This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft File: df1c4d20-5b5b-4073-83b7-529a82c159fd.mft (raw, json) Hash identifier: 9ToYGTVHR3R/6Gkzg9vRJHaikNGrW/DyD+37bBedvXA= Subject key identifier: F6:1D:CF:F5:73:59:0C:A7:B0:A9:54:63:7B:41:77:33:7F:45:04:8D Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Certificate serial: 010D0C9F4328584BF080413B98E1EEB684BA5BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft Manifest number: 010D0C9F4328584073A838657FFAC70B59F375F8 Signing time: Sat 22 Nov 2025 02:00:03 +0000 Manifest this update: Sat 22 Nov 2025 02:00:03 +0000 Manifest next update: Mon 24 Nov 2025 02:00:00 +0000 Files and hashes: 1: 0ceb1403-3b7c-379d-b030-7fd9c941239b.roa (hash: MVTK4080M8HKiUoi3oYuLnZikFeF00lAyxvZ3UfHDKI=) 2: 6dfabb17-4437-3c66-996a-7acc0579861a.roa (hash: 5qKBDW5NN4Kbek2tvHXIENtIkGiCkgJSwy5jqlT+sGc=) 3: df1c4d20-5b5b-4073-83b7-529a82c159fd.crl (hash: q9eBneQBFUx9PkX9SQWEm0ViILcWIpKUGVSbFOB6SH4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:80:41:3b:98:e1:ee:b6:84:ba:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Validity Not Before: Nov 22 02:00:03 2025 GMT Not After : Nov 24 02:00:00 2025 GMT Subject: CN=d78a87bd-e379-4b95-85b3-ec33d3d5dab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fa:82:76:46:b5:21:00:f4:3d:4c:8c:44:3b: 63:97:76:e6:87:ee:9b:e9:38:bb:62:97:75:2b:cf: 72:42:4a:d8:42:8c:8a:0f:00:09:a6:e8:bf:c8:cf: e2:d0:5f:5b:26:89:b1:75:c7:cb:85:2c:11:88:9b: 16:f1:0b:36:1b:eb:e8:e0:07:82:eb:65:6f:61:6a: 5f:cf:0f:d9:2c:d3:3f:a9:d5:bc:7a:ae:70:89:d9: 30:1e:de:8f:4c:48:e7:c6:a3:e1:93:87:72:17:7e: ac:3c:94:25:01:33:99:d9:c8:d8:51:0b:4d:c0:52: 27:a2:f9:74:78:ef:3b:dd:32:84:76:06:5d:fa:a4: 8c:82:8c:09:bf:bc:a7:d4:8c:74:13:77:4d:e0:c6: d4:4e:c4:82:9a:ec:23:ef:65:c6:60:81:88:f1:48: de:ca:37:8d:87:4f:e3:aa:cf:84:17:03:40:a7:84: bc:e4:de:9d:c3:ef:13:4d:cf:68:9f:ea:bb:57:ea: 9c:d8:81:fd:b8:20:57:74:e6:ca:8f:03:02:29:ff: 99:90:8f:65:23:cd:05:02:5f:76:10:b7:0e:e1:56: a0:82:a7:d7:74:fd:24:ff:2e:56:27:4f:0c:49:b1: b1:92:5b:ad:29:c9:3b:0c:ce:78:0f:1b:42:d8:25: 56:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1D:CF:F5:73:59:0C:A7:B0:A9:54:63:7B:41:77:33:7F:45:04:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl X509v3 Authority Key Identifier: keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:5a:75:01:d7:fb:f6:8b:5a:2c:3a:ec:45:5b:51:ee:a0:b5: 0f:57:a1:e5:0f:d0:dd:90:97:87:13:9b:4e:19:e1:72:26:04: 00:6a:33:8d:36:1a:7a:cd:c3:91:3a:3b:00:e1:99:33:31:91: ff:ab:9c:8e:57:7f:9d:f2:d5:6d:3a:fe:e3:f9:a9:09:f2:bc: 56:e1:66:c2:b5:e2:eb:e6:f2:05:e5:4a:af:6e:21:86:3a:51: af:8d:6d:12:99:47:ed:4e:a1:f9:b7:be:ec:eb:d9:85:25:49: ad:9f:5d:1f:fb:8b:fd:7d:c4:55:89:ae:65:9d:0d:e9:5a:71: 0d:22:1c:19:e9:80:04:de:83:23:f7:59:5e:a3:86:82:a1:32: d9:bd:57:7b:e8:86:ba:a9:cf:42:0a:ef:2d:3c:f4:b0:62:da: 08:9c:40:81:55:d7:02:8b:ed:ba:e2:ac:1b:28:e6:06:97:2e: 24:57:d0:bc:1b:2e:78:cb:14:cd:8e:67:13:fe:10:ed:ca:60: 6e:56:e4:16:69:9b:e3:e2:cd:e4:58:7a:e9:fb:53:54:6c:d5: b8:9b:5e:8e:ca:2d:54:fa:12:9b:8a:32:60:f5:34:5a:a2:1f: 24:f5:96:b5:c9:96:29:2d:07:8d:52:fa:49:f8:8d:8e:f7:ef: ca:62:dd:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvwgEE7mOHutoS6W8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1 OWZkMB4XDTI1MTEyMjAyMDAwM1oXDTI1MTEyNDAyMDAwMFowLzEtMCsGA1UEAxMk ZDc4YTg3YmQtZTM3OS00Yjk1LTg1YjMtZWMzM2QzZDVkYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfqCdka1IQD0PUyMRDtjl3bmh+6b6Ti7Ypd1 K89yQkrYQoyKDwAJpui/yM/i0F9bJomxdcfLhSwRiJsW8Qs2G+vo4AeC62VvYWpf zw/ZLNM/qdW8eq5widkwHt6PTEjnxqPhk4dyF36sPJQlATOZ2cjYUQtNwFInovl0 eO873TKEdgZd+qSMgowJv7yn1Ix0E3dN4MbUTsSCmuwj72XGYIGI8UjeyjeNh0/j qs+EFwNAp4S85N6dw+8TTc9on+q7V+qc2IH9uCBXdObKjwMCKf+ZkI9lI80FAl92 ELcO4VaggqfXdP0k/y5WJ08MSbGxklutKck7DM54DxtC2CVW5wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPYdz/VzWQynsKlUY3tBdzN/RQSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFj NGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvZGYxYzRkMjAtNWI1Yi00 MDczLTgzYjctNTI5YTgyYzE1OWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxYzRkMjAtNWI1Yi00MDczLTgz YjctNTI5YTgyYzE1OWZkL2RmMWM0ZDIwLTViNWItNDA3My04M2I3LTUyOWE4MmMx NTlmZC5jcmwwHwYDVR0jBBgwFoAUNrw0KynM+RarIlemQ3NzemhZ61cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01Mjlh ODJjMTU5ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIWnUB1/v2i1osOuxFW1Hu oLUPV6HlD9DdkJeHE5tOGeFyJgQAajONNhp6zcOROjsA4ZkzMZH/q5yOV3+d8tVt Ov7j+akJ8rxW4WbCteLr5vIF5UqvbiGGOlGvjW0SmUftTqH5t77s69mFJUmtn10f +4v9fcRVia5lnQ3pWnENIhwZ6YAE3oMj91leo4aCoTLZvVd76Ia6qc9CCu8tPPSw YtoInECBVdcCi+264qwbKOYGly4kV9C8Gy54yxTNjmcT/hDtymBuVuQWaZvj4s3k WHrp+1NUbNW4m16Oyi1U+hKbijJg9TRaoh8k9Za1yZYpLQeNUvpJ+I2O9+/KYt1v -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:25 2025 by rpki-client