This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft File: 249f7a2c-0438-4d20-8f0b-095a38d1046f.mft (raw, json) Hash identifier: 0aBvFXbapgNeqOOKvWvr4aoMX8q+xU5uBoNt1WwNxZM= Subject key identifier: 32:05:9B:AC:0E:2C:F1:AA:92:5D:A6:AE:BF:8E:48:DC:63:FA:7A:4A Authority key identifier: 35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 Certificate issuer: /CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Certificate serial: 010D0C9F4328584C015E219A4CFCB33080465F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft Manifest number: 010D0C9F4328584BEB0FA66CD497B3C1B8891B8A Signing time: Fri 28 Nov 2025 03:00:03 +0000 Manifest this update: Fri 28 Nov 2025 03:00:03 +0000 Manifest next update: Mon 01 Dec 2025 03:00:00 +0000 Files and hashes: 1: 249f7a2c-0438-4d20-8f0b-095a38d1046f.crl (hash: WYgOwo4o1AjT9ExBIET/U1SJ8a3Dh4TiBrAeIPQ6Rco=) 2: fa929d22-5b04-3656-bfd5-92174907d027.roa (hash: FNjaBd0WhMM0FPkwvQml8ungOAwygLZ6DJkjHBzzFuw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:01:5e:21:9a:4c:fc:b3:30:80:46:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=249f7a2c-0438-4d20-8f0b-095a38d1046f Validity Not Before: Nov 28 03:00:03 2025 GMT Not After : Dec 1 03:00:00 2025 GMT Subject: CN=81f02a4d-8902-4ef0-8668-8c710520c3d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:d6:c2:2c:b8:d2:1e:d0:fc:2a:cc:fb:94: ac:54:6e:06:de:6e:2a:26:fd:01:06:81:75:1f:69: 89:3e:c6:f3:24:18:9c:27:e0:0d:93:aa:eb:82:5f: 85:ab:26:25:99:1d:38:f4:93:90:04:76:50:94:85: c9:24:d3:ca:32:7f:9e:6b:ad:09:68:2f:71:56:25: cf:72:5d:63:76:22:7b:5c:13:bd:53:96:46:c1:4d: ed:c8:31:f7:49:c6:97:d4:fa:07:12:b6:cb:8e:b6: 9b:8c:69:55:0e:ad:9e:38:bc:9c:b8:ec:5b:d6:e8: a4:81:f9:8a:70:73:82:28:a0:48:2d:b7:05:09:76: e1:79:45:76:c0:fb:c4:16:a6:0c:db:83:0e:11:7f: df:d1:64:1d:70:a7:ad:cd:ba:32:d9:ae:57:85:c1: 82:e1:7b:bc:69:95:7b:38:ab:98:44:a0:dd:14:83: 25:57:a6:8e:18:2f:eb:87:ca:8e:a5:10:85:12:d6: 5c:3f:41:4f:ea:75:fb:4e:90:e5:8d:61:50:4a:55: e1:25:c6:dc:c4:1f:d9:b1:10:ed:a5:1a:4a:a4:93: 79:5c:13:15:e5:b1:89:bf:32:94:11:21:7f:74:65: 61:14:26:4c:ad:28:d0:93:2f:e5:c8:f2:66:73:e3: e2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:05:9B:AC:0E:2C:F1:AA:92:5D:A6:AE:BF:8E:48:DC:63:FA:7A:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f/249f7a2c-0438-4d20-8f0b-095a38d1046f.crl X509v3 Authority Key Identifier: keyid:35:8D:85:E8:AC:C7:02:3F:C0:22:5A:03:5D:29:2D:9D:8E:7B:4D:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/249f7a2c-0438-4d20-8f0b-095a38d1046f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1a:10:9b:85:83:49:33:40:08:b1:9e:15:e6:aa:fc:57:89: 0b:d3:85:a4:c4:13:c5:52:ac:07:35:c4:0f:34:6d:ad:9f:1a: 73:7c:07:dd:51:20:3a:79:c5:0c:37:df:ee:25:c9:ae:29:a6: af:18:e9:93:ba:9d:e2:16:9c:d0:de:2c:f7:fc:fc:e8:2a:e0: d4:bc:6f:b2:13:fa:90:71:80:37:23:72:dd:4d:ca:4b:65:aa: 62:be:10:b7:77:c7:c2:40:20:34:27:e7:3e:a8:be:f9:fb:2b: 9c:99:f1:82:59:1b:c6:7d:2a:8c:1c:2d:1e:c6:31:7c:ac:fc: 11:80:6d:8b:77:ce:81:4c:38:ca:18:1f:ec:e3:ee:b9:ba:98: e0:87:26:7a:81:20:f7:0f:0b:29:21:99:ef:72:2e:26:d2:4a: 07:97:1a:f5:3a:e5:39:45:cc:28:0a:b7:b5:4a:95:ee:72:4d: cd:0c:63:8d:50:ff:d6:90:22:7b:a1:08:98:ae:75:53:89:c4: 81:8b:0c:ce:aa:aa:6d:e0:be:65:14:8e:ca:75:85:54:a1:63: 35:49:8a:ab:ad:94:b3:b3:9c:89:db:f6:37:5b:b0:52:69:57: bb:62:23:04:b7:96:cd:86:da:97:0b:06:4e:62:61:03:e5:33: 04:51:6e:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwBXiGaTPyzMIBGXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjQ5ZjdhMmMtMDQzOC00ZDIwLThmMGItMDk1YTM4ZDEw NDZmMB4XDTI1MTEyODAzMDAwM1oXDTI1MTIwMTAzMDAwMFowLzEtMCsGA1UEAxMk ODFmMDJhNGQtODkwMi00ZWYwLTg2NjgtOGM3MTA1MjBjM2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBDWwiy40h7Q/CrM+5SsVG4G3m4qJv0BBoF1 H2mJPsbzJBicJ+ANk6rrgl+FqyYlmR049JOQBHZQlIXJJNPKMn+ea60JaC9xViXP cl1jdiJ7XBO9U5ZGwU3tyDH3ScaX1PoHErbLjrabjGlVDq2eOLycuOxb1uikgfmK cHOCKKBILbcFCXbheUV2wPvEFqYM24MOEX/f0WQdcKetzboy2a5XhcGC4Xu8aZV7 OKuYRKDdFIMlV6aOGC/rh8qOpRCFEtZcP0FP6nX7TpDljWFQSlXhJcbcxB/ZsRDt pRpKpJN5XBMV5bGJvzKUESF/dGVhFCZMrSjQky/lyPJmc+PiXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDIFm6wOLPGqkl2mrr+OSNxj+npKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlm N2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVhMzhkMTA0NmYvMjQ5ZjdhMmMtMDQzOC00 ZDIwLThmMGItMDk1YTM4ZDEwNDZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjQ5ZjdhMmMtMDQzOC00ZDIwLThm MGItMDk1YTM4ZDEwNDZmLzI0OWY3YTJjLTA0MzgtNGQyMC04ZjBiLTA5NWEzOGQx MDQ2Zi5jcmwwHwYDVR0jBBgwFoAUNY2F6KzHAj/AIloDXSktnY57TSkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNDlmN2EyYy0wNDM4LTRkMjAtOGYwYi0wOTVh MzhkMTA0NmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJGhCbhYNJM0AIsZ4V5qr8 V4kL04WkxBPFUqwHNcQPNG2tnxpzfAfdUSA6ecUMN9/uJcmuKaavGOmTup3iFpzQ 3iz3/PzoKuDUvG+yE/qQcYA3I3LdTcpLZapivhC3d8fCQCA0J+c+qL75+yucmfGC WRvGfSqMHC0exjF8rPwRgG2Ld86BTDjKGB/s4+65upjghyZ6gSD3DwspIZnvci4m 0koHlxr1OuU5RcwoCre1SpXuck3NDGONUP/WkCJ7oQiYrnVTicSBiwzOqqpt4L5l FI7KdYVUoWM1SYqrrZSzs5yJ2/Y3W7BSaVe7YiMEt5bNhtqXCwZOYmED5TMEUW5r -----END CERTIFICATE-----Generated at Fri Nov 28 06:42:11 2025 by rpki-client