This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft File: 8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft (raw, json) Hash identifier: 1dDAraSkbHYDPy8X2bV3MrvF0bSInVtkPWa7Fcj6SXU= Subject key identifier: 29:5A:CF:0F:EA:BE:FE:B7:36:BB:10:F0:E5:5C:61:67:F1:27:50:7D Authority key identifier: 46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF Certificate issuer: /CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89 Certificate serial: 010D0C9F4328584BF798C9B95A47C79F54DE8780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft Manifest number: 010D0C9F43285842EA6511F68AE8111CAA6098E2 Signing time: Mon 24 Nov 2025 15:00:09 +0000 Manifest this update: Mon 24 Nov 2025 15:00:09 +0000 Manifest next update: Thu 27 Nov 2025 15:00:00 +0000 Files and hashes: 1: 1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa (hash: K4hsRqCt+T+tee8uGTQgIBE1GmZDMwegPfChDm6qRbM=) 2: 23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa (hash: 2IjMeP3h0I92py98sxrobjNkflT/ryAVCJ+l+HLaG8c=) 3: 8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl (hash: ZJJKgEyXUPlaD7ThuscxVi6UFm9ejd6AiJkiigF5xxw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:98:c9:b9:5a:47:c7:9f:54:de:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89 Validity Not Before: Nov 24 15:00:09 2025 GMT Not After : Nov 27 15:00:00 2025 GMT Subject: CN=297d9760-b612-4b3b-af6b-524b28f64652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:73:5b:c6:b2:db:a3:8b:75:bf:25:80:92:fe: 04:7a:2f:72:15:8d:36:93:88:dd:7d:10:81:32:11: 3c:b5:17:4c:2b:6d:f8:43:52:37:25:19:93:34:e7: 1f:16:4c:35:fe:b6:b3:5b:9f:aa:ae:f8:a7:24:eb: 17:ff:7a:e6:03:8a:b5:a0:cc:82:ff:64:01:0c:e2: a1:8c:ef:e3:62:2e:ed:64:05:08:d0:e3:ca:92:92: c1:d4:95:ba:01:f3:15:f0:15:19:c8:e3:61:a2:0e: 53:e8:6f:3f:a7:ad:53:0d:b3:6e:21:93:d4:c6:97: 39:e2:f3:32:75:64:52:db:0e:ae:fd:5b:db:90:3d: b7:0d:5e:a6:19:8b:8d:27:b4:1d:dd:7a:d9:9c:d4: ab:cf:00:f0:8e:9f:26:4f:41:ec:08:e9:75:42:5e: 45:a6:c8:c0:3d:69:0f:68:88:91:7d:10:5e:a6:b4: f7:fc:b2:9a:29:d3:77:33:48:e3:9d:4d:89:de:67: 9c:e2:5b:46:8a:8a:8c:8b:d2:dd:8f:5b:f2:e2:1d: d8:47:14:da:95:ae:50:d1:86:18:3f:de:f8:56:51: 97:e4:ba:20:09:15:f8:13:c1:08:55:8a:a9:8d:22: db:25:16:17:0e:48:3b:99:43:25:7e:01:9e:97:1b: 0b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5A:CF:0F:EA:BE:FE:B7:36:BB:10:F0:E5:5C:61:67:F1:27:50:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl X509v3 Authority Key Identifier: keyid:46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7d:5a:0e:7a:55:d1:f7:e4:aa:05:b4:f6:32:65:35:37:a5: cd:cd:e1:9f:91:27:61:c9:b0:8c:4a:60:68:33:c3:c8:68:5a: be:f2:e3:d0:de:50:dd:97:7c:64:c5:e9:bf:2a:c3:36:9a:d6: 8d:c6:02:5d:7c:0e:63:81:a2:25:fb:19:d6:5b:b8:0a:ce:b9: 91:2a:c1:0b:3e:83:d3:b0:02:18:4a:57:e0:8e:55:97:74:e9: c3:59:bf:e1:61:67:3c:11:0a:69:d4:d1:25:2e:65:68:dd:ba: d5:05:f0:df:a4:51:ed:5d:58:70:ec:d1:65:03:3b:c8:f7:4a: 6f:c6:a7:31:02:27:00:39:1f:8b:b6:d9:d8:1f:55:12:06:83: 55:1a:d1:b3:38:20:55:93:18:16:25:be:ad:f9:36:b5:37:1b: f0:97:fd:71:c7:fb:c3:4e:2b:a7:51:7a:f4:24:a9:a1:87:e8: 11:ba:8c:2d:57:30:d7:1e:98:ac:39:81:1a:13:ab:c1:e3:7a: 34:17:a8:f9:59:93:95:73:ba:e8:d3:3f:8b:16:8a:0d:ba:13: 76:89:a5:19:87:df:90:49:70:41:f7:51:e8:1d:c0:f9:f8:35: 63:6d:f8:f7:a0:ed:bf:aa:a1:50:d1:93:af:73:61:b6:88:2e: fa:52:6a:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv3mMm5WkfHn1Teh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZDNiNTctNGRhNC00NDUyLThiNWUtOWI1MjQ4NDk0 Yjg5MB4XDTI1MTEyNDE1MDAwOVoXDTI1MTEyNzE1MDAwMFowLzEtMCsGA1UEAxMk Mjk3ZDk3NjAtYjYxMi00YjNiLWFmNmItNTI0YjI4ZjY0NjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3NbxrLbo4t1vyWAkv4Eei9yFY02k4jdfRCB MhE8tRdMK234Q1I3JRmTNOcfFkw1/razW5+qrvinJOsX/3rmA4q1oMyC/2QBDOKh jO/jYi7tZAUI0OPKkpLB1JW6AfMV8BUZyONhog5T6G8/p61TDbNuIZPUxpc54vMy dWRS2w6u/VvbkD23DV6mGYuNJ7Qd3XrZnNSrzwDwjp8mT0HsCOl1Ql5FpsjAPWkP aIiRfRBeprT3/LKaKdN3M0jjnU2J3mec4ltGioqMi9Ldj1vy4h3YRxTala5Q0YYY P974VlGX5LogCRX4E8EIVYqpjSLbJRYXDkg7mUMlfgGelxsLVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFClazw/qvv63NrsQ8OVcYWfxJ1B9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YzFk M2I1Ny00ZGE0LTQ0NTItOGI1ZS05YjUyNDg0OTRiODkvOGMxZDNiNTctNGRhNC00 NDUyLThiNWUtOWI1MjQ4NDk0Yjg5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGMxZDNiNTctNGRhNC00NDUyLThi NWUtOWI1MjQ4NDk0Yjg5LzhjMWQzYjU3LTRkYTQtNDQ1Mi04YjVlLTliNTI0ODQ5 NGI4OS5jcmwwHwYDVR0jBBgwFoAURur3uYQbE3zNzB/dkUojjTD5Kf8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YzFkM2I1Ny00ZGE0LTQ0NTItOGI1ZS05YjUy NDg0OTRiODkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqfVoOelXR9+SqBbT2MmU1 N6XNzeGfkSdhybCMSmBoM8PIaFq+8uPQ3lDdl3xkxem/KsM2mtaNxgJdfA5jgaIl +xnWW7gKzrmRKsELPoPTsAIYSlfgjlWXdOnDWb/hYWc8EQpp1NElLmVo3brVBfDf pFHtXVhw7NFlAzvI90pvxqcxAicAOR+LttnYH1USBoNVGtGzOCBVkxgWJb6t+Ta1 Nxvwl/1xx/vDTiunUXr0JKmhh+gRuowtVzDXHpisOYEaE6vB43o0F6j5WZOVc7ro 0z+LFooNuhN2iaUZh9+QSXBB91HoHcD5+DVjbfj3oO2/qqFQ0ZOvc2G2iC76UmoU -----END CERTIFICATE-----Generated at Tue Nov 25 11:34:43 2025 by rpki-client