This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft File: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft (raw, json) Hash identifier: NlasTmk+8utbOFPOJVLSyEmrepASlfnCPB9ZpDMlbJ8= Subject key identifier: 4D:6B:06:98:EA:A4:F0:C1:E3:40:13:91:35:49:88:68:72:D1:CF:E6 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F4328584BF7F2200FFF742CD38D306960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft Manifest number: 010D0C9F432858493B4550F98B85D16859A8BF42 Signing time: Mon 24 Nov 2025 18:00:08 +0000 Manifest this update: Mon 24 Nov 2025 18:00:08 +0000 Manifest next update: Wed 26 Nov 2025 18:00:00 +0000 Files and hashes: 1: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl (hash: 376c1LzNMklSwoKQ/jOUeIwKnctDRwE6m1pJJGcFwEg=) 2: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (hash: ZesMiu02dPAu6hTno0oIHi+KVGqLmYbzYiwUaNMtwBY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:f2:20:0f:ff:74:2c:d3:8d:30:69:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Nov 24 18:00:08 2025 GMT Not After : Nov 26 18:00:00 2025 GMT Subject: CN=975e3122-0aa1-49ce-8e33-01cb24967036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:29:fb:9e:a6:58:af:5a:bc:b5:6b:ba:ab:87: 47:fb:e3:a1:73:cf:d4:94:e2:19:02:6a:73:43:26: 3b:63:5f:78:c5:05:a4:ac:6d:2f:e1:3f:ce:11:0e: bc:6a:1a:61:4c:8a:b2:29:b0:2c:60:7c:a5:0b:d7: 88:54:cb:f6:f2:48:8a:29:20:b4:a8:c1:c6:7b:f0: b9:d5:d6:a6:45:58:9a:15:0d:63:48:2a:d6:3a:95: cd:40:06:91:62:2d:5f:92:61:b3:b1:a1:df:e4:88: dd:56:c8:52:22:df:e9:ba:79:00:e2:67:59:1c:6c: 82:9f:13:09:c0:3b:1d:e6:10:5e:00:13:a8:cf:81: 92:66:af:ae:07:70:4f:4a:4b:89:87:4b:86:7f:25: 3c:70:d2:a2:35:fc:5c:c9:b8:ab:18:13:1b:17:42: e0:ea:59:cb:b0:53:1f:ee:86:98:f9:f4:54:f0:6e: d3:ad:e2:d4:e3:50:e7:b2:0f:43:65:8b:f1:3b:49: 92:2f:6c:68:e9:70:d8:05:07:43:f1:ad:1a:76:7e: dd:d1:82:73:76:7f:df:fb:61:b7:7a:29:25:bc:93: ee:c8:7a:fc:e0:00:c0:c5:61:d2:3e:40:84:93:c5: fe:9c:5c:b1:a9:29:78:a6:ea:a5:3b:45:41:a8:2b: 1a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:06:98:EA:A4:F0:C1:E3:40:13:91:35:49:88:68:72:D1:CF:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:e6:4d:0d:88:4b:9f:ba:03:39:73:cf:c3:29:fe:45:7f:c6: 78:cd:6a:49:43:5a:83:d9:e4:77:bd:58:55:2e:dc:e7:96:fb: 59:6d:d1:16:2c:48:25:e3:82:93:d7:6d:47:8e:77:dc:d2:bd: 8b:f9:3f:0f:6b:b3:22:e5:37:6e:2b:b3:37:4e:4a:fd:ed:21: 53:5d:23:f0:d6:e3:96:59:59:f2:59:c8:eb:02:5d:a2:c6:fe: 75:6d:3a:20:34:f2:07:3c:26:9e:d9:b6:5a:56:f5:21:ef:d3: 19:02:84:0f:17:8a:7b:67:73:b0:86:55:62:88:5d:fd:87:3c: 9b:4e:bf:a0:d2:40:f6:22:bf:d3:b9:29:24:ae:d3:8a:bf:14: 8b:0b:af:a7:ce:0e:3b:b3:66:79:37:d7:ee:53:1b:5d:b7:46: 30:89:a2:9a:00:3b:b2:94:9a:c8:d5:4d:b8:a4:2d:a6:17:b5: c0:14:31:65:92:13:6b:e5:e0:95:70:6e:b1:ab:cc:13:5c:2b: fc:74:4f:c2:22:73:5a:fa:a6:ba:72:ac:31:d9:44:76:a8:51: fe:3a:bd:ea:af:7c:47:de:29:53:98:61:34:29:19:24:6d:36: 0c:61:75:1e:83:1a:c7:f0:09:7a:5d:70:bd:46:65:eb:5c:a3: 61:6e:f8:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv38iAP/3Qs040waWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI1MTEyNDE4MDAwOFoXDTI1MTEyNjE4MDAwMFowLzEtMCsGA1UEAxMk OTc1ZTMxMjItMGFhMS00OWNlLThlMzMtMDFjYjI0OTY3MDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCn7nqZYr1q8tWu6q4dH++Ohc8/UlOIZAmpz QyY7Y194xQWkrG0v4T/OEQ68ahphTIqyKbAsYHylC9eIVMv28kiKKSC0qMHGe/C5 1damRViaFQ1jSCrWOpXNQAaRYi1fkmGzsaHf5IjdVshSIt/punkA4mdZHGyCnxMJ wDsd5hBeABOoz4GSZq+uB3BPSkuJh0uGfyU8cNKiNfxcybirGBMbF0Lg6lnLsFMf 7oaY+fRU8G7TreLU41Dnsg9DZYvxO0mSL2xo6XDYBQdD8a0adn7d0YJzdn/f+2G3 eiklvJPuyHr84ADAxWHSPkCEk8X+nFyxqSl4puqlO0VBqCsaPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE1rBpjqpPDB40ATkTVJiGhy0c/mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvMzI3OGU3MDgtZDEyOC00 NzkwLWE4ZTMtMWUwZjRhMWE2ZjRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCf5k0NiEufugM5c8/DKf5F f8Z4zWpJQ1qD2eR3vVhVLtznlvtZbdEWLEgl44KT121Hjnfc0r2L+T8Pa7Mi5Tdu K7M3Tkr97SFTXSPw1uOWWVnyWcjrAl2ixv51bTogNPIHPCae2bZaVvUh79MZAoQP F4p7Z3OwhlViiF39hzybTr+g0kD2Ir/TuSkkrtOKvxSLC6+nzg47s2Z5N9fuUxtd t0YwiaKaADuylJrI1U24pC2mF7XAFDFlkhNr5eCVcG6xq8wTXCv8dE/CInNa+qa6 cqwx2UR2qFH+Or3qr3xH3ilTmGE0KRkkbTYMYXUegxrH8Al6XXC9RmXrXKNhbvgO -----END CERTIFICATE-----Generated at Tue Nov 25 06:33:30 2025 by rpki-client