This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.mft File: 2b54e030-771e-426d-9da1-303caa03d397.mft (raw, json) Hash identifier: 3M5lVhCaQnlztDOkVSSjdqcIZpuyVIeNaMiVSi8UfP0= Subject key identifier: 15:B6:F6:22:03:68:16:87:C8:D8:36:22:A2:B6:D9:C2:9F:26:56:7D Authority key identifier: AF:D7:C6:CF:AC:B6:EE:36:20:7B:9A:92:B9:C4:12:48:FF:C7:24:C8 Certificate issuer: /CN=2b54e030-771e-426d-9da1-303caa03d397 Certificate serial: 010D0C9F4328584BF09E074B770E1896C6ADB800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.mft Manifest number: 010D0C9F4328584B624226291BAF0034A68EFCB4 Signing time: Sat 22 Nov 2025 03:00:03 +0000 Manifest this update: Sat 22 Nov 2025 03:00:03 +0000 Manifest next update: Mon 24 Nov 2025 03:00:00 +0000 Files and hashes: 1: 1d4d4e08-e65f-3f8e-940f-45549d30ca63.roa (hash: qbJYg1NlxenCpf4I0SbZztD3Z0dwIfF8W0hC1N1yH9w=) 2: 2b54e030-771e-426d-9da1-303caa03d397.crl (hash: si1i/1JOgpWHfrSafaAXu+kZVI4rPzKv9jUYaBbGqJI=) 3: 7f66f83d-0790-3572-b368-fb626e8c25be.roa (hash: M8Fu3IQhy4xr82iqmWz6IuREGCuTt2JYi8mas0o1qzc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f0:9e:07:4b:77:0e:18:96:c6:ad:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b54e030-771e-426d-9da1-303caa03d397 Validity Not Before: Nov 22 03:00:03 2025 GMT Not After : Nov 24 03:00:00 2025 GMT Subject: CN=17336cb2-6011-4d3f-b6a5-c08d61fcf947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:d5:63:fc:a9:20:06:83:bf:e5:2d:b1:dd: 5f:eb:7d:7e:dd:e3:d7:93:87:05:67:a1:98:b8:8c: 92:e7:53:06:c7:4f:11:db:2f:90:ea:a5:86:1e:94: 3d:e3:fe:6f:b7:39:b2:29:f5:cd:4c:a6:f7:21:e7: 1a:a2:c6:cd:08:be:1f:a8:3a:39:0c:75:fa:cd:24: ef:64:97:29:2b:3a:5b:15:b2:a9:a3:70:c4:d5:61: 26:65:84:b4:8c:7e:a4:0c:db:b1:0b:9d:e4:d0:04: 78:48:73:ad:4c:5f:bd:66:5d:8b:fe:b2:18:87:92: c9:db:73:d8:7f:69:4c:e0:f5:03:9e:fe:09:b7:5f: ce:45:3e:69:fe:1b:ad:0c:db:89:ca:ed:62:0f:a1: 58:78:cb:ae:ab:13:5b:37:41:87:56:f0:3b:01:c5: 93:3e:aa:b0:19:5b:92:a7:5c:26:34:b8:b1:4a:a4: 12:b5:90:bc:dd:af:a5:e9:56:3a:c3:2c:12:26:c7: e0:8f:84:0f:e8:46:4d:74:b0:9f:4e:f3:2b:15:89: 45:8b:33:4b:89:9c:7d:eb:19:e6:b8:0a:a9:b1:89: f6:0e:90:c5:b0:ea:62:a5:82:e4:92:b8:54:57:22: 52:0a:50:7f:b5:9c:92:b2:e8:1d:73:fe:7d:eb:26: 20:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B6:F6:22:03:68:16:87:C8:D8:36:22:A2:B6:D9:C2:9F:26:56:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.crl X509v3 Authority Key Identifier: keyid:AF:D7:C6:CF:AC:B6:EE:36:20:7B:9A:92:B9:C4:12:48:FF:C7:24:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b2:b5:10:2d:f8:8d:b2:fd:11:1e:64:a0:80:c4:6f:b4:7e: 6d:76:84:ad:1e:09:6d:17:67:fd:0d:33:10:01:9e:ae:e0:82: b4:46:50:16:66:6a:d7:79:5a:aa:b5:81:a3:bb:0f:d4:85:81: bb:9d:99:10:41:a5:ec:46:8f:77:44:5d:0d:60:43:1e:a0:0f: 0f:3d:b3:d5:be:ea:39:6e:97:02:df:2c:27:58:85:3c:8b:47: 11:b7:86:67:ae:06:0b:ec:0c:4c:84:57:5f:63:da:8d:7d:74: 4f:1c:18:d7:46:db:9e:03:1e:80:75:19:c8:37:d7:d0:89:bb: 5a:26:bd:4e:3f:80:ee:75:d3:37:7c:e5:2c:0a:4e:bd:fc:23: ea:9b:0a:36:e1:bc:8a:f7:df:4d:64:dc:11:3a:b6:50:73:c3: f3:e2:71:e7:49:9c:22:8b:a3:31:da:8d:78:c7:f3:20:36:24: 1a:e2:a4:cf:e3:bd:a1:68:2e:f6:95:1f:b7:a8:4d:c8:7f:6e: 70:9d:28:6d:7a:6f:d7:59:c6:13:93:44:09:8d:14:fe:3b:b5: 4e:b7:24:d6:e0:aa:40:30:83:5d:5a:f4:57:ae:e3:a8:55:e9: 90:b4:a1:fa:42:1f:68:54:88:34:6d:ca:08:71:18:9e:f7:5b: 7f:d9:9e:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvwngdLdw4YlsatuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1NGUwMzAtNzcxZS00MjZkLTlkYTEtMzAzY2FhMDNk Mzk3MB4XDTI1MTEyMjAzMDAwM1oXDTI1MTEyNDAzMDAwMFowLzEtMCsGA1UEAxMk MTczMzZjYjItNjAxMS00ZDNmLWI2YTUtYzA4ZDYxZmNmOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAfVY/ypIAaDv+Utsd1f631+3ePXk4cFZ6GY uIyS51MGx08R2y+Q6qWGHpQ94/5vtzmyKfXNTKb3IecaosbNCL4fqDo5DHX6zSTv ZJcpKzpbFbKpo3DE1WEmZYS0jH6kDNuxC53k0AR4SHOtTF+9Zl2L/rIYh5LJ23PY f2lM4PUDnv4Jt1/ORT5p/hutDNuJyu1iD6FYeMuuqxNbN0GHVvA7AcWTPqqwGVuS p1wmNLixSqQStZC83a+l6VY6wywSJsfgj4QP6EZNdLCfTvMrFYlFizNLiZx96xnm uAqpsYn2DpDFsOpipYLkkrhUVyJSClB/tZySsugdc/596yYgWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBW29iIDaBaHyNg2IqK22cKfJlZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYjU0 ZTAzMC03NzFlLTQyNmQtOWRhMS0zMDNjYWEwM2QzOTcvMmI1NGUwMzAtNzcxZS00 MjZkLTlkYTEtMzAzY2FhMDNkMzk3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmI1NGUwMzAtNzcxZS00MjZkLTlk YTEtMzAzY2FhMDNkMzk3LzJiNTRlMDMwLTc3MWUtNDI2ZC05ZGExLTMwM2NhYTAz ZDM5Ny5jcmwwHwYDVR0jBBgwFoAUr9fGz6y27jYge5qSucQSSP/HJMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYjU0ZTAzMC03NzFlLTQyNmQtOWRhMS0zMDNj YWEwM2QzOTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHsrUQLfiNsv0RHmSggMRv tH5tdoStHgltF2f9DTMQAZ6u4IK0RlAWZmrXeVqqtYGjuw/UhYG7nZkQQaXsRo93 RF0NYEMeoA8PPbPVvuo5bpcC3ywnWIU8i0cRt4ZnrgYL7AxMhFdfY9qNfXRPHBjX RtueAx6AdRnIN9fQibtaJr1OP4DuddM3fOUsCk69/CPqmwo24byK999NZNwROrZQ c8Pz4nHnSZwii6Mx2o14x/MgNiQa4qTP472haC72lR+3qE3If25wnShtem/XWcYT k0QJjRT+O7VOtyTW4KpAMINdWvRXruOoVemQtKH6Qh9oVIg0bcoIcRie91t/2Z6i -----END CERTIFICATE-----Generated at Sat Nov 22 21:15:29 2025 by rpki-client