This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft File: 1fe8849b-66cd-4afe-9b0b-970eafad1175.mft (raw, json) Hash identifier: afydoVDFOWcX189mG03DcJMn4bQ3YVGyNyGR0afYWa4= Subject key identifier: 3F:F4:4F:AA:DF:4C:51:3C:88:A3:86:A2:C2:C0:FC:D0:CF:D8:ED:91 Authority key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 Certificate issuer: /CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Certificate serial: 010D0C9F4328584C18BFA9999F85E99A508B9A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft Manifest number: 010D0C9F4328584073A851780268C0AEA86E4FB6 Signing time: Sat 06 Dec 2025 12:00:08 +0000 Manifest this update: Sat 06 Dec 2025 12:00:08 +0000 Manifest next update: Mon 08 Dec 2025 12:00:00 +0000 Files and hashes: 1: 1fe8849b-66cd-4afe-9b0b-970eafad1175.crl (hash: FMDLy4MI+7fIKyC5DFbnwCOOzHIlS4All5Wzi7JqmwQ=) 2: 31087add-e607-36b0-8d31-ad7c14d91fbb.roa (hash: yfFtfaHuSn1mFbOU1LC8IJTv1t7WWrURk2Q3uRzfDQo=) 3: b997d817-4fa0-3f4d-b90b-0646406d600a.roa (hash: YJjQmJJUyHHz9jzBm0ZjwqjLTIly18qXxqT+EegYa4A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:bf:a9:99:9f:85:e9:9a:50:8b:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175 Validity Not Before: Dec 6 12:00:08 2025 GMT Not After : Dec 8 12:00:00 2025 GMT Subject: CN=6f605bda-d45d-4365-95c1-d5e308595470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b0:30:9b:30:6a:ca:bf:e8:16:a3:e4:82:29: 6c:84:a4:2a:44:65:a9:11:22:d3:e6:5c:27:7b:6e: f6:15:c0:30:82:0c:22:2c:94:8e:0e:a1:d8:6f:53: 1d:7e:a5:47:c6:95:38:f6:a1:f8:b5:a2:d6:c8:89: 5a:48:a4:78:2c:10:e6:0e:04:57:c6:e1:28:d8:a2: 42:40:51:b2:48:a9:9a:aa:c9:05:cf:b6:f3:56:e5: bf:b8:71:fb:55:77:e9:9d:3a:e7:3d:e9:62:af:0b: 5f:5e:0e:4e:85:e5:dc:62:22:34:ed:13:44:ec:e3: d9:2d:2a:03:94:46:3c:d2:dc:a0:52:34:58:ff:32: 75:0b:ec:29:39:5b:85:be:6c:dc:f5:a3:98:c0:da: af:2f:c6:bc:c7:5d:aa:d7:57:1e:40:a2:07:99:2d: 04:27:00:5e:b6:6e:f1:21:06:c7:5e:c9:3f:7c:07: bf:2f:9e:d5:08:15:ec:ac:57:c9:d2:0f:91:0d:dc: 65:bc:b5:f8:f2:66:c6:d8:99:69:0b:16:36:ac:6a: ba:af:e4:c5:00:b7:e7:0c:ca:db:c9:0b:b0:8f:09: 06:f2:3c:3c:a9:14:cc:38:1e:74:04:9c:6c:a2:1c: 4f:c0:84:e9:ae:e5:0d:78:8b:db:4a:5b:c8:0a:e4: 11:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F4:4F:AA:DF:4C:51:3C:88:A3:86:A2:C2:C0:FC:D0:CF:D8:ED:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl X509v3 Authority Key Identifier: keyid:BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:28:6b:76:05:5f:53:a3:7b:28:e4:8b:5e:f1:24:5d:a9:20: e1:93:70:3f:93:b4:fd:6c:a9:6c:36:82:00:1a:5f:f0:3d:e5: de:c6:65:1c:49:96:cf:8a:c8:2f:08:52:94:2b:be:78:d5:5f: e1:e2:87:84:18:36:53:08:8a:22:54:b3:fe:0f:90:f5:58:0b: 0c:9c:11:b5:3b:8d:43:49:a8:23:7e:be:af:9b:1f:5c:7e:5e: 79:2a:69:13:57:4d:73:c3:ac:0c:33:79:5b:de:68:c7:42:89: 43:56:8f:87:42:0a:40:43:28:d0:3b:62:2c:59:e6:ce:2f:07: e9:ee:dd:7d:0f:4b:fe:5c:9f:81:3f:d5:7d:db:9e:3b:5f:9c: ae:e3:42:b7:e9:8a:19:6e:86:39:51:55:09:05:af:a9:f4:64: 8f:13:8b:2a:84:28:da:f0:76:7d:84:0d:a8:29:fe:5b:74:2e: dd:23:b7:17:eb:b1:0f:20:9b:9e:32:4c:5d:0c:a8:f0:53:05: 36:c0:ac:03:31:8a:dd:b5:a0:fd:f5:ed:1a:58:d3:01:fd:6b: f0:e2:55:c4:2e:a6:ba:6b:a5:de:2d:47:53:8d:5b:7e:55:eb: 90:26:63:ec:8f:38:01:a3:7c:77:2a:e5:13:11:87:c0:09:c0: 02:67:98:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwYv6mZn4XpmlCLmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZlODg0OWItNjZjZC00YWZlLTliMGItOTcwZWFmYWQx MTc1MB4XDTI1MTIwNjEyMDAwOFoXDTI1MTIwODEyMDAwMFowLzEtMCsGA1UEAxMk NmY2MDViZGEtZDQ1ZC00MzY1LTk1YzEtZDVlMzA4NTk1NDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLAwmzBqyr/oFqPkgilshKQqRGWpESLT5lwn e272FcAwggwiLJSODqHYb1MdfqVHxpU49qH4taLWyIlaSKR4LBDmDgRXxuEo2KJC QFGySKmaqskFz7bzVuW/uHH7VXfpnTrnPelirwtfXg5OheXcYiI07RNE7OPZLSoD lEY80tygUjRY/zJ1C+wpOVuFvmzc9aOYwNqvL8a8x12q11ceQKIHmS0EJwBetm7x IQbHXsk/fAe/L57VCBXsrFfJ0g+RDdxlvLX48mbG2JlpCxY2rGq6r+TFALfnDMrb yQuwjwkG8jw8qRTMOB50BJxsohxPwITpruUNeIvbSlvICuQRbwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD/0T6rfTFE8iKOGosLA/NDP2O2RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4 ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBlYWZhZDExNzUvMWZlODg0OWItNjZjZC00 YWZlLTliMGItOTcwZWFmYWQxMTc1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWZlODg0OWItNjZjZC00YWZlLTli MGItOTcwZWFmYWQxMTc1LzFmZTg4NDliLTY2Y2QtNGFmZS05YjBiLTk3MGVhZmFk MTE3NS5jcmwwHwYDVR0jBBgwFoAUvqggnBNe/PnuaZjOhE646NyD9JUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZmU4ODQ5Yi02NmNkLTRhZmUtOWIwYi05NzBl YWZhZDExNzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAaKGt2BV9To3so5Ite8SRd qSDhk3A/k7T9bKlsNoIAGl/wPeXexmUcSZbPisgvCFKUK7541V/h4oeEGDZTCIoi VLP+D5D1WAsMnBG1O41DSagjfr6vmx9cfl55KmkTV01zw6wMM3lb3mjHQolDVo+H QgpAQyjQO2IsWebOLwfp7t19D0v+XJ+BP9V92547X5yu40K36YoZboY5UVUJBa+p 9GSPE4sqhCja8HZ9hA2oKf5bdC7dI7cX67EPIJueMkxdDKjwUwU2wKwDMYrdtaD9 9e0aWNMB/Wvw4lXELqa6a6XeLUdTjVt+VeuQJmPsjzgBo3x3KuUTEYfACcACZ5js -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:50 2025 by rpki-client