This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft File: 8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft (raw, json) Hash identifier: qoFrrSEubI0C6YALXJRjICWsjlS/rfG0uhQzJ4sUuFU= Subject key identifier: 69:B2:15:CD:80:0D:82:D7:12:1D:92:FA:49:6E:5A:C0:8D:D1:F0:F3 Authority key identifier: CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A Certificate issuer: /CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6 Certificate serial: 010D0C9F4328584C18FB2C008EFAB227E52E71C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft Manifest number: 010D0C9F4328584073A85954D1D18CB092344246 Signing time: Sat 06 Dec 2025 14:00:03 +0000 Manifest this update: Sat 06 Dec 2025 14:00:03 +0000 Manifest next update: Mon 08 Dec 2025 14:00:00 +0000 Files and hashes: 1: 3e223fd6-e6be-376b-be27-58334385989f.roa (hash: cW/nBeGfgO1YoZANxT0xlhCeF+d09XHLIr4mCQaxvuE=) 2: 8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl (hash: 2abtn0SP7GkFO++r/m2CVPoAIlg9FKUu/5m81BdcJE0=) 3: d1facf3a-0252-3062-bd40-b1752bcaaa35.roa (hash: BfVvVU4iMr+bRWvCbYwMAgDejo0suj5nYswRP2TqjGQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:fb:2c:00:8e:fa:b2:27:e5:2e:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6 Validity Not Before: Dec 6 14:00:03 2025 GMT Not After : Dec 8 14:00:00 2025 GMT Subject: CN=ec932f95-0238-4741-9511-b97687cc5158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:1a:0c:4c:46:58:5d:e7:c9:63:55:4b:da: e2:d8:92:62:80:34:7c:63:35:45:6d:73:bb:25:73: 01:94:b7:d1:a8:39:d9:74:28:18:e1:bc:36:5e:b6: d0:1e:8d:2f:9d:aa:a9:02:d7:ef:a6:ca:ec:ee:ab: f0:fe:1b:ed:b7:53:30:38:24:2b:95:ee:6e:d3:dc: 37:97:0e:7d:cc:77:89:88:74:a3:08:37:d8:9a:77: c7:17:4e:43:d4:42:1d:d9:44:3f:cb:fd:13:45:f0: c3:82:18:fb:d2:10:59:11:93:c6:27:9f:e0:e9:22: a0:a8:f1:7d:f2:a9:dc:f6:9e:c0:d6:5d:d4:aa:f4: 78:49:d8:de:65:b9:28:b8:d3:52:01:f3:c2:3e:69: aa:1f:43:cb:7f:9c:83:e1:78:5c:15:ee:cc:5a:5c: 9e:26:36:70:a5:17:0d:8d:70:61:e6:e5:1d:37:83: c9:4c:17:30:cf:70:38:26:bb:27:d2:80:25:09:8a: ba:71:42:1c:f5:1d:c9:39:7e:63:e6:23:d7:98:01: 1e:a4:f0:6f:1f:c4:e2:95:fe:84:83:3c:6b:b9:f3: 10:e4:0f:0d:94:44:e7:0b:52:a3:8c:62:e2:99:70: 62:00:c8:e9:3c:19:f3:f0:27:b5:af:30:46:cb:5c: d0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B2:15:CD:80:0D:82:D7:12:1D:92:FA:49:6E:5A:C0:8D:D1:F0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl X509v3 Authority Key Identifier: keyid:CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9a:0b:b2:df:44:30:47:8a:aa:1d:7f:da:84:3e:8d:b9:4b: 6e:27:6c:f0:72:49:20:bd:6e:3f:bf:cd:8e:d0:e3:da:6b:6e: d3:8f:b7:16:8c:99:6c:cd:2b:3b:de:82:db:7a:bc:ae:e9:0e: 79:66:a2:60:ad:05:f4:63:14:24:26:18:f7:fc:6c:1d:dc:c4: 30:2b:e5:0e:91:e2:43:09:ed:36:2c:f5:ae:8b:b2:fd:eb:a0: 0b:dd:5d:54:10:7a:de:37:6c:85:c0:ce:bc:80:2d:62:ef:47: d3:cc:bc:ea:bc:5e:d5:be:35:0f:c7:e6:b5:7e:ff:2b:12:21: 03:9a:d8:6d:93:7e:53:0f:38:63:29:75:16:2b:9f:dd:bb:e9: 74:8f:ae:ce:8d:26:34:da:33:03:a4:29:4e:a6:b9:a9:d3:28: 3a:3b:99:5b:f5:b4:77:87:cb:ea:43:fe:bb:27:7a:0c:44:a0: 00:f4:27:e7:0f:bd:a9:97:76:fc:fe:ff:bb:e1:f7:29:1d:b6: a9:39:82:87:76:20:9b:19:e0:ab:48:ba:3d:cd:e8:84:86:86: 41:ec:f1:9c:ca:69:98:f1:87:79:82:8e:13:37:ee:13:78:e6: 6c:f8:78:bd:fb:f7:76:ba:50:29:53:9e:61:16:96:2f:50:2e: 5f:5a:8f:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwY+ywAjvqyJ+UuccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU5OGE1ZTEtOWViOS00MDg3LWIyYzEtZDI1YTU4Zjkw MGM2MB4XDTI1MTIwNjE0MDAwM1oXDTI1MTIwODE0MDAwMFowLzEtMCsGA1UEAxMk ZWM5MzJmOTUtMDIzOC00NzQxLTk1MTEtYjk3Njg3Y2M1MTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOcaDExGWF3nyWNVS9ri2JJigDR8YzVFbXO7 JXMBlLfRqDnZdCgY4bw2XrbQHo0vnaqpAtfvpsrs7qvw/hvtt1MwOCQrle5u09w3 lw59zHeJiHSjCDfYmnfHF05D1EId2UQ/y/0TRfDDghj70hBZEZPGJ5/g6SKgqPF9 8qnc9p7A1l3UqvR4SdjeZbkouNNSAfPCPmmqH0PLf5yD4XhcFe7MWlyeJjZwpRcN jXBh5uUdN4PJTBcwz3A4Jrsn0oAlCYq6cUIc9R3JOX5j5iPXmAEepPBvH8Tilf6E gzxrufMQ5A8NlETnC1KjjGLimXBiAMjpPBnz8Ce1rzBGy1zQiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGmyFc2ADYLXEh2S+kluWsCN0fDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NTk4 YTVlMS05ZWI5LTQwODctYjJjMS1kMjVhNThmOTAwYzYvODU5OGE1ZTEtOWViOS00 MDg3LWIyYzEtZDI1YTU4ZjkwMGM2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU5OGE1ZTEtOWViOS00MDg3LWIy YzEtZDI1YTU4ZjkwMGM2Lzg1OThhNWUxLTllYjktNDA4Ny1iMmMxLWQyNWE1OGY5 MDBjNi5jcmwwHwYDVR0jBBgwFoAUylQfThcBLKrmOgWKbqIyVo6cFSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NTk4YTVlMS05ZWI5LTQwODctYjJjMS1kMjVh NThmOTAwYzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5mguy30QwR4qqHX/ahD6N uUtuJ2zwckkgvW4/v82O0OPaa27Tj7cWjJlszSs73oLberyu6Q55ZqJgrQX0YxQk Jhj3/Gwd3MQwK+UOkeJDCe02LPWui7L966AL3V1UEHreN2yFwM68gC1i70fTzLzq vF7VvjUPx+a1fv8rEiEDmthtk35TDzhjKXUWK5/du+l0j67OjSY02jMDpClOprmp 0yg6O5lb9bR3h8vqQ/67J3oMRKAA9CfnD72pl3b8/v+74fcpHbapOYKHdiCbGeCr SLo9zeiEhoZB7PGcymmY8Yd5go4TN+4TeOZs+Hi9+/d2ulApU55hFpYvUC5fWo9t -----END CERTIFICATE-----Generated at Sat Dec 6 18:03:42 2025 by rpki-client