This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.mft File: f4b23dbc-6332-4e4e-aa8e-73a6064f441b.mft (raw, json) Hash identifier: /+mH0q2TxSvO25tPToypKnS7MRbMOFhxlpaHvYiqEhw= Subject key identifier: B2:6D:AF:E8:17:C1:76:36:85:3B:8B:2C:D0:17:33:B7:75:30:7C:C8 Authority key identifier: A8:1F:83:9E:F0:ED:8A:7E:C8:C7:54:C4:CE:35:7B:0C:3E:FB:C0:50 Certificate issuer: /CN=f4b23dbc-6332-4e4e-aa8e-73a6064f441b Certificate serial: 010D0C9F4328584C00109CE2849A9ED18A6F0AE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.mft Manifest number: 010D0C9F4328584BFF8D93EF363258B317721F83 Signing time: Thu 27 Nov 2025 15:48:03 +0000 Manifest this update: Thu 27 Nov 2025 15:48:03 +0000 Manifest next update: Sun 30 Nov 2025 11:00:00 +0000 Files and hashes: 1: 79678f13-df9e-31b4-b462-414b757f5b41.roa (hash: UaJyzK4qFbaZEHp8O3rtRPypLK1LPJdOJhNuGs15E8M=) 2: a324f861-b798-36cc-8f4b-273181ca7324.roa (hash: cYR4D75v2YqWGL0LPDhYpK2CEHgdHBD6Xuqh8yOhJb8=) 3: f4b23dbc-6332-4e4e-aa8e-73a6064f441b.crl (hash: n63DVQK5AtP9Xo12LbeZ8MTkLDYLUeL17qQoWutwnis=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:00:10:9c:e2:84:9a:9e:d1:8a:6f:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b23dbc-6332-4e4e-aa8e-73a6064f441b Validity Not Before: Nov 27 15:48:03 2025 GMT Not After : Nov 30 11:00:00 2025 GMT Subject: CN=63dad35c-6d03-4dc4-a081-c274a2aa639e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:9f:30:3a:1d:da:2d:87:a2:9f:60:cb:2b: 10:ac:a3:4f:6c:95:3e:aa:9d:3f:18:81:72:90:e2: 1e:2a:66:d3:18:ec:a7:43:7a:9e:9e:95:87:eb:18: de:c0:c8:cc:56:41:87:3d:80:ab:07:fc:f4:f5:df: 6e:00:c4:cc:23:b5:50:52:88:45:ad:01:f6:a5:a6: 3e:4d:f6:54:2a:aa:b2:ad:84:22:13:11:18:06:6e: 24:20:75:f2:92:c2:54:f4:69:28:04:4b:20:96:2e: ac:b8:6a:86:0c:4c:62:94:4b:11:ad:22:42:db:8b: 6a:04:0c:fb:bc:75:fa:49:75:73:84:f5:91:22:40: 0d:47:eb:f0:49:54:35:3b:bc:e0:d2:55:9f:5f:98: 81:92:70:b2:f5:0d:f8:74:81:12:3c:24:5c:84:34: 5b:56:92:73:e9:da:ba:50:5c:6f:a1:e6:8a:fe:16: 71:54:bb:29:5f:ce:07:45:4e:f7:d9:c5:54:97:3f: dd:8e:f7:64:ff:c0:d0:5a:c5:6e:53:7f:e5:2d:a5: 2e:03:57:69:26:cc:47:b1:9a:61:e1:5e:8f:e0:7e: c2:5c:4d:11:f5:3a:7c:9e:6f:6e:b8:a6:fa:6c:97: 38:32:91:ba:ae:4c:d3:7b:85:b0:28:a2:4d:c6:1c: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:6D:AF:E8:17:C1:76:36:85:3B:8B:2C:D0:17:33:B7:75:30:7C:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.crl X509v3 Authority Key Identifier: keyid:A8:1F:83:9E:F0:ED:8A:7E:C8:C7:54:C4:CE:35:7B:0C:3E:FB:C0:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f4b23dbc-6332-4e4e-aa8e-73a6064f441b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:bf:8a:a1:ea:c9:53:73:80:45:00:66:1d:51:ce:d0:4c:9f: a6:19:22:62:de:0b:55:2c:33:9e:0a:2e:c2:61:60:04:d4:70: 73:90:ec:66:f2:d0:6a:5d:81:c7:f8:2a:60:31:56:0a:2a:af: 01:fc:05:b1:c3:6c:84:0f:9e:32:d9:d8:34:63:5a:c7:17:5d: 31:b7:df:78:ca:19:75:33:ea:14:0d:bd:07:87:dd:7e:ec:36: ed:60:2b:37:c6:4d:c9:69:30:25:f4:a4:cb:3c:00:69:ca:b9: c0:0f:20:61:38:38:d8:41:52:af:23:d7:64:45:7d:68:16:f3: 70:38:a8:a9:2c:94:54:11:fe:b6:b2:96:6f:bd:ad:8d:4e:b0: 5d:a4:16:c9:6a:0c:7c:4f:b9:c5:29:27:91:73:38:6c:b7:ef: 01:7c:7e:40:1c:5f:95:94:35:5d:7e:ac:98:3f:53:db:c4:52: d8:2f:e4:90:e8:f4:9d:58:f4:41:41:31:2c:fd:9c:fe:b3:d9: 82:bb:be:5f:ab:02:a8:19:92:55:a3:11:58:04:ee:5b:52:f0: 1a:5e:ab:7f:fe:46:ff:9b:4a:08:b9:91:6b:ac:49:93:e5:bf: 14:b1:5d:2f:88:1e:0e:54:2b:a1:06:9e:a2:18:c6:6c:30:f3: 56:0a:74:55 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwAEJzihJqe0YpvCuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRiMjNkYmMtNjMzMi00ZTRlLWFhOGUtNzNhNjA2NGY0 NDFiMB4XDTI1MTEyNzE1NDgwM1oXDTI1MTEzMDExMDAwMFowLzEtMCsGA1UEAxMk NjNkYWQzNWMtNmQwMy00ZGM0LWEwODEtYzI3NGEyYWE2MzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEefMDod2i2Hop9gyysQrKNPbJU+qp0/GIFy kOIeKmbTGOynQ3qenpWH6xjewMjMVkGHPYCrB/z09d9uAMTMI7VQUohFrQH2paY+ TfZUKqqyrYQiExEYBm4kIHXyksJU9GkoBEsgli6suGqGDExilEsRrSJC24tqBAz7 vHX6SXVzhPWRIkANR+vwSVQ1O7zg0lWfX5iBknCy9Q34dIESPCRchDRbVpJz6dq6 UFxvoeaK/hZxVLspX84HRU732cVUlz/djvdk/8DQWsVuU3/lLaUuA1dpJsxHsZph 4V6P4H7CXE0R9Tp8nm9uuKb6bJc4MpG6rkzTe4WwKKJNxhz+FQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLJtr+gXwXY2hTuLLNAXM7d1MHzIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNGIy M2RiYy02MzMyLTRlNGUtYWE4ZS03M2E2MDY0ZjQ0MWIvZjRiMjNkYmMtNjMzMi00 ZTRlLWFhOGUtNzNhNjA2NGY0NDFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZjRiMjNkYmMtNjMzMi00ZTRlLWFh OGUtNzNhNjA2NGY0NDFiL2Y0YjIzZGJjLTYzMzItNGU0ZS1hYThlLTczYTYwNjRm NDQxYi5jcmwwHwYDVR0jBBgwFoAUqB+DnvDtin7Ix1TEzjV7DD77wFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mNGIyM2RiYy02MzMyLTRlNGUtYWE4ZS03M2E2 MDY0ZjQ0MWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNv4qh6slTc4BFAGYdUc7Q TJ+mGSJi3gtVLDOeCi7CYWAE1HBzkOxm8tBqXYHH+CpgMVYKKq8B/AWxw2yED54y 2dg0Y1rHF10xt994yhl1M+oUDb0Hh91+7DbtYCs3xk3JaTAl9KTLPABpyrnADyBh ODjYQVKvI9dkRX1oFvNwOKipLJRUEf62spZvva2NTrBdpBbJagx8T7nFKSeRczhs t+8BfH5AHF+VlDVdfqyYP1PbxFLYL+SQ6PSdWPRBQTEs/Zz+s9mCu75fqwKoGZJV oxFYBO5bUvAaXqt//kb/m0oIuZFrrEmT5b8UsV0viB4OVCuhBp6iGMZsMPNWCnRV -----END CERTIFICATE-----Generated at Fri Nov 28 06:40:27 2025 by rpki-client