This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft File: 5cd0de07-7471-4282-8298-a3a4df46d4ed.mft (raw, json) Hash identifier: vsnG+zjBJNZfb5sXa1q8vDX4mnBWa4oRDxq37BDTEto= Subject key identifier: 2F:23:24:39:F3:4A:1B:5E:8E:FF:AA:B0:28:12:9F:5B:1E:3C:A7:F5 Authority key identifier: 81:CA:6C:23:10:0C:2C:63:BE:CD:DF:37:56:8C:6C:28:05:E0:76:6D Certificate issuer: /CN=5cd0de07-7471-4282-8298-a3a4df46d4ed Certificate serial: 010D0C9F4328584BEFEB5AB57634F06F8A98F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft Manifest number: 010D0C9F4328584A71897A2CA2199250B42A524C Signing time: Fri 21 Nov 2025 21:00:03 +0000 Manifest this update: Fri 21 Nov 2025 21:00:03 +0000 Manifest next update: Sun 23 Nov 2025 21:00:00 +0000 Files and hashes: 1: 5cd0de07-7471-4282-8298-a3a4df46d4ed.crl (hash: ldCBDqTKrDql58V/ah0ZcT9DTqO/Un6GFDOoPBxgbRw=) 2: c5c8713f-4413-3be5-821b-fadd12f15e99.roa (hash: Fu87pZsO+c9wQLG02yz2FqdSZk8/Ly4lXzetHWA/5cc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ef:eb:5a:b5:76:34:f0:6f:8a:98:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd0de07-7471-4282-8298-a3a4df46d4ed Validity Not Before: Nov 21 21:00:03 2025 GMT Not After : Nov 23 21:00:00 2025 GMT Subject: CN=97aa9ac1-c524-4163-a61f-000fb7d66ceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:39:ff:73:cb:6f:5c:09:a3:28:10:73:bf:5f: c3:e1:c1:28:bd:d1:e3:dd:0a:84:c0:d4:6b:44:2c: 5e:77:c0:55:f8:2b:27:6e:6c:13:85:83:c1:03:33: 4a:3c:4f:be:3b:a7:fb:14:40:2e:ca:d3:6d:7d:32: 1d:c4:84:7f:03:59:e5:8d:1f:8d:25:95:df:5e:62: 5c:b8:c6:7c:99:ad:66:ff:0f:fd:ed:d4:de:df:bd: bc:73:a7:3f:91:2d:85:f6:6f:93:4a:f3:39:04:93: 19:da:1c:c7:68:b8:7c:52:3b:0e:53:39:9a:95:d1: cf:8c:28:f5:8f:f6:9e:db:2f:3c:17:e5:19:69:c4: a3:20:4d:1f:e3:21:5a:eb:cc:8c:a3:11:e1:53:8d: 66:8b:5c:97:ba:ad:7b:93:26:11:d1:07:15:c2:ad: 36:4d:5e:ed:c8:c1:80:16:f7:8d:b7:d9:f6:bd:e4: 0b:38:15:3a:2f:df:ae:c0:4c:87:e9:2c:64:2f:cc: e7:dc:aa:70:fc:6a:01:de:53:e7:5e:bf:da:0d:87: 42:9d:c6:f7:88:9a:1f:57:05:99:09:e6:13:ef:ac: dd:20:1a:2d:9e:c6:81:11:cb:b8:5a:b0:60:8c:ac: eb:63:9d:84:cb:06:40:d3:af:f2:a8:27:cd:d7:a3: 5a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:23:24:39:F3:4A:1B:5E:8E:FF:AA:B0:28:12:9F:5B:1E:3C:A7:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed/5cd0de07-7471-4282-8298-a3a4df46d4ed.crl X509v3 Authority Key Identifier: keyid:81:CA:6C:23:10:0C:2C:63:BE:CD:DF:37:56:8C:6C:28:05:E0:76:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd0de07-7471-4282-8298-a3a4df46d4ed.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:f3:db:5a:da:03:c0:79:53:8a:96:f8:ed:c1:17:ed:3a:0a: 48:5e:4e:b9:ca:6c:51:3f:74:18:3b:3c:54:2d:01:b2:55:45: 0f:34:e6:dc:82:96:d9:b1:a2:ea:a0:94:83:be:79:9c:06:d9: ed:a3:2a:9e:9e:b5:ff:dc:48:1a:cc:63:ee:a7:75:91:b6:d5: 20:3f:34:22:07:c7:65:a2:ca:19:e4:a5:97:1b:fe:da:c7:e3: a4:9d:50:d7:11:f4:c3:a1:83:87:8f:a2:af:32:cd:39:96:b3: ee:74:12:8a:37:80:17:0e:ee:18:b2:6a:21:86:55:b2:b8:88: e3:b8:3a:2e:48:0b:39:43:85:af:4f:49:12:14:0d:1f:f0:2e: 41:62:01:06:09:3c:0c:d6:d1:13:6f:4b:6b:67:68:91:f2:8c: 64:90:d1:16:e1:88:3d:c5:96:a5:c3:2a:7b:ba:d2:ec:4d:b9: b1:17:c0:ea:3f:0e:86:8f:89:0b:08:e0:a7:11:8b:a1:e7:26: 81:f1:d6:b9:3b:eb:89:d9:10:f2:b7:2d:03:1a:be:23:d8:2c: f2:c3:24:42:4a:9d:71:88:86:d9:bf:f8:9d:d8:33:fe:ac:b5: 47:2c:9d:8d:95:ce:c8:90:7a:f1:f5:5d:f8:7c:61:38:90:1d: d4:3c:a6:3a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvv61q1djTwb4qY9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkMGRlMDctNzQ3MS00MjgyLTgyOTgtYTNhNGRmNDZk NGVkMB4XDTI1MTEyMTIxMDAwM1oXDTI1MTEyMzIxMDAwMFowLzEtMCsGA1UEAxMk OTdhYTlhYzEtYzUyNC00MTYzLWE2MWYtMDAwZmI3ZDY2Y2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljn/c8tvXAmjKBBzv1/D4cEovdHj3QqEwNRr RCxed8BV+CsnbmwThYPBAzNKPE++O6f7FEAuytNtfTIdxIR/A1nljR+NJZXfXmJc uMZ8ma1m/w/97dTe3728c6c/kS2F9m+TSvM5BJMZ2hzHaLh8UjsOUzmaldHPjCj1 j/ae2y88F+UZacSjIE0f4yFa68yMoxHhU41mi1yXuq17kyYR0QcVwq02TV7tyMGA FveNt9n2veQLOBU6L9+uwEyH6SxkL8zn3Kpw/GoB3lPnXr/aDYdCncb3iJofVwWZ CeYT76zdIBotnsaBEcu4WrBgjKzrY52EywZA06/yqCfN16Na9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC8jJDnzShtejv+qsCgSn1sePKf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Qw ZGUwNy03NDcxLTQyODItODI5OC1hM2E0ZGY0NmQ0ZWQvNWNkMGRlMDctNzQ3MS00 MjgyLTgyOTgtYTNhNGRmNDZkNGVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkMGRlMDctNzQ3MS00MjgyLTgy OTgtYTNhNGRmNDZkNGVkLzVjZDBkZTA3LTc0NzEtNDI4Mi04Mjk4LWEzYTRkZjQ2 ZDRlZC5jcmwwHwYDVR0jBBgwFoAUgcpsIxAMLGO+zd83VoxsKAXgdm0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2QwZGUwNy03NDcxLTQyODItODI5OC1hM2E0 ZGY0NmQ0ZWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCd89ta2gPAeVOKlvjtwRft OgpIXk65ymxRP3QYOzxULQGyVUUPNObcgpbZsaLqoJSDvnmcBtntoyqenrX/3Ega zGPup3WRttUgPzQiB8dlosoZ5KWXG/7ax+OknVDXEfTDoYOHj6KvMs05lrPudBKK N4AXDu4YsmohhlWyuIjjuDouSAs5Q4WvT0kSFA0f8C5BYgEGCTwM1tETb0trZ2iR 8oxkkNEW4Yg9xZalwyp7utLsTbmxF8DqPw6Gj4kLCOCnEYuh5yaB8da5O+uJ2RDy ty0DGr4j2CzywyRCSp1xiIbZv/id2DP+rLVHLJ2Nlc7IkHrx9V34fGE4kB3UPKY6 -----END CERTIFICATE-----Generated at Sat Nov 22 21:17:01 2025 by rpki-client