This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/298f0e00-79ca-4754-87f0-690924fb0907/298f0e00-79ca-4754-87f0-690924fb0907.mft File: 298f0e00-79ca-4754-87f0-690924fb0907.mft (raw, json) Hash identifier: BRo46ofP5AFJ2WHjBWn8K+Oa2GV97FnaWUCHBdvBlRE= Subject key identifier: 53:CC:B5:CA:D8:3F:C7:01:B8:50:D1:07:F6:A3:50:54:BB:A0:4D:B1 Authority key identifier: 89:4A:A4:54:4C:B9:5A:90:6D:33:2B:17:E7:CD:85:D4:62:5A:90:F5 Certificate issuer: /CN=298f0e00-79ca-4754-87f0-690924fb0907 Certificate serial: 010D0C9F4328584BFF63F1943F7669D7E0AC5F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/298f0e00-79ca-4754-87f0-690924fb0907.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/298f0e00-79ca-4754-87f0-690924fb0907/298f0e00-79ca-4754-87f0-690924fb0907.mft Manifest number: 010D0C9F4328584BD2BBF93E9DB15A02B8242510 Signing time: Thu 27 Nov 2025 10:00:08 +0000 Manifest this update: Thu 27 Nov 2025 10:00:08 +0000 Manifest next update: Sun 30 Nov 2025 10:00:00 +0000 Files and hashes: 1: 298f0e00-79ca-4754-87f0-690924fb0907.crl (hash: 1ndMIptc4v79IK5Nkb1lg3STfpjuEHRSFU01Udnt9QM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/298f0e00-79ca-4754-87f0-690924fb0907/298f0e00-79ca-4754-87f0-690924fb0907.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/298f0e00-79ca-4754-87f0-690924fb0907/298f0e00-79ca-4754-87f0-690924fb0907.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/298f0e00-79ca-4754-87f0-690924fb0907.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:63:f1:94:3f:76:69:d7:e0:ac:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=298f0e00-79ca-4754-87f0-690924fb0907 Validity Not Before: Nov 27 10:00:08 2025 GMT Not After : Nov 30 10:00:00 2025 GMT Subject: CN=2ef315b3-2ca5-4b53-8b70-95e36e07029d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:00:3e:33:2b:c9:f1:c4:2b:85:7f:a8:ae: 08:68:8a:58:0d:ca:53:b2:e3:08:c7:c2:04:ba:cc: fc:e9:8f:af:74:73:78:bd:67:78:7e:b4:1b:68:2b: 72:9d:c2:3b:50:b7:f5:9f:20:68:91:41:78:09:f3: de:d4:35:25:a0:65:33:3c:9d:11:bf:2c:32:4a:9b: 14:ae:f5:69:06:ff:a0:e3:4c:af:c1:3c:7a:e4:c6: 14:42:a5:e4:70:92:de:2b:49:e2:94:73:d0:91:b6: e6:53:c6:e1:43:91:58:10:a5:55:5b:90:f6:32:7c: 0f:20:67:a2:d1:07:92:10:f8:30:00:ff:a5:ba:b2: d1:45:95:7e:5d:5f:25:16:71:b5:b0:8c:e1:2b:cd: 26:a8:34:68:c4:1e:02:b1:fa:72:0b:ee:fa:8f:b0: 86:af:e8:1f:ac:1f:c7:d9:4e:a8:e2:1a:d7:e2:cd: 0d:b7:91:3d:ec:be:7f:7a:28:96:fa:f1:14:c2:a1: 43:b8:1f:a5:f3:6a:d7:99:c2:96:1b:f0:63:94:af: a2:40:7e:4f:12:1d:91:c8:d1:25:28:8b:8f:69:56: 23:1d:c2:ba:7e:8a:42:40:0c:ef:88:fc:f1:8a:05: 8f:e4:75:12:5e:0e:c0:b5:63:40:22:28:b5:71:69: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:CC:B5:CA:D8:3F:C7:01:B8:50:D1:07:F6:A3:50:54:BB:A0:4D:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/298f0e00-79ca-4754-87f0-690924fb0907/298f0e00-79ca-4754-87f0-690924fb0907.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/298f0e00-79ca-4754-87f0-690924fb0907/298f0e00-79ca-4754-87f0-690924fb0907.crl X509v3 Authority Key Identifier: keyid:89:4A:A4:54:4C:B9:5A:90:6D:33:2B:17:E7:CD:85:D4:62:5A:90:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/298f0e00-79ca-4754-87f0-690924fb0907.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:de:f8:43:dd:d1:96:18:f3:9e:e0:d8:58:51:6b:4b:88:01: 1a:d0:4b:7a:e9:a7:72:24:5a:8f:1c:ed:e6:dd:08:43:48:94: a4:9c:b7:b3:a2:ee:35:57:8a:dc:dc:c7:ad:b0:81:30:c7:59: 03:b5:84:d7:87:a0:b6:61:ae:ab:95:3c:13:81:17:63:be:58: 16:39:b5:c8:3b:38:83:3f:be:26:b1:cd:06:1a:79:ba:a7:e6: 9f:38:37:4c:39:fb:a2:96:bc:6e:ac:ba:0f:ed:24:26:3e:78: 07:0d:8e:f0:86:0e:ae:5f:60:6a:a6:99:ad:ee:ce:d1:db:e1: d0:3b:9a:e8:b7:98:9a:a1:15:2b:ef:f7:bb:59:18:e4:b1:ee: 4c:1d:8d:6c:b9:87:8c:b2:82:8a:36:54:2f:61:5b:96:83:80: 61:37:3f:08:3b:8e:5f:62:9b:12:fc:2a:70:f6:c8:ee:ee:5d: 1c:20:b5:e4:f7:6c:30:c7:b9:47:7f:0f:eb:b3:00:00:3a:27: 22:34:40:45:fa:a2:f6:37:4b:a4:e2:4d:1e:44:aa:ba:2a:7d: 2b:f2:55:fc:65:76:db:57:21:01:c1:de:ce:a1:d5:4a:4e:e0: 0a:9d:02:dd:a0:74:91:8b:a7:24:ee:8b:65:8e:fe:40:4b:de: 2c:52:3f:8a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv/Y/GUP3Zp1+CsXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk4ZjBlMDAtNzljYS00NzU0LTg3ZjAtNjkwOTI0ZmIw OTA3MB4XDTI1MTEyNzEwMDAwOFoXDTI1MTEzMDEwMDAwMFowLzEtMCsGA1UEAxMk MmVmMzE1YjMtMmNhNS00YjUzLThiNzAtOTVlMzZlMDcwMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/cAPjMryfHEK4V/qK4IaIpYDcpTsuMIx8IE usz86Y+vdHN4vWd4frQbaCtyncI7ULf1nyBokUF4CfPe1DUloGUzPJ0RvywySpsU rvVpBv+g40yvwTx65MYUQqXkcJLeK0nilHPQkbbmU8bhQ5FYEKVVW5D2MnwPIGei 0QeSEPgwAP+lurLRRZV+XV8lFnG1sIzhK80mqDRoxB4CsfpyC+76j7CGr+gfrB/H 2U6o4hrX4s0Nt5E97L5/eiiW+vEUwqFDuB+l82rXmcKWG/BjlK+iQH5PEh2RyNEl KIuPaVYjHcK6fopCQAzviPzxigWP5HUSXg7AtWNAIii1cWmCPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFPMtcrYP8cBuFDRB/ajUFS7oE2xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yOThm MGUwMC03OWNhLTQ3NTQtODdmMC02OTA5MjRmYjA5MDcvMjk4ZjBlMDAtNzljYS00 NzU0LTg3ZjAtNjkwOTI0ZmIwOTA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjk4ZjBlMDAtNzljYS00NzU0LTg3 ZjAtNjkwOTI0ZmIwOTA3LzI5OGYwZTAwLTc5Y2EtNDc1NC04N2YwLTY5MDkyNGZi MDkwNy5jcmwwHwYDVR0jBBgwFoAUiUqkVEy5WpBtMysX582F1GJakPUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yOThmMGUwMC03OWNhLTQ3NTQtODdmMC02OTA5 MjRmYjA5MDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBO3vhD3dGWGPOe4NhYUWtL iAEa0Et66adyJFqPHO3m3QhDSJSknLezou41V4rc3MetsIEwx1kDtYTXh6C2Ya6r lTwTgRdjvlgWObXIOziDP74msc0GGnm6p+afODdMOfuilrxurLoP7SQmPngHDY7w hg6uX2Bqppmt7s7R2+HQO5rot5iaoRUr7/e7WRjkse5MHY1suYeMsoKKNlQvYVuW g4BhNz8IO45fYpsS/Cpw9sju7l0cILXk92wwx7lHfw/rswAAOiciNEBF+qL2N0uk 4k0eRKq6Kn0r8lX8ZXbbVyEBwd7OodVKTuAKnQLdoHSRi6ck7otljv5AS94sUj+K -----END CERTIFICATE-----Generated at Fri Nov 28 06:49:19 2025 by rpki-client