This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft File: a8d70f86-b257-4225-9609-989938a4164f.mft (raw, json) Hash identifier: ITqhQEqt2HKFnmuvAZXYNz+kxblG0PVg4QKXEl2K9OE= Subject key identifier: 6D:1E:7A:FE:A9:F0:7F:37:71:11:44:14:74:62:2E:0A:E4:03:A3:A3 Authority key identifier: 02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A Certificate issuer: /CN=a8d70f86-b257-4225-9609-989938a4164f Certificate serial: 010D0C9F4328584BFF0A8E03A1F0A852D29CB100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft Manifest number: 010D0C9F4328584B816AC2FE5D272DDE15CA1A6E Signing time: Thu 27 Nov 2025 07:00:03 +0000 Manifest this update: Thu 27 Nov 2025 07:00:03 +0000 Manifest next update: Sat 29 Nov 2025 07:00:00 +0000 Files and hashes: 1: a8d70f86-b257-4225-9609-989938a4164f.crl (hash: YMKoyU3PU3atC5Ju7p6XfFAcMQxQD2wV4wM0d2pDu80=) 2: ccd00313-1352-3349-b4db-297dbbd094a8.roa (hash: unzfcbUn1DB3tN1f1qRVsCs3ht40PlczOAfQDjp7J4w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:0a:8e:03:a1:f0:a8:52:d2:9c:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8d70f86-b257-4225-9609-989938a4164f Validity Not Before: Nov 27 07:00:03 2025 GMT Not After : Nov 29 07:00:00 2025 GMT Subject: CN=519860b9-98b3-495f-94c8-556b2871b5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9a:63:08:1a:03:0a:ff:25:e3:30:39:d4:e5: 27:06:04:73:e1:b8:8e:4a:83:58:4f:0e:a2:4e:d3: a5:12:70:8d:b7:66:69:ea:36:51:6c:1b:66:79:7c: ba:0f:d9:c2:cc:2e:e4:82:c8:51:34:13:8f:6e:99: 7a:9e:e1:ad:3d:91:d4:66:68:26:b9:7f:97:df:dd: 38:3a:b4:86:5e:2e:2c:74:86:e8:de:36:33:eb:a8: 63:7f:3f:63:f7:06:89:08:b6:e9:df:7e:9e:d7:1c: ab:83:54:f5:4a:09:0f:48:d4:8f:02:89:a6:1e:35: 31:5a:b8:1d:07:65:d3:c1:0a:6a:0d:20:9c:cf:b4: a2:4e:fa:cd:b5:9b:ff:dd:e3:61:23:93:60:a0:77: db:11:b9:a5:8b:92:f5:97:d9:6e:91:45:53:51:65: 44:a6:5f:5c:98:8e:a9:60:ac:d3:5a:e1:e5:48:28: 2c:40:78:b5:db:ef:59:59:28:f6:da:9c:63:0a:91: 29:cb:73:d2:cc:02:14:df:6d:0e:30:83:47:f1:af: a7:d5:80:b3:b9:78:03:70:09:3a:c4:13:75:ec:16: bf:13:69:cd:f6:19:3f:97:77:a6:ec:f9:8b:c1:1d: 7d:93:c8:c7:03:8b:1f:cb:21:52:ee:c2:1c:8e:dc: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1E:7A:FE:A9:F0:7F:37:71:11:44:14:74:62:2E:0A:E4:03:A3:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f/a8d70f86-b257-4225-9609-989938a4164f.crl X509v3 Authority Key Identifier: keyid:02:6F:4A:69:37:74:48:96:C9:80:79:8E:15:BD:04:55:3A:43:0C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8d70f86-b257-4225-9609-989938a4164f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:b0:4c:91:07:e0:56:ee:4f:d2:7e:c4:7d:db:9a:4d:7b:89: fe:14:f8:75:84:3a:e8:e9:07:34:c8:e5:57:14:99:74:6b:ab: c6:70:b4:38:f8:d0:a6:f4:5e:22:fc:90:9d:85:25:3b:dc:13: 0f:1c:4a:65:88:4f:16:7b:71:59:99:72:84:12:8f:a8:07:c8: b8:ab:d1:0e:d6:08:41:a6:69:14:12:6d:f1:98:ed:83:53:de: 19:3b:03:97:55:17:e0:72:0a:99:e3:54:13:7d:8e:39:4d:d5: da:e4:e1:79:46:29:ca:45:6b:de:21:1e:33:70:27:59:8d:76: d8:2d:ff:27:bb:e7:5e:d7:59:2e:25:b4:7a:59:56:04:c5:75: 3a:7f:4d:4e:39:61:1f:f1:2a:ed:96:07:8e:e3:d4:42:2f:d4: c3:c4:a4:89:8e:db:da:98:61:3e:0f:54:7b:2b:40:58:24:23: b2:82:a2:5f:10:fa:2c:34:d4:9e:07:35:14:aa:74:ae:c7:83: fe:35:30:c2:1c:f1:75:1a:0f:05:47:3a:2a:9e:5e:73:99:df: e8:76:d5:be:93:c3:a5:dc:46:df:10:be:71:0f:e0:5f:ef:df: 0f:c4:66:a2:4a:8f:07:11:1c:23:d9:71:ae:34:06:a8:bb:e9: c6:bb:09:5d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv/Co4DofCoUtKcsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYThkNzBmODYtYjI1Ny00MjI1LTk2MDktOTg5OTM4YTQx NjRmMB4XDTI1MTEyNzA3MDAwM1oXDTI1MTEyOTA3MDAwMFowLzEtMCsGA1UEAxMk NTE5ODYwYjktOThiMy00OTVmLTk0YzgtNTU2YjI4NzFiNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ppjCBoDCv8l4zA51OUnBgRz4biOSoNYTw6i TtOlEnCNt2Zp6jZRbBtmeXy6D9nCzC7kgshRNBOPbpl6nuGtPZHUZmgmuX+X3904 OrSGXi4sdIbo3jYz66hjfz9j9waJCLbp336e1xyrg1T1SgkPSNSPAommHjUxWrgd B2XTwQpqDSCcz7SiTvrNtZv/3eNhI5NgoHfbEbmli5L1l9lukUVTUWVEpl9cmI6p YKzTWuHlSCgsQHi12+9ZWSj22pxjCpEpy3PSzAIU320OMINH8a+n1YCzuXgDcAk6 xBN17Ba/E2nN9hk/l3em7PmLwR19k8jHA4sfyyFS7sIcjtyPPwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG0eev6p8H83cRFEFHRiLgrkA6OjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3 MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5MzhhNDE2NGYvYThkNzBmODYtYjI1Ny00 MjI1LTk2MDktOTg5OTM4YTQxNjRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYThkNzBmODYtYjI1Ny00MjI1LTk2 MDktOTg5OTM4YTQxNjRmL2E4ZDcwZjg2LWIyNTctNDIyNS05NjA5LTk4OTkzOGE0 MTY0Zi5jcmwwHwYDVR0jBBgwFoAUAm9KaTd0SJbJgHmOFb0EVTpDDEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOGQ3MGY4Ni1iMjU3LTQyMjUtOTYwOS05ODk5 MzhhNDE2NGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBsEyRB+BW7k/SfsR925pN e4n+FPh1hDro6Qc0yOVXFJl0a6vGcLQ4+NCm9F4i/JCdhSU73BMPHEpliE8We3FZ mXKEEo+oB8i4q9EO1ghBpmkUEm3xmO2DU94ZOwOXVRfgcgqZ41QTfY45TdXa5OF5 RinKRWveIR4zcCdZjXbYLf8nu+de11kuJbR6WVYExXU6f01OOWEf8SrtlgeO49RC L9TDxKSJjtvamGE+D1R7K0BYJCOygqJfEPosNNSeBzUUqnSux4P+NTDCHPF1Gg8F Rzoqnl5zmd/odtW+k8Ol3EbfEL5xD+Bf798PxGaiSo8HERwj2XGuNAaou+nGuwld -----END CERTIFICATE-----Generated at Fri Nov 28 06:49:37 2025 by rpki-client