This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft File: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json) Hash identifier: 3ndtK91/qnEkJtivzubl18/yZDbh+tr//CG/LsVZDjg= Subject key identifier: A5:10:07:D5:02:33:C1:B2:AD:42:FB:81:D7:36:EB:8F:AE:2E:1E:9D Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA Certificate issuer: /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Certificate serial: 010D0C9F4328584BF150B488FB57485C65E88C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft Manifest number: 010D0C9F4328584073A84B5B78FE156D22EF3B7F Signing time: Sat 22 Nov 2025 09:00:03 +0000 Manifest this update: Sat 22 Nov 2025 09:00:03 +0000 Manifest next update: Mon 24 Nov 2025 09:00:00 +0000 Files and hashes: 1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: zLZ4dGXhKCFMXZ9YD8MYUNFahYFknPVfQ3lO3W2OMZM=) 2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: QI+7cwgQYexvHpym/GQqpTN6ZMbclj03kusUcfQrRKs=) 3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: /mnDuNq1hK4Cr3fi7kAAadRSX/bYKw/XBVrJVT8XTD4=) 4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: G1glLaG5QfHFJZagGl8RRkO7L43HGpeQDsvusvaJlW0=) 5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: KebL9jylRxBbE+y7rAXJQcXHePCz+t/4LzLE9ysAe58=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:50:b4:88:fb:57:48:5c:65:e8:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99 Validity Not Before: Nov 22 09:00:03 2025 GMT Not After : Nov 24 09:00:00 2025 GMT Subject: CN=702c87d4-b992-499d-9a00-5caf526b413d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:37:ae:a1:b4:68:73:f2:09:4f:07:00:7e: bd:99:7b:81:9a:f8:99:c7:3b:38:b6:ff:d9:eb:bf: fe:7b:90:e4:1a:1f:fd:3b:8b:91:0b:31:ab:d2:fc: 41:f5:2b:b6:ac:e2:88:d4:11:87:1c:a5:59:a1:2f: 66:94:16:51:75:03:9c:a4:5b:d8:0d:2e:5c:c6:1b: bd:33:3b:f8:95:c7:a5:26:4d:4c:82:df:99:d1:bb: 5e:f5:5a:ba:1e:fb:c5:d1:a2:a5:48:f6:a9:e0:76: e5:55:13:c9:b3:37:cd:e1:6a:72:44:b3:4d:f6:7b: a4:cc:c0:17:37:e4:b9:72:ad:59:c0:96:51:78:b6: 99:7b:ae:37:03:46:99:c2:d8:d5:87:67:25:ef:86: 03:f1:eb:04:bc:d9:3c:c0:ee:81:73:bf:bc:4b:0f: 52:46:b3:27:88:13:ec:9c:7b:e7:53:1c:3f:89:9d: 19:ab:d6:6a:2f:00:02:22:67:83:ea:46:74:3f:9a: 43:be:df:a9:83:b5:a1:bc:bb:f5:ae:bb:26:c7:ee: a9:8d:5c:2a:d8:f2:43:ab:09:99:a5:ff:30:bd:a8: 24:d8:90:b1:8d:c8:3f:93:08:ed:c6:32:2d:42:32: e0:a2:4a:5a:27:c4:f2:59:f0:b5:f1:39:04:1d:47: 1d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:10:07:D5:02:33:C1:B2:AD:42:FB:81:D7:36:EB:8F:AE:2E:1E:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl X509v3 Authority Key Identifier: keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:5a:19:03:79:1c:bf:62:70:c5:85:de:04:e4:4f:d5:3d:4f: 6b:33:d0:e1:d7:58:32:fd:e6:1e:16:82:16:a6:a6:59:13:06: 1f:4f:70:73:da:4e:36:7e:b7:96:fe:4e:ba:6d:3f:5c:d4:0b: a3:b7:88:b7:f9:98:d9:31:d0:54:ae:ba:dc:af:6a:55:07:fc: 55:46:ac:d4:3d:6a:98:d5:f3:28:2d:3f:dc:58:0f:b5:c9:14: 2f:04:29:ca:3a:e1:0c:f1:5b:1d:8e:f2:e2:cb:3c:21:db:df: 4e:f1:ab:2d:d4:fd:1c:27:c2:3e:f9:e1:bf:9b:1b:55:13:fb: 80:ff:f6:91:3b:b6:a8:46:2f:02:28:c3:9f:73:71:f0:cb:be: 49:57:95:4b:3c:d5:65:37:33:24:ae:00:ef:e2:4a:27:b2:f1: 2a:38:11:29:45:80:fb:3a:f0:a3:38:cf:42:3a:7e:1f:11:63: ee:81:d4:be:db:fd:be:51:72:5d:60:c9:5c:76:06:d9:36:61: 02:c5:d6:cb:43:f9:89:42:c3:e0:4c:86:e0:bf:5a:c5:08:50: 29:a0:46:bd:1c:18:f3:74:6f:e5:8c:0a:8b:ac:28:e7:dd:91: 2c:53:05:f4:32:94:ce:ff:ec:e7:16:7a:e6:1c:e6:c4:1f:b0: 72:62:97:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvxULSI+1dIXGXojEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEyZTM0NGYtMDFhMC00NjFkLTljMGEtMjFkZGJjNzBh YTk5MB4XDTI1MTEyMjA5MDAwM1oXDTI1MTEyNDA5MDAwMFowLzEtMCsGA1UEAxMk NzAyYzg3ZDQtYjk5Mi00OTlkLTlhMDAtNWNhZjUyNmI0MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDU3rqG0aHPyCU8HAH69mXuBmviZxzs4tv/Z 67/+e5DkGh/9O4uRCzGr0vxB9Su2rOKI1BGHHKVZoS9mlBZRdQOcpFvYDS5cxhu9 Mzv4lcelJk1Mgt+Z0bte9Vq6HvvF0aKlSPap4HblVRPJszfN4WpyRLNN9nukzMAX N+S5cq1ZwJZReLaZe643A0aZwtjVh2cl74YD8esEvNk8wO6Bc7+8Sw9SRrMniBPs nHvnUxw/iZ0Zq9ZqLwACImeD6kZ0P5pDvt+pg7WhvLv1rrsmx+6pjVwq2PJDqwmZ pf8wvagk2JCxjcg/kwjtxjItQjLgokpaJ8TyWfC18TkEHUcdXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKUQB9UCM8GyrUL7gdc264+uLh6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJl MzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRkYmM3MGFhOTkvYWEyZTM0NGYtMDFhMC00 NjFkLTljMGEtMjFkZGJjNzBhYTk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWEyZTM0NGYtMDFhMC00NjFkLTlj MGEtMjFkZGJjNzBhYTk5L2FhMmUzNDRmLTAxYTAtNDYxZC05YzBhLTIxZGRiYzcw YWE5OS5jcmwwHwYDVR0jBBgwFoAUtp5aPIgevwm3Jc8FjMDBLqnEn8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYTJlMzQ0Zi0wMWEwLTQ2MWQtOWMwYS0yMWRk YmM3MGFhOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/WhkDeRy/YnDFhd4E5E/V PU9rM9Dh11gy/eYeFoIWpqZZEwYfT3Bz2k42freW/k66bT9c1Aujt4i3+ZjZMdBU rrrcr2pVB/xVRqzUPWqY1fMoLT/cWA+1yRQvBCnKOuEM8VsdjvLiyzwh299O8ast 1P0cJ8I++eG/mxtVE/uA//aRO7aoRi8CKMOfc3Hwy75JV5VLPNVlNzMkrgDv4kon svEqOBEpRYD7OvCjOM9COn4fEWPugdS+2/2+UXJdYMlcdgbZNmECxdbLQ/mJQsPg TIbgv1rFCFApoEa9HBjzdG/ljAqLrCjn3ZEsUwX0MpTO/+znFnrmHObEH7ByYpfq -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:04 2025 by rpki-client