This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft File: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft (raw, json) Hash identifier: 3c4wJlxqW8yU5mdrEgu/Dt9lFL3pJWxlPG8obnTajHA= Subject key identifier: 79:1C:44:70:ED:DF:36:31:FE:38:49:80:CB:2A:17:5E:24:23:DC:5B Authority key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Certificate issuer: /CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Certificate serial: 010D0C9F4328584BF08040CF2D4C91C753288140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft Manifest number: 010D0C9F4328584B4BCFD881B87CBE90580D31BB Signing time: Sat 22 Nov 2025 02:00:03 +0000 Manifest this update: Sat 22 Nov 2025 02:00:03 +0000 Manifest next update: Mon 24 Nov 2025 02:00:00 +0000 Files and hashes: 1: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl (hash: pS/bpVjN8Chm0eL/kuSRIvzqrJl04ROcZutJiKWWMLo=) 2: 4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer (hash: YQB3ja0LD/RpPSpiFOvhsYwRInhxQQNy5l8nfauLYkE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:80:40:cf:2d:4c:91:c7:53:28:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Validity Not Before: Nov 22 02:00:03 2025 GMT Not After : Nov 24 02:00:00 2025 GMT Subject: CN=763afea9-4bf8-4dcd-bee3-09ef5bbc92ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:b7:9a:6f:50:f7:93:1d:d6:76:7f:45:a1: 86:14:6c:47:51:b2:1d:2e:d6:6c:85:bc:a9:66:e2: c3:ea:65:d1:d7:c8:b3:78:25:54:9b:55:3a:10:9d: 6e:20:de:66:f0:dd:a1:34:ca:0a:ab:fc:ce:52:92: 8a:5b:f1:26:fd:e2:10:42:7b:25:9c:e0:9a:4b:71: 71:d4:6f:42:68:1e:5b:e3:1e:c9:a1:71:bf:76:21: f0:be:f8:13:5b:7c:b0:d7:fc:41:b7:1a:15:11:61: 85:ab:da:8d:56:0f:bb:d6:13:80:91:27:d3:ed:ba: 2c:42:e5:78:0d:3d:16:bf:4f:d8:8b:d5:df:0b:42: cc:d7:11:c7:af:93:48:45:cc:13:ad:d6:fc:00:9b: af:79:e0:ab:71:64:e2:0a:95:21:af:25:71:24:87: f7:49:a4:da:98:45:4e:ab:3f:aa:9d:2c:63:d2:4e: 58:6f:75:40:45:d3:5f:a3:e0:d8:0c:29:38:68:a6: 21:6d:fe:b6:47:90:54:38:e5:07:5f:d0:a1:8d:9b: 9f:16:69:22:cf:7b:91:6a:8b:b4:7c:a3:fe:a8:5d: b5:15:93:56:71:d0:47:8c:bd:12:a8:fd:0f:82:81: ff:71:c2:75:7e:94:7a:53:42:58:e8:c6:9c:81:1c: c0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:44:70:ED:DF:36:31:FE:38:49:80:CB:2A:17:5E:24:23:DC:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl X509v3 Authority Key Identifier: keyid:0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:08:e3:b6:d9:cd:f3:d7:c1:91:00:ed:02:2a:44:fb:33:9c: ad:b2:01:6c:57:d6:9d:13:f1:a1:82:21:0d:1d:a7:17:31:33: a5:36:b3:2d:7c:32:ae:80:04:fa:f3:37:20:8f:2f:d5:7b:75: c5:bd:0a:4b:67:de:d7:89:93:76:bc:d1:6b:31:32:85:b3:77: 58:f2:30:93:d8:6a:c0:22:51:35:6f:17:a0:11:2a:0f:12:94: e6:13:af:50:ed:a1:ba:4f:c9:f8:a9:6e:9c:5b:25:80:03:96: 62:54:74:5b:21:17:d9:18:15:c8:69:66:88:95:f8:38:ee:ef: bb:aa:71:ff:ff:6e:e0:b9:d2:e6:c9:3f:8b:e3:df:23:3f:cc: e8:25:72:08:5b:67:77:39:cb:5b:e6:b3:5b:36:33:92:fa:9a: c4:35:cd:66:6d:24:e0:4f:a1:ba:67:b7:d4:69:f7:42:c6:ec: 0e:39:ef:f4:26:a4:84:90:83:a9:2c:60:f6:cc:d9:c7:58:6f: c2:ca:07:63:0d:be:c8:ef:77:1c:1d:f8:69:7c:9c:2e:e6:9d: d2:44:d6:fa:5e:78:4b:f6:a0:51:29:30:44:19:be:a2:12:87: 8d:66:77:87:b6:c8:ef:84:f3:58:91:9e:96:00:b2:5d:a7:1a: dc:ec:86:33 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvwgEDPLUyRx1MogUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIz YmRkMB4XDTI1MTEyMjAyMDAwM1oXDTI1MTEyNDAyMDAwMFowLzEtMCsGA1UEAxMk NzYzYWZlYTktNGJmOC00ZGNkLWJlZTMtMDllZjViYmM5MmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQG3mm9Q95Md1nZ/RaGGFGxHUbIdLtZshbyp ZuLD6mXR18izeCVUm1U6EJ1uIN5m8N2hNMoKq/zOUpKKW/Em/eIQQnslnOCaS3Fx 1G9CaB5b4x7JoXG/diHwvvgTW3yw1/xBtxoVEWGFq9qNVg+71hOAkSfT7bosQuV4 DT0Wv0/Yi9XfC0LM1xHHr5NIRcwTrdb8AJuveeCrcWTiCpUhryVxJIf3SaTamEVO qz+qnSxj0k5Yb3VARdNfo+DYDCk4aKYhbf62R5BUOOUHX9ChjZufFmkiz3uRaou0 fKP+qF21FZNWcdBHjL0SqP0PgoH/ccJ1fpR6U0JY6MacgRzAfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHkcRHDt3zYx/jhJgMsqF14kI9xbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0 YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQvMjk1NGI4YTEtNjlkZS00 NjMwLTgwMDYtNGRjOGZmZTIzYmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjk1NGI4YTEtNjlkZS00NjMwLTgw MDYtNGRjOGZmZTIzYmRkLzI5NTRiOGExLTY5ZGUtNDYzMC04MDA2LTRkYzhmZmUy M2JkZC5jcmwwHwYDVR0jBBgwFoAUCtV6etttzc0D69uV89EzrhnHBgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4 ZmZlMjNiZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHCOO22c3z18GRAO0CKkT7 M5ytsgFsV9adE/GhgiENHacXMTOlNrMtfDKugAT68zcgjy/Ve3XFvQpLZ97XiZN2 vNFrMTKFs3dY8jCT2GrAIlE1bxegESoPEpTmE69Q7aG6T8n4qW6cWyWAA5ZiVHRb IRfZGBXIaWaIlfg47u+7qnH//27gudLmyT+L498jP8zoJXIIW2d3Octb5rNbNjOS +prENc1mbSTgT6G6Z7fUafdCxuwOOe/0JqSEkIOpLGD2zNnHWG/CygdjDb7I73cc HfhpfJwu5p3SRNb6XnhL9qBRKTBEGb6iEoeNZneHtsjvhPNYkZ6WALJdpxrc7IYz -----END CERTIFICATE-----Generated at Sat Nov 22 21:13:31 2025 by rpki-client