This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.mft File: cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.mft (raw, json) Hash identifier: kpRjxuLsvJ4fKuJ+/X9Cfsu8E9GAl5t1eZkwosnbQgk= Subject key identifier: 2A:6A:4C:F1:B4:78:F1:A0:90:A1:17:BD:86:76:A1:76:CE:7A:BA:59 Authority key identifier: 7B:33:36:6E:9B:42:D2:9C:8B:54:17:2D:11:EA:A7:97:F2:70:5D:85 Certificate issuer: /CN=cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533 Certificate serial: 010D0C9F4328584C00AC727B9FB7FC31BD64F600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.mft Manifest number: 010D0C9F4328584C00A984BFA3F59E50AD67C7C2 Signing time: Thu 27 Nov 2025 21:02:04 +0000 Manifest this update: Thu 27 Nov 2025 21:02:04 +0000 Manifest next update: Sun 30 Nov 2025 20:00:00 +0000 Files and hashes: 1: a5c12e0c-7f77-3bfe-9a59-a38621cd9528.roa (hash: SdKTaR6IyEdFJ65ulEn7ibWzpHropn00OC9GGIla4Ls=) 2: cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.crl (hash: /S4FmVQef0/oWx8q1I4opvNrtASmeue2O/a8zmb+5D0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:00:ac:72:7b:9f:b7:fc:31:bd:64:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533 Validity Not Before: Nov 27 21:02:04 2025 GMT Not After : Nov 30 20:00:00 2025 GMT Subject: CN=35a0ecff-1202-46a1-9239-1b93a438d7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3c:72:a8:1b:12:00:0a:91:66:91:b4:7a:48: 41:9c:35:ba:6b:fb:f7:54:3d:ce:7d:c1:02:2b:94: c2:96:db:06:62:7c:3e:09:a5:6e:81:20:96:2a:54: 71:1a:9f:08:8c:5f:dc:24:c8:23:49:41:f3:fc:4d: 70:13:90:48:0f:2c:d9:aa:e0:2b:af:1f:41:15:e4: 5f:c3:ec:b8:30:f4:de:02:cb:26:01:9d:1b:a0:48: 23:72:2f:83:0e:24:39:03:8e:68:53:83:28:26:1f: b9:9f:51:fe:aa:27:0d:e0:b7:57:dd:2c:d9:4e:f6: d7:9b:11:da:e7:46:40:1e:7a:b9:60:53:46:ec:f9: 82:03:a6:a3:fc:dc:2f:e8:3f:27:bc:6f:c0:60:65: 8e:5b:8a:6d:69:01:f3:72:4b:a8:1e:6c:5f:ae:31: 9a:cb:fc:c6:99:c8:11:17:48:a4:af:66:30:c1:db: b7:1c:45:b0:db:6c:45:21:d2:1c:e4:f6:91:4f:53: 07:f0:1a:8f:09:bc:ee:75:8b:6e:88:ef:bf:6e:95: a4:e5:c5:e3:77:c2:19:09:06:ed:9d:90:8c:bc:e8: 60:28:40:50:55:cb:b1:10:20:0a:e0:8b:35:a6:5e: a2:5e:cd:19:59:bb:fb:af:a6:d3:2e:98:7e:f1:79: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6A:4C:F1:B4:78:F1:A0:90:A1:17:BD:86:76:A1:76:CE:7A:BA:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.crl X509v3 Authority Key Identifier: keyid:7B:33:36:6E:9B:42:D2:9C:8B:54:17:2D:11:EA:A7:97:F2:70:5D:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfb4d6ca-1f0a-4b7b-b4fc-33222c1c5533.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:88:e7:37:27:23:49:1c:d2:6d:52:0a:d6:e2:df:d1:78:c8: fc:c1:65:80:86:ff:d3:04:d4:5a:e2:44:d6:f0:79:da:b3:86: 64:cf:80:48:ab:a2:08:a1:6a:18:46:4e:2a:37:9f:77:38:2e: 49:c7:50:e3:e9:92:f0:bb:fb:5b:9f:ac:db:7a:16:7a:85:ae: b6:38:ad:5e:00:a9:c8:9a:cf:9c:77:c2:24:a0:7f:4d:09:e9: 55:a4:f5:98:fe:25:e7:4f:93:f9:00:26:7d:e3:df:cf:04:fa: e9:76:de:4a:e4:dc:4b:32:c7:ae:46:33:da:f5:95:7f:72:dc: ed:a2:10:54:28:ef:af:f3:46:42:07:0e:4a:62:7f:44:f7:b0: c8:4a:b2:a7:84:73:89:b4:2c:b1:65:bd:5b:98:2f:fb:57:07: 3e:71:c8:25:81:f6:09:c7:f2:98:9d:33:4f:70:66:33:78:4d: e9:03:41:72:87:4f:ba:2d:26:15:bf:91:01:1b:8c:96:91:09: 64:ba:a6:47:13:3e:e0:1f:41:55:c7:d3:f1:07:10:8f:e8:f9: 7c:54:43:66:46:ae:e5:2f:dc:71:17:0e:45:23:50:ca:3f:3d: ad:06:c0:68:49:6e:e2:58:03:02:79:0f:b8:a2:48:87:32:e2: 53:60:c9:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwArHJ7n7f8Mb1k9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZiNGQ2Y2EtMWYwYS00YjdiLWI0ZmMtMzMyMjJjMWM1 NTMzMB4XDTI1MTEyNzIxMDIwNFoXDTI1MTEzMDIwMDAwMFowLzEtMCsGA1UEAxMk MzVhMGVjZmYtMTIwMi00NmExLTkyMzktMWI5M2E0MzhkN2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzxyqBsSAAqRZpG0ekhBnDW6a/v3VD3OfcEC K5TCltsGYnw+CaVugSCWKlRxGp8IjF/cJMgjSUHz/E1wE5BIDyzZquArrx9BFeRf w+y4MPTeAssmAZ0boEgjci+DDiQ5A45oU4MoJh+5n1H+qicN4LdX3SzZTvbXmxHa 50ZAHnq5YFNG7PmCA6aj/Nwv6D8nvG/AYGWOW4ptaQHzckuoHmxfrjGay/zGmcgR F0ikr2Ywwdu3HEWw22xFIdIc5PaRT1MH8BqPCbzudYtuiO+/bpWk5cXjd8IZCQbt nZCMvOhgKEBQVcuxECAK4Is1pl6iXs0ZWbv7r6bTLph+8Xl4RwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCpqTPG0ePGgkKEXvYZ2oXbOerpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmI0 ZDZjYS0xZjBhLTRiN2ItYjRmYy0zMzIyMmMxYzU1MzMvY2ZiNGQ2Y2EtMWYwYS00 YjdiLWI0ZmMtMzMyMjJjMWM1NTMzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZiNGQ2Y2EtMWYwYS00YjdiLWI0 ZmMtMzMyMjJjMWM1NTMzL2NmYjRkNmNhLTFmMGEtNGI3Yi1iNGZjLTMzMjIyYzFj NTUzMy5jcmwwHwYDVR0jBBgwFoAUezM2bptC0pyLVBctEeqnl/JwXYUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmI0ZDZjYS0xZjBhLTRiN2ItYjRmYy0zMzIy MmMxYzU1MzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBciOc3JyNJHNJtUgrW4t/R eMj8wWWAhv/TBNRa4kTW8Hnas4Zkz4BIq6IIoWoYRk4qN593OC5Jx1Dj6ZLwu/tb n6zbehZ6ha62OK1eAKnIms+cd8IkoH9NCelVpPWY/iXnT5P5ACZ949/PBPrpdt5K 5NxLMseuRjPa9ZV/ctztohBUKO+v80ZCBw5KYn9E97DISrKnhHOJtCyxZb1bmC/7 Vwc+ccglgfYJx/KYnTNPcGYzeE3pA0Fyh0+6LSYVv5EBG4yWkQlkuqZHEz7gH0FV x9PxBxCP6Pl8VENmRq7lL9xxFw5FI1DKPz2tBsBoSW7iWAMCeQ+4okiHMuJTYMlm -----END CERTIFICATE-----Generated at Fri Nov 28 06:45:25 2025 by rpki-client