This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft
File: 9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft (raw, json)
Hash identifier: xE0wvjGcUNXqC6CjKFjQtL7GtBz7RPr/UGSQn/Uv4Ns=
Subject key identifier: BA:57:37:50:D8:80:BD:81:32:F2:4D:25:DC:AE:BE:0C:48:75:4A:24
Authority key identifier: C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64
Certificate issuer: /CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c
Certificate serial: 010D0C9F4328584BF80FDB532F9DB6E013569000
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft
Manifest number: 010D0C9F43285849304541A41E84B317D54A5C0C
Signing time: Mon 24 Nov 2025 19:00:03 +0000
Manifest this update: Mon 24 Nov 2025 19:00:03 +0000
Manifest next update: Wed 26 Nov 2025 19:00:00 +0000
Files and hashes: 1: 43f0c32a-4c18-3924-b3cc-013a54cd1812.roa (hash: Tq/vsVWAEqpRimKQpGweF8pYKfKMeqAfx5+JGEY3lsw=)
2: 9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl (hash: /nB3DNDROkogg7RafOjnXw3vDLcTj3a+CxnVmgDicPA=)
3: c5348b71-f872-3312-b8b7-af9e5854fe26.roa (hash: S189RK8YmQ60pe8W6Ex+0ggnOHjr980xp7KQH9aiPZw=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:f8:0f:db:53:2f:9d:b6:e0:13:56:90:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b434aa6-b68f-41e7-8d4b-9c831255f11c
Validity
Not Before: Nov 24 19:00:03 2025 GMT
Not After : Nov 26 19:00:00 2025 GMT
Subject: CN=cc7b7b36-2a2b-4186-b00f-3342cc5adf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:9c:bf:60:19:6f:07:f0:e9:a8:41:d8:e8:
4a:c3:0b:ff:b4:14:8e:54:83:c0:ed:3d:a6:24:1e:
95:c8:17:2b:c4:46:37:f6:d5:c0:ed:17:f2:1f:6c:
11:05:ac:15:c8:6c:81:97:33:f4:9a:41:8e:9b:1f:
ed:1c:50:0e:ea:14:ef:77:c5:79:68:1e:fe:a7:02:
01:44:9d:73:67:15:45:d4:35:d8:e3:e5:07:7b:6c:
57:4c:e5:30:8e:2e:4d:36:94:2b:5d:11:6b:95:72:
5f:f8:c3:7a:bc:7e:9a:39:34:9e:7d:8c:5c:fd:00:
22:99:6e:f2:d0:db:26:bb:87:e5:4e:7c:b0:22:d7:
b0:9d:2e:25:c3:9f:0d:f2:3a:ea:31:84:a9:ea:d1:
6f:1f:80:5f:18:77:5f:bf:f9:a1:2c:30:0c:59:20:
79:74:27:65:b2:1c:6e:3a:c0:bd:01:a5:90:9d:8f:
e8:95:43:0a:c1:24:be:3d:11:f2:43:6c:a4:ef:3c:
fd:f3:f4:67:4a:a6:e6:fd:1a:b8:3d:cd:84:b8:a6:
b4:8a:ff:e8:9e:1d:4e:4c:d8:3e:de:a1:94:04:75:
3c:3e:a2:88:ed:10:f1:a3:17:57:93:92:98:e9:55:
84:16:10:e4:89:ea:84:45:f2:45:ef:62:26:75:42:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:57:37:50:D8:80:BD:81:32:F2:4D:25:DC:AE:BE:0C:48:75:4A:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c/9b434aa6-b68f-41e7-8d4b-9c831255f11c.crl
X509v3 Authority Key Identifier:
keyid:C4:4B:74:74:83:CC:98:7A:FF:B0:14:84:B3:D8:7A:74:6D:1F:2C:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9b434aa6-b68f-41e7-8d4b-9c831255f11c.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:0b:5e:54:30:80:8b:45:3d:7c:ef:28:bd:73:ea:8f:72:1a:
a5:ff:fe:f2:61:26:e2:2a:75:14:9e:e9:50:14:45:f9:06:28:
49:d7:ae:62:5a:56:5e:ce:a4:3e:b9:11:bb:53:66:12:45:d6:
49:48:9e:26:fd:49:42:a6:1b:37:46:d3:14:20:97:ac:ba:6d:
31:fc:2f:93:dd:ad:f3:dc:3b:08:15:a7:16:da:9a:d8:4e:57:
21:fb:3e:ea:1c:e3:41:be:61:6e:b4:99:49:1f:b9:f0:dd:2e:
d8:d9:48:92:c9:ed:13:1e:61:ad:62:ac:4f:3d:27:d9:23:50:
d9:24:35:41:76:f1:63:f6:d2:9e:26:6d:4b:9f:27:16:94:3e:
ec:73:96:a1:2f:03:b4:4d:a4:dc:f3:69:62:d8:9a:05:18:5c:
63:19:3f:42:ee:93:e7:5d:8f:b4:54:19:9d:2e:32:c2:70:6a:
60:80:6e:bd:a0:07:f9:10:3a:9e:19:af:df:e8:ae:b1:b8:31:
ce:24:37:d6:a7:cf:de:82:6c:54:07:7f:10:da:d6:e6:98:01:
98:08:3c:b5:b9:2d:fd:37:c7:4d:98:f0:5b:d9:ff:cf:5f:21:
86:0c:2e:2b:dc:74:15:dd:d6:ac:07:d4:f7:0e:2e:f2:b6:24:
d8:09:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 06:30:51 2025 by rpki-client