This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft File: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft (raw, json) Hash identifier: 2jJArDGGBO7HjHpCD0Mi5F24W8dXe/cQJWKeOraNg6A= Subject key identifier: 4D:CA:17:0C:C2:15:4D:9C:49:43:3C:86:03:35:F5:88:8A:11:4F:EF Authority key identifier: 72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B Certificate issuer: /CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Certificate serial: 010D0C9F4328584C15B96929BA5FF031D806C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft Manifest number: 010D0C9F4328584073A84EB6BC7F2571415E20DC Signing time: Fri 05 Dec 2025 10:00:08 +0000 Manifest this update: Fri 05 Dec 2025 10:00:08 +0000 Manifest next update: Mon 08 Dec 2025 10:00:00 +0000 Files and hashes: 1: 5e6c5c1b-1f19-3422-9e81-f2f608d73920.roa (hash: LP3/ITAunRzg+nL5d1UdfdX97Uzf//EFGBlyxedS5uA=) 2: aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl (hash: Q7Y+pThq5buufhZcUWaf1bIXUUXOekZgB+TJl5Km8gY=) 3: aea4ee67-2699-3a0b-a978-13a7b345b89d.roa (hash: 7ur0wr6sk6AI8afJbB5KyGyww3DHt81fgqMXeZm0q9I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:15:b9:69:29:ba:5f:f0:31:d8:06:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e Validity Not Before: Dec 5 10:00:08 2025 GMT Not After : Dec 8 10:00:00 2025 GMT Subject: CN=45d188ca-ce34-41e7-9962-7724b27b10e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ea:3b:9e:49:31:9b:67:d4:35:b0:e8:ad:3f: 36:3f:63:d3:e5:b4:51:50:c6:7d:70:e1:b0:6a:26: 7b:2d:dd:ef:10:61:fe:39:86:b3:94:2d:6d:12:8a: 9b:5b:de:6d:0b:1a:f4:95:0e:5d:70:da:a4:6c:14: 34:b5:38:83:60:2b:d6:67:a6:0f:09:f8:71:4d:0e: 33:57:8c:5a:ba:76:d3:b4:7b:7a:38:eb:ea:39:ba: d4:44:01:bc:6e:ab:bf:e8:bc:7e:23:06:04:e4:83: 48:f0:d1:fd:1d:07:7b:7d:cf:8d:90:bc:42:fd:a8: 1f:e8:7f:2a:ec:d9:f3:e2:8b:55:61:2f:79:60:01: fd:9a:14:3a:0c:50:8e:d9:58:72:f1:9f:5c:0a:f6: 59:63:04:7b:0e:6a:86:b9:78:6a:fa:75:2c:20:de: 1c:7d:25:74:66:bc:9c:86:81:23:fc:22:28:41:3e: ee:a7:89:c8:f0:10:18:84:34:a4:16:32:7a:cb:76: 34:70:e5:c6:09:c5:83:f9:e5:82:51:7b:98:c6:a3: cb:9f:67:47:9e:e8:96:ff:2b:8b:4c:ef:73:0d:76: 06:63:27:bb:1a:26:c2:e8:71:f0:bc:5f:ed:44:b2: f7:84:6b:54:fc:7e:59:b7:55:e6:5a:80:91:f2:67: d4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CA:17:0C:C2:15:4D:9C:49:43:3C:86:03:35:F5:88:8A:11:4F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.crl X509v3 Authority Key Identifier: keyid:72:97:CB:2A:98:C1:D5:9D:EA:85:A2:85:7E:C7:14:FF:80:B8:C2:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa043e55-e5d2-4d70-bfe8-7f4114d3fc2e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a9:36:72:e7:01:8c:7e:ee:ce:76:f1:1c:23:40:e2:3c:4e: 08:fd:53:57:d2:59:16:bb:21:44:ba:2a:27:50:23:88:72:61: 89:a6:a6:7f:ad:f5:d7:1f:62:d9:3a:1e:a9:05:91:02:97:bc: fc:ce:ba:cc:15:bc:97:bd:33:6c:97:ac:8b:0d:d0:a6:38:1e: cc:0a:f7:df:60:1a:e6:43:2a:13:8f:2a:b6:c6:ac:56:ac:1c: 53:d9:a0:8c:93:ae:69:9c:b6:3f:89:3f:37:9b:5a:14:14:54: 3f:8c:ae:82:c5:f2:7a:8a:ff:f2:e8:fc:70:4c:3f:e2:5d:99: c3:69:49:d2:81:28:6f:11:6a:4e:19:6b:21:14:16:61:33:14: aa:4b:a0:c0:aa:7a:9e:47:1b:ea:6f:6e:75:35:7f:48:37:3c: 94:52:af:2a:0c:54:f8:9f:22:c7:ae:cd:80:c8:52:5b:c3:3c: e0:9e:95:d6:a0:b3:5c:ec:d9:a3:54:bc:f2:7e:24:fa:72:31: 7e:9a:9f:82:ee:eb:16:e3:93:53:0d:47:f9:b3:64:aa:02:a9: d8:1c:b1:39:68:60:50:1c:13:1a:72:02:8e:9a:5c:20:c7:b4: c5:34:1b:37:0c:8d:75:38:33:12:b3:3e:63:d7:0a:93:d4:75: 5d:55:5c:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwVuWkpul/wMdgGyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEwNDNlNTUtZTVkMi00ZDcwLWJmZTgtN2Y0MTE0ZDNm YzJlMB4XDTI1MTIwNTEwMDAwOFoXDTI1MTIwODEwMDAwMFowLzEtMCsGA1UEAxMk NDVkMTg4Y2EtY2UzNC00MWU3LTk5NjItNzcyNGIyN2IxMGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+o7nkkxm2fUNbDorT82P2PT5bRRUMZ9cOGw aiZ7Ld3vEGH+OYazlC1tEoqbW95tCxr0lQ5dcNqkbBQ0tTiDYCvWZ6YPCfhxTQ4z V4xaunbTtHt6OOvqObrURAG8bqu/6Lx+IwYE5INI8NH9HQd7fc+NkLxC/agf6H8q 7Nnz4otVYS95YAH9mhQ6DFCO2Vhy8Z9cCvZZYwR7DmqGuXhq+nUsIN4cfSV0Zryc hoEj/CIoQT7up4nI8BAYhDSkFjJ6y3Y0cOXGCcWD+eWCUXuYxqPLn2dHnuiW/yuL TO9zDXYGYye7GibC6HHwvF/tRLL3hGtU/H5Zt1XmWoCR8mfUOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE3KFwzCFU2cSUM8hgM19YiKEU/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0 M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQxMTRkM2ZjMmUvYWEwNDNlNTUtZTVkMi00 ZDcwLWJmZTgtN2Y0MTE0ZDNmYzJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWEwNDNlNTUtZTVkMi00ZDcwLWJm ZTgtN2Y0MTE0ZDNmYzJlL2FhMDQzZTU1LWU1ZDItNGQ3MC1iZmU4LTdmNDExNGQz ZmMyZS5jcmwwHwYDVR0jBBgwFoAUcpfLKpjB1Z3qhaKFfscU/4C4wiswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYTA0M2U1NS1lNWQyLTRkNzAtYmZlOC03ZjQx MTRkM2ZjMmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQASqTZy5wGMfu7OdvEcI0Di PE4I/VNX0lkWuyFEuionUCOIcmGJpqZ/rfXXH2LZOh6pBZECl7z8zrrMFbyXvTNs l6yLDdCmOB7MCvffYBrmQyoTjyq2xqxWrBxT2aCMk65pnLY/iT83m1oUFFQ/jK6C xfJ6iv/y6PxwTD/iXZnDaUnSgShvEWpOGWshFBZhMxSqS6DAqnqeRxvqb251NX9I NzyUUq8qDFT4nyLHrs2AyFJbwzzgnpXWoLNc7NmjVLzyfiT6cjF+mp+C7usW45NT DUf5s2SqAqnYHLE5aGBQHBMacgKOmlwgx7TFNBs3DI11ODMSsz5j1wqT1HVdVVzn -----END CERTIFICATE-----Generated at Sat Dec 6 10:35:08 2025 by rpki-client