This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft File: aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft (raw, json) Hash identifier: 1vuF/UZPmGjrKje22VAJZa/e5OtEt33nnyTKmjlMDdY= Subject key identifier: DA:23:D5:9D:D0:17:03:11:9D:5E:9B:FF:77:45:3F:D8:2E:5F:7B:9C Authority key identifier: 04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 Certificate issuer: /CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Certificate serial: 010D0C9F4328584C06D6B6D5E441B0620DEE4350 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft Manifest number: 010D0C9F43285845CBFB971D3FD588688E672F4A Signing time: Sun 30 Nov 2025 02:02:04 +0000 Manifest this update: Sun 30 Nov 2025 02:02:04 +0000 Manifest next update: Mon 01 Dec 2025 20:00:00 +0000 Files and hashes: 1: 23242619-7075-3ff7-bc60-bde9eb53b0dc.roa (hash: lGo8RHqE9NcLOr1QMLRyhjrxYMv5rtHQXuC68quqEyk=) 2: aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl (hash: GjL33inInNP3logMn/X3JUXLl8i5eS3ZObScdNYc75M=) 3: f881eafc-5ebb-3e96-b459-1eee0f53ca90.roa (hash: lWrMcbiq3MEUPyHwvAb5hx1rZgOmRbXMPoyZvSgR3Ig=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 01 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:06:d6:b6:d5:e4:41:b0:62:0d:ee:43:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2 Validity Not Before: Nov 30 02:02:04 2025 GMT Not After : Dec 1 20:00:00 2025 GMT Subject: CN=afc7fd15-fe6e-40cd-9786-1865609ca6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:36:6a:1f:20:d8:9d:63:1d:b4:3d:4b:88: 0a:9f:95:22:88:ae:f3:19:99:9e:1a:4c:10:25:fd: fb:22:13:1d:e8:bd:03:b0:0a:0f:2d:0d:78:5b:f6: d0:83:e6:f7:fd:f7:6c:05:5b:17:24:f6:3b:42:c8: 0a:76:e8:4c:95:9a:6a:e4:5a:e9:5a:6c:70:8a:05: b4:27:2d:9a:fd:29:72:76:41:94:91:07:47:ca:f9: 40:46:86:0d:ee:b1:21:4e:1c:14:b5:9d:26:98:81: e5:30:60:f1:84:0b:de:b5:2c:cb:1d:fb:5a:fe:e8: 02:a3:ca:e7:12:3a:7f:e5:74:d6:0b:28:f2:da:80: e9:7d:c6:17:44:3f:93:7c:6b:2d:55:a9:22:79:d2: da:6a:02:fa:f4:ac:57:ee:71:d0:ca:72:0a:ba:14: 8e:54:ee:d5:19:8c:61:2a:da:49:45:98:ce:4b:18: 20:db:a7:e4:c5:47:71:f3:48:01:7f:dd:d3:ff:72: 53:7f:8e:f0:c7:a4:d6:b8:ca:e0:cc:0f:00:71:1b: 47:67:9f:69:8e:be:65:be:86:6d:c9:ef:3b:78:59: 8d:fe:17:c4:d5:7c:00:bc:03:d0:96:da:b5:72:b6: 2d:48:37:64:2e:93:b3:8b:ab:1c:9f:a0:c6:26:13: 97:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:23:D5:9D:D0:17:03:11:9D:5E:9B:FF:77:45:3F:D8:2E:5F:7B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.crl X509v3 Authority Key Identifier: keyid:04:A9:78:75:8E:C1:95:1C:A6:2C:2F:0B:FA:32:2F:DB:CB:E3:24:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa03be8c-b23c-4d82-9f8d-64ed7a8a39d2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:1a:62:8c:07:8c:7f:77:91:8b:09:d3:99:44:15:71:0f:b0: 6b:e8:f8:ec:05:77:43:cf:9c:de:6f:b4:e4:76:c7:85:ce:b8: 01:be:62:67:7e:00:51:36:b0:16:d0:3e:c8:b9:be:57:77:2e: ca:bd:bd:6b:77:b8:8a:e5:8c:07:ab:6f:5f:02:75:08:78:8c: 50:c7:4e:11:f7:25:88:f8:8a:33:4e:38:62:96:99:a4:6a:51: 6b:eb:95:3d:7b:e6:e5:56:6d:26:f1:95:bf:b9:ea:fc:91:00: 95:03:93:9c:60:24:8f:92:06:b8:64:75:0c:99:ee:e0:c0:9c: 92:bb:f2:51:90:57:88:92:5e:68:cc:0b:e2:18:7c:34:49:1a: e8:1a:c1:e8:03:d8:a6:25:a3:92:b3:5f:72:78:9e:ef:17:64: 7d:85:d0:69:22:0f:44:56:ff:92:3b:fc:6d:71:e2:51:65:84: 9a:8d:87:69:bc:92:a5:1c:3a:1a:00:be:90:b0:e3:1c:b0:f9: 05:bc:7b:55:a6:96:3f:ad:18:75:3d:37:fe:bd:82:f8:36:b3: d8:44:67:40:07:36:b8:e8:bd:60:98:50:e4:aa:5f:e5:a2:9c: ca:1f:b5:3b:2c:6f:41:8f:5e:b4:7e:39:12:49:4b:87:e1:1f: 25:90:64:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwG1rbV5EGwYg3uQ1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwM2JlOGMtYjIzYy00ZDgyLTlmOGQtNjRlZDdhOGEz OWQyMB4XDTI1MTEzMDAyMDIwNFoXDTI1MTIwMTIwMDAwMFowLzEtMCsGA1UEAxMk YWZjN2ZkMTUtZmU2ZS00MGNkLTk3ODYtMTg2NTYwOWNhNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3I2ah8g2J1jHbQ9S4gKn5UiiK7zGZmeGkwQ Jf37IhMd6L0DsAoPLQ14W/bQg+b3/fdsBVsXJPY7QsgKduhMlZpq5FrpWmxwigW0 Jy2a/SlydkGUkQdHyvlARoYN7rEhThwUtZ0mmIHlMGDxhAvetSzLHfta/ugCo8rn Ejp/5XTWCyjy2oDpfcYXRD+TfGstVakiedLaagL69KxX7nHQynIKuhSOVO7VGYxh KtpJRZjOSxgg26fkxUdx80gBf93T/3JTf47wx6TWuMrgzA8AcRtHZ59pjr5lvoZt ye87eFmN/hfE1XwAvAPQltq1crYtSDdkLpOzi6scn6DGJhOXeQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNoj1Z3QFwMRnV6b/3dFP9guX3ucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAz YmU4Yy1iMjNjLTRkODItOWY4ZC02NGVkN2E4YTM5ZDIvYWEwM2JlOGMtYjIzYy00 ZDgyLTlmOGQtNjRlZDdhOGEzOWQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWEwM2JlOGMtYjIzYy00ZDgyLTlm OGQtNjRlZDdhOGEzOWQyL2FhMDNiZThjLWIyM2MtNGQ4Mi05ZjhkLTY0ZWQ3YThh MzlkMi5jcmwwHwYDVR0jBBgwFoAUBKl4dY7BlRymLC8L+jIv28vjJDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYTAzYmU4Yy1iMjNjLTRkODItOWY4ZC02NGVk N2E4YTM5ZDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqGmKMB4x/d5GLCdOZRBVx D7Br6PjsBXdDz5zeb7TkdseFzrgBvmJnfgBRNrAW0D7Iub5Xdy7Kvb1rd7iK5YwH q29fAnUIeIxQx04R9yWI+IozTjhilpmkalFr65U9e+blVm0m8ZW/uer8kQCVA5Oc YCSPkga4ZHUMme7gwJySu/JRkFeIkl5ozAviGHw0SRroGsHoA9imJaOSs19yeJ7v F2R9hdBpIg9EVv+SO/xtceJRZYSajYdpvJKlHDoaAL6QsOMcsPkFvHtVppY/rRh1 PTf+vYL4NrPYRGdABza46L1gmFDkql/lopzKH7U7LG9Bj160fjkSSUuH4R8lkGSk -----END CERTIFICATE-----Generated at Sun Nov 30 15:42:38 2025 by rpki-client