This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft File: 9cae117d-b11f-4787-b860-f4d311531af3.mft (raw, json) Hash identifier: JW4PbETXBKa0/S6nv04yUQkW4C3yUqsv0gjDlLiwIvo= Subject key identifier: 40:84:0B:F0:06:5D:CA:38:CA:89:40:D0:71:5C:9B:8E:05:CE:6A:FC Authority key identifier: 8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA Certificate issuer: /CN=9cae117d-b11f-4787-b860-f4d311531af3 Certificate serial: 010D0C9F4328584BF6159FD745D42ADBAAE5A100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft Manifest number: 010D0C9F4328584073A836DD9688628467D9632F Signing time: Mon 24 Nov 2025 02:00:04 +0000 Manifest this update: Mon 24 Nov 2025 02:00:04 +0000 Manifest next update: Wed 26 Nov 2025 02:00:00 +0000 Files and hashes: 1: 657752d5-7987-30fd-a6c9-761b35585226.roa (hash: 1RGua3JT3vgsyVjx4hZwPhUbVA9Gsw9ZvASm3uFrMMQ=) 2: 9cae117d-b11f-4787-b860-f4d311531af3.crl (hash: MzPpk1jhYk6d9CjGMZcY+AbnvlxEsCbGVjbuYb/YeIw=) 3: eb737e95-e9f1-3d40-9cb0-6d271e945774.roa (hash: iK2KyVaaSm27ACxN2dXJh1ShsyHpIuifVStnJzG5cSg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f6:15:9f:d7:45:d4:2a:db:aa:e5:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cae117d-b11f-4787-b860-f4d311531af3 Validity Not Before: Nov 24 02:00:04 2025 GMT Not After : Nov 26 02:00:00 2025 GMT Subject: CN=b5ca576f-7f46-409c-b87f-eecf5cebc954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:76:c7:f2:94:49:dd:fe:0d:e6:62:de:8f:f4: 5c:31:af:e9:b8:2c:85:b7:cd:cb:8d:7a:64:13:ac: f1:18:78:d8:20:f7:7b:9a:95:71:fa:29:c9:55:a5: f0:a1:a2:9f:5e:bb:f5:7c:d4:44:75:b0:24:11:93: 9e:bf:90:1d:c8:25:99:4d:23:b7:93:fe:cc:ac:c0: 71:da:9f:56:e2:66:52:ba:0e:a1:41:25:69:30:6a: ff:35:6f:c4:8f:29:05:0f:a8:fd:bf:5f:d5:45:4a: 6e:cb:a7:24:96:ab:c2:8c:f4:e9:96:a1:da:0e:90: c3:a9:5f:82:ae:e9:24:76:2f:63:35:1f:8c:04:78: 14:ef:a0:be:56:bb:d4:69:73:40:d1:e5:21:e4:97: cc:61:db:35:00:88:d2:87:4f:27:22:5c:56:09:7a: 0e:ae:74:09:bf:c8:c8:44:5b:b2:e0:26:bc:52:d6: 64:44:05:1c:bf:a0:ea:6a:95:70:52:fe:d6:68:83: 31:c2:5a:b3:14:97:ec:b0:05:26:02:b0:0a:a0:34: 46:b3:8c:ea:5b:f4:1c:34:d7:50:2c:11:44:85:6c: 7c:29:c4:6a:70:0c:40:38:e1:9a:f2:fa:e2:ea:3e: e2:20:5e:14:c7:73:bd:33:69:74:3c:13:7a:e2:a1: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:84:0B:F0:06:5D:CA:38:CA:89:40:D0:71:5C:9B:8E:05:CE:6A:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3/9cae117d-b11f-4787-b860-f4d311531af3.crl X509v3 Authority Key Identifier: keyid:8F:AA:F3:0C:EE:B1:82:F2:F0:D5:9F:35:B1:E4:9D:A7:90:BE:95:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9cae117d-b11f-4787-b860-f4d311531af3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:32:25:56:ac:68:db:8d:32:10:5a:d5:3b:42:7b:cf:d5:50: ad:18:df:87:d5:0d:6e:93:be:fb:7e:25:ff:d7:93:53:cb:a4: 58:27:e2:a8:f6:78:e8:a0:9f:9d:5f:db:2d:f1:0e:88:8b:6d: a3:43:fd:46:ea:d3:4d:8c:23:56:39:88:cd:d3:5c:d9:f0:ad: 2c:92:c6:6f:e0:91:6b:98:99:61:ad:28:88:99:29:93:f8:61: a6:75:d9:6d:6d:65:b7:02:e2:eb:3f:52:44:c5:c5:4f:da:a6: cc:0e:f8:66:b1:e4:e9:61:de:f2:e4:0d:87:27:a5:0e:19:06: b3:45:0b:16:81:0c:2f:9d:8b:ae:47:5f:ab:43:c1:8a:64:30: 4b:b5:f1:3f:9e:01:37:4e:a0:65:56:d5:44:d7:2a:8b:13:a8: 9c:8d:7d:15:62:a3:a9:26:3a:18:a3:2e:e5:a3:f1:2d:13:89: fc:2e:b4:a1:1b:59:4e:cc:85:1d:f2:c1:01:a5:87:fa:24:be: 55:4f:ba:a4:02:02:d0:70:a3:e9:2c:6b:f0:82:00:b2:8c:a2: 77:73:ce:2c:25:0b:b5:a2:c3:a2:8c:4d:1f:77:b3:e4:c4:db: b1:bc:c5:bd:f1:48:12:60:43:69:6e:17:49:28:e2:ac:f4:ba: 17:a3:2e:4b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv2FZ/XRdQq26rloQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZTExN2QtYjExZi00Nzg3LWI4NjAtZjRkMzExNTMx YWYzMB4XDTI1MTEyNDAyMDAwNFoXDTI1MTEyNjAyMDAwMFowLzEtMCsGA1UEAxMk YjVjYTU3NmYtN2Y0Ni00MDljLWI4N2YtZWVjZjVjZWJjOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHbH8pRJ3f4N5mLej/RcMa/puCyFt83LjXpk E6zxGHjYIPd7mpVx+inJVaXwoaKfXrv1fNREdbAkEZOev5AdyCWZTSO3k/7MrMBx 2p9W4mZSug6hQSVpMGr/NW/EjykFD6j9v1/VRUpuy6cklqvCjPTplqHaDpDDqV+C rukkdi9jNR+MBHgU76C+VrvUaXNA0eUh5JfMYds1AIjSh08nIlxWCXoOrnQJv8jI RFuy4Ca8UtZkRAUcv6DqapVwUv7WaIMxwlqzFJfssAUmArAKoDRGs4zqW/QcNNdQ LBFEhWx8KcRqcAxAOOGa8vri6j7iIF4Ux3O9M2l0PBN64qEE0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFECEC/AGXco4yolA0HFcm44Fzmr8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2Fl MTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQzMTE1MzFhZjMvOWNhZTExN2QtYjExZi00 Nzg3LWI4NjAtZjRkMzExNTMxYWYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOWNhZTExN2QtYjExZi00Nzg3LWI4 NjAtZjRkMzExNTMxYWYzLzljYWUxMTdkLWIxMWYtNDc4Ny1iODYwLWY0ZDMxMTUz MWFmMy5jcmwwHwYDVR0jBBgwFoAUj6rzDO6xgvLw1Z81seSdp5C+lbowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85Y2FlMTE3ZC1iMTFmLTQ3ODctYjg2MC1mNGQz MTE1MzFhZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsMiVWrGjbjTIQWtU7QnvP 1VCtGN+H1Q1uk777fiX/15NTy6RYJ+Ko9njooJ+dX9st8Q6Ii22jQ/1G6tNNjCNW OYjN01zZ8K0sksZv4JFrmJlhrSiImSmT+GGmddltbWW3AuLrP1JExcVP2qbMDvhm seTpYd7y5A2HJ6UOGQazRQsWgQwvnYuuR1+rQ8GKZDBLtfE/ngE3TqBlVtVE1yqL E6icjX0VYqOpJjoYoy7lo/EtE4n8LrShG1lOzIUd8sEBpYf6JL5VT7qkAgLQcKPp LGvwggCyjKJ3c84sJQu1osOijE0fd7PkxNuxvMW98UgSYENpbhdJKOKs9LoXoy5L -----END CERTIFICATE-----Generated at Mon Nov 24 22:40:56 2025 by rpki-client