This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.mft File: ac31201d-d18d-4a22-837e-aa1c05197e8b.mft (raw, json) Hash identifier: SysksZsEkR2XtmdyJ6qOXs0Hx3JlNe3xxb89UuPJmcY= Subject key identifier: 02:5B:78:0C:4B:73:7F:DC:2E:40:79:2D:14:C3:65:56:70:F1:A6:56 Authority key identifier: A3:28:A4:0E:AE:B3:94:DA:E4:56:60:96:36:DD:55:87:AE:00:5A:A5 Certificate issuer: /CN=ac31201d-d18d-4a22-837e-aa1c05197e8b Certificate serial: 010D0C9F4328584BF25CB95A474A610F8940AA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.mft Manifest number: 010D0C9F4328584AC4F2A5A637A1A303F4860475 Signing time: Sat 22 Nov 2025 18:00:03 +0000 Manifest this update: Sat 22 Nov 2025 18:00:03 +0000 Manifest next update: Tue 25 Nov 2025 18:00:00 +0000 Files and hashes: 1: 5860102a-aea6-36fc-8df0-f225930eaeb7.roa (hash: bvDRq+ZgXBQ3W6I8ktknqpJdwOhx1XCG9JUKCwcLS4Q=) 2: 9b629c01-c7b8-3c4f-af0b-589278c04bbc.roa (hash: C38pWI+I4Bx9DzWXid6BihumrrUzIvd/WgnyWzgFiiU=) 3: ac31201d-d18d-4a22-837e-aa1c05197e8b.crl (hash: d1CAXnVQk7NPXYfiPHOm/kQn7JaO5XWLLSaR891cwTo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f2:5c:b9:5a:47:4a:61:0f:89:40:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac31201d-d18d-4a22-837e-aa1c05197e8b Validity Not Before: Nov 22 18:00:03 2025 GMT Not After : Nov 25 18:00:00 2025 GMT Subject: CN=ef7eff82-b3b5-4582-87f2-c2df767e3e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f4:cd:6f:50:cf:77:6c:20:17:66:ec:25:6a: 99:4d:be:56:6f:a4:9a:00:7b:af:44:bb:8e:67:b8: d0:64:0a:4a:14:12:9a:ee:59:ec:4e:8e:4a:99:b4: 81:15:78:b7:71:28:d2:97:46:7f:ac:e8:20:d1:f7: 19:13:be:54:d2:06:a1:78:90:3c:1a:3c:a0:65:76: 0d:ec:90:9a:a2:7d:69:67:3b:f2:78:89:f1:43:17: 25:d1:ef:72:37:c5:3d:b4:ce:15:0e:4c:04:7e:4c: f1:46:19:da:ca:78:69:3f:22:fc:57:46:ec:1d:4a: f9:66:a8:b8:61:bc:58:eb:92:25:9e:f9:22:dd:c3: f6:a6:15:f2:cf:6b:90:8d:35:97:ae:75:7b:2b:c3: 06:4a:88:b8:d9:41:3f:13:67:86:6f:91:2e:e5:4c: 65:a6:b5:5a:2e:1d:72:30:e1:ab:09:83:10:58:e7: d7:9b:ed:17:0a:61:a5:88:a9:01:7b:97:e6:eb:07: 8f:b5:50:11:d4:79:3c:b0:4d:25:4c:d8:6e:82:31: bb:30:58:49:21:bc:04:fc:56:76:08:c0:12:04:89: 84:a9:7d:a5:b7:d9:5f:d5:75:5c:02:b8:c8:f5:41: 0a:a4:93:08:7d:10:53:e7:2c:4d:d7:c6:f0:32:a2: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5B:78:0C:4B:73:7F:DC:2E:40:79:2D:14:C3:65:56:70:F1:A6:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b/ac31201d-d18d-4a22-837e-aa1c05197e8b.crl X509v3 Authority Key Identifier: keyid:A3:28:A4:0E:AE:B3:94:DA:E4:56:60:96:36:DD:55:87:AE:00:5A:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ac31201d-d18d-4a22-837e-aa1c05197e8b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:32:27:e7:0d:ff:3d:e3:fc:f0:c7:4f:e3:8f:4c:b0:70:a2: 52:95:b3:a0:5d:98:f6:c8:f1:5e:96:e0:ce:6b:ba:2b:23:f2: 43:02:58:b2:ba:05:63:81:b7:19:99:e5:0d:a9:3f:55:7c:ae: f4:52:61:75:84:39:82:95:49:9c:4e:a5:33:f2:8d:67:ac:ce: 81:00:47:77:d5:48:a6:b1:16:76:fd:bf:ea:bf:ab:c7:6c:3c: be:86:1b:1b:8b:e6:bc:1f:52:f7:f0:76:c8:fd:53:e9:22:1b: c5:a9:5d:f6:b8:5c:59:f8:6a:08:9f:9c:e2:26:fb:63:b3:5f: fb:21:53:d9:ec:50:cd:bc:90:e4:f1:bd:92:ec:20:a4:70:97: fa:4f:01:e7:e7:90:21:46:7e:69:26:7b:db:79:a0:f5:c9:f4: c0:8d:e7:25:a0:48:a4:58:f2:4b:9f:18:82:f8:12:2a:95:fc: 6b:24:0b:2e:d2:19:46:db:bd:fc:91:63:0c:4c:36:1b:74:35: fd:c7:f3:ec:e3:3a:25:58:27:ab:30:6a:d8:c3:60:be:1b:86: fd:04:93:1e:2c:6a:07:e4:0d:8e:61:75:ac:14:ad:1d:38:71: 08:80:37:c3:9a:b0:ae:8a:01:2d:3a:ee:a1:47:d5:06:3d:44: 24:9c:4f:1e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvyXLlaR0phD4lAqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMzMTIwMWQtZDE4ZC00YTIyLTgzN2UtYWExYzA1MTk3 ZThiMB4XDTI1MTEyMjE4MDAwM1oXDTI1MTEyNTE4MDAwMFowLzEtMCsGA1UEAxMk ZWY3ZWZmODItYjNiNS00NTgyLTg3ZjItYzJkZjc2N2UzZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvTNb1DPd2wgF2bsJWqZTb5Wb6SaAHuvRLuO Z7jQZApKFBKa7lnsTo5KmbSBFXi3cSjSl0Z/rOgg0fcZE75U0gaheJA8GjygZXYN 7JCaon1pZzvyeInxQxcl0e9yN8U9tM4VDkwEfkzxRhnaynhpPyL8V0bsHUr5Zqi4 YbxY65Ilnvki3cP2phXyz2uQjTWXrnV7K8MGSoi42UE/E2eGb5Eu5UxlprVaLh1y MOGrCYMQWOfXm+0XCmGliKkBe5fm6wePtVAR1Hk8sE0lTNhugjG7MFhJIbwE/FZ2 CMASBImEqX2lt9lf1XVcArjI9UEKpJMIfRBT5yxN18bwMqJOWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAJbeAxLc3/cLkB5LRTDZVZw8aZWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hYzMx MjAxZC1kMThkLTRhMjItODM3ZS1hYTFjMDUxOTdlOGIvYWMzMTIwMWQtZDE4ZC00 YTIyLTgzN2UtYWExYzA1MTk3ZThiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWMzMTIwMWQtZDE4ZC00YTIyLTgz N2UtYWExYzA1MTk3ZThiL2FjMzEyMDFkLWQxOGQtNGEyMi04MzdlLWFhMWMwNTE5 N2U4Yi5jcmwwHwYDVR0jBBgwFoAUoyikDq6zlNrkVmCWNt1Vh64AWqUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hYzMxMjAxZC1kMThkLTRhMjItODM3ZS1hYTFj MDUxOTdlOGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkMifnDf894/zwx0/jj0yw cKJSlbOgXZj2yPFeluDOa7orI/JDAliyugVjgbcZmeUNqT9VfK70UmF1hDmClUmc TqUz8o1nrM6BAEd31UimsRZ2/b/qv6vHbDy+hhsbi+a8H1L38HbI/VPpIhvFqV32 uFxZ+GoIn5ziJvtjs1/7IVPZ7FDNvJDk8b2S7CCkcJf6TwHn55AhRn5pJnvbeaD1 yfTAjecloEikWPJLnxiC+BIqlfxrJAsu0hlG2738kWMMTDYbdDX9x/Ps4zolWCer MGrYw2C+G4b9BJMeLGoH5A2OYXWsFK0dOHEIgDfDmrCuigEtOu6hR9UGPUQknE8e -----END CERTIFICATE-----Generated at Sat Nov 22 21:09:42 2025 by rpki-client