This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft File: 3f8ce937-b65c-4889-8a3c-145d71949e14.mft (raw, json) Hash identifier: pN9CdJRhNQfBkLWWb7895Yb5RNa+LBjji5rK04dXo18= Subject key identifier: 6F:73:DA:E6:7F:F8:E2:72:42:D4:4A:1D:DD:74:D2:4C:2B:DF:0D:6D Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B Certificate issuer: /CN=3f8ce937-b65c-4889-8a3c-145d71949e14 Certificate serial: 010D0C9F4328584BF703D75E856C381BFB6EBB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft Manifest number: 010D0C9F432858468E5D7ABA139861D50B688F88 Signing time: Mon 24 Nov 2025 10:00:03 +0000 Manifest this update: Mon 24 Nov 2025 10:00:03 +0000 Manifest next update: Thu 27 Nov 2025 10:00:00 +0000 Files and hashes: 1: 10a98a9b-b733-37e9-901d-63dd77533c16.roa (hash: fXz9MWVEsxfilNCIm3xaOkig/fBOBdSzKTP9sRyhhBg=) 2: 3f8ce937-b65c-4889-8a3c-145d71949e14.crl (hash: 8KrVR0oUopgOUXjhG6Zk4PZ7kIic/5QxFfVCG9uYOik=) 3: 7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa (hash: TPLTRoatkrPL5HWnAw10LIhnArq7+5OvDR2DeH7v0RA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:03:d7:5e:85:6c:38:1b:fb:6e:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14 Validity Not Before: Nov 24 10:00:03 2025 GMT Not After : Nov 27 10:00:00 2025 GMT Subject: CN=fa7d809e-feac-4f9e-9918-c181098f8ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dd:e4:ad:cb:a6:e2:96:d1:3b:ea:db:64:98: 00:db:21:44:5f:8a:a7:8c:0e:42:2a:d8:d7:06:66: 82:4d:3a:28:e3:1e:9b:36:e7:37:c6:ce:a8:8a:e2: d4:f2:a5:95:db:06:96:7e:31:13:fb:47:0d:ff:79: 89:8a:40:f9:a9:6b:df:bf:b8:42:6b:3d:89:67:62: 9d:f9:99:aa:e9:46:66:07:70:5c:1a:69:c4:fe:7f: d5:f7:66:7e:1f:f8:41:3a:d8:0a:67:d5:ca:58:e4: 5f:55:3a:82:2b:ef:66:59:23:22:90:70:e7:7a:81: 39:50:89:a0:de:b8:f8:74:fc:4d:e6:a4:d4:6c:ec: 34:ba:16:ad:ea:35:93:7f:73:2a:03:77:05:f4:a0: 54:66:23:41:b6:31:0d:5f:fc:b1:8d:c8:3a:3a:8b: 69:f9:6b:2d:7e:1a:20:60:8d:e1:59:f0:44:30:e1: 61:dd:76:69:75:cf:8e:8e:fb:00:70:34:76:75:0e: 5b:73:73:4a:09:a0:cd:3e:c8:ad:60:68:b7:d3:b6: 71:e4:ce:cc:a2:c9:46:77:c6:78:af:ef:fe:ce:93: c3:08:4e:fb:d5:32:9b:4d:14:cd:91:47:92:43:47: f5:e2:99:98:a1:f7:3a:d8:90:3b:94:46:4f:69:45: c8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:73:DA:E6:7F:F8:E2:72:42:D4:4A:1D:DD:74:D2:4C:2B:DF:0D:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl X509v3 Authority Key Identifier: keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:40:02:ac:80:b0:ec:c2:07:35:22:16:f7:c0:cc:27:dc:7b: 44:d4:34:60:1a:d9:44:a0:01:79:4f:d9:13:fc:cf:c0:ee:71: 44:28:14:52:9f:a1:b8:c2:3e:c4:68:a3:1c:a9:99:a6:b2:23: 64:58:d2:fa:5f:02:b1:7d:ce:35:8b:9f:fb:29:43:cb:bf:fc: d6:eb:99:9e:0c:fb:49:d9:dd:ee:fa:d1:d1:c6:c7:3c:30:c0: 6e:a2:0b:86:35:51:7c:9d:7d:8b:60:05:df:df:76:2a:ad:33: 51:87:34:ca:da:2d:43:5a:04:af:83:3d:5d:40:62:74:ba:2e: 15:9c:9d:36:83:d0:92:f2:5c:53:a0:3e:00:ec:d3:af:65:ee: 97:be:1a:35:37:84:32:87:f4:b4:19:a5:79:1c:d1:06:07:81: a6:0e:10:80:f6:72:8a:4e:67:69:59:f9:5a:7a:92:43:b9:16: 95:b7:08:92:84:39:e0:b4:17:91:5b:07:93:c3:a8:dd:17:d8: 0f:91:d5:24:3c:94:36:07:39:81:40:1d:08:a6:fe:0b:06:a6: f8:20:b7:7d:3c:94:c1:a0:f6:c5:ff:6a:88:66:cd:a2:c6:5f: 9a:80:22:e8:62:4b:1c:f0:97:f9:da:38:bd:17:46:6e:f4:4e: 4d:2c:54:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv3A9dehWw4G/tuuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4Y2U5MzctYjY1Yy00ODg5LThhM2MtMTQ1ZDcxOTQ5 ZTE0MB4XDTI1MTEyNDEwMDAwM1oXDTI1MTEyNzEwMDAwMFowLzEtMCsGA1UEAxMk ZmE3ZDgwOWUtZmVhYy00ZjllLTk5MTgtYzE4MTA5OGY4YWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN3krcum4pbRO+rbZJgA2yFEX4qnjA5CKtjX BmaCTToo4x6bNuc3xs6oiuLU8qWV2waWfjET+0cN/3mJikD5qWvfv7hCaz2JZ2Kd +Zmq6UZmB3BcGmnE/n/V92Z+H/hBOtgKZ9XKWORfVTqCK+9mWSMikHDneoE5UImg 3rj4dPxN5qTUbOw0uhat6jWTf3MqA3cF9KBUZiNBtjENX/yxjcg6Ootp+Wstfhog YI3hWfBEMOFh3XZpdc+OjvsAcDR2dQ5bc3NKCaDNPsitYGi307Zx5M7MoslGd8Z4 r+/+zpPDCE771TKbTRTNkUeSQ0f14pmYofc62JA7lEZPaUXI/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG9z2uZ/+OJyQtRKHd100kwr3w1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZjhj ZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVkNzE5NDllMTQvM2Y4Y2U5MzctYjY1Yy00 ODg5LThhM2MtMTQ1ZDcxOTQ5ZTE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2Y4Y2U5MzctYjY1Yy00ODg5LThh M2MtMTQ1ZDcxOTQ5ZTE0LzNmOGNlOTM3LWI2NWMtNDg4OS04YTNjLTE0NWQ3MTk0 OWUxNC5jcmwwHwYDVR0jBBgwFoAUc3qUl97jg8GLnVAV0wQoUem2uAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zZjhjZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVk NzE5NDllMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIQAKsgLDswgc1Ihb3wMwn 3HtE1DRgGtlEoAF5T9kT/M/A7nFEKBRSn6G4wj7EaKMcqZmmsiNkWNL6XwKxfc41 i5/7KUPLv/zW65meDPtJ2d3u+tHRxsc8MMBuoguGNVF8nX2LYAXf33YqrTNRhzTK 2i1DWgSvgz1dQGJ0ui4VnJ02g9CS8lxToD4A7NOvZe6Xvho1N4Qyh/S0GaV5HNEG B4GmDhCA9nKKTmdpWflaepJDuRaVtwiShDngtBeRWweTw6jdF9gPkdUkPJQ2BzmB QB0Ipv4LBqb4ILd9PJTBoPbF/2qIZs2ixl+agCLoYksc8Jf52ji9F0Zu9E5NLFQr -----END CERTIFICATE-----Generated at Tue Nov 25 08:14:34 2025 by rpki-client