This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.mft File: 720bf1f5-bfdc-4e9b-aec9-45f16525afbe.mft (raw, json) Hash identifier: EuWwuIgLWQ8IO0KFNl9f8rwyPYq/EawdBb7W5h1R5z8= Subject key identifier: 5E:87:8A:06:9C:A7:D6:CA:B8:77:58:4A:67:76:61:A0:B3:E2:5C:95 Authority key identifier: 66:C7:EB:B2:4D:26:86:16:7A:77:EC:EC:4B:95:D7:30:03:81:5E:0E Certificate issuer: /CN=720bf1f5-bfdc-4e9b-aec9-45f16525afbe Certificate serial: 010D0C9F4328584BF23EECAD6CC39F4F86250B40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.mft Manifest number: 010D0C9F4328584B66ADB83F831BC0DCC55D7C33 Signing time: Sat 22 Nov 2025 17:00:03 +0000 Manifest this update: Sat 22 Nov 2025 17:00:03 +0000 Manifest next update: Tue 25 Nov 2025 17:00:00 +0000 Files and hashes: 1: 720bf1f5-bfdc-4e9b-aec9-45f16525afbe.crl (hash: tnWHqvDVx2OmfdyML5g5Nir5lUrRTKjOxH7c3ECHsWg=) 2: 9464385d-488a-39dc-81c1-88e77971887a.roa (hash: reMK8t3p1BWeK6d1sgIZO8A1F+xjOCNshz4UzA3vdHY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f2:3e:ec:ad:6c:c3:9f:4f:86:25:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=720bf1f5-bfdc-4e9b-aec9-45f16525afbe Validity Not Before: Nov 22 17:00:03 2025 GMT Not After : Nov 25 17:00:00 2025 GMT Subject: CN=b8ba64c9-8315-4fc8-b76b-88767d224ebd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2e:b4:0a:20:a8:49:64:80:c7:73:b2:be:b5: 4a:18:d0:09:98:53:27:38:26:8f:27:06:d0:25:01: 3e:fd:1c:03:3e:cb:50:e7:ba:d0:06:f4:85:23:b0: 32:30:13:91:4d:7d:e2:32:29:0b:97:c5:a7:3a:fe: 99:ac:15:a1:30:51:84:c8:9a:b2:12:db:85:12:15: ce:c2:88:4b:98:0e:15:fb:fc:ba:ec:a8:88:c7:57: cb:9e:19:28:ed:61:42:78:cb:03:5f:38:24:4e:3e: a3:94:42:46:a0:eb:9a:50:ff:ea:e3:4c:00:54:b2: a0:3e:ca:c4:c4:62:ab:2d:e3:0f:0d:4c:32:12:08: 52:c3:5e:06:98:2a:82:5d:03:df:bc:2f:40:48:37: 5c:ba:c0:61:b3:c3:48:e1:ba:51:14:5d:6f:24:83: 36:22:38:d7:2b:2a:3e:80:df:18:d2:19:bf:7e:9d: 4f:88:a3:77:de:8a:55:74:90:bd:16:e5:bc:d5:21: 62:8f:14:e1:bb:6c:a3:46:95:9d:cf:0b:c2:58:2a: e3:ea:2c:4a:48:97:3d:2b:f4:35:f4:e9:95:df:6c: 34:3f:3b:9c:d4:a7:f4:f9:f3:1f:de:a8:4d:b2:cf: e0:a4:97:0e:84:51:83:ad:56:cc:1f:3e:74:17:76: 6f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:8A:06:9C:A7:D6:CA:B8:77:58:4A:67:76:61:A0:B3:E2:5C:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.crl X509v3 Authority Key Identifier: keyid:66:C7:EB:B2:4D:26:86:16:7A:77:EC:EC:4B:95:D7:30:03:81:5E:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/720bf1f5-bfdc-4e9b-aec9-45f16525afbe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1f:9c:26:93:72:5f:48:4a:bd:8a:cc:2a:36:46:0b:69:74: 19:94:ff:3c:43:a4:18:e2:50:7d:a3:60:a8:3f:4e:f8:88:ce: df:27:5d:6d:3d:a2:bd:b8:b7:da:74:e4:0b:f8:95:0f:48:bb: 92:dc:c7:0b:6b:00:be:b6:5d:0c:b0:5c:bf:78:d8:c1:b8:80: cf:f5:93:89:5b:a0:70:73:9f:71:c9:bd:fb:1d:d3:35:b0:65: e6:ae:a6:e5:5b:35:74:b5:de:46:87:03:03:ec:f6:1a:9e:ab: 82:82:de:89:f4:fe:45:49:5e:c2:5b:07:89:b1:85:5a:e6:e7: dc:e1:43:65:09:c7:7b:39:07:57:78:94:46:9f:bf:31:8c:09: a5:3d:09:f9:88:10:19:2a:ae:bd:fa:5c:a2:22:bd:4e:a4:de: 3b:88:d6:ca:c7:18:7c:36:37:3b:03:68:c0:a8:ea:15:00:fa: f8:74:3c:98:23:ce:15:07:60:0c:4e:fc:92:8d:40:71:27:64: 53:95:9e:0d:e2:a5:3a:5c:2e:9f:0c:64:a8:6e:7b:76:79:78: 91:52:d9:02:7b:77:89:c4:cd:07:52:05:bd:72:79:7b:91:77: c7:47:71:87:12:b1:43:e1:9c:74:19:51:8e:bc:5a:27:e5:df: 15:a2:65:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvyPuytbMOfT4YlC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzIwYmYxZjUtYmZkYy00ZTliLWFlYzktNDVmMTY1MjVh ZmJlMB4XDTI1MTEyMjE3MDAwM1oXDTI1MTEyNTE3MDAwMFowLzEtMCsGA1UEAxMk YjhiYTY0YzktODMxNS00ZmM4LWI3NmItODg3NjdkMjI0ZWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi60CiCoSWSAx3OyvrVKGNAJmFMnOCaPJwbQ JQE+/RwDPstQ57rQBvSFI7AyMBORTX3iMikLl8WnOv6ZrBWhMFGEyJqyEtuFEhXO wohLmA4V+/y67KiIx1fLnhko7WFCeMsDXzgkTj6jlEJGoOuaUP/q40wAVLKgPsrE xGKrLeMPDUwyEghSw14GmCqCXQPfvC9ASDdcusBhs8NI4bpRFF1vJIM2IjjXKyo+ gN8Y0hm/fp1PiKN33opVdJC9FuW81SFijxThu2yjRpWdzwvCWCrj6ixKSJc9K/Q1 9OmV32w0Pzuc1Kf0+fMf3qhNss/gpJcOhFGDrVbMHz50F3ZvMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF6Higacp9bKuHdYSmd2YaCz4lyVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83MjBi ZjFmNS1iZmRjLTRlOWItYWVjOS00NWYxNjUyNWFmYmUvNzIwYmYxZjUtYmZkYy00 ZTliLWFlYzktNDVmMTY1MjVhZmJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzIwYmYxZjUtYmZkYy00ZTliLWFl YzktNDVmMTY1MjVhZmJlLzcyMGJmMWY1LWJmZGMtNGU5Yi1hZWM5LTQ1ZjE2NTI1 YWZiZS5jcmwwHwYDVR0jBBgwFoAUZsfrsk0mhhZ6d+zsS5XXMAOBXg4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83MjBiZjFmNS1iZmRjLTRlOWItYWVjOS00NWYx NjUyNWFmYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWH5wmk3JfSEq9iswqNkYL aXQZlP88Q6QY4lB9o2CoP074iM7fJ11tPaK9uLfadOQL+JUPSLuS3McLawC+tl0M sFy/eNjBuIDP9ZOJW6Bwc59xyb37HdM1sGXmrqblWzV0td5GhwMD7PYanquCgt6J 9P5FSV7CWweJsYVa5ufc4UNlCcd7OQdXeJRGn78xjAmlPQn5iBAZKq69+lyiIr1O pN47iNbKxxh8Njc7A2jAqOoVAPr4dDyYI84VB2AMTvySjUBxJ2RTlZ4N4qU6XC6f DGSobnt2eXiRUtkCe3eJxM0HUgW9cnl7kXfHR3GHErFD4Zx0GVGOvFon5d8VomX9 -----END CERTIFICATE-----Generated at Sat Nov 22 21:37:57 2025 by rpki-client