This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft File: 0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft (raw, json) Hash identifier: oDUEwsjAHYUUs5vd+s+IzNKqd/iGs5eBBBa+rzkpkYo= Subject key identifier: D8:63:CE:9C:C0:5D:BE:E1:AB:48:85:A7:A5:26:A0:BF:27:06:5A:FA Authority key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Certificate issuer: /CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Certificate serial: 010D0C9F4328584BF1C7D20B01E0BC5C8E6044C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft Manifest number: 010D0C9F4328584AFC2E778F670346259D013A1B Signing time: Sat 22 Nov 2025 13:00:03 +0000 Manifest this update: Sat 22 Nov 2025 13:00:03 +0000 Manifest next update: Tue 25 Nov 2025 13:00:00 +0000 Files and hashes: 1: 0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl (hash: 9xIImqiNqPP0h0X43mIIGMzLtF20oXAM+po5JaKEIGE=) 2: b8df394c-bd2f-3da6-bb73-41293cee5daa.roa (hash: Zq+oPY5PHwmtdYs1ZRx8ZPwtX3aKlVOYMfOuIBGH04I=) 3: e10b4c53-9d94-34d4-b068-ce95861b6c57.roa (hash: J7Kia3TdOsXi+E3QsbrhZbasLMvKWSoJ1OFb1McTQFY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:c7:d2:0b:01:e0:bc:5c:8e:60:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Validity Not Before: Nov 22 13:00:03 2025 GMT Not After : Nov 25 13:00:00 2025 GMT Subject: CN=7d1c3f41-adef-4655-ad17-87d9cb24fd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:84:16:d8:02:c0:7c:67:99:f2:a4:c2:17: 4d:04:58:d4:73:aa:17:cc:1d:76:00:40:a6:7a:4f: 4f:84:73:6d:03:e7:f6:18:cf:2a:bd:9e:24:4c:47: b5:f9:d7:71:3d:4a:5f:f1:5f:c4:63:e9:30:6c:84: 58:b8:1e:8b:54:a6:c1:79:3a:b9:b9:49:36:c8:ff: ac:c6:da:0b:3c:ad:48:34:fc:37:3a:01:5a:6a:b4: cc:2c:3d:b1:f2:5e:45:4d:ac:c7:6a:86:97:1e:6c: 97:53:24:98:07:79:2f:4f:b2:55:2e:3c:26:c4:69: 18:ad:91:09:bc:67:00:77:00:72:dd:e5:78:fc:54: 25:c8:4b:37:d1:49:29:98:bd:db:25:e0:9f:6c:56: b0:fe:f6:36:fb:9a:2e:64:75:40:81:1e:b7:71:8e: de:1c:0e:1e:6d:96:76:56:04:09:22:77:0d:9a:6f: 63:35:ca:14:73:5e:75:35:97:ec:09:3b:02:2e:30: c7:ee:04:b8:a8:a5:00:13:56:1e:1c:6b:6b:74:51: c1:84:4f:2a:f4:b0:c2:c0:6c:4e:fb:b2:06:7b:1b: 02:b9:1c:41:cd:88:91:3d:10:9a:e0:3e:ca:67:a0: 79:7f:37:73:78:ed:ef:91:3c:28:92:14:50:24:ca: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:63:CE:9C:C0:5D:BE:E1:AB:48:85:A7:A5:26:A0:BF:27:06:5A:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl X509v3 Authority Key Identifier: keyid:75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:80:f2:63:da:7a:e6:c6:68:a1:14:05:7e:02:9d:29:1d:66: 3b:e9:79:da:ac:f9:80:7b:3a:f4:2a:8d:67:8a:ef:7e:35:04: b5:6c:fa:6c:ef:3c:43:a9:37:cd:4a:24:05:84:75:f1:9d:ba: 45:23:29:78:23:67:37:a5:88:27:99:4b:07:fc:65:ac:d8:b1: 04:b1:ea:52:e4:fb:dc:9f:9d:38:0f:7e:43:1c:54:d1:cf:77: b4:6b:d7:66:76:a7:57:83:6b:13:eb:9b:ad:68:cf:4f:45:ee: 7d:fd:55:01:34:45:23:c0:43:2f:50:c1:2c:42:90:56:9a:ca: 84:99:fe:80:dc:c5:3e:62:9c:d6:d9:7e:8f:d0:19:de:ea:1d: 82:e6:27:1b:f6:0a:27:6b:33:00:c0:a9:21:03:0a:9c:ac:25: ec:32:9f:5a:e6:4f:00:f3:69:0e:29:ab:a6:b0:71:76:34:6e: 5d:21:e7:92:0b:05:49:f4:8a:b7:6a:8e:28:28:b7:26:28:4d: da:a8:18:75:c2:c1:a1:c4:32:5d:b1:70:dc:43:0b:09:02:dd: dc:65:62:0f:ab:62:0a:0d:4f:7d:93:21:70:89:f4:f4:46:7b: 89:53:2e:ae:ea:56:ed:93:cc:1e:50:63:b1:00:6c:5f:23:51: 1b:e2:7b:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvxx9ILAeC8XI5gRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MWRiOGItNTFkNi00NjRjLTlkZTktNmUwYTdiNmEz ZjVlMB4XDTI1MTEyMjEzMDAwM1oXDTI1MTEyNTEzMDAwMFowLzEtMCsGA1UEAxMk N2QxYzNmNDEtYWRlZi00NjU1LWFkMTctODdkOWNiMjRmZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYaEFtgCwHxnmfKkwhdNBFjUc6oXzB12AECm ek9PhHNtA+f2GM8qvZ4kTEe1+ddxPUpf8V/EY+kwbIRYuB6LVKbBeTq5uUk2yP+s xtoLPK1INPw3OgFaarTMLD2x8l5FTazHaoaXHmyXUySYB3kvT7JVLjwmxGkYrZEJ vGcAdwBy3eV4/FQlyEs30UkpmL3bJeCfbFaw/vY2+5ouZHVAgR63cY7eHA4ebZZ2 VgQJIncNmm9jNcoUc151NZfsCTsCLjDH7gS4qKUAE1YeHGtrdFHBhE8q9LDCwGxO +7IGexsCuRxBzYiRPRCa4D7KZ6B5fzdzeO3vkTwokhRQJMqU/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNhjzpzAXb7hq0iFp6UmoL8nBlr6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYx ZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2YTNmNWUvMGI2MWRiOGItNTFkNi00 NjRjLTlkZTktNmUwYTdiNmEzZjVlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGI2MWRiOGItNTFkNi00NjRjLTlk ZTktNmUwYTdiNmEzZjVlLzBiNjFkYjhiLTUxZDYtNDY0Yy05ZGU5LTZlMGE3YjZh M2Y1ZS5jcmwwHwYDVR0jBBgwFoAUdS0qoZtZVQWYC24FjN009fr+Mk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBh N2I2YTNmNWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBDgPJj2nrmxmihFAV+Ap0p HWY76XnarPmAezr0Ko1niu9+NQS1bPps7zxDqTfNSiQFhHXxnbpFIyl4I2c3pYgn mUsH/GWs2LEEsepS5Pvcn504D35DHFTRz3e0a9dmdqdXg2sT65utaM9PRe59/VUB NEUjwEMvUMEsQpBWmsqEmf6A3MU+YpzW2X6P0Bne6h2C5icb9gonazMAwKkhAwqc rCXsMp9a5k8A82kOKaumsHF2NG5dIeeSCwVJ9Iq3ao4oKLcmKE3aqBh1wsGhxDJd sXDcQwsJAt3cZWIPq2IKDU99kyFwifT0RnuJUy6u6lbtk8weUGOxAGxfI1Eb4nuo -----END CERTIFICATE-----Generated at Sat Nov 22 21:27:04 2025 by rpki-client