This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft File: 1def28a9-0b42-43a8-9407-32d9e4a0540e.mft (raw, json) Hash identifier: uMqoePV+tYc3tg0TbTz9kXYECwaY97fBzMGVQ+5FAJo= Subject key identifier: 59:E1:22:CD:63:B9:40:FC:41:75:39:72:0E:22:83:AE:A9:9E:F3:BA Authority key identifier: 4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A Certificate issuer: /CN=1def28a9-0b42-43a8-9407-32d9e4a0540e Certificate serial: 010D0C9F4328584BF80FDCE33A370A2C5D1CD400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft Manifest number: 010D0C9F432858461D024F0D2A50BFF390B86EA6 Signing time: Mon 24 Nov 2025 19:00:03 +0000 Manifest this update: Mon 24 Nov 2025 19:00:03 +0000 Manifest next update: Wed 26 Nov 2025 19:00:00 +0000 Files and hashes: 1: 1def28a9-0b42-43a8-9407-32d9e4a0540e.crl (hash: dmUPtwGcvxI2eJuqpfXOXQS8TAM9YgKWo6jzo+7uaQg=) 2: 496afc45-c760-3f66-b7b7-c85288ce00c9.roa (hash: tyj4a07jfckn+cgEVSHJA1ynC8ysjp8I1Kxh+7CEC2U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:0f:dc:e3:3a:37:0a:2c:5d:1c:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1def28a9-0b42-43a8-9407-32d9e4a0540e Validity Not Before: Nov 24 19:00:03 2025 GMT Not After : Nov 26 19:00:00 2025 GMT Subject: CN=a306d98f-7cf0-4234-9aca-7daf2199a245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f5:ff:12:03:b1:98:85:01:e5:dd:b9:d5:92: 17:9d:43:ee:b2:32:f9:22:bb:62:04:75:f4:8f:58: 2e:31:59:37:78:0a:61:f3:30:61:93:e1:68:72:e6: 89:d4:7a:61:98:6e:2f:ba:1a:4a:e9:bd:23:08:4d: d7:fa:77:32:aa:41:18:a6:f6:f5:ec:33:fb:4f:28: 8a:05:e3:c4:d5:89:b1:6b:a9:61:f9:77:d0:06:45: 8e:13:cc:47:73:d5:fc:29:88:66:b1:86:b2:90:7f: 2e:34:fc:e7:20:43:49:d3:1e:9f:6e:ee:89:2b:e1: e2:82:82:57:cf:e0:ba:0b:27:da:99:0e:24:69:74: 9e:a7:d1:40:9c:d0:01:1c:7b:b1:be:2b:cf:70:0f: be:a4:95:b5:4a:94:9b:c8:a0:c6:7c:1d:85:b9:c0: f3:df:3e:bc:09:66:32:f1:26:bc:c3:49:8c:49:d2: d4:aa:14:8d:53:27:73:89:a2:3a:b6:1f:d2:f6:c7: 3d:13:e4:4f:4c:72:1f:28:37:2d:cc:f7:f5:46:2d: e1:31:18:8b:28:c2:8a:0c:50:b9:c8:a8:36:3f:88: 81:5a:b3:64:91:fd:d6:a3:88:03:5f:e0:58:17:8c: f5:c1:a7:e5:32:a0:0b:db:99:f1:30:99:8c:06:84: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E1:22:CD:63:B9:40:FC:41:75:39:72:0E:22:83:AE:A9:9E:F3:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e/1def28a9-0b42-43a8-9407-32d9e4a0540e.crl X509v3 Authority Key Identifier: keyid:4A:AB:DF:4C:B0:B7:0C:0D:A4:D0:1A:D7:76:17:76:46:FD:48:A4:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1def28a9-0b42-43a8-9407-32d9e4a0540e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f8:49:dd:ac:a5:eb:b0:e2:c9:f1:1d:ee:bb:13:10:81:e9: 5b:66:a9:b0:ae:ce:68:fe:10:83:38:53:04:ca:60:ab:52:d3: 77:ed:d9:38:9b:39:b1:90:d4:09:9e:92:aa:7e:6f:bc:42:47: 48:d2:4c:ab:7d:05:73:2e:3d:5d:6c:0d:5a:f5:2a:59:30:d8: 97:58:14:46:a2:dd:e3:11:af:0b:ed:91:8c:d7:a5:a8:3d:0c: 6c:1c:34:e3:3c:7e:c9:74:f7:e8:1e:59:67:1f:81:b4:f9:3f: 00:76:7d:a6:5c:44:13:a2:18:92:60:3f:c1:bd:f2:53:11:e1: 4b:64:54:f4:a5:b6:05:06:c3:65:36:e2:1c:f3:8f:b1:63:57: 64:96:48:dc:4c:1e:6e:1e:74:83:d8:50:04:97:ee:d4:54:e4: 3e:48:cf:da:5e:fe:9a:4e:11:cb:d0:a8:b6:4a:6c:d3:db:69: 65:fb:f6:10:1c:85:d2:54:94:73:8b:c8:c3:2b:e0:1a:d3:1d: 74:f4:68:89:76:ea:cd:a2:40:a0:8c:ad:28:cc:21:b2:12:5e: 31:d7:1b:77:a8:c5:1f:bb:a8:d7:98:24:b3:fe:03:87:e7:91: 61:85:2e:87:fd:f5:7e:28:66:a8:61:cc:ae:f7:84:6e:11:83: bb:07:6d:ea -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4D9zjOjcKLF0c1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRlZjI4YTktMGI0Mi00M2E4LTk0MDctMzJkOWU0YTA1 NDBlMB4XDTI1MTEyNDE5MDAwM1oXDTI1MTEyNjE5MDAwMFowLzEtMCsGA1UEAxMk YTMwNmQ5OGYtN2NmMC00MjM0LTlhY2EtN2RhZjIxOTlhMjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfX/EgOxmIUB5d251ZIXnUPusjL5IrtiBHX0 j1guMVk3eAph8zBhk+FocuaJ1HphmG4vuhpK6b0jCE3X+ncyqkEYpvb17DP7TyiK BePE1Ymxa6lh+XfQBkWOE8xHc9X8KYhmsYaykH8uNPznIENJ0x6fbu6JK+HigoJX z+C6CyfamQ4kaXSep9FAnNABHHuxvivPcA++pJW1SpSbyKDGfB2FucDz3z68CWYy 8Sa8w0mMSdLUqhSNUydziaI6th/S9sc9E+RPTHIfKDctzPf1Ri3hMRiLKMKKDFC5 yKg2P4iBWrNkkf3Wo4gDX+BYF4z1waflMqAL25nxMJmMBoQFdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFnhIs1juUD8QXU5cg4ig66pnvO6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xZGVm MjhhOS0wYjQyLTQzYTgtOTQwNy0zMmQ5ZTRhMDU0MGUvMWRlZjI4YTktMGI0Mi00 M2E4LTk0MDctMzJkOWU0YTA1NDBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWRlZjI4YTktMGI0Mi00M2E4LTk0 MDctMzJkOWU0YTA1NDBlLzFkZWYyOGE5LTBiNDItNDNhOC05NDA3LTMyZDllNGEw NTQwZS5jcmwwHwYDVR0jBBgwFoAUSqvfTLC3DA2k0BrXdhd2Rv1IpHowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xZGVmMjhhOS0wYjQyLTQzYTgtOTQwNy0zMmQ5 ZTRhMDU0MGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAH+EndrKXrsOLJ8R3uuxMQ gelbZqmwrs5o/hCDOFMEymCrUtN37dk4mzmxkNQJnpKqfm+8QkdI0kyrfQVzLj1d bA1a9SpZMNiXWBRGot3jEa8L7ZGM16WoPQxsHDTjPH7JdPfoHllnH4G0+T8Adn2m XEQTohiSYD/BvfJTEeFLZFT0pbYFBsNlNuIc84+xY1dklkjcTB5uHnSD2FAEl+7U VOQ+SM/aXv6aThHL0Ki2SmzT22ll+/YQHIXSVJRzi8jDK+Aa0x109GiJdurNokCg jK0ozCGyEl4x1xt3qMUfu6jXmCSz/gOH55FhhS6H/fV+KGaoYcyu94RuEYO7B23q -----END CERTIFICATE-----Generated at Tue Nov 25 08:15:24 2025 by rpki-client