This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.mft File: d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.mft (raw, json) Hash identifier: kxU4MxTKhiuWFyfQ8HUh296K60X0S4+KxXkIdy0c0Yg= Subject key identifier: 6D:E3:DB:16:54:26:7A:E2:10:4E:30:81:E4:4A:A4:00:EA:5B:93:65 Authority key identifier: 7E:0D:96:EF:17:17:25:BA:E9:9C:22:B4:DE:7D:3F:B6:46:F8:09:8B Certificate issuer: /CN=d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3 Certificate serial: 010D0C9F4328584BF84B7662E13AEED0FC889A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.mft Manifest number: 010D0C9F432858484E4B8CF4BCE146BE2DA64958 Signing time: Mon 24 Nov 2025 21:00:08 +0000 Manifest this update: Mon 24 Nov 2025 21:00:08 +0000 Manifest next update: Thu 27 Nov 2025 21:00:00 +0000 Files and hashes: 1: a64b1106-fd98-3a3f-ba6f-9ea11f2e9e9a.roa (hash: +KldBSFFVuhGYaI1ZJCi65VzC91pxYhrfMN4U88n1m8=) 2: d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.crl (hash: kQroShkXBqKMgmMHT7ql2UiTrQeaqX79jKVLk3e2BQ8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f8:4b:76:62:e1:3a:ee:d0:fc:88:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3 Validity Not Before: Nov 24 21:00:08 2025 GMT Not After : Nov 27 21:00:00 2025 GMT Subject: CN=86c15f2c-f0cc-4f8b-a6e4-dd20598c6858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c3:19:e5:a6:e5:0a:06:54:9a:27:fb:9f:d4: 9d:d3:37:09:d7:17:2a:eb:54:4a:c6:c2:71:f4:2e: 6a:d5:b6:02:4f:ee:4b:d9:5a:bf:eb:a3:58:2b:32: 3a:cb:16:1a:ca:55:24:f2:3c:06:e7:3b:f1:a1:5d: 8e:86:b9:cb:41:d8:a3:f2:4c:5f:b3:64:49:ee:09: 45:61:9c:f5:f0:92:ec:7f:a1:e1:75:3c:a7:3f:b6: 77:e3:b2:ca:66:c6:73:b4:90:96:03:29:ec:c5:b6: 47:b2:fa:20:97:c0:7c:77:0b:50:aa:86:03:ce:ec: ad:d0:15:6c:3f:27:0e:b7:1e:88:af:16:46:2f:dd: 1e:6a:ee:11:31:f3:6b:7d:4f:aa:18:ff:c6:63:5c: 24:3f:d5:22:6f:3c:69:b7:32:0c:c9:cc:29:0e:58: fa:dd:b2:22:ca:80:f5:e4:77:bb:3e:c3:18:8b:7d: cc:8d:1d:c8:a6:9c:21:20:a4:48:7a:15:97:be:a0: af:d3:8d:f0:80:4b:65:b0:7c:b1:b6:8a:65:24:33: 97:30:13:fc:ff:46:db:28:d7:1c:bf:5b:1e:c6:55: ed:58:a7:20:4a:b6:44:ab:36:f5:b7:71:ae:37:ad: 79:7c:35:60:1a:b3:d9:12:27:d4:cf:74:4f:20:61: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E3:DB:16:54:26:7A:E2:10:4E:30:81:E4:4A:A4:00:EA:5B:93:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.crl X509v3 Authority Key Identifier: keyid:7E:0D:96:EF:17:17:25:BA:E9:9C:22:B4:DE:7D:3F:B6:46:F8:09:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d0cf1a-ccef-4688-8b48-55eb0ef5d2e3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e4:ef:55:6a:f4:51:99:e8:bd:09:14:c1:c2:d7:f6:1b:fa: 63:b9:29:c6:1b:15:e1:00:2b:a6:5f:02:5d:46:d4:9f:5f:b4: a6:e9:db:f0:c8:6a:07:a4:f3:b3:2d:e1:ac:8a:f3:4b:55:34: 1f:6d:66:50:eb:86:db:f3:ce:52:d3:4d:24:67:6c:15:82:7c: e8:84:24:0b:23:3e:58:27:d5:8e:69:9a:93:3d:aa:f7:f6:7c: 07:0f:08:ab:6a:2d:89:1d:d0:81:57:1a:d5:68:43:da:50:37: 8c:8f:60:53:73:8f:ef:d3:09:43:a7:47:b5:33:69:7c:0d:07: 1c:b0:96:06:c8:9e:8a:aa:22:65:2d:e3:55:4b:4b:86:fd:0a: 29:30:be:5b:66:9d:e7:08:23:76:bd:c0:ca:7e:22:d8:fc:51: 0a:09:cb:d1:c2:9c:76:16:81:e1:76:69:c1:0b:2c:d7:c3:86: 5f:e5:2d:41:d0:d8:a8:21:6f:5a:6b:bb:82:74:20:06:e0:54: 5b:06:9a:4f:e4:54:15:76:b4:fe:43:90:db:58:8e:7e:db:70: e8:13:ab:ef:cc:98:e2:09:75:18:5b:aa:98:5d:ac:73:ad:73: fb:1f:2f:9b:19:6e:eb:d3:d5:c5:98:83:f0:1f:c2:06:b1:a7: b3:df:2e:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv4S3Zi4Tru0PyImoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMGNmMWEtY2NlZi00Njg4LThiNDgtNTVlYjBlZjVk MmUzMB4XDTI1MTEyNDIxMDAwOFoXDTI1MTEyNzIxMDAwMFowLzEtMCsGA1UEAxMk ODZjMTVmMmMtZjBjYy00ZjhiLWE2ZTQtZGQyMDU5OGM2ODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sMZ5ablCgZUmif7n9Sd0zcJ1xcq61RKxsJx 9C5q1bYCT+5L2Vq/66NYKzI6yxYaylUk8jwG5zvxoV2OhrnLQdij8kxfs2RJ7glF YZz18JLsf6HhdTynP7Z347LKZsZztJCWAynsxbZHsvogl8B8dwtQqoYDzuyt0BVs PycOtx6IrxZGL90eau4RMfNrfU+qGP/GY1wkP9UibzxptzIMycwpDlj63bIiyoD1 5He7PsMYi33MjR3IppwhIKRIehWXvqCv043wgEtlsHyxtoplJDOXMBP8/0bbKNcc v1sexlXtWKcgSrZEqzb1t3GuN615fDVgGrPZEifUz3RPIGE0VwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG3j2xZUJnriEE4wgeRKpADqW5NlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQw Y2YxYS1jY2VmLTQ2ODgtOGI0OC01NWViMGVmNWQyZTMvZDlkMGNmMWEtY2NlZi00 Njg4LThiNDgtNTVlYjBlZjVkMmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDlkMGNmMWEtY2NlZi00Njg4LThi NDgtNTVlYjBlZjVkMmUzL2Q5ZDBjZjFhLWNjZWYtNDY4OC04YjQ4LTU1ZWIwZWY1 ZDJlMy5jcmwwHwYDVR0jBBgwFoAUfg2W7xcXJbrpnCK03n0/tkb4CYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kOWQwY2YxYS1jY2VmLTQ2ODgtOGI0OC01NWVi MGVmNWQyZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCR5O9VavRRmei9CRTBwtf2 G/pjuSnGGxXhACumXwJdRtSfX7Sm6dvwyGoHpPOzLeGsivNLVTQfbWZQ64bb885S 000kZ2wVgnzohCQLIz5YJ9WOaZqTPar39nwHDwirai2JHdCBVxrVaEPaUDeMj2BT c4/v0wlDp0e1M2l8DQccsJYGyJ6KqiJlLeNVS0uG/QopML5bZp3nCCN2vcDKfiLY /FEKCcvRwpx2FoHhdmnBCyzXw4Zf5S1B0NioIW9aa7uCdCAG4FRbBppP5FQVdrT+ Q5DbWI5+23DoE6vvzJjiCXUYW6qYXaxzrXP7Hy+bGW7r09XFmIPwH8IGsaez3y5M -----END CERTIFICATE-----Generated at Tue Nov 25 08:14:38 2025 by rpki-client