This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft File: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft (raw, json) Hash identifier: +cmFzw3Meh0X3r6UlJBzfGOSBz1DxUKtj9QaJ24CL3Y= Subject key identifier: E6:F3:D4:BF:92:D0:C6:1B:AC:BE:1F:4D:DA:B1:0E:41:66:12:E8:22 Authority key identifier: AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE Certificate issuer: /CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Certificate serial: 010D0C9F4328584BF23EEC5370B599EB58A98700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft Manifest number: 010D0C9F43285843E05DB4B41D1D11863F6C3677 Signing time: Sat 22 Nov 2025 17:00:03 +0000 Manifest this update: Sat 22 Nov 2025 17:00:03 +0000 Manifest next update: Tue 25 Nov 2025 17:00:00 +0000 Files and hashes: 1: 4925d209-f003-3bb9-b12d-10cc44b06d40.roa (hash: 7Pwh8V6lyQ3WXEmS1Aw3cCBJxJv1Mf3adlnoNsMzjvc=) 2: dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl (hash: awUNfyAE/9WJE/EArvQzx8Hjv/jal43gXxidpt5PR0o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f2:3e:ec:53:70:b5:99:eb:58:a9:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2 Validity Not Before: Nov 22 17:00:03 2025 GMT Not After : Nov 25 17:00:00 2025 GMT Subject: CN=3253b60e-0c8c-49b7-9ba5-4aab9f3e5f63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:20:87:72:91:96:18:03:62:58:da:4b:c1:84: d7:bd:8f:42:4b:d0:5f:5d:0a:eb:25:d6:f6:40:d4: d6:b6:80:ea:be:c8:78:3a:78:52:48:2a:1e:86:5e: 0f:fc:33:e6:33:eb:df:09:30:55:8d:8c:92:9e:cc: ad:30:cc:eb:21:e3:01:2f:2e:a4:4d:28:d0:9a:bd: fd:cb:49:b6:bd:49:78:fd:c7:5a:04:25:89:c3:6d: c5:4f:2c:37:a9:a7:e7:d5:dd:74:65:b6:7a:c9:a5: 1b:79:36:a2:84:2e:bc:8e:b0:aa:b5:32:e5:d1:a6: 0b:af:eb:b0:97:cf:ed:ea:f9:59:1c:c7:16:7d:9a: ef:eb:03:21:3f:45:34:04:e9:37:53:ab:6d:54:66: 29:a7:07:35:81:2d:7e:d7:b0:4c:54:68:4b:d8:d0: 8a:8e:02:0e:94:10:ed:8b:db:2d:94:f4:8e:92:da: 9a:94:1f:c5:d5:a9:7b:06:58:3e:fb:9f:a4:88:d0: 02:e1:d5:b4:4c:eb:56:52:95:41:c7:97:8a:9e:15: d2:f6:c5:81:42:7f:45:ff:4e:c6:08:87:66:62:16: 27:6f:08:4f:ab:bb:58:8d:e4:f0:e1:33:e9:58:80: 75:f1:29:58:21:68:27:a7:f7:33:7b:87:d8:fa:52: 81:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F3:D4:BF:92:D0:C6:1B:AC:BE:1F:4D:DA:B1:0E:41:66:12:E8:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.crl X509v3 Authority Key Identifier: keyid:AF:F9:55:50:A5:C1:90:18:CE:5A:7D:78:32:56:3C:3A:0B:02:AD:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd0ff221-f0c4-4c54-96d9-5f3e0f16b8e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:6e:a1:46:9e:d4:a0:fc:34:3d:4b:a7:f2:0d:6d:0d:30:d2: 1e:ec:39:47:50:22:52:79:c3:dc:7a:52:39:77:aa:29:0c:ed: 6d:16:27:6c:cc:be:fc:ed:d2:89:52:2b:7a:86:a0:da:17:2d: 9d:76:9d:01:75:7e:8e:32:b0:5e:1c:9f:c1:77:c9:97:32:7b: ea:2d:bc:c2:41:e7:12:6b:67:2b:3f:87:08:94:fe:b7:84:09: 71:31:ce:26:84:35:a2:7c:8b:4f:c1:f5:21:70:18:4b:53:62: f8:09:8b:0c:2d:52:11:38:88:16:79:9c:53:f9:bc:6b:b4:29: f7:2c:4f:a1:f4:bd:67:5d:ab:c8:55:f3:09:d7:0d:72:33:cf: 2f:3f:34:0f:6e:b3:17:61:fc:45:45:a8:9d:5d:00:ee:e7:14: 41:36:5f:b5:3f:29:aa:ec:29:66:15:0e:ed:49:99:a8:89:c0: 01:39:3e:df:17:8a:2a:7a:98:d8:2c:84:5a:8f:1a:c9:4e:05: 86:c4:c7:8b:9a:ad:f0:9c:be:de:fe:e1:02:9d:db:1d:55:1f: 70:d5:eb:2d:a5:f1:05:9f:44:de:30:05:6b:00:38:a9:2f:e3: 38:d9:0f:ab:38:61:15:e2:64:b6:60:9d:66:b6:2f:18:ac:84: a3:af:d1:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvyPuxTcLWZ61iphwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQwZmYyMjEtZjBjNC00YzU0LTk2ZDktNWYzZTBmMTZi OGUyMB4XDTI1MTEyMjE3MDAwM1oXDTI1MTEyNTE3MDAwMFowLzEtMCsGA1UEAxMk MzI1M2I2MGUtMGM4Yy00OWI3LTliYTUtNGFhYjlmM2U1ZjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CCHcpGWGANiWNpLwYTXvY9CS9BfXQrrJdb2 QNTWtoDqvsh4OnhSSCoehl4P/DPmM+vfCTBVjYySnsytMMzrIeMBLy6kTSjQmr39 y0m2vUl4/cdaBCWJw23FTyw3qafn1d10ZbZ6yaUbeTaihC68jrCqtTLl0aYLr+uw l8/t6vlZHMcWfZrv6wMhP0U0BOk3U6ttVGYppwc1gS1+17BMVGhL2NCKjgIOlBDt i9stlPSOktqalB/F1al7Blg++5+kiNAC4dW0TOtWUpVBx5eKnhXS9sWBQn9F/07G CIdmYhYnbwhPq7tYjeTw4TPpWIB18SlYIWgnp/cze4fY+lKBNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFObz1L+S0MYbrL4fTdqxDkFmEugiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBm ZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNlMGYxNmI4ZTIvZGQwZmYyMjEtZjBjNC00 YzU0LTk2ZDktNWYzZTBmMTZiOGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQwZmYyMjEtZjBjNC00YzU0LTk2 ZDktNWYzZTBmMTZiOGUyL2RkMGZmMjIxLWYwYzQtNGM1NC05NmQ5LTVmM2UwZjE2 YjhlMi5jcmwwHwYDVR0jBBgwFoAUr/lVUKXBkBjOWn14MlY8OgsCrd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDBmZjIyMS1mMGM0LTRjNTQtOTZkOS01ZjNl MGYxNmI4ZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIbqFGntSg/DQ9S6fyDW0N MNIe7DlHUCJSecPcelI5d6opDO1tFidszL787dKJUit6hqDaFy2ddp0BdX6OMrBe HJ/Bd8mXMnvqLbzCQecSa2crP4cIlP63hAlxMc4mhDWifItPwfUhcBhLU2L4CYsM LVIROIgWeZxT+bxrtCn3LE+h9L1nXavIVfMJ1w1yM88vPzQPbrMXYfxFRaidXQDu 5xRBNl+1Pymq7ClmFQ7tSZmoicABOT7fF4oqepjYLIRajxrJTgWGxMeLmq3wnL7e /uECndsdVR9w1estpfEFn0TeMAVrADipL+M42Q+rOGEV4mS2YJ1mti8YrISjr9Fh -----END CERTIFICATE-----Generated at Sat Nov 22 21:16:28 2025 by rpki-client