This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.mft File: d4b3e5ee-29c8-495e-98fc-a206c4e14922.mft (raw, json) Hash identifier: S34u90YPWwBTUWfTBYHaywInlasnm/jYgCFOz0R1Zp0= Subject key identifier: E8:A8:FB:39:9E:30:5C:AE:D5:52:68:23:A6:5A:82:47:3C:B8:F5:31 Authority key identifier: 26:71:75:5B:09:03:BC:48:BC:2A:1C:D1:7D:CD:BE:95:F5:CB:58:F9 Certificate issuer: /CN=d4b3e5ee-29c8-495e-98fc-a206c4e14922 Certificate serial: 010D0C9F4328584BF798CFF4391E2DA76698A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.mft Manifest number: 010D0C9F43285848D90562DE9A3B8994EFE64AA8 Signing time: Mon 24 Nov 2025 15:00:09 +0000 Manifest this update: Mon 24 Nov 2025 15:00:09 +0000 Manifest next update: Thu 27 Nov 2025 15:00:00 +0000 Files and hashes: 1: 3ecfb6f7-b29a-3b59-a3c6-e6af0296fef0.roa (hash: AQFx7Xr2Lm1/fNpViAlnumL+BGIa/pqFK2eKFvK/x8g=) 2: d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl (hash: cy/sdj2h8bZ16Vr0QHxnYVqqvdWVvjxMDwNXZPzkv5o=) 3: dcf1dc10-e375-3848-8c42-a4e8d3a12530.roa (hash: F1DRJ0BNj8J5DQDjBUopd/WYCzUhcidrGH/fq6nAsrg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f7:98:cf:f4:39:1e:2d:a7:66:98:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4b3e5ee-29c8-495e-98fc-a206c4e14922 Validity Not Before: Nov 24 15:00:09 2025 GMT Not After : Nov 27 15:00:00 2025 GMT Subject: CN=325c1417-ab22-45d2-afbe-37ead179f0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:79:9d:30:df:6b:48:70:af:30:b5:04:03:77: a2:27:a9:43:c6:bc:40:0d:63:f7:f4:7a:88:f4:a1: b9:e0:f7:42:e8:eb:da:08:bf:a5:3a:10:e9:6e:a5: 88:ea:37:74:31:4f:a3:03:f8:94:6a:91:8d:ab:07: 09:a3:9f:c6:30:aa:f5:aa:97:bd:6a:4b:b0:89:7b: cd:59:1b:5b:aa:16:f6:e7:5b:be:df:86:16:d2:75: fe:e8:6a:52:b8:b0:22:35:a2:87:c8:f8:45:2b:fb: 9d:b2:01:20:07:07:2d:10:71:cb:b5:29:9a:c5:dd: 90:c1:60:1e:39:dd:3c:5c:21:62:71:e8:1d:24:ba: 40:a2:77:82:75:50:7d:18:d7:4a:89:ef:4b:8b:db: 18:99:76:bc:61:94:03:79:df:1d:74:06:1b:ab:8d: 1d:8f:99:aa:64:4e:1a:17:45:3e:77:9b:48:5f:31: b8:8f:64:6a:5f:47:a4:c9:31:7c:6d:0b:54:45:ec: 1b:7e:55:a0:50:11:cd:e0:74:96:47:e3:18:85:21: 71:06:56:78:9b:e7:aa:39:04:4e:a4:bd:7d:aa:34: 27:f4:52:17:35:66:6f:8e:47:be:0c:94:49:84:66: d7:c6:24:8f:5e:d9:02:94:fb:29:2f:b2:e7:13:a5: 1b:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A8:FB:39:9E:30:5C:AE:D5:52:68:23:A6:5A:82:47:3C:B8:F5:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922/d4b3e5ee-29c8-495e-98fc-a206c4e14922.crl X509v3 Authority Key Identifier: keyid:26:71:75:5B:09:03:BC:48:BC:2A:1C:D1:7D:CD:BE:95:F5:CB:58:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d4b3e5ee-29c8-495e-98fc-a206c4e14922.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:b6:eb:0d:b8:f8:06:95:ce:61:af:a1:ae:9d:5e:d9:85:9d: 84:04:4d:e9:ec:f3:d8:d0:f3:d1:36:71:14:76:b0:be:65:c1: f5:b6:d0:8c:e8:b0:f8:f3:cf:ea:39:d5:9c:d7:8e:d1:50:27: 2c:60:f1:a9:7e:de:de:f5:63:72:6a:8f:10:a0:36:0b:52:8e: ad:87:e7:37:ea:60:0a:cc:78:11:3a:d8:45:d8:99:64:53:cb: 59:9b:f5:1a:3c:1c:e1:b1:bf:62:53:d5:3f:cd:e3:3b:cc:d4: 05:24:05:d2:a1:50:d7:90:d9:5e:d0:c5:b3:e9:7a:25:3c:0c: b1:ef:70:f4:df:ba:cf:5a:4d:da:62:95:99:be:2d:37:7f:10: 31:94:40:91:de:b0:c5:76:d0:37:21:8b:ea:c8:c4:b4:42:8f: 94:91:d1:a3:54:e7:0b:c1:93:92:e7:88:c8:5c:41:b9:c2:4a: 4f:49:e8:ff:2d:0e:e1:d0:1c:c3:22:61:57:bc:a1:87:b3:77: fe:86:1a:cc:b2:72:1d:a4:2d:21:5b:24:7f:50:3e:44:37:b6: d2:63:a0:e9:91:f4:f2:74:5e:29:5b:c3:10:15:ed:96:46:21: 49:c7:87:b7:38:f6:0a:98:c2:aa:2a:15:e7:a1:96:93:24:52: ac:79:c9:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv3mM/0OR4tp2aYoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRiM2U1ZWUtMjljOC00OTVlLTk4ZmMtYTIwNmM0ZTE0 OTIyMB4XDTI1MTEyNDE1MDAwOVoXDTI1MTEyNzE1MDAwMFowLzEtMCsGA1UEAxMk MzI1YzE0MTctYWIyMi00NWQyLWFmYmUtMzdlYWQxNzlmMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHmdMN9rSHCvMLUEA3eiJ6lDxrxADWP39HqI 9KG54PdC6OvaCL+lOhDpbqWI6jd0MU+jA/iUapGNqwcJo5/GMKr1qpe9akuwiXvN WRtbqhb251u+34YW0nX+6GpSuLAiNaKHyPhFK/udsgEgBwctEHHLtSmaxd2QwWAe Od08XCFicegdJLpAoneCdVB9GNdKie9Li9sYmXa8YZQDed8ddAYbq40dj5mqZE4a F0U+d5tIXzG4j2RqX0ekyTF8bQtURewbflWgUBHN4HSWR+MYhSFxBlZ4m+eqOQRO pL19qjQn9FIXNWZvjke+DJRJhGbXxiSPXtkClPspL7LnE6UbgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOio+zmeMFyu1VJoI6Zagkc8uPUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNGIz ZTVlZS0yOWM4LTQ5NWUtOThmYy1hMjA2YzRlMTQ5MjIvZDRiM2U1ZWUtMjljOC00 OTVlLTk4ZmMtYTIwNmM0ZTE0OTIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDRiM2U1ZWUtMjljOC00OTVlLTk4 ZmMtYTIwNmM0ZTE0OTIyL2Q0YjNlNWVlLTI5YzgtNDk1ZS05OGZjLWEyMDZjNGUx NDkyMi5jcmwwHwYDVR0jBBgwFoAUJnF1WwkDvEi8KhzRfc2+lfXLWPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNGIzZTVlZS0yOWM4LTQ5NWUtOThmYy1hMjA2 YzRlMTQ5MjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAytusNuPgGlc5hr6GunV7Z hZ2EBE3p7PPY0PPRNnEUdrC+ZcH1ttCM6LD488/qOdWc147RUCcsYPGpft7e9WNy ao8QoDYLUo6th+c36mAKzHgROthF2JlkU8tZm/UaPBzhsb9iU9U/zeM7zNQFJAXS oVDXkNle0MWz6XolPAyx73D037rPWk3aYpWZvi03fxAxlECR3rDFdtA3IYvqyMS0 Qo+UkdGjVOcLwZOS54jIXEG5wkpPSej/LQ7h0BzDImFXvKGHs3f+hhrMsnIdpC0h WyR/UD5EN7bSY6DpkfTydF4pW8MQFe2WRiFJx4e3OPYKmMKqKhXnoZaTJFKsecm8 -----END CERTIFICATE-----Generated at Tue Nov 25 08:14:18 2025 by rpki-client