This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft File: cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft (raw, json) Hash identifier: KYTQMUcFFVXvg7PV5CqqBD6XZ9o0oHnWIIbam7vmPRw= Subject key identifier: 24:18:50:6B:B7:CC:A2:99:74:45:36:B1:6B:8A:2B:FC:95:A0:ED:7B Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F4328584BF27A807083F5CDAA4CEEFD40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft Manifest number: 010D0C9F43285843849180ACB8773179F478AE9A Signing time: Sat 22 Nov 2025 19:00:03 +0000 Manifest this update: Sat 22 Nov 2025 19:00:03 +0000 Manifest next update: Mon 24 Nov 2025 19:00:00 +0000 Files and hashes: 1: b8ed32fa-028c-3cfb-950c-51608cf30050.roa (hash: nF1U7XBHvTnJCDo4Vma4pdqEaxqf9RetX+YzCbXCgPY=) 2: cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl (hash: 2OLCJYvEVCj1KsNioK5dHoF1IKbPhIeCKijT4xuNdPY=) 3: d9f9acc9-c324-373e-a2c4-e4604f56d42e.roa (hash: D0ORzIrcHSW+Icii59RYmv4Rb+FbdttpudRI0jb6DIM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f2:7a:80:70:83:f5:cd:aa:4c:ee:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Nov 22 19:00:03 2025 GMT Not After : Nov 24 19:00:00 2025 GMT Subject: CN=5c558d24-bfa8-4065-aba1-5d22500180cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:34:68:f6:30:31:fb:0f:ea:a6:64:e6:2a: e8:d4:f7:01:d6:54:67:75:c1:f9:cf:d5:02:0b:4b: 2d:3f:fd:64:3d:e7:b2:f1:ef:bc:5b:d4:1a:11:15: ba:39:c7:17:83:c1:27:2a:ba:b8:5d:86:08:f0:d5: 84:6d:b6:03:83:eb:2a:8a:13:8a:6d:03:17:55:1c: f7:28:5f:eb:4f:53:02:e8:e9:e0:b7:16:6d:fb:a6: fd:66:43:b0:bf:8e:71:36:33:d9:24:70:d0:f0:ef: cc:79:ff:52:26:ff:31:a3:68:ed:1a:9d:c5:44:94: 62:07:90:2a:00:ae:16:ba:03:a9:92:ef:0d:95:a9: ee:6e:2a:a5:6e:bc:e9:7c:ff:5d:e2:bc:ce:48:ae: 8b:7c:0a:e1:d1:17:e6:1d:ab:45:1d:d7:8f:4a:dc: 42:4b:b1:ce:bc:cc:48:05:f9:6d:52:a6:ff:49:5f: da:5c:0f:fd:47:5d:91:49:c7:90:f6:e9:ed:e6:2a: e9:fe:2e:36:2a:f6:ad:f5:7d:32:f1:4c:2d:70:97: d6:03:a4:cb:92:88:d1:12:f3:4b:df:16:cb:23:c1: 87:69:6e:52:bd:02:0e:d0:49:0d:8f:d6:02:05:8f: 69:ac:ac:9f:29:e6:2a:1d:d1:4b:0d:88:97:86:48: e3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:18:50:6B:B7:CC:A2:99:74:45:36:B1:6B:8A:2B:FC:95:A0:ED:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:20:71:a2:fb:e4:ec:bc:29:e4:ba:2b:ce:2a:cd:f4:dd:5e: 58:fd:12:22:48:1b:05:34:0c:32:00:e4:59:9e:7a:80:6a:23: 6e:e0:c7:26:50:7b:52:f1:71:13:3e:e7:f0:52:51:a1:ae:64: ed:a3:53:82:79:da:4b:4b:05:d3:3f:48:ca:bc:29:06:16:c4: 00:0f:8d:79:e1:99:75:85:3a:a7:b8:1b:54:13:dc:7a:b2:7e: d5:dc:03:81:b1:45:1b:f3:cd:16:fc:61:6f:0a:52:59:5f:18: c8:1c:04:e0:54:90:20:74:e9:4c:9c:1d:d3:e8:c0:9d:33:49: 6a:43:58:32:c5:e6:29:3a:1a:d6:8a:17:a7:33:c5:42:d4:d9: 94:cd:ca:bc:d5:41:d5:2d:aa:5b:62:15:a0:61:18:6d:4e:50: 89:ac:21:19:bc:8d:dc:f5:eb:e7:75:44:1a:ff:9f:2c:7d:11: 1e:50:eb:12:ae:67:84:30:fc:29:18:ca:d4:6b:41:77:c0:b4: fd:01:74:5c:ed:ac:fc:ee:ab:d3:ed:bf:04:73:92:83:be:14: 2e:06:c5:18:53:fa:19:14:48:99:9b:d4:1e:cd:b4:14:70:a3: 2b:3e:e0:46:a3:11:3d:6c:85:f5:87:ae:fe:37:3f:53:81:06: fc:60:2b:36 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvyeoBwg/XNqkzu/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI1MTEyMjE5MDAwM1oXDTI1MTEyNDE5MDAwMFowLzEtMCsGA1UEAxMk NWM1NThkMjQtYmZhOC00MDY1LWFiYTEtNWQyMjUwMDE4MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNg0aPYwMfsP6qZk5iro1PcB1lRndcH5z9UC C0stP/1kPeey8e+8W9QaERW6OccXg8EnKrq4XYYI8NWEbbYDg+sqihOKbQMXVRz3 KF/rT1MC6OngtxZt+6b9ZkOwv45xNjPZJHDQ8O/Mef9SJv8xo2jtGp3FRJRiB5Aq AK4WugOpku8NlanubiqlbrzpfP9d4rzOSK6LfArh0RfmHatFHdePStxCS7HOvMxI BfltUqb/SV/aXA/9R12RSceQ9unt5irp/i42Kvat9X0y8UwtcJfWA6TLkojREvNL 3xbLI8GHaW5SvQIO0EkNj9YCBY9prKyfKeYqHdFLDYiXhkjjIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCQYUGu3zKKZdEU2sWuKK/yVoO17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvY2YzMTI5NmYtOGYyZi00 MjY4LTg1OTktNGM0N2QyNWNmY2YwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYIHGi++TsvCnkuivOKs30 3V5Y/RIiSBsFNAwyAORZnnqAaiNu4McmUHtS8XETPufwUlGhrmTto1OCedpLSwXT P0jKvCkGFsQAD4154Zl1hTqnuBtUE9x6sn7V3AOBsUUb880W/GFvClJZXxjIHATg VJAgdOlMnB3T6MCdM0lqQ1gyxeYpOhrWihenM8VC1NmUzcq81UHVLapbYhWgYRht TlCJrCEZvI3c9evndUQa/58sfREeUOsSrmeEMPwpGMrUa0F3wLT9AXRc7az87qvT 7b8Ec5KDvhQuBsUYU/oZFEiZm9QezbQUcKMrPuBGoxE9bIX1h67+Nz9TgQb8YCs2 -----END CERTIFICATE-----Generated at Sat Nov 22 21:12:19 2025 by rpki-client