This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft File: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft (raw, json) Hash identifier: 8m4pADCFaGP+dGO5qt/Gr9wraWCGKgWK+Iu89gCPpJw= Subject key identifier: 9B:2D:33:BA:CD:32:8E:9E:AA:1D:D9:81:51:51:DD:5A:97:BE:61:78 Authority key identifier: F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA Certificate issuer: /CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Certificate serial: 010D0C9F4328584BF91BE76156F2BB015DEA7AD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft Manifest number: 010D0C9F4328584073A83CCF3B74A2EBFF5643F9 Signing time: Tue 25 Nov 2025 04:00:09 +0000 Manifest this update: Tue 25 Nov 2025 04:00:09 +0000 Manifest next update: Fri 28 Nov 2025 04:00:00 +0000 Files and hashes: 1: 6fa801e3-3342-3f1c-a396-6f9201c0d56d.roa (hash: CT0H+bJj7U10Qb+EnNvqkN8EAqb9GEBeyyE4072xn6k=) 2: d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl (hash: IFoFLUJdoFhXAh4kl7rdI81iI84kqPOMyDgh3DGYlZ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Nov 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f9:1b:e7:61:56:f2:bb:01:5d:ea:7a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3c1e47f-2bd9-4e42-a950-0f81e45cd461 Validity Not Before: Nov 25 04:00:09 2025 GMT Not After : Nov 28 04:00:00 2025 GMT Subject: CN=d4d265da-5158-4e51-9d3a-9c32026477a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:73:3f:98:6d:7f:16:3b:5b:52:31:1b:58:67: 52:db:83:22:7f:13:47:b6:ed:84:4d:91:82:cd:16: 60:f7:b2:73:dc:29:51:14:67:b1:b3:6c:92:b5:63: 87:43:51:08:33:88:3c:88:28:db:49:25:f5:76:05: 35:05:73:fa:87:f7:f0:db:af:b4:16:3a:96:b1:6f: 96:c5:ce:ef:66:27:d8:71:0d:e5:f7:4b:99:86:19: 84:00:b3:23:3d:28:eb:a4:2e:b6:46:b2:b2:2b:cb: 32:a8:97:73:cf:72:30:d6:bb:e1:49:42:09:e4:1a: 7b:80:7d:e0:ec:8f:f2:fe:ac:d2:9e:c1:80:03:df: d1:a9:da:bf:57:bb:d9:b8:35:62:5d:84:f9:48:48: ec:8b:66:a0:33:28:14:42:b0:59:e8:fd:97:5d:a4: af:2f:88:25:95:68:42:ea:aa:7f:d2:38:ea:03:37: 39:7a:98:4c:ad:bd:7d:db:f3:e6:4b:90:55:c6:52: fb:4c:2e:3f:60:9d:22:4d:ed:85:56:9d:a3:b9:8e: 4c:c9:ca:f9:0d:13:c9:6b:58:87:ec:ec:40:7a:26: 0b:6c:7d:58:6f:c3:bd:8a:0f:fe:4b:bd:ce:20:93: 78:05:08:43:ec:c4:56:c6:5b:5b:98:dc:9a:da:ee: b1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2D:33:BA:CD:32:8E:9E:AA:1D:D9:81:51:51:DD:5A:97:BE:61:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.crl X509v3 Authority Key Identifier: keyid:F8:E0:54:64:56:2E:06:FC:45:40:3B:F8:F6:1F:52:85:28:DA:22:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d3c1e47f-2bd9-4e42-a950-0f81e45cd461.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:8d:ac:76:59:c1:02:cf:29:c9:55:67:2b:e2:a5:5f:2e:c1: 19:7f:99:f4:dc:c7:c2:25:0a:2a:3f:8e:cc:ce:1f:f2:90:6e: ff:1f:2a:84:9d:a6:c7:ef:dc:2f:9b:7f:c2:ef:6f:37:6f:f3: be:6d:94:26:5a:02:ea:aa:0c:ed:f8:ea:4b:db:ec:01:a7:be: 16:d4:08:59:2b:11:9d:62:06:2d:d5:e7:10:d1:5f:b9:66:77: e9:16:77:2a:d2:c5:e9:93:5d:6b:6b:11:90:c5:4f:99:c0:07: 48:fc:53:ba:ce:21:07:e4:65:d8:95:35:44:4e:e6:7b:77:06: 5a:73:46:83:61:56:1d:ae:27:1f:5e:45:57:98:e3:0d:c3:91: 27:04:98:38:0f:f7:9f:21:13:d4:f2:77:d7:2d:8b:0d:f1:4e: 6e:b3:fd:91:b5:6b:6d:b7:da:ea:92:32:f5:bf:ac:1e:8a:fc: e6:8b:20:15:98:a4:3f:f5:76:8c:31:4d:ad:cd:59:88:c0:91: 7f:c9:cf:7c:8f:73:01:ed:cf:a1:21:21:89:dc:84:fc:4e:49: 64:9a:12:ad:d8:c8:b0:44:4b:45:b7:59:e0:fb:1c:dd:4c:c6: 2b:7f:b4:bc:3a:7e:b5:5c:cf:3b:f6:0d:7d:fc:09:4f:d9:e4: 55:cf:0f:c7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv5G+dhVvK7AV3qetAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDNjMWU0N2YtMmJkOS00ZTQyLWE5NTAtMGY4MWU0NWNk NDYxMB4XDTI1MTEyNTA0MDAwOVoXDTI1MTEyODA0MDAwMFowLzEtMCsGA1UEAxMk ZDRkMjY1ZGEtNTE1OC00ZTUxLTlkM2EtOWMzMjAyNjQ3N2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHM/mG1/FjtbUjEbWGdS24MifxNHtu2ETZGC zRZg97Jz3ClRFGexs2yStWOHQ1EIM4g8iCjbSSX1dgU1BXP6h/fw26+0FjqWsW+W xc7vZifYcQ3l90uZhhmEALMjPSjrpC62RrKyK8syqJdzz3Iw1rvhSUIJ5Bp7gH3g 7I/y/qzSnsGAA9/Rqdq/V7vZuDViXYT5SEjsi2agMygUQrBZ6P2XXaSvL4gllWhC 6qp/0jjqAzc5ephMrb192/PmS5BVxlL7TC4/YJ0iTe2FVp2juY5Mycr5DRPJa1iH 7OxAeiYLbH1Yb8O9ig/+S73OIJN4BQhD7MRWxltbmNya2u6xuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJstM7rNMo6eqh3ZgVFR3VqXvmF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kM2Mx ZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgxZTQ1Y2Q0NjEvZDNjMWU0N2YtMmJkOS00 ZTQyLWE5NTAtMGY4MWU0NWNkNDYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDNjMWU0N2YtMmJkOS00ZTQyLWE5 NTAtMGY4MWU0NWNkNDYxL2QzYzFlNDdmLTJiZDktNGU0Mi1hOTUwLTBmODFlNDVj ZDQ2MS5jcmwwHwYDVR0jBBgwFoAU+OBUZFYuBvxFQDv49h9ShSjaIsowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kM2MxZTQ3Zi0yYmQ5LTRlNDItYTk1MC0wZjgx ZTQ1Y2Q0NjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8jax2WcECzynJVWcr4qVf LsEZf5n03MfCJQoqP47Mzh/ykG7/HyqEnabH79wvm3/C7283b/O+bZQmWgLqqgzt +OpL2+wBp74W1AhZKxGdYgYt1ecQ0V+5ZnfpFncq0sXpk11raxGQxU+ZwAdI/FO6 ziEH5GXYlTVETuZ7dwZac0aDYVYdricfXkVXmOMNw5EnBJg4D/efIRPU8nfXLYsN 8U5us/2RtWttt9rqkjL1v6weivzmiyAVmKQ/9XaMMU2tzVmIwJF/yc98j3MB7c+h ISGJ3IT8TklkmhKt2MiwREtFt1ng+xzdTMYrf7S8On61XM879g19/AlP2eRVzw/H -----END CERTIFICATE-----Generated at Tue Nov 25 16:17:42 2025 by rpki-client