36 Authority key identifier: 8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 Certificate issuer: /CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Certificate serial: 010D0C9F4328584C03ED50191854CEEB36E32EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft Manifest number: 010D0C9F4328584073A8332149A42B878A7ADB54 Signing time: Sat 29 Nov 2025 01:00:09 +0000 Manifest this update: Sat 29 Nov 2025 01:00:09 +0000 Manifest next update: Tue 02 Dec 2025 01:00:00 +0000 Files and hashes: 1: 3e71fa3d-35da-32cb-8bfc-5714765976a9.roa (hash: M8Kvx4XfHs1FspHXkMx2mHsktU6TuU+LjwNc5jIaIxE=) 2: 9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl (hash: KVxBm4+tf+BnJ1pWpNDtVGS1lX/Fzg3j5fOFsv8s4jE=) 3: a05edcb1-cd53-3361-9a4a-f92812c5008e.roa (hash: ncyKe3xci0I1fO4bvsfgFV7jCccpc9ak5dC9L6bC+nU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 02 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:03:ed:50:19:18:54:ce:eb:36:e3:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c6e9a25-1599-4e9b-a8a2-015995c805b8 Validity Not Before: Nov 29 01:00:09 2025 GMT Not After : Dec 2 01:00:00 2025 GMT Subject: CN=dd504b85-ed94-4be3-8206-98f4a9e77285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4c:2b:de:85:8a:2d:8d:da:9b:fc:35:e9:74: e9:7e:9c:b9:0e:91:91:a2:55:05:6e:45:f2:0d:05: 80:ad:13:a3:df:03:20:76:8e:5d:81:23:5d:3c:88: b9:6d:44:f6:1c:a1:05:09:b0:a3:c0:dc:c6:f9:04: 56:b6:03:be:6b:bc:dd:aa:f3:d8:f1:e2:ab:36:99: 86:e4:13:26:61:40:99:85:7f:b4:59:26:c5:3c:93: a3:18:1a:02:d9:9d:c1:6c:65:d8:09:2b:ec:cd:38: 41:85:46:c5:fc:cc:1e:6c:ef:63:09:18:24:bb:9c: be:b1:5e:74:6d:76:ef:aa:94:16:5b:8a:ef:fd:4d: 25:95:39:e1:31:50:c4:4d:a2:43:42:b5:67:1d:55: d3:5b:d0:82:f6:fe:15:70:9e:df:2b:d5:14:59:b5: 1f:7f:dc:07:94:9e:d6:3c:30:02:91:b6:ed:88:47: f0:52:98:26:44:c4:54:89:e4:b1:87:9d:b1:57:db: 7b:0e:e6:da:e5:fe:41:f1:fd:1f:66:0e:76:21:fe: 8b:d8:05:1c:2d:8f:be:ff:b5:f7:f9:30:57:16:7c: a9:01:5a:15:21:8a:9f:5c:17:5e:47:18:1c:bf:9f: c1:54:79:1b:e9:54:f4:23:0c:6f:26:50:78:ad:c3: 76:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:6D:5E:5D:1B:4B:43:A0:50:88:F6:A4:C2:39:A6:41:AF:19:52:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8/9c6e9a25-1599-4e9b-a8a2-015995c805b8.crl X509v3 Authority Key Identifier: keyid:8E:F7:C9:9E:50:68:66:1B:10:0F:56:6A:37:AB:5B:FF:D4:26:8F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9c6e9a25-1599-4e9b-a8a2-015995c805b8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:43:58:c6:db:a1:d7:8a:a3:fa:d8:dd:8b:64:ad:c0:be:0d: b5:4c:88:cf:2f:f4:50:a6:5c:4f:44:68:0e:e2:27:f0:06:f8: 89:85:81:e0:21:43:1e:f2:12:b4:46:b5:4d:93:0b:42:18:9a: d6:f3:e1:20:b6:16:20:b1:91:14:78:bc:0e:3b:ec:f6:d1:bf: 1e:9e:91:b6:1a:c7:47:a0:97:e0:33:3d:d8:2e:3a:55:f9:25: b0:bc:8a:69:cf:14:82:30:8f:de:4f:81:80:50:5b:d5:72:78: 52:aa:8c:4e:c3:5f:3c:fc:67:ef:3a:d1:e2:ee:49:5b:8c:ed: 36:d2:d3:ca:08:39:a0:84:72:11:fc:18:6b:90:61:b9:2f:56: 76:83:db:b8:14:aa:7e:fb:c8:52:98:34:37:89:42:9f:a7:eb: e4:6e:19:82:29:1c:d0:80:4a:bc:4e:0b:a3:9c:f0:11:de:12: eb:5d:f9:e6:0f:56:12:79:25:0d:bc:84:d2:84:4d:6c:67:da: 96:6a:6b:43:51:6a:9c:29:2b:fe:03:77:b1:b3:4b:ee:6e:e1: 1e:aa:9b:1d:95:ca:27:c6:6e:e5:c1:f2:71:13:d9:95:e1:9d: 4c:63:91:bf:f9:fe:5d:bf:e0:aa:d0:54:60:fd:f8:5e:0d:7d: 34:24:c7:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwD7VAZGFTO6zbjLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWM2ZTlhMjUtMTU5OS00ZTliLWE4YTItMDE1OTk1Yzgw NWI4MB4XDTI1MTEyOTAxMDAwOVoXDTI1MTIwMjAxMDAwMFowLzEtMCsGA1UEAxMk ZGQ1MDRiODUtZWQ5NC00YmUzLTgyMDYtOThmNGE5ZTc3Mjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUwr3oWKLY3am/w16XTpfpy5DpGRolUFbkXy DQWArROj3wMgdo5dgSNdPIi5bUT2HKEFCbCjwNzG+QRWtgO+a7zdqvPY8eKrNpmG 5BMmYUCZhX+0WSbFPJOjGBoC2Z3BbGXYCSvszThBhUbF/MwebO9jCRgku5y+sV50 bXbvqpQWW4rv/U0llTnhMVDETaJDQrVnHVXTW9CC9v4VcJ7fK9UUWbUff9wHlJ7W PDACkbbtiEfwUpgmRMRUieSxh52xV9t7Duba5f5B8f0fZg52If6L2AUcLY++/7X3 +TBXFnypAVoVIYqfXBdeRxgcv5/BVHkb6VT0IwxvJlB4rcN2owIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPVtXl0bS0OgUIj2pMI5pkGvGVI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85YzZl OWEyNS0xNTk5LTRlOWItYThhMi0wMTU5OTVjODA1YjgvOWM2ZTlhMjUtMTU5OS00 ZTliLWE4YTItMDE1OTk1YzgwNWI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWM2ZTlhMjUtMTU5OS00ZTliLWE4 YTItMDE1OTk1YzgwNWI4LzljNmU5YTI1LTE1OTktNGU5Yi1hOGEyLTAxNTk5NWM4 MDViOC5jcmwwHwYDVR0jBBgwFoAUjvfJnlBoZhsQD1ZqN6tb/9Qmj6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85YzZlOWEyNS0xNTk5LTRlOWItYThhMi0wMTU5 OTVjODA1YjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAjQ1jG26HXiqP62N2LZK3A vg21TIjPL/RQplxPRGgO4ifwBviJhYHgIUMe8hK0RrVNkwtCGJrW8+EgthYgsZEU eLwOO+z20b8enpG2GsdHoJfgMz3YLjpV+SWwvIppzxSCMI/eT4GAUFvVcnhSqoxO w188/GfvOtHi7klbjO020tPKCDmghHIR/BhrkGG5L1Z2g9u4FKp++8hSmDQ3iUKf p+vkbhmCKRzQgEq8TgujnPAR3hLrXfnmD1YSeSUNvITShE1sZ9qWamtDUWqcKSv+ A3exs0vubuEeqpsdlconxm7lwfJxE9mV4Z1MY5G/+f5dv+Cq0FRg/fheDX00JMfI -----END CERTIFICATE-----Generated at Sat Nov 29 21:47:11 2025 by rpki-client