This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft File: c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft (raw, json) Hash identifier: 97JdfXqM9Olo2one695rp+muXw+IneCtTMF+Ve7xhHg= Subject key identifier: 23:DF:56:98:79:59:96:78:E8:ED:87:CC:A1:76:F5:06:23:9D:DC:53 Authority key identifier: 34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE Certificate issuer: /CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Certificate serial: 010D0C9F4328584BF9B0BFD172A1AF7454F48F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft Manifest number: 010D0C9F4328584732ED20FCF6A8749093E5E70E Signing time: Tue 25 Nov 2025 09:00:03 +0000 Manifest this update: Tue 25 Nov 2025 09:00:03 +0000 Manifest next update: Fri 28 Nov 2025 09:00:00 +0000 Files and hashes: 1: 4038b20b-42b0-34fd-ab16-9e3f170db289.roa (hash: RoC322ELQ2wpCbh6U25wEibQNP/RFMLgVs6dhgECTno=) 2: 75c92172-6911-32c6-b7a8-a35de8403ddd.roa (hash: BkyL+TwqRepLd4pUqv7bmVBa+/A6Tei7SsPdpc2GPbs=) 3: c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl (hash: FUP9d78lZvBToaPt4FbeH9dD6W5gSiknl7/sup5hAbU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f9:b0:bf:d1:72:a1:af:74:54:f4:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f Validity Not Before: Nov 25 09:00:03 2025 GMT Not After : Nov 28 09:00:00 2025 GMT Subject: CN=f7060042-fafb-4302-a89a-5363ac74d0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:89:86:4a:5c:1e:a4:08:d8:3c:f4:1e:af: e1:56:18:72:44:a0:60:1e:9b:cd:59:99:8d:de:ab: fe:ac:56:06:9f:e8:21:d6:c2:82:8b:75:f6:fb:ec: d9:3b:fc:57:d9:44:5b:ff:3a:5c:a9:05:6d:ba:1b: 3e:57:ff:6c:ab:01:20:d2:88:5d:d7:c7:47:23:ad: 08:17:f8:76:0d:3d:54:0a:80:81:b4:af:3c:02:f7: 6a:96:1a:18:8b:b0:13:b9:ec:12:4b:e8:50:d1:e1: 70:9c:79:06:e4:b0:f0:38:1b:a9:69:d9:b5:82:08: df:cd:58:1a:b4:e5:5a:c0:6f:fa:49:e5:51:51:c1: f8:71:d1:00:ab:1b:f1:81:f3:0e:2a:9f:6c:1a:f1: fd:8f:bd:d3:70:87:8d:31:f2:b0:c4:59:67:5e:f8: bd:db:7c:bb:b2:57:43:6c:b4:46:85:bf:b1:6f:72: 23:92:bd:f2:3e:57:11:74:31:93:44:2f:00:1f:28: 5c:b0:b2:83:32:8c:b8:47:ab:04:67:48:d9:0b:77: 1f:1d:db:43:5d:34:88:3f:18:29:42:42:d3:ae:43: fb:bb:d8:6d:1f:2a:9f:c2:34:dc:0c:a4:6e:91:28: 29:65:43:f4:e9:ee:d5:a4:b7:8e:70:2d:27:3a:de: c7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DF:56:98:79:59:96:78:E8:ED:87:CC:A1:76:F5:06:23:9D:DC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.crl X509v3 Authority Key Identifier: keyid:34:D2:66:90:77:48:44:01:19:74:D3:59:D7:85:15:C6:DA:CC:AC:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c1d9c2c1-8fb3-4b38-b6d6-9799b4e3772f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:20:7a:f1:47:d9:8b:b8:7b:ca:cc:99:19:f6:d4:f1:ce:95: b0:73:07:75:5e:ca:7b:a7:45:7d:ac:3b:4f:bb:fd:25:8b:5c: 40:8d:18:f7:2b:ae:50:e5:20:60:33:b2:31:ec:34:bf:1f:8d: f2:6f:f6:d3:38:98:c9:6f:be:34:ea:e5:be:1e:7f:0a:c6:09: af:fa:ee:11:ec:7a:35:81:61:69:d2:4b:e7:6c:b6:f6:e8:54: 62:a2:b8:cb:3a:3a:73:82:6b:9d:d7:27:bf:3c:25:d7:1a:0f: 5d:0b:61:5b:d5:21:c0:a5:56:ce:c8:08:d4:a2:d0:0d:a2:d8: a2:28:57:a3:54:53:f9:fa:93:4a:5e:7f:6c:c8:5f:3d:07:f6: 6f:c0:12:ba:35:ad:5f:52:fb:a0:1b:0e:0e:82:85:24:c9:62: 3c:d7:40:45:38:42:e9:13:ba:80:d5:ee:7d:77:08:c7:22:1c: 02:b4:2c:15:01:94:83:23:5e:1e:ad:9a:f6:ef:b3:14:dd:4b: 20:ba:27:c0:76:e5:6c:73:79:bf:e4:ba:68:59:5c:1f:77:54: b1:2b:7a:63:5f:bc:cc:bf:d8:7c:2b:29:f3:06:98:94:e9:42: a8:ef:47:bc:c2:e5:af:d1:04:e5:69:e5:96:78:af:d6:11:f5: 3b:66:ee:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv5sL/RcqGvdFT0jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFkOWMyYzEtOGZiMy00YjM4LWI2ZDYtOTc5OWI0ZTM3 NzJmMB4XDTI1MTEyNTA5MDAwM1oXDTI1MTEyODA5MDAwMFowLzEtMCsGA1UEAxMk ZjcwNjAwNDItZmFmYi00MzAyLWE4OWEtNTM2M2FjNzRkMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4iJhkpcHqQI2Dz0Hq/hVhhyRKBgHpvNWZmN 3qv+rFYGn+gh1sKCi3X2++zZO/xX2URb/zpcqQVtuhs+V/9sqwEg0ohd18dHI60I F/h2DT1UCoCBtK88AvdqlhoYi7ATuewSS+hQ0eFwnHkG5LDwOBupadm1ggjfzVga tOVawG/6SeVRUcH4cdEAqxvxgfMOKp9sGvH9j73TcIeNMfKwxFlnXvi923y7sldD bLRGhb+xb3Ijkr3yPlcRdDGTRC8AHyhcsLKDMoy4R6sEZ0jZC3cfHdtDXTSIPxgp QkLTrkP7u9htHyqfwjTcDKRukSgpZUP06e7VpLeOcC0nOt7HcwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCPfVph5WZZ46O2HzKF29QYjndxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5 YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5YjRlMzc3MmYvYzFkOWMyYzEtOGZiMy00 YjM4LWI2ZDYtOTc5OWI0ZTM3NzJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzFkOWMyYzEtOGZiMy00YjM4LWI2 ZDYtOTc5OWI0ZTM3NzJmL2MxZDljMmMxLThmYjMtNGIzOC1iNmQ2LTk3OTliNGUz NzcyZi5jcmwwHwYDVR0jBBgwFoAUNNJmkHdIRAEZdNNZ14UVxtrMrM4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jMWQ5YzJjMS04ZmIzLTRiMzgtYjZkNi05Nzk5 YjRlMzc3MmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASIHrxR9mLuHvKzJkZ9tTx zpWwcwd1Xsp7p0V9rDtPu/0li1xAjRj3K65Q5SBgM7Ix7DS/H43yb/bTOJjJb740 6uW+Hn8Kxgmv+u4R7Ho1gWFp0kvnbLb26FRiorjLOjpzgmud1ye/PCXXGg9dC2Fb 1SHApVbOyAjUotANotiiKFejVFP5+pNKXn9syF89B/ZvwBK6Na1fUvugGw4OgoUk yWI810BFOELpE7qA1e59dwjHIhwCtCwVAZSDI14erZr277MU3UsguifAduVsc3m/ 5LpoWVwfd1SxK3pjX7zMv9h8KynzBpiU6UKo70e8wuWv0QTlaeWWeK/WEfU7Zu5C -----END CERTIFICATE-----Generated at Tue Nov 25 19:19:14 2025 by rpki-client