This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft File: 95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft (raw, json) Hash identifier: OGi1U+yY7wg+eEnzstBg4stzkfUvun3oa3NX9ZOxrew= Subject key identifier: 60:F6:CB:D5:FA:F5:2E:DD:0B:51:E3:69:A9:26:FB:17:D0:63:3B:A0 Authority key identifier: 04:90:85:06:ED:47:37:CD:B1:C3:3C:D7:3A:D9:F5:59:C8:85:35:97 Certificate issuer: /CN=95a5a86f-706a-45b6-baf2-da4d4e62b10e Certificate serial: 010D0C9F4328584BF84B72ADACA70A3CB417D100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft Manifest number: 010D0C9F4328584665D4A8296363DE190882498C Signing time: Mon 24 Nov 2025 21:00:08 +0000 Manifest this update: Mon 24 Nov 2025 21:00:08 +0000 Manifest next update: Wed 26 Nov 2025 21:00:00 +0000 Files and hashes: 1: 95a5a86f-706a-45b6-baf2-da4d4e62b10e.crl (hash: OqiGpEVMtgG+X2OrwuDncerBrZRBNEBtAX0r9nbVtrk=) 2: a6cf8bc4-c6cf-3ab1-9852-c27458edc9b8.roa (hash: X9KH7z1LMBm0aEtx9s4RDnaKe6Yk4Or1rtY/hrYXGW8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:4b:72:ad:ac:a7:0a:3c:b4:17:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a5a86f-706a-45b6-baf2-da4d4e62b10e Validity Not Before: Nov 24 21:00:08 2025 GMT Not After : Nov 26 21:00:00 2025 GMT Subject: CN=89380b36-513a-40b4-909d-26e2f65879fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ca:95:21:21:03:a0:9e:22:12:3f:a3:c4:62: e2:98:3c:dc:a7:5b:23:b8:4e:8a:f7:19:6a:9f:07: 88:55:8f:34:2d:ad:31:d7:73:79:9a:a9:71:3f:50: 26:b1:ec:10:85:8d:87:1e:73:a7:ff:c0:4e:92:fe: cc:bf:4a:1f:33:23:d5:ff:fa:b2:75:4c:77:7d:2b: 31:ec:11:ae:73:4d:c1:99:d2:3f:8b:8d:5c:42:75: e4:80:29:49:cc:81:bb:57:1a:c5:74:b3:47:6f:54: e4:84:f7:04:e4:37:eb:e0:65:cf:da:51:e5:6b:09: 50:1f:92:92:48:41:b0:04:cf:86:44:63:03:9a:c0: d5:48:27:2d:62:4e:8d:28:f4:61:04:37:c9:cf:24: be:71:32:ca:b2:ff:82:9f:0e:08:82:89:01:fc:49: 36:58:4e:a5:6c:b9:bd:87:e3:b7:d5:b0:e8:77:74: 49:14:04:0a:b1:59:4c:55:c3:a0:c8:14:19:de:72: 42:66:bc:11:4e:f9:e4:9b:0d:3d:6a:08:c8:d8:d8: d4:66:87:dc:02:da:b5:ec:f5:47:20:c5:4e:95:72: f7:ed:04:68:df:5b:d9:cb:28:20:4f:6d:00:3e:d6: 17:ff:95:da:de:ce:fc:3b:96:aa:65:57:81:3f:89: 80:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F6:CB:D5:FA:F5:2E:DD:0B:51:E3:69:A9:26:FB:17:D0:63:3B:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e/95a5a86f-706a-45b6-baf2-da4d4e62b10e.crl X509v3 Authority Key Identifier: keyid:04:90:85:06:ED:47:37:CD:B1:C3:3C:D7:3A:D9:F5:59:C8:85:35:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/95a5a86f-706a-45b6-baf2-da4d4e62b10e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5b:58:17:1e:da:22:3a:fc:ac:73:1e:01:ad:8e:d9:5e:23: 1d:dc:42:c5:c9:6b:43:4b:bd:08:c1:49:61:a6:a4:e9:83:4d: 3d:b2:c7:0e:46:5e:29:ab:20:ff:a5:ed:80:63:80:1c:a5:29: bc:07:10:23:27:fc:0d:a2:a5:bb:62:ae:bc:fe:a0:cf:a7:06: d1:a1:fd:89:6e:f5:23:e6:06:34:af:9a:6e:20:46:d8:f5:db: 3e:e1:32:bd:71:bf:ac:a4:f1:a8:70:49:79:26:8b:26:d3:6e: 4c:25:b8:13:53:b2:e4:9d:05:fc:b6:e3:23:88:97:3e:70:8b: 81:3f:ee:06:ed:c1:3f:f2:f0:b5:f2:7b:a9:1e:f5:b6:71:d3: 36:17:d1:a8:19:28:1f:9c:86:fd:ab:d3:ca:41:73:fe:f7:7a: 0a:87:6e:ce:a7:97:e7:84:24:fd:34:da:5f:ea:4e:a8:b0:60: b5:8c:5f:b9:91:7c:d1:ac:17:b9:73:fc:79:77:6f:ab:cc:51: cd:6d:e3:c5:2c:f2:7a:4a:ec:d7:58:7f:48:9e:d2:11:bc:14: 55:c6:1f:21:e5:e1:d0:38:24:82:01:bb:00:5d:85:1c:c5:d7: 63:25:63:1b:99:a8:7b:ab:80:fa:2f:86:b6:77:75:f6:b7:bf: cb:2a:18:a0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4S3KtrKcKPLQX0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNWE4NmYtNzA2YS00NWI2LWJhZjItZGE0ZDRlNjJi MTBlMB4XDTI1MTEyNDIxMDAwOFoXDTI1MTEyNjIxMDAwMFowLzEtMCsGA1UEAxMk ODkzODBiMzYtNTEzYS00MGI0LTkwOWQtMjZlMmY2NTg3OWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsqVISEDoJ4iEj+jxGLimDzcp1sjuE6K9xlq nweIVY80La0x13N5mqlxP1AmsewQhY2HHnOn/8BOkv7Mv0ofMyPV//qydUx3fSsx 7BGuc03BmdI/i41cQnXkgClJzIG7VxrFdLNHb1TkhPcE5Dfr4GXP2lHlawlQH5KS SEGwBM+GRGMDmsDVSCctYk6NKPRhBDfJzyS+cTLKsv+Cnw4IgokB/Ek2WE6lbLm9 h+O31bDod3RJFAQKsVlMVcOgyBQZ3nJCZrwRTvnkmw09agjI2NjUZofcAtq17PVH IMVOlXL37QRo31vZyyggT20APtYX/5Xa3s78O5aqZVeBP4mAmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGD2y9X69S7dC1Hjaakm+xfQYzugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85NWE1 YTg2Zi03MDZhLTQ1YjYtYmFmMi1kYTRkNGU2MmIxMGUvOTVhNWE4NmYtNzA2YS00 NWI2LWJhZjItZGE0ZDRlNjJiMTBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTVhNWE4NmYtNzA2YS00NWI2LWJh ZjItZGE0ZDRlNjJiMTBlLzk1YTVhODZmLTcwNmEtNDViNi1iYWYyLWRhNGQ0ZTYy YjEwZS5jcmwwHwYDVR0jBBgwFoAUBJCFBu1HN82xwzzXOtn1WciFNZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85NWE1YTg2Zi03MDZhLTQ1YjYtYmFmMi1kYTRk NGU2MmIxMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtW1gXHtoiOvyscx4BrY7Z XiMd3ELFyWtDS70IwUlhpqTpg009sscORl4pqyD/pe2AY4AcpSm8BxAjJ/wNoqW7 Yq68/qDPpwbRof2JbvUj5gY0r5puIEbY9ds+4TK9cb+spPGocEl5Josm025MJbgT U7LknQX8tuMjiJc+cIuBP+4G7cE/8vC18nupHvW2cdM2F9GoGSgfnIb9q9PKQXP+ 93oKh27Op5fnhCT9NNpf6k6osGC1jF+5kXzRrBe5c/x5d2+rzFHNbePFLPJ6SuzX WH9IntIRvBRVxh8h5eHQOCSCAbsAXYUcxddjJWMbmah7q4D6L4a2d3X2t7/LKhig -----END CERTIFICATE-----Generated at Tue Nov 25 08:14:40 2025 by rpki-client