This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft File: 9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft (raw, json) Hash identifier: X1478BaMqTNsTbVFl46cMp8uVulUaKf+VjV4Bo/dbCQ= Subject key identifier: A0:AD:28:9D:6F:78:A7:CB:26:B7:7C:B6:06:10:54:04:BD:C1:CA:1B Authority key identifier: 4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB Certificate issuer: /CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Certificate serial: 010D0C9F4328584C175B434DE8974895BDA04A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft Manifest number: 010D0C9F4328584073A830F9762076E794E7ECC4 Signing time: Sat 06 Dec 2025 00:02:03 +0000 Manifest this update: Sat 06 Dec 2025 00:02:03 +0000 Manifest next update: Mon 08 Dec 2025 00:00:00 +0000 Files and hashes: 1: 80afc93c-8379-33e4-8c58-900d16b82c22.roa (hash: c7PXZm3n8DoAZFUeDHwZMWfsgO8pmKHwvIOWpDm443E=) 2: 9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl (hash: GL9wVGSJa3BL3xGdQuNDSgTZhj7TQp/22GJ0gWt+IAY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:5b:43:4d:e8:97:48:95:bd:a0:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9caf968a-6f8b-4c92-bae5-c8fd1c73d95d Validity Not Before: Dec 6 00:02:03 2025 GMT Not After : Dec 8 00:00:00 2025 GMT Subject: CN=e7e2de6f-9fc5-42d2-9bfb-178623e1aeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:72:d6:f1:f9:00:e7:a1:0d:dd:6b:88:4b:71: 66:1a:68:07:43:a8:b9:e4:9e:4c:66:66:9b:02:64: 5a:dd:fd:80:96:27:af:ea:5d:ac:4b:f7:46:95:8a: bd:d7:9d:99:ef:b9:c5:d5:2c:85:0d:4c:6f:6a:cf: b9:c6:3a:d5:00:45:56:88:10:d6:36:c0:97:43:fe: 6e:33:a7:54:32:9f:70:89:81:14:20:d4:f8:bc:cf: 7b:71:3e:08:dd:6b:25:76:17:fb:4c:bc:f1:6d:7a: 16:ab:38:68:f7:dd:a4:21:79:b0:48:c2:09:be:ca: 51:e7:03:60:22:94:20:8d:01:cf:b6:5a:6a:a6:f1: f1:c9:73:cd:a0:37:26:77:84:c3:2b:3e:ef:c8:67: 1e:52:46:00:0a:36:b0:d5:2a:df:eb:cf:28:f9:c9: d7:ae:18:5f:15:d1:f9:0b:e1:26:37:87:0a:b5:24: 91:b8:f3:f4:0b:f6:03:b8:c5:8f:cc:d6:e6:b8:ca: 16:57:39:d4:fe:b4:97:f8:0a:59:53:87:0b:8d:76: f2:d8:a0:1b:63:9a:b4:5e:35:ea:cd:52:5e:05:1b: 8f:ad:70:bf:0e:fe:d3:86:33:57:52:a2:84:aa:02: 15:5e:77:67:5e:d4:96:6b:d2:7e:14:e3:04:c6:f5: 79:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AD:28:9D:6F:78:A7:CB:26:B7:7C:B6:06:10:54:04:BD:C1:CA:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.crl X509v3 Authority Key Identifier: keyid:4A:1D:2B:20:9A:D1:DD:77:B1:6B:53:6D:4A:3C:86:79:5D:1E:A4:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9caf968a-6f8b-4c92-bae5-c8fd1c73d95d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4e:db:0a:01:4d:36:f1:e0:7f:55:73:aa:ef:58:de:ac:30: 47:b8:9e:ed:ca:cf:87:f4:c9:23:59:49:51:a6:01:ea:4c:f4: aa:d9:a1:0b:e3:3a:09:0a:77:65:d0:44:98:97:38:a2:e6:f3: 9a:cb:95:00:97:51:1c:8a:c4:c0:01:12:5d:1c:f6:48:51:a2: 09:3f:31:85:c9:71:fe:ac:26:44:9c:1d:0c:ed:55:79:46:b1: bf:0c:17:2c:40:e9:59:60:96:02:93:bb:dd:aa:b0:5e:a9:ff: b3:5c:d5:a1:f7:be:2c:73:77:98:1e:44:f1:f3:3c:88:48:61: 4f:2c:85:5c:8f:d3:e2:45:00:41:25:f9:92:7e:c4:cc:be:b5: c8:87:b7:fe:11:5e:36:db:4c:9d:8e:09:6a:8d:3d:8b:e8:3e: 87:2d:43:fd:e4:20:bb:75:2a:73:ff:88:a8:e1:5a:e8:ac:89: 65:67:67:96:31:a2:a4:a7:78:0a:43:42:3f:54:26:8b:3f:0f: 2f:7f:13:b4:b8:3e:01:52:97:c9:a8:13:1b:1e:79:ff:6f:a5: e7:4f:31:61:a9:bb:56:5c:00:0e:24:79:02:c1:f5:a5:aa:78: a4:5a:02:4b:7f:9f:d2:0d:54:99:53:7e:fb:29:89:92:f7:d8: 0c:a7:4e:f9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXW0NN6JdIlb2gSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNhZjk2OGEtNmY4Yi00YzkyLWJhZTUtYzhmZDFjNzNk OTVkMB4XDTI1MTIwNjAwMDIwM1oXDTI1MTIwODAwMDAwMFowLzEtMCsGA1UEAxMk ZTdlMmRlNmYtOWZjNS00MmQyLTliZmItMTc4NjIzZTFhZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HLW8fkA56EN3WuIS3FmGmgHQ6i55J5MZmab AmRa3f2Aliev6l2sS/dGlYq9152Z77nF1SyFDUxvas+5xjrVAEVWiBDWNsCXQ/5u M6dUMp9wiYEUINT4vM97cT4I3Wsldhf7TLzxbXoWqzho992kIXmwSMIJvspR5wNg IpQgjQHPtlpqpvHxyXPNoDcmd4TDKz7vyGceUkYACjaw1Srf688o+cnXrhhfFdH5 C+EmN4cKtSSRuPP0C/YDuMWPzNbmuMoWVznU/rSX+ApZU4cLjXby2KAbY5q0XjXq zVJeBRuPrXC/Dv7ThjNXUqKEqgIVXndnXtSWa9J+FOMExvV5cQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKCtKJ1veKfLJrd8tgYQVAS9wcobMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Y2Fm OTY4YS02ZjhiLTRjOTItYmFlNS1jOGZkMWM3M2Q5NWQvOWNhZjk2OGEtNmY4Yi00 YzkyLWJhZTUtYzhmZDFjNzNkOTVkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOWNhZjk2OGEtNmY4Yi00YzkyLWJh ZTUtYzhmZDFjNzNkOTVkLzljYWY5NjhhLTZmOGItNGM5Mi1iYWU1LWM4ZmQxYzcz ZDk1ZC5jcmwwHwYDVR0jBBgwFoAUSh0rIJrR3Xexa1NtSjyGeV0epNswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85Y2FmOTY4YS02ZjhiLTRjOTItYmFlNS1jOGZk MWM3M2Q5NWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhTtsKAU028eB/VXOq71je rDBHuJ7tys+H9MkjWUlRpgHqTPSq2aEL4zoJCndl0ESYlzii5vOay5UAl1EcisTA ARJdHPZIUaIJPzGFyXH+rCZEnB0M7VV5RrG/DBcsQOlZYJYCk7vdqrBeqf+zXNWh 974sc3eYHkTx8zyISGFPLIVcj9PiRQBBJfmSfsTMvrXIh7f+EV4220ydjglqjT2L 6D6HLUP95CC7dSpz/4io4VrorIllZ2eWMaKkp3gKQ0I/VCaLPw8vfxO0uD4BUpfJ qBMbHnn/b6XnTzFhqbtWXAAOJHkCwfWlqnikWgJLf5/SDVSZU377KYmS99gMp075 -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:04 2025 by rpki-client