This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft File: dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft (raw, json) Hash identifier: CRAGqypyaPRkxFSxW0Mwhwsij+8cP6AwkP84YV5Zcas= Subject key identifier: 28:41:CD:AD:7A:FA:1F:C6:79:AE:73:D6:1D:C3:7D:FC:1C:BB:8A:74 Authority key identifier: CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02 Certificate issuer: /CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f Certificate serial: 010D0C9F4328584BF82DA621DB10AB0247FB8B20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft Manifest number: 010D0C9F43285845BB662C75FD84BB1934C87CCC Signing time: Mon 24 Nov 2025 20:00:03 +0000 Manifest this update: Mon 24 Nov 2025 20:00:03 +0000 Manifest next update: Thu 27 Nov 2025 20:00:00 +0000 Files and hashes: 1: 0f423575-11f9-3728-ae9b-8c70332062e1.roa (hash: yMqdM6BTJI75LOwbQdmdK2MJunDdN3M544ujC5DTxVs=) 2: 3d3b872a-6456-3cf2-9c9f-b5b3162691e5.roa (hash: LsSdgGlpfgyXo4BqaOOlO7Tn+02rG32rilXDcPsNprw=) 3: dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl (hash: uSMhGxW2Zaonq0wsdnMKf/Zv2aHcT5Gjk67mVMdVAyE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:2d:a6:21:db:10:ab:02:47:fb:8b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf7f6fb-0bae-4c21-bcf2-2f998541db3f Validity Not Before: Nov 24 20:00:03 2025 GMT Not After : Nov 27 20:00:00 2025 GMT Subject: CN=96c405c9-ddd0-4c5a-a13d-636f7f6bffda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ce:fb:e0:cd:35:12:12:6d:4d:98:c7:ba:b1: 36:3a:46:75:cd:1d:46:5c:46:57:fe:4c:46:4b:07: 3e:aa:45:6a:47:24:bd:1a:c5:18:7c:0f:3b:6a:74: 35:e4:e4:6b:79:94:70:91:6e:1a:84:ea:b3:cb:80: 2f:11:64:1d:dd:0b:64:9e:b0:1e:f5:77:c7:67:4b: 4e:88:3a:99:c9:a4:36:a8:84:fc:6d:49:08:86:d5: a2:56:12:ca:b2:bb:ef:73:70:72:5c:36:55:16:b4: 0f:62:5b:c0:89:c8:c3:c1:97:3b:b9:b9:ca:85:98: 38:81:66:8d:9c:8d:0e:cc:69:a7:06:0e:36:6f:4e: 76:12:78:51:a9:99:92:61:d0:98:54:86:d6:68:d4: 5e:e8:7e:11:78:0f:93:d4:0f:12:4c:28:32:28:94: 59:6e:a0:df:dd:dc:af:bf:13:bc:75:ef:04:15:a6: 25:f9:56:f7:70:93:c9:0b:0c:83:ae:1e:4f:d3:75: 4f:a6:0f:ce:c2:6d:d5:fe:15:ca:8f:54:6b:0d:f0: 16:a6:1e:56:67:bb:30:29:6f:ec:a1:4b:34:31:78: 3d:a4:1d:85:a4:fa:65:a5:b5:e0:1c:a7:f3:e9:70: bc:4a:94:a4:14:79:1c:61:d0:fe:03:90:69:c4:21: 8c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:41:CD:AD:7A:FA:1F:C6:79:AE:73:D6:1D:C3:7D:FC:1C:BB:8A:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.crl X509v3 Authority Key Identifier: keyid:CC:2F:9D:6D:CC:B6:1C:CE:1E:E3:50:39:63:91:EA:63:D1:8F:B8:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dcf7f6fb-0bae-4c21-bcf2-2f998541db3f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:5d:51:fa:fe:67:c8:ac:99:f9:7d:94:a9:71:8d:5e:47:6a: 43:2c:2e:f0:c8:65:dc:e0:f3:ad:90:60:e6:99:19:33:b5:73: 32:2c:12:4f:fe:63:d4:ca:ef:77:25:44:a7:5e:fe:ef:7f:ba: e7:f7:e3:39:7e:3b:c6:65:65:0a:ac:86:b0:85:88:c0:b7:99: 87:76:19:f1:ee:6e:f0:35:9c:f9:16:ed:f5:05:2a:26:20:5e: 02:09:e4:6d:04:16:51:da:bf:54:04:81:b5:02:49:d3:e1:eb: b9:ef:96:7d:e5:21:f8:f3:a3:c1:6d:e3:2b:98:37:12:f0:7a: 56:9d:a7:00:a9:8b:b7:1b:ea:1a:b9:67:49:0c:fd:b7:45:90: 31:83:cf:a9:d7:4e:60:ee:11:c4:e9:30:78:a7:aa:39:4a:6a: fb:dc:5b:37:3d:8e:47:23:bb:63:a2:1e:5f:63:f3:b7:58:f6: c7:32:7a:48:00:df:2e:89:c1:9a:c8:72:41:08:e6:9a:e5:21: 1d:03:81:00:9c:d3:62:0d:c7:f3:7d:36:21:bf:5b:a9:a8:75: e8:ab:53:bc:c7:94:55:d7:a2:98:a7:e9:e9:c4:65:a6:d2:fe: ec:f9:95:e4:98:69:8e:55:7b:42:bb:70:d7:17:b6:ea:33:03: a8:11:34:06 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4LaYh2xCrAkf7iyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmN2Y2ZmItMGJhZS00YzIxLWJjZjItMmY5OTg1NDFk YjNmMB4XDTI1MTEyNDIwMDAwM1oXDTI1MTEyNzIwMDAwMFowLzEtMCsGA1UEAxMk OTZjNDA1YzktZGRkMC00YzVhLWExM2QtNjM2ZjdmNmJmZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c774M01EhJtTZjHurE2OkZ1zR1GXEZX/kxG Swc+qkVqRyS9GsUYfA87anQ15ORreZRwkW4ahOqzy4AvEWQd3QtknrAe9XfHZ0tO iDqZyaQ2qIT8bUkIhtWiVhLKsrvvc3ByXDZVFrQPYlvAicjDwZc7ubnKhZg4gWaN nI0OzGmnBg42b052EnhRqZmSYdCYVIbWaNRe6H4ReA+T1A8STCgyKJRZbqDf3dyv vxO8de8EFaYl+Vb3cJPJCwyDrh5P03VPpg/Owm3V/hXKj1RrDfAWph5WZ7swKW/s oUs0MXg9pB2FpPplpbXgHKfz6XC8SpSkFHkcYdD+A5BpxCGMNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFChBza16+h/Gea5z1h3Dffwcu4p0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kY2Y3 ZjZmYi0wYmFlLTRjMjEtYmNmMi0yZjk5ODU0MWRiM2YvZGNmN2Y2ZmItMGJhZS00 YzIxLWJjZjItMmY5OTg1NDFkYjNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGNmN2Y2ZmItMGJhZS00YzIxLWJj ZjItMmY5OTg1NDFkYjNmL2RjZjdmNmZiLTBiYWUtNGMyMS1iY2YyLTJmOTk4NTQx ZGIzZi5jcmwwHwYDVR0jBBgwFoAUzC+dbcy2HM4e41A5Y5HqY9GPuAIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kY2Y3ZjZmYi0wYmFlLTRjMjEtYmNmMi0yZjk5 ODU0MWRiM2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAAXVH6/mfIrJn5fZSpcY1e R2pDLC7wyGXc4POtkGDmmRkztXMyLBJP/mPUyu93JUSnXv7vf7rn9+M5fjvGZWUK rIawhYjAt5mHdhnx7m7wNZz5Fu31BSomIF4CCeRtBBZR2r9UBIG1AknT4eu575Z9 5SH486PBbeMrmDcS8HpWnacAqYu3G+oauWdJDP23RZAxg8+p105g7hHE6TB4p6o5 Smr73Fs3PY5HI7tjoh5fY/O3WPbHMnpIAN8uicGayHJBCOaa5SEdA4EAnNNiDcfz fTYhv1upqHXoq1O8x5RV16KYp+npxGWm0v7s+ZXkmGmOVXtCu3DXF7bqMwOoETQG -----END CERTIFICATE-----Generated at Tue Nov 25 06:30:56 2025 by rpki-client