This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.mft File: dac66525-ec66-4458-af9c-d81d29c7ec22.mft (raw, json) Hash identifier: JvJmw3v58yF+JfQ637Rs4yrvuf7IJB1GY22zxBSy0t4= Subject key identifier: BF:A4:48:1D:C4:15:F3:81:0E:FD:FD:41:F8:F9:5A:6A:B2:04:CB:17 Authority key identifier: 8B:67:AE:AD:4A:6B:41:8F:AC:8B:95:87:2B:63:E8:DE:20:B7:10:DD Certificate issuer: /CN=dac66525-ec66-4458-af9c-d81d29c7ec22 Certificate serial: 010D0C9F4328584BFABCD434CC211DF5FAD724E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.mft Manifest number: 010D0C9F4328584B535099A3D852124626B8A07D Signing time: Tue 25 Nov 2025 18:00:08 +0000 Manifest this update: Tue 25 Nov 2025 18:00:08 +0000 Manifest next update: Fri 28 Nov 2025 18:00:00 +0000 Files and hashes: 1: 57b3e621-2716-3a72-98b5-aedeebc84d8e.roa (hash: r0L0WXSBf4l/HxvK+8k5LrKPDiKU9l4xOCjnU7cY/cQ=) 2: dac66525-ec66-4458-af9c-d81d29c7ec22.crl (hash: HcA47ea84W/HafQ84zvoXNYyBosth/Jj6u8qaehhbO8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:fa:bc:d4:34:cc:21:1d:f5:fa:d7:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac66525-ec66-4458-af9c-d81d29c7ec22 Validity Not Before: Nov 25 18:00:08 2025 GMT Not After : Nov 28 18:00:00 2025 GMT Subject: CN=945d2226-8485-4fc7-90d0-693c8475a84f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:a6:96:2a:ab:65:b3:b5:d2:97:31:2f:57: 67:36:08:cd:13:c9:e1:2f:f6:d8:2d:c5:7e:28:0e: 4d:35:e4:4a:6b:92:a2:5e:32:a6:b4:05:16:d3:cd: f7:6a:3e:f0:be:c2:02:0f:4b:2b:20:78:ad:0f:d4: 60:d8:91:1c:4b:0a:c0:f6:02:6c:9b:44:59:e8:73: 7d:d8:50:29:1f:41:fe:5f:2d:4e:12:f1:01:e5:40: a1:9b:31:49:10:96:70:4b:ae:76:9c:16:cc:1b:32: 10:89:97:5f:2b:9b:e7:55:28:19:85:f3:60:c1:b3: 4d:0f:1e:71:a1:8c:93:33:76:bd:74:3d:22:a1:c7: 33:f9:55:19:93:8b:ce:5c:e3:23:09:1a:08:b6:8d: 3d:9f:fa:08:0f:8d:30:4c:46:d5:ff:b0:2d:75:ff: 00:40:ca:51:8a:57:ef:94:2e:cf:d3:06:96:07:fe: 13:a5:4e:24:4f:12:65:b1:65:35:85:15:8c:82:70: 00:dc:c4:2d:97:f9:ad:41:bc:56:f0:17:55:aa:5c: 2d:d5:8c:d9:8f:0e:9d:a0:5d:07:86:cd:4a:06:9f: c7:96:cb:56:ea:3f:78:94:11:e3:81:f1:6d:c1:b8: ad:4f:95:6a:da:d6:21:c3:6e:fd:2d:80:0d:5e:ee: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A4:48:1D:C4:15:F3:81:0E:FD:FD:41:F8:F9:5A:6A:B2:04:CB:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.crl X509v3 Authority Key Identifier: keyid:8B:67:AE:AD:4A:6B:41:8F:AC:8B:95:87:2B:63:E8:DE:20:B7:10:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:16:e6:1e:44:d0:c7:19:1d:fc:1f:ef:28:32:eb:36:9b:a1: cd:cd:04:f6:0a:2a:aa:7d:d2:17:79:c7:79:9d:c9:60:c6:ba: a0:2f:69:1e:a2:77:df:37:88:68:68:ed:a9:6d:7a:5d:b5:cd: 3b:3c:c7:90:ca:0f:a3:f6:62:8d:77:e4:b1:9b:7f:cb:6f:bd: e1:f5:3f:21:6a:91:92:1e:18:15:81:be:c4:83:ff:1c:79:ad: c8:1a:9c:ee:d6:fe:4f:51:92:eb:52:47:97:c1:10:68:09:bd: 04:07:98:12:c2:fc:68:0a:5e:7a:48:62:2c:2f:ef:6b:ae:6c: 91:f5:f7:6e:85:9d:22:c5:3d:75:2a:2e:01:01:a9:f8:6d:b5: f7:c3:14:b5:6d:e4:f4:98:8d:ff:43:3f:94:a3:48:ca:2e:69: d5:8a:4e:d9:2c:86:51:a9:83:7f:6f:52:81:75:40:92:71:9d: 3f:66:3a:7f:5e:48:c9:e3:ec:50:e8:ed:83:0c:0c:0b:b2:32: d7:f3:f3:a3:60:bf:65:cd:c9:cf:9b:aa:ef:50:e0:78:f0:1c: 32:e8:c3:58:b8:36:49:82:58:12:dc:44:0d:08:b0:91:f5:b1: aa:73:62:70:6f:01:65:a0:77:22:9b:b1:6d:87:54:3d:a0:c7: 30:e9:c5:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv6vNQ0zCEd9frXJOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNjY1MjUtZWM2Ni00NDU4LWFmOWMtZDgxZDI5Yzdl YzIyMB4XDTI1MTEyNTE4MDAwOFoXDTI1MTEyODE4MDAwMFowLzEtMCsGA1UEAxMk OTQ1ZDIyMjYtODQ4NS00ZmM3LTkwZDAtNjkzYzg0NzVhODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKymliqrZbO10pcxL1dnNgjNE8nhL/bYLcV+ KA5NNeRKa5KiXjKmtAUW0833aj7wvsICD0srIHitD9Rg2JEcSwrA9gJsm0RZ6HN9 2FApH0H+Xy1OEvEB5UChmzFJEJZwS652nBbMGzIQiZdfK5vnVSgZhfNgwbNNDx5x oYyTM3a9dD0ioccz+VUZk4vOXOMjCRoIto09n/oID40wTEbV/7Atdf8AQMpRilfv lC7P0waWB/4TpU4kTxJlsWU1hRWMgnAA3MQtl/mtQbxW8BdVqlwt1YzZjw6doF0H hs1KBp/HlstW6j94lBHjgfFtwbitT5Vq2tYhw279LYANXu6z3wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL+kSB3EFfOBDv39Qfj5WmqyBMsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kYWM2 NjUyNS1lYzY2LTQ0NTgtYWY5Yy1kODFkMjljN2VjMjIvZGFjNjY1MjUtZWM2Ni00 NDU4LWFmOWMtZDgxZDI5YzdlYzIyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGFjNjY1MjUtZWM2Ni00NDU4LWFm OWMtZDgxZDI5YzdlYzIyL2RhYzY2NTI1LWVjNjYtNDQ1OC1hZjljLWQ4MWQyOWM3 ZWMyMi5jcmwwHwYDVR0jBBgwFoAUi2eurUprQY+si5WHK2Po3iC3EN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kYWM2NjUyNS1lYzY2LTQ0NTgtYWY5Yy1kODFk MjljN2VjMjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBtFuYeRNDHGR38H+8oMus2 m6HNzQT2CiqqfdIXecd5nclgxrqgL2keonffN4hoaO2pbXpdtc07PMeQyg+j9mKN d+Sxm3/Lb73h9T8hapGSHhgVgb7Eg/8cea3IGpzu1v5PUZLrUkeXwRBoCb0EB5gS wvxoCl56SGIsL+9rrmyR9fduhZ0ixT11Ki4BAan4bbX3wxS1beT0mI3/Qz+Uo0jK LmnVik7ZLIZRqYN/b1KBdUCScZ0/Zjp/XkjJ4+xQ6O2DDAwLsjLX8/OjYL9lzcnP m6rvUOB48Bwy6MNYuDZJglgS3EQNCLCR9bGqc2JwbwFloHcim7Fth1Q9oMcw6cUt -----END CERTIFICATE-----Generated at Tue Nov 25 20:33:36 2025 by rpki-client