This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.mft File: 43ba2928-8b99-4e95-865c-b82d26de7be9.mft (raw, json) Hash identifier: 1wZrR9DvWYhGIph0IocAoYIKkRnXlVOxyKLUOThtDs8= Subject key identifier: 1D:5B:39:4A:07:F9:75:96:C0:2A:D3:14:D5:F7:FA:13:43:3F:02:5D Authority key identifier: E1:23:0F:1D:10:77:CB:45:75:A8:5F:35:56:3E:40:AF:B8:19:C2:81 Certificate issuer: /CN=43ba2928-8b99-4e95-865c-b82d26de7be9 Certificate serial: 010D0C9F4328584BF1E595483EF60EB7489F8160 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.mft Manifest number: 010D0C9F4328584A89CE42CC57D0BD270D72B986 Signing time: Sat 22 Nov 2025 14:00:03 +0000 Manifest this update: Sat 22 Nov 2025 14:00:03 +0000 Manifest next update: Mon 24 Nov 2025 14:00:00 +0000 Files and hashes: 1: 43ba2928-8b99-4e95-865c-b82d26de7be9.crl (hash: Jxv5Xr1T6vpva7ylA37wv0twf6FswNSpmYq4lPwSxM8=) 2: dcf95846-6a90-3029-aed6-381d9852d4c9.roa (hash: VlkifwRkIei+W8NMg+RxdYRTd891ETQZs4+CQwEIloE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:e5:95:48:3e:f6:0e:b7:48:9f:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ba2928-8b99-4e95-865c-b82d26de7be9 Validity Not Before: Nov 22 14:00:03 2025 GMT Not After : Nov 24 14:00:00 2025 GMT Subject: CN=253b19a6-3c20-4829-8c0a-7743d0af6c0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:08:2d:54:58:83:65:c1:fa:a8:81:ef:b6:33: 7e:d2:a9:5a:60:66:37:58:d2:f3:48:2f:4a:15:65: 66:b2:9b:c1:14:61:71:76:4b:cf:eb:bd:f8:d0:1a: 16:a1:0a:4d:7f:76:85:c4:13:b8:9a:58:bf:74:e4: 6f:05:d5:71:5e:d3:a5:e0:c5:79:57:4c:b4:99:b7: 34:04:13:c6:60:f6:75:ff:d3:14:58:a3:b4:b0:29: a7:d9:c1:47:3a:1d:1b:2a:69:c1:77:22:0d:4a:f7: 07:2d:8c:7d:13:fd:7b:88:48:63:74:4c:90:52:36: f6:92:70:32:7a:99:30:f1:97:b1:28:18:ef:d9:3b: 5c:f2:e8:3a:ea:6c:82:5b:6b:05:d7:a2:a4:ed:1c: 54:e5:15:39:81:15:74:e0:b4:28:a0:c6:d9:d6:ae: ab:68:b5:1f:dc:71:74:f6:e0:4f:81:1f:5c:2f:db: e4:0e:54:6a:23:1d:5b:bf:cf:01:d9:e4:2a:22:a2: de:af:91:8a:12:74:6a:53:a0:4b:01:c8:7b:5d:d8: 29:a8:6e:24:49:66:ce:ab:e9:6f:f9:45:2d:36:35: 9b:25:93:89:b0:51:d3:79:c5:37:4c:5e:d6:17:af: f8:11:58:eb:92:54:30:34:0f:df:9d:b6:bf:35:0d: 5f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:5B:39:4A:07:F9:75:96:C0:2A:D3:14:D5:F7:FA:13:43:3F:02:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9/43ba2928-8b99-4e95-865c-b82d26de7be9.crl X509v3 Authority Key Identifier: keyid:E1:23:0F:1D:10:77:CB:45:75:A8:5F:35:56:3E:40:AF:B8:19:C2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/43ba2928-8b99-4e95-865c-b82d26de7be9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c6:a9:9c:8b:f8:11:4f:fa:1f:eb:da:9e:2f:a3:86:46:61: 08:da:ae:45:c3:13:d6:d8:b8:b8:91:42:69:3f:05:76:b7:1c: 86:97:d3:7c:7d:fb:48:9f:80:4d:e9:c9:9d:5f:e6:2d:ab:a9: 57:46:b7:0d:7b:ac:2d:61:6f:ad:bc:dc:b9:ed:24:e6:9d:10: 26:19:c4:bb:2f:b0:87:84:27:35:0e:36:31:e4:da:fd:62:f8: 2e:b3:01:87:e8:63:fe:d3:24:5e:17:7b:ff:c4:c4:8e:ed:60: f5:5e:c4:dc:a5:0f:38:df:82:4a:7e:6c:11:72:49:9b:de:a3: fe:a0:de:b3:11:5e:44:b6:82:89:59:7b:bd:1f:58:a5:77:24: 59:db:24:2f:44:f4:77:a4:11:9b:11:94:af:a6:81:40:92:d2: 7a:7d:a9:a0:6e:5b:e9:f9:b6:0a:2d:31:b8:b1:94:68:b6:9c: 7e:6d:c0:08:e8:2c:3c:97:bb:73:df:bc:14:3d:50:4e:81:ca: 8d:4f:c5:43:1f:21:34:7c:67:f5:82:ea:8c:79:0a:a3:de:63: f9:c5:2e:82:59:23:63:f7:52:9f:32:67:75:ea:ee:63:b4:2a: 71:f0:8b:34:f4:bd:64:d5:c1:08:d9:bc:e7:fa:17:0d:c5:28: aa:04:fb:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvx5ZVIPvYOt0ifgWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNiYTI5MjgtOGI5OS00ZTk1LTg2NWMtYjgyZDI2ZGU3 YmU5MB4XDTI1MTEyMjE0MDAwM1oXDTI1MTEyNDE0MDAwMFowLzEtMCsGA1UEAxMk MjUzYjE5YTYtM2MyMC00ODI5LThjMGEtNzc0M2QwYWY2YzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwgtVFiDZcH6qIHvtjN+0qlaYGY3WNLzSC9K FWVmspvBFGFxdkvP67340BoWoQpNf3aFxBO4mli/dORvBdVxXtOl4MV5V0y0mbc0 BBPGYPZ1/9MUWKO0sCmn2cFHOh0bKmnBdyINSvcHLYx9E/17iEhjdEyQUjb2knAy epkw8ZexKBjv2Ttc8ug66myCW2sF16Kk7RxU5RU5gRV04LQooMbZ1q6raLUf3HF0 9uBPgR9cL9vkDlRqIx1bv88B2eQqIqLer5GKEnRqU6BLAch7XdgpqG4kSWbOq+lv +UUtNjWbJZOJsFHTecU3TF7WF6/4EVjrklQwNA/fnba/NQ1fzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB1bOUoH+XWWwCrTFNX3+hNDPwJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC80M2Jh MjkyOC04Yjk5LTRlOTUtODY1Yy1iODJkMjZkZTdiZTkvNDNiYTI5MjgtOGI5OS00 ZTk1LTg2NWMtYjgyZDI2ZGU3YmU5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNDNiYTI5MjgtOGI5OS00ZTk1LTg2 NWMtYjgyZDI2ZGU3YmU5LzQzYmEyOTI4LThiOTktNGU5NS04NjVjLWI4MmQyNmRl N2JlOS5jcmwwHwYDVR0jBBgwFoAU4SMPHRB3y0V1qF81Vj5Ar7gZwoEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC80M2JhMjkyOC04Yjk5LTRlOTUtODY1Yy1iODJk MjZkZTdiZTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByxqmci/gRT/of69qeL6OG RmEI2q5FwxPW2Li4kUJpPwV2txyGl9N8fftIn4BN6cmdX+Ytq6lXRrcNe6wtYW+t vNy57STmnRAmGcS7L7CHhCc1DjYx5Nr9YvguswGH6GP+0yReF3v/xMSO7WD1XsTc pQ8434JKfmwRckmb3qP+oN6zEV5EtoKJWXu9H1ildyRZ2yQvRPR3pBGbEZSvpoFA ktJ6famgblvp+bYKLTG4sZRotpx+bcAI6Cw8l7tz37wUPVBOgcqNT8VDHyE0fGf1 guqMeQqj3mP5xS6CWSNj91KfMmd16u5jtCpx8Is09L1k1cEI2bzn+hcNxSiqBPvs -----END CERTIFICATE-----Generated at Sat Nov 22 21:37:48 2025 by rpki-client