This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft File: cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft (raw, json) Hash identifier: QYyGr91aj48FueeEJIPu+jPO/NCLtDm1WGhG6K4zLxE= Subject key identifier: 3A:23:35:D8:87:71:9B:FB:A3:6A:7F:32:A3:F6:C8:1E:0B:C3:86:C6 Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Certificate serial: 010D0C9F4328584BF869321C2F7DB7D3D309F7A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft Manifest number: 010D0C9F43285847FFF5B47570110AB43EE70A75 Signing time: Mon 24 Nov 2025 22:00:03 +0000 Manifest this update: Mon 24 Nov 2025 22:00:03 +0000 Manifest next update: Thu 27 Nov 2025 22:00:00 +0000 Files and hashes: 1: 0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa (hash: JGza6ui4LekbSMzBIORdV8A0xRK/vdvQyUnp1SqPkOo=) 2: 3f4559cd-55eb-3ee4-96a6-22d37db39638.roa (hash: SQizz8981Tz8/dwv7U6qGnXjfe+jD24uQ0tWBhi5/O8=) 3: cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl (hash: XGRYdpUYhLFCndtly1RWbpCyTlg7NY/GeVxsBOMJCl8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:69:32:1c:2f:7d:b7:d3:d3:09:f7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Validity Not Before: Nov 24 22:00:03 2025 GMT Not After : Nov 27 22:00:00 2025 GMT Subject: CN=65ba81d9-f485-4471-b01b-77a17ebd70a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:87:05:55:2a:c3:ca:30:8f:43:16:c7:99:bd: 1e:5f:26:3c:57:6f:9a:5f:d2:3d:e1:dc:55:bd:cd: 20:cc:4d:5c:fe:27:02:7e:af:7c:10:fe:d2:8e:14: a2:c1:93:48:e7:3c:9c:95:f2:ad:88:3d:ba:f2:a1: bd:bb:e6:65:14:7d:f0:30:8f:a9:61:b2:84:34:b7: 92:9c:d4:70:fc:2e:4d:60:7b:3d:86:13:df:fe:82: 70:3e:86:74:7f:2d:c3:18:6c:7b:46:ce:f9:d4:b6: 33:15:3a:1f:b8:d2:91:11:6d:63:cd:ef:54:be:37: 97:ac:82:4a:d4:ae:b9:d3:fa:85:b4:d9:32:97:15: 7c:78:fd:5d:77:21:0a:e2:32:b5:a1:64:27:da:6e: 91:e9:0d:30:7c:3f:64:0b:9d:20:77:3f:86:75:72: 44:f3:a5:b0:a9:c0:2d:cd:41:3d:3f:23:a9:82:de: a3:df:7f:44:ba:11:79:69:db:64:f7:d6:d0:b1:f5: ab:8a:31:0d:41:4e:90:e5:5b:8c:ad:fe:c2:6b:43: 19:84:73:24:b4:77:34:91:eb:94:b0:49:21:0d:fd: 2e:6a:0d:16:19:f9:cb:3a:e3:8c:9e:86:bd:3f:11: 72:41:30:0e:7e:c4:85:e8:27:3a:3c:77:ba:44:47: 75:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:23:35:D8:87:71:9B:FB:A3:6A:7F:32:A3:F6:C8:1E:0B:C3:86:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl X509v3 Authority Key Identifier: keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:ba:73:ec:36:c3:e7:b3:be:89:6e:da:e8:43:78:4d:ab:b6: 9d:ef:1b:6c:c4:ac:13:49:82:87:5d:e1:56:a5:7d:18:6f:74: bf:11:bd:85:88:3b:68:3f:20:87:f9:e6:32:c9:57:8a:61:3e: b7:53:3d:48:59:d3:9f:c3:6c:5a:77:52:1f:bc:68:45:ef:cc: 5f:c4:0f:5b:33:a7:9a:4c:72:f8:b8:b2:4b:a2:15:a1:e4:5f: 26:44:86:0b:37:02:0c:96:52:67:44:ba:db:b0:98:fc:56:0e: f3:5e:48:53:bc:60:c8:a9:d5:a8:b5:3d:f6:31:cf:cb:c2:f8: 58:42:e6:e5:f8:86:96:92:54:75:f4:f8:55:ee:70:bd:61:c4: c3:53:5e:6f:69:43:4f:58:32:74:b8:b6:69:2f:e6:8c:ec:36: b0:70:36:b3:a1:e6:d7:4c:0a:2c:7a:26:3b:5a:af:c7:af:83: 36:84:29:e6:f5:fe:9d:9b:70:32:5a:6a:db:29:13:03:16:9c: 9e:5b:72:41:8e:b8:ab:5c:cf:ab:4a:a6:27:b8:af:8b:42:20: 8c:59:62:fa:e4:82:86:a6:b9:11:0f:8d:7b:af:97:3b:cc:0f: a9:8f:0b:be:f1:81:e0:43:c6:eb:ef:23:90:00:82:18:86:35: e9:fa:e4:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4aTIcL32309MJ96AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhMGNlMjMtMzJjYi00NmZmLThhZjktODI1ZGU2NGYy MGExMB4XDTI1MTEyNDIyMDAwM1oXDTI1MTEyNzIyMDAwMFowLzEtMCsGA1UEAxMk NjViYTgxZDktZjQ4NS00NDcxLWIwMWItNzdhMTdlYmQ3MGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYcFVSrDyjCPQxbHmb0eXyY8V2+aX9I94dxV vc0gzE1c/icCfq98EP7SjhSiwZNI5zyclfKtiD268qG9u+ZlFH3wMI+pYbKENLeS nNRw/C5NYHs9hhPf/oJwPoZ0fy3DGGx7Rs751LYzFTofuNKREW1jze9UvjeXrIJK 1K650/qFtNkylxV8eP1ddyEK4jK1oWQn2m6R6Q0wfD9kC50gdz+GdXJE86WwqcAt zUE9PyOpgt6j339EuhF5adtk99bQsfWrijENQU6Q5VuMrf7Ca0MZhHMktHc0keuU sEkhDf0uag0WGfnLOuOMnoa9PxFyQTAOfsSF6Cc6PHe6REd1bQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDojNdiHcZv7o2p/MqP2yB4Lw4bGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZmEw Y2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVkZTY0ZjIwYTEvY2ZhMGNlMjMtMzJjYi00 NmZmLThhZjktODI1ZGU2NGYyMGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2ZhMGNlMjMtMzJjYi00NmZmLThh ZjktODI1ZGU2NGYyMGExL2NmYTBjZTIzLTMyY2ItNDZmZi04YWY5LTgyNWRlNjRm MjBhMS5jcmwwHwYDVR0jBBgwFoAUmVyhbjvmxeaJIKIBkipF5R21CrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZmEwY2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVk ZTY0ZjIwYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCeunPsNsPns76JbtroQ3hN q7ad7xtsxKwTSYKHXeFWpX0Yb3S/Eb2FiDtoPyCH+eYyyVeKYT63Uz1IWdOfw2xa d1IfvGhF78xfxA9bM6eaTHL4uLJLohWh5F8mRIYLNwIMllJnRLrbsJj8Vg7zXkhT vGDIqdWotT32Mc/LwvhYQubl+IaWklR19PhV7nC9YcTDU15vaUNPWDJ0uLZpL+aM 7DawcDazoebXTAoseiY7Wq/Hr4M2hCnm9f6dm3AyWmrbKRMDFpyeW3JBjrirXM+r SqYnuK+LQiCMWWL65IKGprkRD417r5c7zA+pjwu+8YHgQ8br7yOQAIIYhjXp+uRG -----END CERTIFICATE-----Generated at Tue Nov 25 08:18:34 2025 by rpki-client