This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.mft File: b2a2cac0-9f4e-4e62-acf9-0302120174f8.mft (raw, json) Hash identifier: OOdw4ZInoKKixR5GfAP5QU54WxbRFC236tUMhaQ2hu8= Subject key identifier: 5A:DC:36:0E:70:7B:CE:0C:CE:79:D1:77:EB:60:08:2E:FD:5F:0E:FE Authority key identifier: D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37 Certificate issuer: /CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8 Certificate serial: 010D0C9F4328584C00AC74EED6ABB51BB79BA400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.mft Manifest number: 010D0C9F4328584BBAE2576DE0FB185C61999D2D Signing time: Thu 27 Nov 2025 21:02:04 +0000 Manifest this update: Thu 27 Nov 2025 21:02:04 +0000 Manifest next update: Sat 29 Nov 2025 21:00:00 +0000 Files and hashes: 1: 123ec8f2-3786-3363-ba42-24ba0989b710.roa (hash: qLX8BZAYEp3EWLrHoKTNVweGfsBCrjblm7SZekWUluU=) 2: 9bb6da2c-9e51-30a2-9769-751c1a83d447.roa (hash: sTURicIP27shB8PZVoYWUditXAOz2YQPqHZZfGD9m9I=) 3: b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl (hash: VMq2n6KCjVkA4M66xlGKcpYwUwzmOGtJYejp0BY26xw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:00:ac:74:ee:d6:ab:b5:1b:b7:9b:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8 Validity Not Before: Nov 27 21:02:04 2025 GMT Not After : Nov 29 21:00:00 2025 GMT Subject: CN=2abd7ef6-b1b2-49e6-b68b-0d7fde032893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:08:7d:08:13:22:3b:20:f7:83:2e:9f:07:3f: 79:fb:5d:ab:0a:fb:ff:80:7e:29:b5:e4:28:71:c8: fa:37:62:6b:41:e9:ac:51:ac:99:52:91:e3:4e:aa: 9d:a9:60:02:b8:53:68:0e:be:3e:11:b5:2c:02:7e: 9d:a3:4d:45:77:3d:e7:9f:96:17:8f:c4:98:fc:2a: c1:2e:be:79:03:9b:48:3c:34:64:67:bf:d9:b1:2a: ac:f1:56:87:28:c7:9a:10:89:43:82:65:fc:61:e0: 5a:72:83:6b:24:a2:ec:dd:3a:70:0b:e2:c2:9c:81: 6f:5d:33:b7:8e:12:c4:95:8e:9c:cd:c3:2e:b3:47: 2f:95:22:90:c2:87:03:50:c9:1c:61:ff:f1:68:d8: 36:1a:73:08:b9:f3:76:10:10:9b:10:6a:27:e2:ab: 60:6b:fc:31:c0:70:a0:5f:26:01:ce:8a:1f:d8:1a: e4:98:07:56:61:46:00:9f:37:f8:3a:1c:e3:3f:28: 36:d7:73:6e:24:41:f5:59:d8:2e:f8:be:44:61:e6: 0e:5c:f4:95:a7:9b:64:83:aa:4a:73:54:ee:12:ee: 4a:31:be:a3:fa:77:c0:52:cf:b9:dd:46:7d:e1:32: 30:ab:a8:87:20:a7:94:7c:2a:22:80:a7:21:ee:82: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DC:36:0E:70:7B:CE:0C:CE:79:D1:77:EB:60:08:2E:FD:5F:0E:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl X509v3 Authority Key Identifier: keyid:D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:31:3f:70:da:c3:4c:4d:0c:e1:97:26:b0:42:57:07:ef:e8: f6:5e:0d:18:a0:06:ab:df:91:bc:5d:c8:24:bd:45:7d:4f:3a: 9b:4e:5d:25:e8:34:0b:1f:8e:e7:8b:79:e0:cb:e3:8d:70:12: ce:a4:e8:c8:0b:c9:25:6a:bf:96:df:e9:9d:3b:c9:0a:f3:42: 63:f0:c4:c9:ea:5b:0f:fe:4c:1c:4a:c1:d4:e6:d3:d9:47:51: 30:9f:19:41:e8:76:3b:38:9d:48:b3:12:d2:d5:2a:f4:56:a0: 91:0a:d7:a0:70:8c:62:69:e7:b7:6f:8f:00:d3:c8:da:80:19: 32:c8:0c:8b:66:81:d2:a4:71:89:9d:76:77:a4:08:1c:e0:00: ac:88:2d:9d:ba:ae:d8:88:cc:a8:53:7c:1b:e9:4c:73:94:7d: 00:d2:97:ba:ff:43:79:5f:90:f2:41:ad:e7:54:67:c9:22:e1: a2:ce:1d:7e:fe:7c:52:34:ae:31:70:2b:27:65:92:5d:61:6f: 57:4a:97:3b:70:df:92:6b:ac:aa:37:ed:df:9a:a5:22:f0:46: 26:2e:a7:09:53:ec:fe:9b:21:0e:4d:5d:09:72:71:23:39:f3: fa:c8:8a:5c:d3:0c:19:c5:04:23:65:d9:ec:e8:c8:da:ef:b9: c6:f2:dc:95 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwArHTu1qu1G7ebpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJhMmNhYzAtOWY0ZS00ZTYyLWFjZjktMDMwMjEyMDE3 NGY4MB4XDTI1MTEyNzIxMDIwNFoXDTI1MTEyOTIxMDAwMFowLzEtMCsGA1UEAxMk MmFiZDdlZjYtYjFiMi00OWU2LWI2OGItMGQ3ZmRlMDMyODkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAh9CBMiOyD3gy6fBz95+12rCvv/gH4pteQo ccj6N2JrQemsUayZUpHjTqqdqWACuFNoDr4+EbUsAn6do01Fdz3nn5YXj8SY/CrB Lr55A5tIPDRkZ7/ZsSqs8VaHKMeaEIlDgmX8YeBacoNrJKLs3TpwC+LCnIFvXTO3 jhLElY6czcMus0cvlSKQwocDUMkcYf/xaNg2GnMIufN2EBCbEGon4qtga/wxwHCg XyYBzoof2BrkmAdWYUYAnzf4OhzjPyg213NuJEH1Wdgu+L5EYeYOXPSVp5tkg6pK c1TuEu5KMb6j+nfAUs+53UZ94TIwq6iHIKeUfCoigKch7oIBZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFrcNg5we84MznnRd+tgCC79Xw7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmEy Y2FjMC05ZjRlLTRlNjItYWNmOS0wMzAyMTIwMTc0ZjgvYjJhMmNhYzAtOWY0ZS00 ZTYyLWFjZjktMDMwMjEyMDE3NGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjJhMmNhYzAtOWY0ZS00ZTYyLWFj ZjktMDMwMjEyMDE3NGY4L2IyYTJjYWMwLTlmNGUtNGU2Mi1hY2Y5LTAzMDIxMjAx NzRmOC5jcmwwHwYDVR0jBBgwFoAU2Y7a72ePTUD5VIeEbJpgsogQSjcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmEyY2FjMC05ZjRlLTRlNjItYWNmOS0wMzAy MTIwMTc0ZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6MT9w2sNMTQzhlyawQlcH 7+j2Xg0YoAar35G8XcgkvUV9TzqbTl0l6DQLH47ni3ngy+ONcBLOpOjIC8klar+W 3+mdO8kK80Jj8MTJ6lsP/kwcSsHU5tPZR1EwnxlB6HY7OJ1IsxLS1Sr0VqCRCteg cIxiaee3b48A08jagBkyyAyLZoHSpHGJnXZ3pAgc4ACsiC2duq7YiMyoU3wb6Uxz lH0A0pe6/0N5X5DyQa3nVGfJIuGizh1+/nxSNK4xcCsnZZJdYW9XSpc7cN+Sa6yq N+3fmqUi8EYmLqcJU+z+myEOTV0JcnEjOfP6yIpc0wwZxQQjZdns6Mja77nG8tyV -----END CERTIFICATE-----Generated at Fri Nov 28 06:45:50 2025 by rpki-client