This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft File: c3a9f614-c620-42e4-acad-b328d6a97099.mft (raw, json) Hash identifier: PrSeEXHJPOqT2f4oS5aeqm6j9wuf0Gi3DVrNQvs1vEg= Subject key identifier: 60:1D:95:C6:0B:A0:D7:BB:38:46:27:ED:25:EB:52:BF:DA:79:E4:50 Authority key identifier: CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 Certificate issuer: /CN=c3a9f614-c620-42e4-acad-b328d6a97099 Certificate serial: 010D0C9F4328584BF2F1A7AB5BDFE34A85195580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft Manifest number: 010D0C9F43285847CE19A711498473125E578D8A Signing time: Sat 22 Nov 2025 23:00:09 +0000 Manifest this update: Sat 22 Nov 2025 23:00:09 +0000 Manifest next update: Tue 25 Nov 2025 23:00:00 +0000 Files and hashes: 1: a7eb1b7a-38b5-351a-9820-21a52e05575a.roa (hash: AHsCakn6mzYlytjK43xkk/cIdFJSVE0NJN6RDj0pg/w=) 2: a9b294af-ddbd-365a-bb3f-75c215c307a2.roa (hash: cOTVomqCeu0P65qzBMmqhahIVA/VntwpT49BBow3zRA=) 3: c3a9f614-c620-42e4-acad-b328d6a97099.crl (hash: y5gD6e3NoHHwA5+irrLLect7/hx0UGjywKRF4UYX//U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 25 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f2:f1:a7:ab:5b:df:e3:4a:85:19:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a9f614-c620-42e4-acad-b328d6a97099 Validity Not Before: Nov 22 23:00:09 2025 GMT Not After : Nov 25 23:00:00 2025 GMT Subject: CN=d81954c2-add5-47b4-be6f-9f4e7a676ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:bc:6a:8d:4f:2b:fe:dc:42:2c:21:92:18:b0: ce:04:58:0f:5d:3f:ac:e3:f3:31:c9:af:c9:70:69: 7f:e7:fd:0e:a3:1c:a4:93:8a:ff:c7:cb:b1:97:d7: 41:a4:0e:83:2d:5f:68:31:4f:a9:9e:0a:25:ff:ba: c7:95:3f:e9:aa:61:08:c1:82:24:9a:e1:58:ea:a9: 40:85:e6:c0:ba:e6:7e:5b:6c:a9:d6:d4:0f:b0:e7: a4:dc:c5:96:f6:49:b4:12:43:86:ef:c5:b3:2c:be: 85:cc:c2:ec:cc:b1:66:ff:56:3e:b0:99:1b:08:36: 64:19:ec:15:a8:0c:40:62:7b:c8:31:08:8f:b5:b2: 15:fe:61:fc:da:9b:f5:09:b5:90:fd:15:c8:4f:52: 7d:cb:42:d8:b9:95:3e:eb:b3:f3:0c:08:1c:e5:6d: 1f:6d:b5:8e:5c:86:93:c7:5d:1f:6e:11:5a:ad:80: f8:77:8f:23:70:17:3a:93:77:76:44:52:47:ef:f7: 57:ea:b7:82:23:4d:18:f3:7d:d0:e9:ab:fd:f9:5a: 52:17:7a:d9:ca:e9:50:d3:ad:fa:c0:43:0d:33:a0: b3:41:a5:be:ce:89:0f:38:9a:ba:d7:99:2c:dc:b0: 4e:62:ad:63:aa:bb:41:af:04:6d:17:c5:99:cc:32: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1D:95:C6:0B:A0:D7:BB:38:46:27:ED:25:EB:52:BF:DA:79:E4:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099/c3a9f614-c620-42e4-acad-b328d6a97099.crl X509v3 Authority Key Identifier: keyid:CC:33:C4:9B:48:E5:B4:6F:57:2F:B3:5D:B4:0F:D0:5C:B1:D2:61:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3a9f614-c620-42e4-acad-b328d6a97099.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ff:3e:36:e2:12:02:de:94:4f:96:50:8f:e6:1d:9f:34:43: a9:ab:89:80:f1:4f:c8:97:42:e7:0f:36:c4:58:5b:5d:4a:07: be:f3:d7:fd:e8:8e:05:09:6f:c8:c8:8d:ac:b3:ea:93:db:e5: 3a:12:b0:74:03:a1:5a:27:5a:f5:6b:aa:b5:62:f6:17:44:04: 95:44:01:c0:ba:1c:11:b3:19:5c:e7:57:fb:37:64:34:e6:58: 7a:f3:b9:ec:8d:f0:6e:3c:11:62:1f:53:36:e1:05:44:a2:04: 3c:04:7d:c1:1c:a4:52:3c:5e:e6:e7:73:a8:26:a1:a1:ce:d5: c3:c2:e7:d9:a5:fa:8f:de:f7:07:a3:2f:3c:bd:c3:2c:02:c3: 13:fc:5f:f8:b2:c2:d5:80:fb:a7:53:c5:c9:82:89:21:7e:8f: 48:51:bb:c6:49:ee:73:10:17:cb:dc:18:15:6a:bb:66:57:49: bc:4e:72:40:71:6a:d4:4e:af:b0:4f:75:2d:df:7e:3f:32:14: d1:23:e8:37:45:4b:f2:bb:30:9e:cf:14:66:49:5c:f8:58:96: 95:d0:0b:ea:48:5c:a3:eb:83:d2:46:c0:98:9d:c9:2e:38:d0: 58:a7:45:43:9a:87:01:0d:67:7e:f6:c0:04:22:c0:cf:77:47: d4:1a:56:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvy8aerW9/jSoUZVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNhOWY2MTQtYzYyMC00MmU0LWFjYWQtYjMyOGQ2YTk3 MDk5MB4XDTI1MTEyMjIzMDAwOVoXDTI1MTEyNTIzMDAwMFowLzEtMCsGA1UEAxMk ZDgxOTU0YzItYWRkNS00N2I0LWJlNmYtOWY0ZTdhNjc2ZWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7xqjU8r/txCLCGSGLDOBFgPXT+s4/Mxya/J cGl/5/0Ooxykk4r/x8uxl9dBpA6DLV9oMU+pngol/7rHlT/pqmEIwYIkmuFY6qlA hebAuuZ+W2yp1tQPsOek3MWW9km0EkOG78WzLL6FzMLszLFm/1Y+sJkbCDZkGewV qAxAYnvIMQiPtbIV/mH82pv1CbWQ/RXIT1J9y0LYuZU+67PzDAgc5W0fbbWOXIaT x10fbhFarYD4d48jcBc6k3d2RFJH7/dX6reCI00Y833Q6av9+VpSF3rZyulQ0636 wEMNM6CzQaW+zokPOJq615ks3LBOYq1jqrtBrwRtF8WZzDIKxwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGAdlcYLoNe7OEYn7SXrUr/aeeRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5 ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4ZDZhOTcwOTkvYzNhOWY2MTQtYzYyMC00 MmU0LWFjYWQtYjMyOGQ2YTk3MDk5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYzNhOWY2MTQtYzYyMC00MmU0LWFj YWQtYjMyOGQ2YTk3MDk5L2MzYTlmNjE0LWM2MjAtNDJlNC1hY2FkLWIzMjhkNmE5 NzA5OS5jcmwwHwYDVR0jBBgwFoAUzDPEm0jltG9XL7NdtA/QXLHSYUAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jM2E5ZjYxNC1jNjIwLTQyZTQtYWNhZC1iMzI4 ZDZhOTcwOTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6/z424hIC3pRPllCP5h2f NEOpq4mA8U/Il0LnDzbEWFtdSge+89f96I4FCW/IyI2ss+qT2+U6ErB0A6FaJ1r1 a6q1YvYXRASVRAHAuhwRsxlc51f7N2Q05lh687nsjfBuPBFiH1M24QVEogQ8BH3B HKRSPF7m53OoJqGhztXDwufZpfqP3vcHoy88vcMsAsMT/F/4ssLVgPunU8XJgokh fo9IUbvGSe5zEBfL3BgVartmV0m8TnJAcWrUTq+wT3Ut334/MhTRI+g3RUvyuzCe zxRmSVz4WJaV0AvqSFyj64PSRsCYnckuONBYp0VDmocBDWd+9sAEIsDPd0fUGlYT -----END CERTIFICATE-----Generated at Sun Nov 23 19:34:56 2025 by rpki-client