This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft File: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft (raw, json) Hash identifier: bFx1oPcs8R8udW2z/0r/8P8fskND5J3XRjOj5hJHj8U= Subject key identifier: 9B:F1:8F:A4:E5:1F:B0:6E:24:38:F1:CD:3E:6E:42:38:A4:7A:10:38 Authority key identifier: F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 Certificate issuer: /CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Certificate serial: 010D0C9F4328584BF132ECDA64E1950BD343A7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft Manifest number: 010D0C9F4328584AA232CF9F40DC9EEE22B43EBF Signing time: Sat 22 Nov 2025 08:00:03 +0000 Manifest this update: Sat 22 Nov 2025 08:00:03 +0000 Manifest next update: Tue 25 Nov 2025 08:00:00 +0000 Files and hashes: 1: 18f5c96f-14eb-3372-9eca-1733fe1ed835.roa (hash: j0c0UtB+MelJXNrh2Rr58Pu+leZ4mX64VTJgoyWH09w=) 2: 28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl (hash: Zkwto7M41jAwILHAk01NuPK85q4aJeTOACXldlvJSFY=) 3: 4c649115-742b-32bc-aa17-aa4f55ec3133.roa (hash: FDvOgOBbWU45sGop4gnVk4h4l4HSZvj1DNvKiNAMIvU=) 4: 4f714fc6-281c-3084-8018-09ef764e7e1c.roa (hash: XlWgSCZ46gCWeaJbUoNW/DlKeSJtC5vPHgUEK0pXJ+w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:32:ec:da:64:e1:95:0b:d3:43:a7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28035ea2-c1d5-4b29-a8c4-1b31379c8aff Validity Not Before: Nov 22 08:00:03 2025 GMT Not After : Nov 25 08:00:00 2025 GMT Subject: CN=e64e274a-d9d0-4d29-8c83-3066cf57c04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7a:f2:13:5b:6c:1f:6c:12:9a:9b:b8:e4:f5: 29:64:85:f5:17:94:0f:94:c5:09:67:da:de:d7:22: 4f:b2:8d:4f:07:fc:fe:9b:99:de:71:52:4d:fa:0f: 3d:60:4b:be:ca:11:3a:48:06:9a:d7:b3:fc:fa:60: e3:c9:2d:5d:95:a7:8f:e0:37:91:6a:b0:77:38:3b: ba:8a:52:7c:c5:91:38:ae:b3:6d:d4:cd:24:8c:ad: 8e:f3:44:91:71:ac:a8:94:bb:88:bc:8f:3d:bb:22: ff:f9:00:cb:19:b6:8e:91:59:cf:b1:1f:c4:a0:a2: de:b0:27:b9:01:af:54:bf:0d:9a:ad:be:86:d5:e8: 2c:12:e6:56:31:98:3d:d9:89:52:8b:69:f3:7b:41: fa:f3:25:41:bc:b4:16:ef:70:6d:c3:d7:11:ec:54: 67:29:f2:53:d5:65:ed:86:f3:52:dd:18:b8:4e:fc: bf:9d:39:a8:5b:34:0a:dc:ab:a5:66:f0:6d:56:d6: 92:8b:f6:41:71:8e:52:d2:37:fe:40:34:90:db:ed: eb:87:e6:4f:c9:6a:c5:91:80:d9:dd:9c:9a:fe:c7: 17:57:1a:d5:81:18:71:4a:1d:59:06:20:7a:ff:9e: 4b:ff:8f:2b:3d:3f:1f:0f:24:17:8f:eb:31:33:c3: d4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F1:8F:A4:E5:1F:B0:6E:24:38:F1:CD:3E:6E:42:38:A4:7A:10:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.crl X509v3 Authority Key Identifier: keyid:F1:AF:E0:C6:3F:41:DB:75:5C:B2:1E:FD:F1:D1:F8:F7:D0:A9:FB:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/28035ea2-c1d5-4b29-a8c4-1b31379c8aff.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6d:43:60:e6:19:78:9e:2d:53:14:f2:c0:26:9a:d1:a0:3b: e0:de:f7:f0:e7:29:5e:e5:56:f1:98:55:d7:55:ed:70:7b:49: e6:b8:b9:b6:45:cb:d0:21:44:45:af:90:29:c4:9b:48:89:89: 91:ec:53:b1:55:83:06:5d:ef:d0:92:35:7d:4d:c5:57:f3:39: 60:71:34:f7:71:d2:f7:e6:c1:96:e9:d6:f4:95:25:c0:e0:c2: 8b:be:c5:f9:0f:29:11:27:46:81:c9:a3:a5:61:29:c9:6e:29: d2:a0:d6:fd:47:22:c4:d7:f9:b7:1a:de:92:25:dc:d7:5e:c7: 6b:f4:1f:8f:02:3b:73:c6:dc:12:5f:2a:bc:d0:a3:2d:1a:1a: c2:7f:f6:a3:15:2f:14:1c:ca:2f:67:cc:ba:b5:5f:91:56:60: 22:1e:7d:a8:29:bd:28:3c:f9:9a:d5:7e:37:17:eb:0a:42:0e: 9f:a5:97:6a:cb:24:f3:88:9b:c8:5f:10:75:86:b5:08:09:59: a9:d7:fd:e9:54:43:be:b0:3b:96:51:08:9f:e5:03:ff:b8:e8: 38:d8:82:eb:94:f4:db:09:fb:b8:43:ba:6d:41:50:96:e0:01: e3:27:0c:4c:df:d7:2b:94:ae:7b:4e:31:b0:7f:ce:72:80:dd: f3:08:2a:b4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvxMuzaZOGVC9NDp8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgwMzVlYTItYzFkNS00YjI5LWE4YzQtMWIzMTM3OWM4 YWZmMB4XDTI1MTEyMjA4MDAwM1oXDTI1MTEyNTA4MDAwMFowLzEtMCsGA1UEAxMk ZTY0ZTI3NGEtZDlkMC00ZDI5LThjODMtMzA2NmNmNTdjMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53ryE1tsH2wSmpu45PUpZIX1F5QPlMUJZ9re 1yJPso1PB/z+m5necVJN+g89YEu+yhE6SAaa17P8+mDjyS1dlaeP4DeRarB3ODu6 ilJ8xZE4rrNt1M0kjK2O80SRcayolLuIvI89uyL/+QDLGbaOkVnPsR/EoKLesCe5 Aa9Uvw2arb6G1egsEuZWMZg92YlSi2nze0H68yVBvLQW73Btw9cR7FRnKfJT1WXt hvNS3Ri4Tvy/nTmoWzQK3KulZvBtVtaSi/ZBcY5S0jf+QDSQ2+3rh+ZPyWrFkYDZ 3Zya/scXVxrVgRhxSh1ZBiB6/55L/48rPT8fDyQXj+sxM8PUjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJvxj6TlH7BuJDjxzT5uQjikehA4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yODAz NWVhMi1jMWQ1LTRiMjktYThjNC0xYjMxMzc5YzhhZmYvMjgwMzVlYTItYzFkNS00 YjI5LWE4YzQtMWIzMTM3OWM4YWZmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjgwMzVlYTItYzFkNS00YjI5LWE4 YzQtMWIzMTM3OWM4YWZmLzI4MDM1ZWEyLWMxZDUtNGIyOS1hOGM0LTFiMzEzNzlj OGFmZi5jcmwwHwYDVR0jBBgwFoAU8a/gxj9B23Vcsh798dH499Cp++AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yODAzNWVhMi1jMWQ1LTRiMjktYThjNC0xYjMx Mzc5YzhhZmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlbUNg5hl4ni1TFPLAJprR oDvg3vfw5yle5VbxmFXXVe1we0nmuLm2RcvQIURFr5ApxJtIiYmR7FOxVYMGXe/Q kjV9TcVX8zlgcTT3cdL35sGW6db0lSXA4MKLvsX5DykRJ0aByaOlYSnJbinSoNb9 RyLE1/m3Gt6SJdzXXsdr9B+PAjtzxtwSXyq80KMtGhrCf/ajFS8UHMovZ8y6tV+R VmAiHn2oKb0oPPma1X43F+sKQg6fpZdqyyTziJvIXxB1hrUICVmp1/3pVEO+sDuW UQif5QP/uOg42ILrlPTbCfu4Q7ptQVCW4AHjJwxM39crlK57TjGwf85ygN3zCCq0 -----END CERTIFICATE-----Generated at Sat Nov 22 21:16:30 2025 by rpki-client