This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft File: c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft (raw, json) Hash identifier: qbhcbdRP0DBtpMECm93ZZE5tjHUYOdCPpLgGJzYzhUU= Subject key identifier: 72:C5:1C:4D:6F:AA:13:68:78:34:44:CC:B9:0A:A3:F5:F9:8F:36:A2 Authority key identifier: D9:8E:AC:FD:35:83:40:AB:4F:42:45:27:21:7A:91:87:20:D5:04:5C Certificate issuer: /CN=c71b6a76-8f76-4635-b6fd-fdaad6f21504 Certificate serial: 010D0C9F4328584C166C15D1118E301B92985300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft Manifest number: 010D0C9F4328584073A81CB12D51632932675B94 Signing time: Fri 05 Dec 2025 16:00:08 +0000 Manifest this update: Fri 05 Dec 2025 16:00:08 +0000 Manifest next update: Sun 07 Dec 2025 16:00:00 +0000 Files and hashes: 1: 950d8c36-ddb0-3620-b235-c13e150e45f1.roa (hash: /biqYarjFVaf7kVGfOMjrr2DLmBltW9SPrcqbzngYVI=) 2: c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl (hash: eJMHKpwGLTdM4cKftS4Z1VEy70SSuHpTHmxMeVMKxbQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:6c:15:d1:11:8e:30:1b:92:98:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c71b6a76-8f76-4635-b6fd-fdaad6f21504 Validity Not Before: Dec 5 16:00:08 2025 GMT Not After : Dec 7 16:00:00 2025 GMT Subject: CN=85038298-057b-4388-b9bf-6d454ae2fcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5b:9d:ea:d9:7f:3a:8f:36:a3:af:32:67:01: b0:36:c7:7e:af:82:33:cf:8d:84:ee:d8:70:d0:69: ea:4c:b3:14:52:34:6b:ba:8b:fc:f4:5e:96:8e:2c: 23:44:ee:59:9f:67:a1:6f:bd:92:4b:26:51:55:c1: 01:d4:51:14:02:85:0e:35:97:4a:dd:e3:09:a6:22: 17:f3:4a:6a:90:bd:2d:47:b5:07:e3:aa:3e:23:6e: 94:46:ea:93:30:8d:c2:e1:c0:ba:99:72:46:9f:76: 63:33:09:7e:cd:b2:ed:34:39:1b:80:da:72:1e:aa: b9:19:ef:53:ab:87:1c:17:4b:51:80:54:61:67:db: 6f:6b:fc:f9:0c:40:19:53:ff:fa:2e:50:d9:50:b1: e8:1f:35:ea:9f:9d:f9:b8:ba:0c:8f:7d:9f:fd:d0: 2f:4a:a6:0e:12:51:48:63:bf:ec:ea:29:b5:cf:65: a9:10:30:8d:4b:c0:93:54:ee:7c:07:c9:04:03:eb: 34:a0:42:70:cf:64:44:60:e7:22:69:8e:f6:8f:80: 12:ce:01:73:37:70:90:fc:8d:1d:9b:6b:c4:b2:dd: 25:eb:e2:74:f2:50:94:14:81:cd:f7:1c:f5:2c:e9: a9:69:38:ed:cb:27:7b:6d:62:57:ed:c7:a6:20:d5: 24:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C5:1C:4D:6F:AA:13:68:78:34:44:CC:B9:0A:A3:F5:F9:8F:36:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504/c71b6a76-8f76-4635-b6fd-fdaad6f21504.crl X509v3 Authority Key Identifier: keyid:D9:8E:AC:FD:35:83:40:AB:4F:42:45:27:21:7A:91:87:20:D5:04:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c71b6a76-8f76-4635-b6fd-fdaad6f21504.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0d:74:25:a2:e9:97:bb:ba:79:46:d4:91:7e:ca:a6:49:60: 6c:20:40:b7:1d:73:42:7e:f9:34:73:00:d0:e9:b7:28:95:04: d6:d9:e9:3c:56:5f:f4:07:0e:d1:98:2b:8f:a8:72:e7:64:0d: bd:41:c1:b6:b5:89:d8:01:8d:7e:f6:d5:55:e6:d0:32:48:a3: 18:47:36:e0:9f:5a:42:df:5b:d1:00:19:d1:fa:54:f9:17:3b: 10:e8:8c:9a:0f:b2:4a:7a:a3:f5:06:2d:2e:c9:f2:bf:00:ef: 5f:15:0d:0a:58:23:42:3a:f6:45:1c:e3:9a:a1:01:90:d6:fc: 63:12:ba:e0:b2:cd:41:f8:3f:a0:98:09:14:58:29:0c:2e:35: f2:2b:e0:ce:3c:4e:74:5e:7e:db:a9:dc:c1:a5:79:88:47:8b: dc:7b:fb:a8:50:7c:a3:f3:26:f7:1f:db:8c:31:ca:7c:e2:e7: aa:dd:a7:91:f2:15:f0:2f:6f:d7:d9:dc:d3:36:f4:7c:8d:62: bd:f8:55:a4:eb:d2:36:52:cb:16:75:80:e1:b7:fb:12:b0:dc: 60:29:58:8e:55:c4:92:83:cc:70:64:fc:b6:66:ec:c6:8d:40: 81:86:a8:f5:2f:04:d7:27:b4:79:00:5d:7c:e0:cb:fe:b9:f8: e7:91:e8:3d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWbBXREY4wG5KYUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzcxYjZhNzYtOGY3Ni00NjM1LWI2ZmQtZmRhYWQ2ZjIx NTA0MB4XDTI1MTIwNTE2MDAwOFoXDTI1MTIwNzE2MDAwMFowLzEtMCsGA1UEAxMk ODUwMzgyOTgtMDU3Yi00Mzg4LWI5YmYtNmQ0NTRhZTJmY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11ud6tl/Oo82o68yZwGwNsd+r4Izz42E7thw 0GnqTLMUUjRruov89F6WjiwjRO5Zn2ehb72SSyZRVcEB1FEUAoUONZdK3eMJpiIX 80pqkL0tR7UH46o+I26URuqTMI3C4cC6mXJGn3ZjMwl+zbLtNDkbgNpyHqq5Ge9T q4ccF0tRgFRhZ9tva/z5DEAZU//6LlDZULHoHzXqn535uLoMj32f/dAvSqYOElFI Y7/s6im1z2WpEDCNS8CTVO58B8kEA+s0oEJwz2REYOciaY72j4ASzgFzN3CQ/I0d m2vEst0l6+J08lCUFIHN9xz1LOmpaTjtyyd7bWJX7cemINUk2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHLFHE1vqhNoeDREzLkKo/X5jzaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jNzFi NmE3Ni04Zjc2LTQ2MzUtYjZmZC1mZGFhZDZmMjE1MDQvYzcxYjZhNzYtOGY3Ni00 NjM1LWI2ZmQtZmRhYWQ2ZjIxNTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzcxYjZhNzYtOGY3Ni00NjM1LWI2 ZmQtZmRhYWQ2ZjIxNTA0L2M3MWI2YTc2LThmNzYtNDYzNS1iNmZkLWZkYWFkNmYy MTUwNC5jcmwwHwYDVR0jBBgwFoAU2Y6s/TWDQKtPQkUnIXqRhyDVBFwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jNzFiNmE3Ni04Zjc2LTQ2MzUtYjZmZC1mZGFh ZDZmMjE1MDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlDXQloumXu7p5RtSRfsqm SWBsIEC3HXNCfvk0cwDQ6bcolQTW2ek8Vl/0Bw7RmCuPqHLnZA29QcG2tYnYAY1+ 9tVV5tAySKMYRzbgn1pC31vRABnR+lT5FzsQ6IyaD7JKeqP1Bi0uyfK/AO9fFQ0K WCNCOvZFHOOaoQGQ1vxjErrgss1B+D+gmAkUWCkMLjXyK+DOPE50Xn7bqdzBpXmI R4vce/uoUHyj8yb3H9uMMcp84ueq3aeR8hXwL2/X2dzTNvR8jWK9+FWk69I2UssW dYDht/sSsNxgKViOVcSSg8xwZPy2ZuzGjUCBhqj1LwTXJ7R5AF184Mv+ufjnkeg9 -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:06 2025 by rpki-client