This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa578c62-3673-41d9-8f1a-d32cf5689c9a/aa578c62-3673-41d9-8f1a-d32cf5689c9a.mft File: aa578c62-3673-41d9-8f1a-d32cf5689c9a.mft (raw, json) Hash identifier: 2XKgD9S/xuYva6mddl+LlZvOh/2G1bkj97gRtw4j47w= Subject key identifier: 96:9B:DA:1D:60:65:ED:6C:B4:87:4D:54:63:6A:47:9F:C7:B2:7D:42 Authority key identifier: D9:8E:21:14:EF:1E:56:27:20:09:EF:6F:C1:81:B2:41:44:D0:03:BB Certificate issuer: /CN=aa578c62-3673-41d9-8f1a-d32cf5689c9a Certificate serial: 010D0C9F4328584BF7D456AD93E5B2F3CC197500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa578c62-3673-41d9-8f1a-d32cf5689c9a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa578c62-3673-41d9-8f1a-d32cf5689c9a/aa578c62-3673-41d9-8f1a-d32cf5689c9a.mft Manifest number: 010D0C9F43285848F4E947712632FF7ED408FE54 Signing time: Mon 24 Nov 2025 17:00:08 +0000 Manifest this update: Mon 24 Nov 2025 17:00:08 +0000 Manifest next update: Thu 27 Nov 2025 17:00:00 +0000 Files and hashes: 1: aa578c62-3673-41d9-8f1a-d32cf5689c9a.crl (hash: JVKjuQ1IVApbtcscW7FS9KXybYQczYlKPCL0GlTA1yU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa578c62-3673-41d9-8f1a-d32cf5689c9a/aa578c62-3673-41d9-8f1a-d32cf5689c9a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa578c62-3673-41d9-8f1a-d32cf5689c9a/aa578c62-3673-41d9-8f1a-d32cf5689c9a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa578c62-3673-41d9-8f1a-d32cf5689c9a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:d4:56:ad:93:e5:b2:f3:cc:19:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa578c62-3673-41d9-8f1a-d32cf5689c9a Validity Not Before: Nov 24 17:00:08 2025 GMT Not After : Nov 27 17:00:00 2025 GMT Subject: CN=a52357e7-3d63-4cfa-8f1b-ae0ca065e673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:55:71:37:49:7d:29:8d:3f:7b:91:db:a9: 48:f8:1d:a5:49:de:18:c8:42:03:90:e2:66:8d:08: a1:89:7f:e9:5b:c0:70:46:3a:c0:9f:4a:9d:e1:8c: fa:fa:67:76:f7:22:7f:35:11:64:64:45:05:4d:3b: a1:72:0a:5a:55:25:3f:59:2b:11:60:99:74:a1:a2: d2:a4:2d:eb:d2:fe:38:3e:e4:0c:46:95:20:4b:00: 54:5b:72:6a:73:0a:e6:3c:d4:f9:75:85:44:f2:d3: 0e:d5:71:37:a3:0b:7d:76:fc:f4:d7:f8:91:fe:b5: 7e:85:8c:af:47:30:fe:b1:8a:dd:63:be:f4:6c:fe: 27:17:f5:7d:f2:6f:f0:0b:77:46:4e:90:8b:40:de: a7:d0:2d:54:36:08:8b:3d:5d:e5:53:6f:4c:1f:09: e9:48:63:bb:f4:78:9c:e3:bf:7f:f4:b2:26:47:6f: 1e:1a:0e:cf:57:fb:d1:32:63:a4:3e:51:1b:33:61: 30:0e:16:d8:5f:75:3f:55:1d:30:08:e8:cf:a9:b4: f4:ba:74:5b:78:82:cb:f5:a1:b9:ee:fe:74:de:49: 5c:3f:50:09:77:f0:d1:88:56:14:0a:ad:a0:af:81: 16:86:01:3c:8b:8d:7b:6e:30:d3:7e:ac:e8:24:b6: 2b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9B:DA:1D:60:65:ED:6C:B4:87:4D:54:63:6A:47:9F:C7:B2:7D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa578c62-3673-41d9-8f1a-d32cf5689c9a/aa578c62-3673-41d9-8f1a-d32cf5689c9a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa578c62-3673-41d9-8f1a-d32cf5689c9a/aa578c62-3673-41d9-8f1a-d32cf5689c9a.crl X509v3 Authority Key Identifier: keyid:D9:8E:21:14:EF:1E:56:27:20:09:EF:6F:C1:81:B2:41:44:D0:03:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa578c62-3673-41d9-8f1a-d32cf5689c9a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:92:5f:29:90:96:3f:a5:c0:e6:0d:ac:71:39:fb:32:1e:52: da:d4:15:08:49:56:f2:40:e5:58:be:80:8c:60:f6:6e:9e:96: 6b:75:ef:d8:b5:9b:f9:89:4e:f5:48:a2:29:8e:73:33:4c:f8: 6b:3a:90:88:c0:30:3a:6d:b6:9f:d4:e7:b2:1b:c5:4e:9c:24: 3f:b6:0b:d9:6b:2d:5d:2a:6e:97:15:55:2b:86:28:63:c3:e5: 59:ee:0c:7c:df:d6:3c:23:45:6a:9d:c7:03:ea:dc:a4:9e:d9: 16:ad:40:f0:80:71:71:55:6e:5b:f1:cd:e3:95:1c:7f:32:88: e6:d1:2e:61:42:6f:f0:dd:a3:83:2f:28:fa:10:35:9f:10:de: 37:bc:2a:3a:67:be:2d:90:a7:45:2a:9f:67:7e:d9:17:97:b8: 9e:39:81:4e:00:70:aa:96:6c:c8:17:00:0a:a5:e5:49:27:b2: 2d:41:89:86:32:4e:be:63:cc:6a:a7:95:b2:2c:ea:ae:ce:38: cc:35:e9:3c:be:2e:43:f9:68:12:ad:ee:90:18:c0:9c:04:89: 16:a6:20:0f:a0:7e:72:9f:c0:5a:ec:75:be:f8:3b:45:8a:88: dc:65:7e:b9:4f:5b:c1:68:7d:78:2a:47:f6:f3:a2:ea:fa:1d: 0d:7d:e0:fc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv31Fatk+Wy88wZdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE1NzhjNjItMzY3My00MWQ5LThmMWEtZDMyY2Y1Njg5 YzlhMB4XDTI1MTEyNDE3MDAwOFoXDTI1MTEyNzE3MDAwMFowLzEtMCsGA1UEAxMk YTUyMzU3ZTctM2Q2My00Y2ZhLThmMWItYWUwY2EwNjVlNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo79VcTdJfSmNP3uR26lI+B2lSd4YyEIDkOJm jQihiX/pW8BwRjrAn0qd4Yz6+md29yJ/NRFkZEUFTTuhcgpaVSU/WSsRYJl0oaLS pC3r0v44PuQMRpUgSwBUW3JqcwrmPNT5dYVE8tMO1XE3owt9dvz01/iR/rV+hYyv RzD+sYrdY770bP4nF/V98m/wC3dGTpCLQN6n0C1UNgiLPV3lU29MHwnpSGO79Hic 479/9LImR28eGg7PV/vRMmOkPlEbM2EwDhbYX3U/VR0wCOjPqbT0unRbeILL9aG5 7v503klcP1AJd/DRiFYUCq2gr4EWhgE8i417bjDTfqzoJLYruQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJab2h1gZe1stIdNVGNqR5/Hsn1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTU3 OGM2Mi0zNjczLTQxZDktOGYxYS1kMzJjZjU2ODljOWEvYWE1NzhjNjItMzY3My00 MWQ5LThmMWEtZDMyY2Y1Njg5YzlhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWE1NzhjNjItMzY3My00MWQ5LThm MWEtZDMyY2Y1Njg5YzlhL2FhNTc4YzYyLTM2NzMtNDFkOS04ZjFhLWQzMmNmNTY4 OWM5YS5jcmwwHwYDVR0jBBgwFoAU2Y4hFO8eVicgCe9vwYGyQUTQA7swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTU3OGM2Mi0zNjczLTQxZDktOGYxYS1kMzJj ZjU2ODljOWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbkl8pkJY/pcDmDaxxOfsy HlLa1BUISVbyQOVYvoCMYPZunpZrde/YtZv5iU71SKIpjnMzTPhrOpCIwDA6bbaf 1OeyG8VOnCQ/tgvZay1dKm6XFVUrhihjw+VZ7gx839Y8I0VqnccD6tykntkWrUDw gHFxVW5b8c3jlRx/Mojm0S5hQm/w3aODLyj6EDWfEN43vCo6Z74tkKdFKp9nftkX l7ieOYFOAHCqlmzIFwAKpeVJJ7ItQYmGMk6+Y8xqp5WyLOquzjjMNek8vi5D+WgS re6QGMCcBIkWpiAPoH5yn8Ba7HW++DtFiojcZX65T1vBaH14Kkf286Lq+h0NfeD8 -----END CERTIFICATE-----Generated at Tue Nov 25 06:34:58 2025 by rpki-client