This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft
File: 32e58881-6422-4e0d-9578-7c256d9f70bc.mft (raw, json)
Hash identifier: 00XN7m/TFGPB37sId8xr5TEzfW7E6LASztFpZO2dIF8=
Subject key identifier: 25:9C:B0:2F:12:9D:94:C7:62:E5:AD:98:30:92:E1:3F:CB:27:F4:AB
Authority key identifier: F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF
Certificate issuer: /CN=32e58881-6422-4e0d-9578-7c256d9f70bc
Certificate serial: 010D0C9F4328584BF7F21D94ACE77B6D18B79E80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft
Manifest number: 010D0C9F43285847FFC90AF1745577B0B130B16E
Signing time: Mon 24 Nov 2025 18:00:08 +0000
Manifest this update: Mon 24 Nov 2025 18:00:08 +0000
Manifest next update: Thu 27 Nov 2025 18:00:00 +0000
Files and hashes: 1: 32e58881-6422-4e0d-9578-7c256d9f70bc.crl (hash: wBtuPcxepFwO2/TMNco3bJf+q0bvUKLY3STVs6KzObM=)
2: 3a6e75a1-c9c1-3ce8-8709-6758cfa1eada.roa (hash: 9k79BFR3x3GH1aLK6zjjE2kMc2APJbRns6vyTJVPAvA=)
3: 9afff874-6a4f-331a-93da-b870000569c0.roa (hash: xjhQJaYk9N8i8AEZaBidvayfqRehSmh7IEv1ZbTlrJg=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f7:f2:1d:94:ac:e7:7b:6d:18:b7:9e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e58881-6422-4e0d-9578-7c256d9f70bc
Validity
Not Before: Nov 24 18:00:08 2025 GMT
Not After : Nov 27 18:00:00 2025 GMT
Subject: CN=24a7d12f-d4c5-4362-9070-2cc06c5b24e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:75:9b:f3:be:85:75:16:d4:fe:76:90:46:14:
df:6f:86:04:1c:f1:5b:db:85:28:61:93:7e:f9:c3:
41:08:24:bb:35:c7:cb:54:3d:d2:d0:fa:b2:bf:5f:
05:fc:81:75:dc:a1:6d:70:98:1c:c6:b0:7f:e3:98:
ad:75:25:a9:8c:ae:b0:8d:69:10:15:bb:55:8f:67:
79:8d:42:53:81:26:21:1d:ea:8f:96:b2:13:57:05:
2d:05:11:d2:5d:d6:29:fb:dc:fc:4e:16:84:7a:76:
9e:a4:d0:7b:78:bb:22:57:2e:e0:10:41:d4:8b:0e:
75:1b:b3:1f:6f:ac:d3:1d:d6:df:38:3b:df:0b:78:
af:20:65:f5:3c:d3:f0:5b:83:e4:ed:cb:cc:da:e9:
24:cc:9b:50:64:7e:14:b8:97:83:94:b2:7a:df:d0:
25:89:64:98:fd:7a:9c:b3:ae:a6:52:35:b4:73:60:
31:38:64:ab:5f:16:46:b9:bf:06:c1:ba:12:68:d0:
73:4d:c4:f6:c1:2e:3b:74:bd:53:82:96:7f:34:27:
19:a6:cc:ea:73:c2:3d:fb:ab:b5:b0:88:bc:c0:eb:
1d:78:2f:a1:d8:44:57:8b:ee:06:e1:f3:bc:27:b3:
a2:e0:aa:76:f6:1c:34:09:42:8d:66:78:23:41:56:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9C:B0:2F:12:9D:94:C7:62:E5:AD:98:30:92:E1:3F:CB:27:F4:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc/32e58881-6422-4e0d-9578-7c256d9f70bc.crl
X509v3 Authority Key Identifier:
keyid:F3:7A:EB:F9:30:D5:DF:96:9C:79:22:51:D4:7D:4C:70:35:CC:ED:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/32e58881-6422-4e0d-9578-7c256d9f70bc.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:9f:95:f8:0f:2b:12:f2:c3:cd:4d:77:bb:fa:dd:9c:e9:18:
1f:05:d0:8d:8f:2b:30:87:41:dc:bd:9e:5a:eb:b9:f4:6c:c0:
6f:58:a9:54:87:22:df:50:99:2a:f0:0c:81:d1:34:b4:18:d5:
04:dc:3e:09:7a:e9:6c:69:71:53:f7:46:18:66:6c:29:8f:c5:
b9:5f:79:16:da:fd:54:b8:4a:bd:76:ec:ad:ce:85:18:e2:8e:
d7:0d:be:18:5c:d7:34:9e:92:2c:b1:19:56:0b:4d:f1:25:eb:
b9:a0:a2:7f:d0:c0:d3:f7:f7:13:a8:c4:5a:7f:61:46:9f:8c:
a6:92:c1:bb:5f:44:34:be:9a:df:1b:67:46:a6:1c:b3:48:c9:
36:ee:2c:ad:f4:7b:49:bd:7a:2a:3d:56:1e:16:9d:2c:b4:46:
78:9c:34:e3:0e:bc:45:a0:51:6f:ea:1f:56:eb:e1:0d:d0:26:
d4:30:bf:f8:67:64:2d:b3:72:80:8b:25:7f:76:7f:13:c0:45:
27:7f:bc:f1:c7:9f:73:6d:81:37:cd:87:18:8b:de:84:54:a3:
fc:c5:6d:c7:df:18:48:ab:64:cf:eb:1f:8e:2e:09:91:ac:96:
5f:da:a3:6f:a5:63:0a:ba:cd:60:95:2b:63:d0:e5:79:72:6f:
de:61:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 08:31:56 2025 by rpki-client