This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft File: a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft (raw, json) Hash identifier: fMNenB4laqOhTEsAlarW7RlOnshEv9EzPL5Z/G1Z/2o= Subject key identifier: 5E:89:3F:20:54:F0:62:B3:AD:35:00:33:B0:C6:39:D8:5E:3B:82:1C Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77 Certificate issuer: /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f Certificate serial: 010D0C9F4328584BE69D2F68B29864DFF4FCDC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft Manifest number: 010D0C9F4328584073A85532A545317F91B9A132 Signing time: Tue 18 Nov 2025 13:00:11 +0000 Manifest this update: Tue 18 Nov 2025 13:00:11 +0000 Manifest next update: Thu 20 Nov 2025 13:00:00 +0000 Files and hashes: 1: 2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa (hash: STLc8fBYb3Za3xGc8rNiW84fQyPEXJWCAtEgDpuKruw=) 2: a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl (hash: W/DIDQrp9smexrDjMRRKjd8NrKH5PbUc/zx/nVqY1MU=) 3: c7f56a69-0c3c-37e5-80e1-32c30e788993.roa (hash: BJ1fildAYh/znAZtCoTWH8iG2wOecsJIAb5aNUkh478=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:e6:9d:2f:68:b2:98:64:df:f4:fc:dc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f Validity Not Before: Nov 18 13:00:11 2025 GMT Not After : Nov 20 13:00:00 2025 GMT Subject: CN=4a3ed252-4cef-4bbd-9523-b7920e0a83d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:24:f4:d3:ac:b1:7b:0c:02:8c:9c:db:a7: 14:bf:e9:dc:ab:83:80:e2:2f:74:dc:c6:37:ff:f9: d7:7d:a3:01:a6:e6:6b:23:59:d9:40:17:a7:64:63: 6d:95:c2:3c:68:80:cf:20:b8:79:4e:6c:52:7f:bf: 14:cb:91:36:92:43:48:13:fd:69:54:19:05:61:6e: 67:63:72:e1:e4:06:af:22:e3:30:de:6b:c4:81:3d: 02:9a:58:a8:d4:42:92:66:e1:59:2e:6b:12:b6:70: 46:fa:83:54:07:4c:d0:9e:63:e1:65:cd:39:74:fe: 6a:d8:4f:55:6b:f4:6e:a6:3f:20:20:73:40:5d:99: 23:47:b0:89:20:22:6b:d9:36:43:df:0c:a0:7d:b4: 36:9a:28:f7:7c:6b:ab:30:10:92:1e:e1:53:79:16: 46:cb:2e:27:76:f9:f5:fb:5c:42:88:09:0a:9f:11: c7:6f:36:3b:70:c6:c5:ac:6e:51:2f:f6:d1:e2:63: e0:45:1b:b6:88:ee:f3:58:04:d4:5f:d3:ed:48:39: aa:9c:4b:b2:5d:6c:ac:cb:07:31:8c:1c:6d:e2:a9: 65:b3:52:ce:ec:04:a5:66:cb:00:29:89:90:c6:ab: bc:0e:37:43:e9:00:ea:ec:2f:87:34:ca:64:f3:fe: 9d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:89:3F:20:54:F0:62:B3:AD:35:00:33:B0:C6:39:D8:5E:3B:82:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl X509v3 Authority Key Identifier: keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:70:40:d3:d7:e7:8e:33:9c:a5:b0:f5:66:4f:a0:46:f8:1d: c8:4e:04:6b:f4:64:93:5e:00:d5:57:35:d2:7a:ea:19:92:2a: 98:dc:78:a5:9c:9a:66:db:7a:a8:fc:8c:69:18:e1:5b:bb:27: 62:5d:98:66:13:18:f6:2d:af:7f:bd:b9:cd:cb:a7:20:6a:28: 9b:63:c2:5f:2d:a1:d5:d2:36:c3:a5:18:fa:a1:36:50:6b:14: 7d:df:f1:5d:d5:83:dd:97:7c:b5:10:e5:30:98:fe:bc:4e:2a: fe:55:ba:21:87:2b:72:f0:50:39:90:b1:9d:29:f3:1a:09:a6: 2a:df:d5:47:84:fe:14:9b:8e:2a:f3:e6:7d:f0:47:05:70:97: b1:9d:38:35:dd:ee:b0:62:7d:f7:bd:b2:23:ee:e9:12:5b:dc: 2c:a7:4d:15:da:1e:6e:8b:d3:2f:1c:93:c9:4e:d3:56:01:af: d6:73:6f:d7:8f:0c:72:e9:05:fc:9e:96:29:6f:4a:aa:c7:d4: 1a:5d:85:c5:c5:d5:e2:7e:56:6c:89:98:6a:47:06:13:39:4a: dc:a6:87:41:b5:5f:7f:8c:fc:1d:ef:5a:19:2c:3f:19:d8:49: f0:27:1d:f9:c1:a8:6e:97:86:c0:e5:15:39:a5:77:8a:57:08: dd:f9:93:21 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvmnS9osphk3/T83EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlYWZlNjUtY2MxNi00OGE3LWIyMjEtYjAwYmZjMTgx ZjNmMB4XDTI1MTExODEzMDAxMVoXDTI1MTEyMDEzMDAwMFowLzEtMCsGA1UEAxMk NGEzZWQyNTItNGNlZi00YmJkLTk1MjMtYjc5MjBlMGE4M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu14k9NOssXsMAoyc26cUv+ncq4OA4i903MY3 //nXfaMBpuZrI1nZQBenZGNtlcI8aIDPILh5TmxSf78Uy5E2kkNIE/1pVBkFYW5n Y3Lh5AavIuMw3mvEgT0Cmlio1EKSZuFZLmsStnBG+oNUB0zQnmPhZc05dP5q2E9V a/Rupj8gIHNAXZkjR7CJICJr2TZD3wygfbQ2mij3fGurMBCSHuFTeRZGyy4ndvn1 +1xCiAkKnxHHbzY7cMbFrG5RL/bR4mPgRRu2iO7zWATUX9PtSDmqnEuyXWysywcx jBxt4qlls1LO7ASlZssAKYmQxqu8DjdD6QDq7C+HNMpk8/6d3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF6JPyBU8GKzrTUAM7DGOdheO4IcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Vh ZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBiZmMxODFmM2YvYTdlYWZlNjUtY2MxNi00 OGE3LWIyMjEtYjAwYmZjMTgxZjNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlYWZlNjUtY2MxNi00OGE3LWIy MjEtYjAwYmZjMTgxZjNmL2E3ZWFmZTY1LWNjMTYtNDhhNy1iMjIxLWIwMGJmYzE4 MWYzZi5jcmwwHwYDVR0jBBgwFoAUv+4sp0Nt2qgrIMzjrx/bklO5H3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2VhZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBi ZmMxODFmM2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNcEDT1+eOM5ylsPVmT6BG +B3ITgRr9GSTXgDVVzXSeuoZkiqY3HilnJpm23qo/IxpGOFbuydiXZhmExj2La9/ vbnNy6cgaiibY8JfLaHV0jbDpRj6oTZQaxR93/Fd1YPdl3y1EOUwmP68Tir+Vboh hyty8FA5kLGdKfMaCaYq39VHhP4Um44q8+Z98EcFcJexnTg13e6wYn33vbIj7ukS W9wsp00V2h5ui9MvHJPJTtNWAa/Wc2/Xjwxy6QX8npYpb0qqx9QaXYXFxdXiflZs iZhqRwYTOUrcpodBtV9/jPwd71oZLD8Z2EnwJx35wahul4bA5RU5pXeKVwjd+ZMh -----END CERTIFICATE-----Generated at Tue Nov 18 19:48:50 2025 by rpki-client