This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.mft File: afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.mft (raw, json) Hash identifier: EVwkQdp5B73EDaaJqRb0ZP3DcqV/z3ncz6poS/6uiF4= Subject key identifier: B0:46:FB:C3:A2:F4:8A:50:86:7B:2A:14:90:A5:48:E6:80:DE:F6:97 Authority key identifier: AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0 Certificate issuer: /CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb Certificate serial: 010D0C9F4328584BF82DA3F5A9108EEA0A96B080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.mft Manifest number: 010D0C9F43285848A1FD2EBE9B1C5682F59C943D Signing time: Mon 24 Nov 2025 20:00:03 +0000 Manifest this update: Mon 24 Nov 2025 20:00:03 +0000 Manifest next update: Thu 27 Nov 2025 20:00:00 +0000 Files and hashes: 1: 1245f871-ebb3-3540-bbf3-87aec2004349.roa (hash: 4uEqUYwzzBHrEAVWJUBUy+Y2fleMt1I/wSZF6E6SJyo=) 2: a917fca9-ce27-3640-9fa5-0743e75ecab6.roa (hash: hJRYL6f/I3b8rVkOXmziupuISpe/pmqhXJWXMIWCml0=) 3: afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl (hash: /KRduWMuLpmuit+5/Zucrd9HhHUJVEI+srfh53e4ohc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:2d:a3:f5:a9:10:8e:ea:0a:96:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afcec77b-3d5a-4896-b9ed-b5b47b1bbadb Validity Not Before: Nov 24 20:00:03 2025 GMT Not After : Nov 27 20:00:00 2025 GMT Subject: CN=39573006-a72d-42dd-b132-c85d4a94665a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:68:c9:7d:c1:8d:17:82:a0:68:68:c1:3f:d1: c4:7a:cc:ab:b8:14:c4:4a:b9:7b:6c:0e:0e:82:cb: 52:ab:e0:1f:c7:9e:39:3d:04:2a:0d:50:01:12:d8: ed:9a:07:db:0b:c2:d0:d6:9a:7a:fb:cc:b0:fa:58: d0:db:bb:51:57:16:77:0f:9a:d5:22:48:5d:0b:99: 8f:88:c8:fe:bc:17:8a:d6:9e:5c:60:a7:91:c5:c6: 48:28:2a:4f:02:dc:c8:6b:24:28:fc:28:a9:3e:6c: 49:d7:b2:36:2e:e4:f3:76:8d:32:36:d3:17:ff:d8: 26:8b:78:6a:58:32:89:7d:62:cf:61:52:c7:05:4d: 46:aa:3a:89:26:bf:9c:90:00:ca:b7:65:a9:49:7e: 5a:80:67:2c:8d:20:c7:20:15:44:43:f0:24:27:e0: e9:a8:96:ac:91:cd:c8:93:d0:91:47:6f:e9:fd:02: ad:de:29:a9:99:c8:f1:8e:1d:47:f5:38:39:00:a7: e3:94:f9:24:75:30:67:4a:8c:d1:52:70:1f:d9:2d: 49:87:93:81:7f:1c:72:58:ff:da:3e:4c:67:c0:8a: e8:02:57:70:3b:99:b5:66:48:f5:75:cd:6c:34:ac: 04:a0:c1:51:54:b1:da:30:2b:81:aa:86:da:68:5d: cf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:46:FB:C3:A2:F4:8A:50:86:7B:2A:14:90:A5:48:E6:80:DE:F6:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.crl X509v3 Authority Key Identifier: keyid:AF:5C:52:31:D5:97:38:D7:F0:C9:EC:32:6C:81:F0:87:F3:FE:5D:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/afcec77b-3d5a-4896-b9ed-b5b47b1bbadb.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:68:8c:2e:57:4a:c7:c9:f7:75:d5:85:fc:76:ee:5a:67:2f: 32:81:d6:ad:4c:cd:85:be:aa:f5:b1:ec:bb:82:5d:26:9b:fb: 96:e1:03:7e:6f:b9:77:09:ce:26:01:06:39:89:c4:6e:f0:bc: 78:fb:58:0b:80:f7:aa:ec:62:b9:a0:4b:b0:f1:c3:e0:6b:1a: dd:91:3f:32:9c:5c:71:84:e2:ae:9d:0f:f9:df:6f:f6:82:19: 2f:ad:e0:75:d0:74:cb:df:d8:98:5d:e6:f9:b7:a0:85:58:59: 23:77:b8:71:70:bf:2c:2e:5d:b7:ea:6c:bd:42:f5:05:01:68: ca:03:0b:3e:0a:6f:54:d0:af:7c:07:18:1b:85:9f:1f:53:a9: 1d:0b:4b:ec:ff:e3:29:1f:7a:22:3d:3b:67:c5:48:c2:1e:63: 23:43:fc:04:e4:5f:f2:fd:98:42:df:2a:57:2f:e1:24:dd:28: de:7b:8b:cb:41:c6:17:ce:d3:39:f7:8d:37:65:2b:24:f5:1b: c7:99:aa:71:e8:e7:2b:cc:5d:32:ac:b2:82:9d:b8:67:b8:99: 24:18:77:7c:2f:02:76:c6:06:78:7f:4b:0e:97:ff:57:cd:9d: 14:7f:76:a6:bb:d4:f8:d1:59:46:1d:46:2e:62:eb:2a:d1:1a: 3c:37:1a:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4LaP1qRCO6gqWsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjZWM3N2ItM2Q1YS00ODk2LWI5ZWQtYjViNDdiMWJi YWRiMB4XDTI1MTEyNDIwMDAwM1oXDTI1MTEyNzIwMDAwMFowLzEtMCsGA1UEAxMk Mzk1NzMwMDYtYTcyZC00MmRkLWIxMzItYzg1ZDRhOTQ2NjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGjJfcGNF4KgaGjBP9HEesyruBTESrl7bA4O gstSq+Afx545PQQqDVABEtjtmgfbC8LQ1pp6+8yw+ljQ27tRVxZ3D5rVIkhdC5mP iMj+vBeK1p5cYKeRxcZIKCpPAtzIayQo/CipPmxJ17I2LuTzdo0yNtMX/9gmi3hq WDKJfWLPYVLHBU1GqjqJJr+ckADKt2WpSX5agGcsjSDHIBVEQ/AkJ+DpqJaskc3I k9CRR2/p/QKt3impmcjxjh1H9Tg5AKfjlPkkdTBnSozRUnAf2S1Jh5OBfxxyWP/a PkxnwIroAldwO5m1Zkj1dc1sNKwEoMFRVLHaMCuBqobaaF3PhwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLBG+8Oi9IpQhnsqFJClSOaA3vaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hZmNl Yzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0N2IxYmJhZGIvYWZjZWM3N2ItM2Q1YS00 ODk2LWI5ZWQtYjViNDdiMWJiYWRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWZjZWM3N2ItM2Q1YS00ODk2LWI5 ZWQtYjViNDdiMWJiYWRiL2FmY2VjNzdiLTNkNWEtNDg5Ni1iOWVkLWI1YjQ3YjFi YmFkYi5jcmwwHwYDVR0jBBgwFoAUr1xSMdWXONfwyewybIHwh/P+XfAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hZmNlYzc3Yi0zZDVhLTQ4OTYtYjllZC1iNWI0 N2IxYmJhZGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNaIwuV0rHyfd11YX8du5a Zy8ygdatTM2Fvqr1sey7gl0mm/uW4QN+b7l3Cc4mAQY5icRu8Lx4+1gLgPeq7GK5 oEuw8cPgaxrdkT8ynFxxhOKunQ/532/2ghkvreB10HTL39iYXeb5t6CFWFkjd7hx cL8sLl236my9QvUFAWjKAws+Cm9U0K98BxgbhZ8fU6kdC0vs/+MpH3oiPTtnxUjC HmMjQ/wE5F/y/ZhC3ypXL+Ek3Sjee4vLQcYXztM59403ZSsk9RvHmapx6OcrzF0y rLKCnbhnuJkkGHd8LwJ2xgZ4f0sOl/9XzZ0Uf3amu9T40VlGHUYuYusq0Ro8Nxqw -----END CERTIFICATE-----Generated at Tue Nov 25 06:32:16 2025 by rpki-client