This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft File: a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft (raw, json) Hash identifier: y5+CCEIvAvYuvxIPohKOQDQhFFAOdwitJEkBgaExMGc= Subject key identifier: 92:F6:B6:87:4B:5C:29:40:37:E8:40:A3:52:6B:FD:3D:AC:02:01:8B Authority key identifier: BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77 Certificate issuer: /CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f Certificate serial: 010D0C9F4328584BFA27EBCEE6721DBA8AD88760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft Manifest number: 010D0C9F4328584073A85532A545317F91B9A13A Signing time: Tue 25 Nov 2025 13:00:09 +0000 Manifest this update: Tue 25 Nov 2025 13:00:09 +0000 Manifest next update: Fri 28 Nov 2025 13:00:00 +0000 Files and hashes: 1: 2544a70c-1edf-3a1e-afe2-981ca09a7f46.roa (hash: IJjrrDVlDK1BAblSDcgMekZJX+F1nirBNPGrY1xukCM=) 2: a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl (hash: sweCtJR983PRbIN4I97kq/AUbV4C8OJCtyhe4kPaa8o=) 3: c7f56a69-0c3c-37e5-80e1-32c30e788993.roa (hash: HRhDMvoCPwOMcfdWynF+obQX4fT5dQK3HCdaj8nqhxE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:27:eb:ce:e6:72:1d:ba:8a:d8:87:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7eafe65-cc16-48a7-b221-b00bfc181f3f Validity Not Before: Nov 25 13:00:09 2025 GMT Not After : Nov 28 13:00:00 2025 GMT Subject: CN=bcf137fb-f4b6-476a-819e-d248f338fa13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e1:93:c8:ff:fc:45:d5:32:96:3e:98:67:09: a8:cd:bd:76:73:ea:b1:7f:65:50:5a:19:f5:a5:6f: eb:6e:5a:28:15:01:dd:e4:71:99:5e:a7:78:0a:f8: 3a:d7:1a:5a:d2:22:9c:2a:be:50:a1:a0:31:f6:69: 10:6c:11:bd:07:1d:ca:f0:f4:22:f5:90:20:dd:7f: b9:0a:c1:f3:95:5c:cd:53:89:8c:68:c4:c4:6f:3e: 37:bd:94:60:e4:0c:a5:90:96:6c:2a:e9:f8:0d:93: 7e:c4:b6:5e:b0:bb:f8:b5:3e:2b:bd:4e:ca:73:21: 5a:db:27:d4:a6:b9:f2:ac:9c:60:dc:33:8b:b3:5a: f1:99:eb:16:1d:5f:3a:80:12:d2:63:fd:db:3b:a8: 7f:38:8b:04:da:d0:5f:cf:ee:b0:ce:b5:ba:95:1d: c4:c5:73:fc:6d:2e:ee:31:50:cc:87:b0:51:f0:71: 43:4e:de:e3:eb:42:20:9f:06:e9:bd:30:4e:a0:a1: 52:39:2f:71:84:fe:73:f1:46:4f:9e:e2:a9:59:58: 46:b4:a1:30:fb:76:ff:34:f3:46:6d:8b:b8:e6:1c: b3:73:4d:e9:8f:c9:29:ad:49:a1:8c:44:52:6c:b8: 9a:46:85:b6:e3:36:2d:5f:37:34:ef:9b:61:08:d1: c9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F6:B6:87:4B:5C:29:40:37:E8:40:A3:52:6B:FD:3D:AC:02:01:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f/a7eafe65-cc16-48a7-b221-b00bfc181f3f.crl X509v3 Authority Key Identifier: keyid:BF:EE:2C:A7:43:6D:DA:A8:2B:20:CC:E3:AF:1F:DB:92:53:B9:1F:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7eafe65-cc16-48a7-b221-b00bfc181f3f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:2a:e9:1c:19:79:29:69:37:4f:73:a8:b9:ce:92:ed:b7:b6: d8:ff:8c:a6:ed:a8:d1:44:17:84:fa:6d:cb:b4:dc:d1:db:84: d0:d1:8e:73:6a:25:cf:1e:91:64:e7:5b:4c:ab:3f:40:2a:58: 6d:67:5d:ae:8f:08:82:22:b2:b2:6a:fd:8a:8c:5b:49:4c:37: ec:7d:07:7e:70:60:fc:76:ce:50:49:81:b5:d3:38:79:a0:61: 88:ed:44:39:12:9b:02:85:b1:05:9f:60:05:40:cd:74:2b:63: 55:66:88:70:e0:b4:64:bb:df:d9:06:29:c3:2f:27:fd:19:cf: 3e:10:70:45:4b:f4:b8:d9:fd:ec:36:a5:a6:d0:d9:38:17:c9: 21:60:94:19:65:4c:13:72:d3:af:9a:59:a2:f0:11:f2:d0:d6: ee:ab:5e:53:2c:7a:11:85:0a:3f:3f:65:71:35:fd:27:7b:73: 9c:18:d5:4e:62:02:8f:36:f3:24:3a:9d:ba:a4:28:c3:85:ce: c1:a6:c5:a8:55:bf:70:49:62:35:c6:be:85:73:6a:1a:a7:27: d7:1a:9c:1f:48:01:18:ef:cb:ac:93:b0:92:c9:da:59:bb:a4: f3:7e:32:c7:b7:54:c6:07:0b:f1:db:e9:b1:9e:20:11:c4:d5: b2:71:d8:01 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv6J+vO5nIduorYh2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlYWZlNjUtY2MxNi00OGE3LWIyMjEtYjAwYmZjMTgx ZjNmMB4XDTI1MTEyNTEzMDAwOVoXDTI1MTEyODEzMDAwMFowLzEtMCsGA1UEAxMk YmNmMTM3ZmItZjRiNi00NzZhLTgxOWUtZDI0OGYzMzhmYTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeGTyP/8RdUylj6YZwmozb12c+qxf2VQWhn1 pW/rblooFQHd5HGZXqd4Cvg61xpa0iKcKr5QoaAx9mkQbBG9Bx3K8PQi9ZAg3X+5 CsHzlVzNU4mMaMTEbz43vZRg5AylkJZsKun4DZN+xLZesLv4tT4rvU7KcyFa2yfU prnyrJxg3DOLs1rxmesWHV86gBLSY/3bO6h/OIsE2tBfz+6wzrW6lR3ExXP8bS7u MVDMh7BR8HFDTt7j60IgnwbpvTBOoKFSOS9xhP5z8UZPnuKpWVhGtKEw+3b/NPNG bYu45hyzc03pj8kprUmhjERSbLiaRoW24zYtXzc075thCNHJ4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJL2todLXClAN+hAo1Jr/T2sAgGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2Vh ZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBiZmMxODFmM2YvYTdlYWZlNjUtY2MxNi00 OGE3LWIyMjEtYjAwYmZjMTgxZjNmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlYWZlNjUtY2MxNi00OGE3LWIy MjEtYjAwYmZjMTgxZjNmL2E3ZWFmZTY1LWNjMTYtNDhhNy1iMjIxLWIwMGJmYzE4 MWYzZi5jcmwwHwYDVR0jBBgwFoAUv+4sp0Nt2qgrIMzjrx/bklO5H3cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2VhZmU2NS1jYzE2LTQ4YTctYjIyMS1iMDBi ZmMxODFmM2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0KukcGXkpaTdPc6i5zpLt t7bY/4ym7ajRRBeE+m3LtNzR24TQ0Y5zaiXPHpFk51tMqz9AKlhtZ12ujwiCIrKy av2KjFtJTDfsfQd+cGD8ds5QSYG10zh5oGGI7UQ5EpsChbEFn2AFQM10K2NVZohw 4LRku9/ZBinDLyf9Gc8+EHBFS/S42f3sNqWm0Nk4F8khYJQZZUwTctOvmlmi8BHy 0Nbuq15TLHoRhQo/P2VxNf0ne3OcGNVOYgKPNvMkOp26pCjDhc7BpsWoVb9wSWI1 xr6Fc2oapyfXGpwfSAEY78usk7CSydpZu6TzfjLHt1TGBwvx2+mxniARxNWycdgB -----END CERTIFICATE-----Generated at Tue Nov 25 21:40:35 2025 by rpki-client