This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft File: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft (raw, json) Hash identifier: vaX83ISWJ2MrENR8iD0jdoAI6bqxVcOQ4786I5c/Wp0= Subject key identifier: 79:38:39:8E:05:28:37:49:59:D6:4A:0C:BD:53:86:E5:1D:32:60:67 Authority key identifier: 47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 Certificate issuer: /CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Certificate serial: 010D0C9F4328584BF00A220B557297045AA51DC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft Manifest number: 010D0C9F4328584B728422C8F4B1EE7ECA7B0AAE Signing time: Fri 21 Nov 2025 22:02:03 +0000 Manifest this update: Fri 21 Nov 2025 22:02:03 +0000 Manifest next update: Sun 23 Nov 2025 22:00:00 +0000 Files and hashes: 1: 1c8fca22-3c93-3eac-8f91-cf7187bd2870.roa (hash: 0q+0xLacODrOIfHkXqHz9nra1FOYoK/t4WZdGuM3XkU=) 2: 21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl (hash: DnR4w/YqBNtVji2GLrwFQn1eh9MlHJBI935x67g7l3k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:0a:22:0b:55:72:97:04:5a:a5:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a20ad9-a848-4d0d-a119-3df5d6dbcb1f Validity Not Before: Nov 21 22:02:03 2025 GMT Not After : Nov 23 22:00:00 2025 GMT Subject: CN=b3a96615-57bf-4381-b88d-3f0db1b319c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:6e:e7:f6:31:e6:b3:90:38:49:66:70:47: d9:ea:19:df:e5:b9:50:5c:90:fd:09:d7:89:9a:fa: 95:11:cf:3c:fc:86:eb:a2:33:b9:e1:41:79:a5:e7: 70:1f:53:b8:04:a6:17:69:5b:7f:48:d1:38:8d:9f: ae:e9:3f:fa:3c:15:fd:82:88:5a:66:af:33:22:cf: 3a:c2:1f:f4:b1:4e:d2:5f:18:61:02:c9:9b:25:7c: 20:aa:5f:e6:19:c3:f8:15:27:f9:b9:51:3a:bf:74: 6f:f4:97:28:12:03:ac:f6:2a:3a:13:6a:fc:c7:3d: f3:03:a4:1b:81:0f:a4:d5:18:b4:18:9f:86:72:2b: 60:f5:02:8d:37:23:9f:ab:6f:3e:64:59:f7:c3:c7: a2:0e:ae:c6:8d:7c:a6:62:e7:52:15:f7:27:d5:d8: 22:b4:22:e6:31:3f:67:f4:a1:1e:96:f9:fd:f3:77: 11:b2:59:e1:99:f0:35:72:e5:62:66:9f:b3:89:bc: cf:1f:e7:04:64:77:33:0a:1a:b6:ef:bf:0a:4b:82: 45:a6:b2:8b:1e:af:24:8a:45:31:e8:87:1b:29:e8: 69:c4:9b:1c:00:04:d7:5a:c1:62:3a:3f:aa:dd:25: 31:5c:e6:13:2e:61:06:96:c9:55:08:98:1e:32:6f: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:38:39:8E:05:28:37:49:59:D6:4A:0C:BD:53:86:E5:1D:32:60:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.crl X509v3 Authority Key Identifier: keyid:47:FE:E8:D0:1C:07:88:35:99:C5:C2:30:C7:72:08:87:D6:02:7E:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a20ad9-a848-4d0d-a119-3df5d6dbcb1f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:95:12:ba:59:2a:34:4b:c8:e0:d2:dc:a3:19:ef:c5:a5:05: 91:c4:ae:74:15:4d:6c:1b:5f:d5:e8:b4:74:c1:ab:69:72:04: 49:fe:de:78:05:78:95:09:4d:f8:ae:87:d2:81:e2:0e:db:e5: 44:45:c1:60:71:0a:21:cd:98:49:54:3d:70:88:94:81:f2:15: f7:e6:be:d4:59:07:c8:28:27:2a:ad:ac:af:f3:d3:cd:a5:63: 11:6e:1e:11:92:fb:6b:c6:86:fe:63:42:59:f6:81:dc:e4:85: aa:70:6e:d4:c9:19:86:da:f6:ce:58:5b:89:02:49:5d:53:32: 23:be:da:d7:4b:51:17:a8:a9:c4:93:82:65:73:5a:a2:88:07: 58:8a:97:a6:22:41:7a:61:3c:d0:b7:fd:bc:52:07:4c:41:d4: fc:fa:cf:35:1d:55:d4:5e:db:6c:3b:dc:3d:16:f2:13:f7:c6: 8a:9f:5d:ee:2f:d7:31:4a:fc:48:ee:b9:70:f9:57:d9:cd:df: 2a:5a:16:74:5f:27:44:17:81:c7:f0:23:a4:36:70:76:98:65: eb:36:09:3e:ab:55:f2:33:12:54:c6:48:16:45:70:83:e5:56: ed:51:44:f8:7c:f8:a2:02:ba:18:81:c2:0f:2a:7f:51:dd:f6: 99:e0:a2:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvwCiILVXKXBFqlHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhMjBhZDktYTg0OC00ZDBkLWExMTktM2RmNWQ2ZGJj YjFmMB4XDTI1MTEyMTIyMDIwM1oXDTI1MTEyMzIyMDAwMFowLzEtMCsGA1UEAxMk YjNhOTY2MTUtNTdiZi00MzgxLWI4OGQtM2YwZGIxYjMxOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49xu5/Yx5rOQOElmcEfZ6hnf5blQXJD9CdeJ mvqVEc88/IbrojO54UF5pedwH1O4BKYXaVt/SNE4jZ+u6T/6PBX9gohaZq8zIs86 wh/0sU7SXxhhAsmbJXwgql/mGcP4FSf5uVE6v3Rv9JcoEgOs9io6E2r8xz3zA6Qb gQ+k1Ri0GJ+Gcitg9QKNNyOfq28+ZFn3w8eiDq7GjXymYudSFfcn1dgitCLmMT9n 9KEelvn983cRslnhmfA1cuViZp+zibzPH+cEZHczChq2778KS4JFprKLHq8kikUx 6IcbKehpxJscAATXWsFiOj+q3SUxXOYTLmEGlslVCJgeMm9KYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHk4OY4FKDdJWdZKDL1ThuUdMmBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEy MGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1ZDZkYmNiMWYvMjFhMjBhZDktYTg0OC00 ZDBkLWExMTktM2RmNWQ2ZGJjYjFmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMjBhZDktYTg0OC00ZDBkLWEx MTktM2RmNWQ2ZGJjYjFmLzIxYTIwYWQ5LWE4NDgtNGQwZC1hMTE5LTNkZjVkNmRi Y2IxZi5jcmwwHwYDVR0jBBgwFoAUR/7o0BwHiDWZxcIwx3IIh9YCfigwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEyMGFkOS1hODQ4LTRkMGQtYTExOS0zZGY1 ZDZkYmNiMWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBilRK6WSo0S8jg0tyjGe/F pQWRxK50FU1sG1/V6LR0watpcgRJ/t54BXiVCU34rofSgeIO2+VERcFgcQohzZhJ VD1wiJSB8hX35r7UWQfIKCcqrayv89PNpWMRbh4Rkvtrxob+Y0JZ9oHc5IWqcG7U yRmG2vbOWFuJAkldUzIjvtrXS1EXqKnEk4Jlc1qiiAdYipemIkF6YTzQt/28UgdM QdT8+s81HVXUXttsO9w9FvIT98aKn13uL9cxSvxI7rlw+VfZzd8qWhZ0XydEF4HH 8COkNnB2mGXrNgk+q1XyMxJUxkgWRXCD5VbtUUT4fPiiAroYgcIPKn9R3faZ4KI3 -----END CERTIFICATE-----Generated at Sat Nov 22 21:12:21 2025 by rpki-client