This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft File: 9ffa2885-cbaa-44e8-babb-180936652b5c.mft (raw, json) Hash identifier: NOyIthk4nx5egCxclEIJuArwd6VVv3+fUczJJ0Uc6JY= Subject key identifier: 8C:2F:51:C9:87:B7:88:11:6C:9D:8C:81:51:44:98:45:94:EB:4D:1B Authority key identifier: 1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9 Certificate issuer: /CN=9ffa2885-cbaa-44e8-babb-180936652b5c Certificate serial: 010D0C9F4328584BF82DA1C5ADF3B10109A77400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft Manifest number: 010D0C9F432858487DA65FABD0C4C10191808145 Signing time: Mon 24 Nov 2025 20:00:03 +0000 Manifest this update: Mon 24 Nov 2025 20:00:03 +0000 Manifest next update: Wed 26 Nov 2025 20:00:00 +0000 Files and hashes: 1: 59de2d00-0639-3e99-91c7-22b2c69b6a0f.roa (hash: h9+mDniSJGOjosLWiGH8CNpHfpSDSw75DlucY7LwZlY=) 2: 9ffa2885-cbaa-44e8-babb-180936652b5c.crl (hash: gIqOVXC/owZlO0sUYTCQzW9923TgqVHu2wId+cLn7iM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:2d:a1:c5:ad:f3:b1:01:09:a7:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffa2885-cbaa-44e8-babb-180936652b5c Validity Not Before: Nov 24 20:00:03 2025 GMT Not After : Nov 26 20:00:00 2025 GMT Subject: CN=0d9347f2-36e7-4e58-b933-dd4a78c4160b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:2a:d9:4f:92:c3:3c:13:da:a7:a0:56:eb: 49:5c:60:eb:62:54:75:72:5a:d7:dd:be:b2:f3:41: 01:7e:f0:52:33:c0:b3:56:48:1f:53:b7:78:78:29: aa:11:23:37:74:0f:62:b2:c5:f8:40:60:0d:fe:8f: bd:98:32:5d:6b:4e:07:a3:bb:03:ae:81:a6:11:8a: 11:df:75:01:b8:41:d2:94:c5:41:5b:a7:cc:6a:5c: e5:ce:14:fe:98:0a:7e:dc:e8:c0:88:52:67:07:79: 28:d8:a6:7e:b4:e1:96:64:d6:a0:85:c3:4d:a9:51: 92:64:52:59:21:43:bd:4b:b7:66:a9:f7:f7:98:b4: 94:8f:a0:c5:e4:a8:74:c0:47:5a:83:be:f8:e4:4f: 81:ce:e7:64:71:47:e6:89:a9:cf:fa:45:5b:6f:07: b4:a3:60:a0:90:ee:d3:d6:1c:e1:6f:1a:83:91:e6: 1b:15:d7:ea:00:58:3b:41:2c:25:aa:4c:2e:2e:5a: 49:57:ab:38:e2:6b:51:7e:93:8e:cd:d8:68:5f:d0: 9f:18:13:17:09:77:e1:81:bf:27:93:d5:4e:af:1c: f6:5e:f9:6f:db:27:89:90:4c:f9:47:d1:55:e5:dc: 04:14:db:c7:1e:5c:97:d7:65:cf:4f:7f:5b:d9:f3: 0e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:2F:51:C9:87:B7:88:11:6C:9D:8C:81:51:44:98:45:94:EB:4D:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c/9ffa2885-cbaa-44e8-babb-180936652b5c.crl X509v3 Authority Key Identifier: keyid:1B:4F:10:EB:F9:FE:83:F4:AB:C9:86:D0:8E:57:63:BD:71:C6:0D:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9ffa2885-cbaa-44e8-babb-180936652b5c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8a:69:1b:15:0f:f7:a6:29:27:f9:45:c9:82:49:8a:98:04: f5:5c:6b:6a:5d:bc:b6:e4:12:f2:ab:39:d4:b1:03:64:06:ef: fe:a5:eb:f4:21:a6:d4:6e:6e:6e:28:0f:73:8b:b3:b9:8e:7b: e7:a0:af:25:b5:55:cf:13:e2:0c:21:67:bb:ea:54:da:02:82: d7:32:f9:74:e5:bc:26:cf:98:b1:62:3e:47:ff:f8:f2:ff:65: 51:b7:7f:79:af:c0:b9:b5:02:b9:59:d9:b5:06:77:ae:bb:44: 4a:69:f6:0e:ce:81:55:29:80:07:16:93:65:34:9a:9c:3f:ec: 75:e3:59:53:48:ba:7c:dc:10:09:f1:09:13:19:2a:4f:69:0b: c7:50:0e:b4:d9:76:2f:44:88:bc:78:5d:f4:cf:0b:57:48:95: 31:72:6e:61:eb:7e:d4:d7:19:d5:6f:bc:49:b7:8e:f2:4f:c7: a5:f1:5e:1e:4c:c1:e8:b1:11:54:65:b5:1f:00:91:29:d7:23: 8a:f1:ee:46:0b:be:fe:e5:64:12:4a:ae:00:2c:1f:3a:58:51: ed:36:4d:75:f6:8a:85:82:46:31:e3:aa:7c:36:0b:d4:98:e0: 1f:2d:97:86:86:c3:56:4b:85:b2:78:aa:b5:07:32:c0:58:fb: 14:79:22:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4LaHFrfOxAQmndAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZmYTI4ODUtY2JhYS00NGU4LWJhYmItMTgwOTM2NjUy YjVjMB4XDTI1MTEyNDIwMDAwM1oXDTI1MTEyNjIwMDAwMFowLzEtMCsGA1UEAxMk MGQ5MzQ3ZjItMzZlNy00ZTU4LWI5MzMtZGQ0YTc4YzQxNjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYwq2U+SwzwT2qegVutJXGDrYlR1clrX3b6y 80EBfvBSM8CzVkgfU7d4eCmqESM3dA9issX4QGAN/o+9mDJda04Ho7sDroGmEYoR 33UBuEHSlMVBW6fMalzlzhT+mAp+3OjAiFJnB3ko2KZ+tOGWZNaghcNNqVGSZFJZ IUO9S7dmqff3mLSUj6DF5Kh0wEdag7745E+BzudkcUfmianP+kVbbwe0o2CgkO7T 1hzhbxqDkeYbFdfqAFg7QSwlqkwuLlpJV6s44mtRfpOOzdhoX9CfGBMXCXfhgb8n k9VOrxz2Xvlv2yeJkEz5R9FV5dwEFNvHHlyX12XPT39b2fMO5QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIwvUcmHt4gRbJ2MgVFEmEWU600bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85ZmZh Mjg4NS1jYmFhLTQ0ZTgtYmFiYi0xODA5MzY2NTJiNWMvOWZmYTI4ODUtY2JhYS00 NGU4LWJhYmItMTgwOTM2NjUyYjVjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOWZmYTI4ODUtY2JhYS00NGU4LWJh YmItMTgwOTM2NjUyYjVjLzlmZmEyODg1LWNiYWEtNDRlOC1iYWJiLTE4MDkzNjY1 MmI1Yy5jcmwwHwYDVR0jBBgwFoAUG08Q6/n+g/SryYbQjldjvXHGDekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85ZmZhMjg4NS1jYmFhLTQ0ZTgtYmFiYi0xODA5 MzY2NTJiNWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXimkbFQ/3pikn+UXJgkmK mAT1XGtqXby25BLyqznUsQNkBu/+pev0IabUbm5uKA9zi7O5jnvnoK8ltVXPE+IM IWe76lTaAoLXMvl05bwmz5ixYj5H//jy/2VRt395r8C5tQK5Wdm1Bneuu0RKafYO zoFVKYAHFpNlNJqcP+x141lTSLp83BAJ8QkTGSpPaQvHUA602XYvRIi8eF30zwtX SJUxcm5h637U1xnVb7xJt47yT8el8V4eTMHosRFUZbUfAJEp1yOK8e5GC77+5WQS Sq4ALB86WFHtNk119oqFgkYx46p8NgvUmOAfLZeGhsNWS4WyeKq1BzLAWPsUeSJh -----END CERTIFICATE-----Generated at Tue Nov 25 08:17:23 2025 by rpki-client