This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft File: eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft (raw, json) Hash identifier: Te1TxWjsDJMON2t7xQ+bSwppNhqjrHYZLdNowioyygM= Subject key identifier: C0:56:A1:0E:12:CB:13:37:3C:B8:4B:11:CF:B5:53:B7:DE:B8:3F:89 Authority key identifier: 06:9E:80:91:05:68:12:75:6F:A9:33:9E:F5:AA:1C:CF:C1:61:38:B4 Certificate issuer: /CN=eaf9c250-e52f-4479-99a5-880a3e1b8c2a Certificate serial: 010D0C9F4328584C00522CFB8680B83680A2FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft Manifest number: 010D0C9F4328584B9909D4D72961CC038B7A2426 Signing time: Thu 27 Nov 2025 18:00:08 +0000 Manifest this update: Thu 27 Nov 2025 18:00:08 +0000 Manifest next update: Sat 29 Nov 2025 18:00:00 +0000 Files and hashes: 1: db08c46a-c530-3729-8f45-1e034d3c907b.roa (hash: ARZGbatop8ObVS40pcNVWWc1zB+byMSqmZQYUSM232w=) 2: eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl (hash: BscHobpebpUmKJzJ0baT5r1JVIRrNGEXadaXOIQvQUk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:00:52:2c:fb:86:80:b8:36:80:a2:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaf9c250-e52f-4479-99a5-880a3e1b8c2a Validity Not Before: Nov 27 18:00:08 2025 GMT Not After : Nov 29 18:00:00 2025 GMT Subject: CN=a893db2c-c2ad-4adb-931a-ef0e62f2bf56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:1c:f7:d6:13:65:fa:ab:86:db:07:d7:7d:24: 05:99:0f:b4:1a:6f:9e:bf:88:e0:0d:c4:f5:c1:c3: ed:c3:a4:47:cd:db:be:2a:60:7a:9b:91:1a:70:fa: 1c:7c:47:64:be:f3:9d:bf:c5:6e:95:3b:8c:be:b6: c9:bf:7e:7b:5e:59:36:27:1b:af:d5:81:14:ea:63: 1b:e5:dc:7e:cd:c8:ea:a7:6c:81:00:a1:be:88:bd: de:dd:1a:06:55:a3:0a:98:45:4e:16:da:3d:5f:94: 95:00:83:96:87:b5:c4:06:ae:02:a7:03:dc:c3:00: 54:fb:df:0f:7d:3b:b0:37:56:b0:73:4e:98:e8:a3: c7:f0:2f:14:7e:23:e6:dc:b3:2f:8d:c0:d7:3e:6b: 60:6a:3f:a1:a3:90:f9:85:04:31:90:c0:cf:67:fb: 7a:52:89:84:09:02:8a:2d:3d:9d:54:1a:29:48:87: 88:24:de:e0:b3:d1:b7:a5:4f:e4:6b:13:35:ff:8d: d5:9b:a5:d9:4c:3c:72:84:4b:85:50:ed:f2:77:8b: 45:f3:64:57:6d:20:57:20:30:60:48:6b:a6:c6:db: 0a:9f:29:96:fe:13:70:5b:b7:eb:54:9c:cf:19:7e: 1e:99:1e:e1:17:3b:b1:ad:47:c5:6a:04:57:6e:a8: 55:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:56:A1:0E:12:CB:13:37:3C:B8:4B:11:CF:B5:53:B7:DE:B8:3F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.crl X509v3 Authority Key Identifier: keyid:06:9E:80:91:05:68:12:75:6F:A9:33:9E:F5:AA:1C:CF:C1:61:38:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eaf9c250-e52f-4479-99a5-880a3e1b8c2a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f2:ad:4c:b4:8a:4f:c9:ad:67:a2:27:48:8f:65:84:bd:f0: 84:a8:3a:7c:28:6c:ab:68:47:2b:a8:2e:11:89:c2:d4:c3:fc: 1e:5a:d0:84:ec:2d:87:b0:aa:d4:5f:7b:3e:5f:78:0f:2e:34: a0:7e:e6:92:7a:df:f9:aa:9d:6b:85:44:e7:1a:8c:4b:33:4b: 9c:9b:b6:05:e3:bb:90:26:1a:7c:2b:02:08:86:29:ea:a2:1c: 63:d4:c6:9b:6c:5a:bd:a1:4e:30:4f:34:b3:f4:a8:a7:83:5f: c6:9d:27:20:d7:f8:d0:87:5b:3b:d8:88:a9:c3:83:13:07:34: af:38:b3:a7:ec:8b:81:56:a3:e8:a5:db:64:80:d6:fc:ce:c6: 6c:0c:29:53:dd:fb:52:0e:cb:30:13:54:1e:12:39:53:17:e2: 31:19:0d:83:2d:9e:8e:8d:fe:fe:b5:c6:8f:84:78:21:d7:45: 43:73:f7:c1:b7:47:2a:39:65:84:46:17:68:d5:e2:8b:9b:28: 83:e6:68:07:58:46:79:1c:e2:9c:42:04:28:8f:db:32:07:37: 1c:35:a4:b7:ed:ae:b3:59:e3:96:77:c3:b2:d2:07:6d:60:b6: ee:c0:d7:d8:1f:19:70:63:ea:75:84:20:04:07:27:fa:d4:72: 7e:48:02:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwAUiz7hoC4NoCi/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWFmOWMyNTAtZTUyZi00NDc5LTk5YTUtODgwYTNlMWI4 YzJhMB4XDTI1MTEyNzE4MDAwOFoXDTI1MTEyOTE4MDAwMFowLzEtMCsGA1UEAxMk YTg5M2RiMmMtYzJhZC00YWRiLTkzMWEtZWYwZTYyZjJiZjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hz31hNl+quG2wfXfSQFmQ+0Gm+ev4jgDcT1 wcPtw6RHzdu+KmB6m5EacPocfEdkvvOdv8VulTuMvrbJv357Xlk2Jxuv1YEU6mMb 5dx+zcjqp2yBAKG+iL3e3RoGVaMKmEVOFto9X5SVAIOWh7XEBq4CpwPcwwBU+98P fTuwN1awc06Y6KPH8C8UfiPm3LMvjcDXPmtgaj+ho5D5hQQxkMDPZ/t6UomECQKK LT2dVBopSIeIJN7gs9G3pU/kaxM1/43Vm6XZTDxyhEuFUO3yd4tF82RXbSBXIDBg SGumxtsKnymW/hNwW7frVJzPGX4emR7hFzuxrUfFagRXbqhVZwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMBWoQ4SyxM3PLhLEc+1U7feuD+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYWY5 YzI1MC1lNTJmLTQ0NzktOTlhNS04ODBhM2UxYjhjMmEvZWFmOWMyNTAtZTUyZi00 NDc5LTk5YTUtODgwYTNlMWI4YzJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZWFmOWMyNTAtZTUyZi00NDc5LTk5 YTUtODgwYTNlMWI4YzJhL2VhZjljMjUwLWU1MmYtNDQ3OS05OWE1LTg4MGEzZTFi OGMyYS5jcmwwHwYDVR0jBBgwFoAUBp6AkQVoEnVvqTOe9aocz8FhOLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9lYWY5YzI1MC1lNTJmLTQ0NzktOTlhNS04ODBh M2UxYjhjMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCF8q1MtIpPya1noidIj2WE vfCEqDp8KGyraEcrqC4RicLUw/weWtCE7C2HsKrUX3s+X3gPLjSgfuaSet/5qp1r hUTnGoxLM0ucm7YF47uQJhp8KwIIhinqohxj1MabbFq9oU4wTzSz9King1/GnScg 1/jQh1s72Iipw4MTBzSvOLOn7IuBVqPopdtkgNb8zsZsDClT3ftSDsswE1QeEjlT F+IxGQ2DLZ6Ojf7+tcaPhHgh10VDc/fBt0cqOWWERhdo1eKLmyiD5mgHWEZ5HOKc QgQoj9syBzccNaS37a6zWeOWd8Oy0gdtYLbuwNfYHxlwY+p1hCAEByf61HJ+SAIC -----END CERTIFICATE-----Generated at Fri Nov 28 06:47:36 2025 by rpki-client