This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft
File: cb2539db-3965-4bf1-baef-b7f85ca967bd.mft (raw, json)
Hash identifier: MG2BFCPZtD036DXOiUKS60SU8wjs9Fqt7Zu9KS3gEhI=
Subject key identifier: A0:DE:04:8B:D5:DA:02:12:38:EA:9F:02:33:3F:63:19:7B:E5:98:41
Authority key identifier: 35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
Certificate issuer: /CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
Certificate serial: 010D0C9F4328584C006FF5BB4AA0317D6E1CBD80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft
Manifest number: 010D0C9F4328584BB51A6421112F6B5DEE51749E
Signing time: Thu 27 Nov 2025 19:00:08 +0000
Manifest this update: Thu 27 Nov 2025 19:00:08 +0000
Manifest next update: Sat 29 Nov 2025 19:00:00 +0000
Files and hashes: 1: 21d3146c-b803-3260-b98f-e8fae0d54835.roa (hash: twEvlXk/w7UM4xBVA86/CfE4eh3QymypOI87w3Zi6GQ=)
2: 6469f245-f029-3856-8a63-35951fe49b6e.roa (hash: eZqiUVP0N4wAetJpMgYyFyOIMTcN9t+7oWfMPU7ZjyI=)
3: cb2539db-3965-4bf1-baef-b7f85ca967bd.crl (hash: iUXS91bBtyrUcPYz4WRCP714h0UbAF3kAg2BJCltiyU=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Nov 2025 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:00:6f:f5:bb:4a:a0:31:7d:6e:1c:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
Validity
Not Before: Nov 27 19:00:08 2025 GMT
Not After : Nov 29 19:00:00 2025 GMT
Subject: CN=2c350120-d7c6-4947-ba1e-7d00df8d1aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e3:69:b5:35:4d:1a:9b:a7:f1:50:25:9c:e6:
ed:73:d9:39:36:f7:f1:4a:ed:10:ba:e5:e8:24:c4:
d9:24:c4:3f:81:dd:9c:04:fd:eb:4f:24:86:0f:23:
99:bb:63:b5:1e:46:00:1e:d1:90:83:45:d1:32:0a:
ec:f5:1c:23:70:4f:af:b1:fd:8c:f4:b7:8f:84:5e:
ab:15:c7:52:50:2d:29:f9:97:f9:9d:fd:43:39:62:
f9:29:2a:5e:64:a0:6c:e6:d1:a2:c0:55:d7:40:45:
7d:f2:b9:71:46:ed:f0:0b:51:6a:6c:7a:de:87:94:
5d:c2:cf:75:05:19:71:b4:e0:42:ce:f6:e4:15:08:
bf:df:91:f9:b6:df:79:81:8a:a2:d3:c1:e6:ce:f8:
00:c1:a6:c7:17:7b:34:ad:56:24:0c:e2:bf:50:0d:
2b:f5:a2:ba:7c:9d:d0:6b:65:fb:4d:40:84:09:eb:
c0:52:bd:f5:2c:fd:dd:a5:23:54:f3:1c:59:90:f6:
da:5e:6b:4e:fe:1c:d4:66:60:48:4c:a8:45:b0:c6:
90:82:20:37:8b:f3:89:af:4a:1a:2b:d3:78:69:18:
43:43:7f:75:50:88:ff:69:8c:a0:17:d2:4d:83:bd:
0e:64:98:11:92:1f:ec:be:9c:28:04:85:36:ba:4f:
5b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DE:04:8B:D5:DA:02:12:38:EA:9F:02:33:3F:63:19:7B:E5:98:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl
X509v3 Authority Key Identifier:
keyid:35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:f3:46:b1:71:fb:99:0b:56:ae:79:d0:08:85:d8:d5:aa:53:
1a:d7:a9:3f:ee:ee:96:6b:b0:fd:93:29:60:26:cf:61:a4:25:
d9:84:7b:b4:b3:83:88:d3:bf:e6:bc:77:1c:18:5a:9b:8d:8b:
fe:ce:29:42:b4:2d:64:7e:3b:20:d7:47:98:eb:39:ef:4b:0f:
14:8e:61:c7:23:fb:cc:8f:bf:46:9e:c2:45:57:9f:c7:1f:86:
74:02:43:c8:e3:fc:3e:1b:8d:ae:9a:3a:36:6b:aa:3b:b1:ed:
da:8e:7c:7f:4d:43:38:61:1f:b4:c7:d5:60:ca:22:35:ab:d4:
dc:f6:5d:88:32:1f:95:36:7e:64:9d:a3:a0:a8:a9:8a:b1:38:
75:cf:d5:fb:1c:33:b9:53:3e:73:28:24:a3:12:7a:85:e9:b8:
f3:06:fb:01:31:a8:e2:7d:9d:be:c9:55:db:0a:54:35:99:34:
37:04:82:22:02:0d:6c:00:a9:c7:81:31:b9:0c:83:54:05:7b:
18:cb:56:71:95:60:cb:fc:38:4d:23:21:0c:e2:17:68:24:b6:
11:85:bc:29:bd:60:f4:31:6b:6d:c2:38:09:26:1b:9c:17:1c:
84:64:fa:d5:09:9c:04:69:c1:45:e4:0a:f0:f8:5b:27:34:42:
54:c9:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 28 06:52:38 2025 by rpki-client