This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft File: 23fa747f-0e53-4654-913d-ebe4ae8f453b.mft (raw, json) Hash identifier: edx2hkWsx204ncP78B5aA7HWW40GFs+kr6qjNA5c8Wo= Subject key identifier: 9D:E5:52:97:3F:09:A2:86:C2:F5:0B:1A:40:8C:6A:BA:DA:E7:4C:BA Authority key identifier: 4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 Certificate issuer: /CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Certificate serial: 010D0C9F4328584C18FC36E89B79D12C118C90C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft Manifest number: 010D0C9F4328584073A84466A9242657796EB88E Signing time: Sat 06 Dec 2025 14:02:09 +0000 Manifest this update: Sat 06 Dec 2025 14:02:09 +0000 Manifest next update: Mon 08 Dec 2025 07:00:00 +0000 Files and hashes: 1: 0d0d9704-647b-32f6-9304-e2dd0f7e7d05.roa (hash: KoghvPk4wQLadsNRgXMqZDXG2yKOry4PJgkidIDlClU=) 2: 23fa747f-0e53-4654-913d-ebe4ae8f453b.crl (hash: z0baPr0XOqh3xmEPME9GF4XDyM6A/CpasMOMASXzT/w=) 3: aaf7d372-4189-3790-9dca-61a125a2f0df.roa (hash: aL21hNMWdZY8cFDgRvY/I7BRcswFqFs/NP7TROkXvDg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:fc:36:e8:9b:79:d1:2c:11:8c:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23fa747f-0e53-4654-913d-ebe4ae8f453b Validity Not Before: Dec 6 14:02:09 2025 GMT Not After : Dec 8 07:00:00 2025 GMT Subject: CN=c32369fa-4900-409d-b4bd-cb793187abc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cf:2c:d2:5c:6b:f0:58:6f:65:42:7f:92:3a: 7d:6d:4d:23:68:5a:3a:94:9c:0e:3d:1c:c8:a6:2e: 32:7e:94:ad:aa:ae:d7:6f:ab:4f:46:1b:de:95:3c: f0:5d:69:77:a4:c6:6c:36:17:89:38:87:6f:cb:90: e4:5e:f8:35:b9:23:d2:b9:75:22:b1:bd:83:5b:b7: cf:1a:dd:79:a7:68:a1:c4:90:b0:f5:92:fc:19:7d: fd:dd:c5:af:c4:17:ec:0e:f7:9b:b6:91:4d:43:60: 56:41:80:6a:45:b3:64:50:43:8f:fc:25:8a:a0:e6: fe:69:19:4d:4e:fa:12:4b:62:7c:2f:e1:21:e5:d3: 70:49:a2:4e:a2:f3:48:1b:1e:21:37:90:01:b8:08: e7:84:74:44:a9:79:15:59:09:8c:cd:50:1f:cc:65: 72:67:88:9a:c0:1e:9a:cc:d5:20:f4:e5:ed:7e:34: 43:53:3a:09:c7:c0:2f:4b:9c:c6:86:f9:91:a9:4c: 52:67:e3:c9:28:27:83:55:88:e5:38:9f:5a:92:2b: 0b:a0:8d:e9:28:53:ff:53:74:94:33:8f:f5:96:d9: 61:aa:5e:82:c6:d2:a3:33:24:9b:a3:fe:05:b5:00: ea:74:a6:ff:90:06:6b:71:0f:9e:74:77:43:1d:f9: 5e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E5:52:97:3F:09:A2:86:C2:F5:0B:1A:40:8C:6A:BA:DA:E7:4C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b/23fa747f-0e53-4654-913d-ebe4ae8f453b.crl X509v3 Authority Key Identifier: keyid:4B:07:70:44:0A:64:F7:A4:10:4A:2A:58:81:04:85:C1:C9:B1:EE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23fa747f-0e53-4654-913d-ebe4ae8f453b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:25:22:17:4c:5c:f8:4d:17:ea:39:37:a0:15:96:84:74:2a: e4:47:c8:f1:e6:53:01:98:51:04:79:34:a9:e3:fb:76:c8:9e: f0:2c:71:40:8b:e2:7c:dd:c0:17:31:f4:08:b2:5a:71:94:e6: 92:b3:fe:79:a4:c9:cd:1d:21:9b:2f:b6:cc:51:30:e6:68:f8: 24:b2:91:5b:a5:4f:ce:53:38:fc:14:c2:90:78:76:86:cc:fa: 31:cb:5d:7a:4e:4d:67:5c:c1:1b:b8:a3:09:28:55:c6:c4:41: 39:8e:32:2c:c9:02:5f:b7:cb:fa:b6:23:10:2c:3f:16:12:4f: 4b:58:5e:9d:62:29:7d:cd:ae:66:80:7c:a2:de:b6:b0:df:98: 66:41:f4:dd:d4:66:a2:54:78:07:b7:1b:fc:cc:5f:2a:da:38: 37:37:5e:d7:1e:22:f4:75:bf:f6:5a:c0:77:4c:75:6d:cd:fa: 14:b3:3c:19:ef:1c:50:5c:f1:25:2a:74:20:d6:c3:c6:ba:d9: 92:5d:5c:e8:0a:d1:5e:d7:b4:43:3e:79:ec:7b:5d:f8:8e:ae: 90:a6:05:15:5f:0c:9b:2e:98:77:50:bd:f7:c6:3c:dc:26:eb: ff:7c:f2:90:5a:a9:6d:63:39:41:a7:ac:c6:c1:c4:fe:65:e2: 14:d9:64:20 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwY/Dbom3nRLBGMkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmYTc0N2YtMGU1My00NjU0LTkxM2QtZWJlNGFlOGY0 NTNiMB4XDTI1MTIwNjE0MDIwOVoXDTI1MTIwODA3MDAwMFowLzEtMCsGA1UEAxMk YzMyMzY5ZmEtNDkwMC00MDlkLWI0YmQtY2I3OTMxODdhYmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi88s0lxr8FhvZUJ/kjp9bU0jaFo6lJwOPRzI pi4yfpStqq7Xb6tPRhvelTzwXWl3pMZsNheJOIdvy5DkXvg1uSPSuXUisb2DW7fP Gt15p2ihxJCw9ZL8GX393cWvxBfsDvebtpFNQ2BWQYBqRbNkUEOP/CWKoOb+aRlN TvoSS2J8L+Eh5dNwSaJOovNIGx4hN5ABuAjnhHREqXkVWQmMzVAfzGVyZ4iawB6a zNUg9OXtfjRDUzoJx8AvS5zGhvmRqUxSZ+PJKCeDVYjlOJ9akisLoI3pKFP/U3SU M4/1ltlhql6CxtKjMySbo/4FtQDqdKb/kAZrcQ+edHdDHflepQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJ3lUpc/CaKGwvULGkCMarra50y6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Zh NzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0YWU4ZjQ1M2IvMjNmYTc0N2YtMGU1My00 NjU0LTkxM2QtZWJlNGFlOGY0NTNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNmYTc0N2YtMGU1My00NjU0LTkx M2QtZWJlNGFlOGY0NTNiLzIzZmE3NDdmLTBlNTMtNDY1NC05MTNkLWViZTRhZThm NDUzYi5jcmwwHwYDVR0jBBgwFoAUSwdwRApk96QQSipYgQSFwcmx7kUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2ZhNzQ3Zi0wZTUzLTQ2NTQtOTEzZC1lYmU0 YWU4ZjQ1M2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFJSIXTFz4TRfqOTegFZaE dCrkR8jx5lMBmFEEeTSp4/t2yJ7wLHFAi+J83cAXMfQIslpxlOaSs/55pMnNHSGb L7bMUTDmaPgkspFbpU/OUzj8FMKQeHaGzPoxy116Tk1nXMEbuKMJKFXGxEE5jjIs yQJft8v6tiMQLD8WEk9LWF6dYil9za5mgHyi3raw35hmQfTd1GaiVHgHtxv8zF8q 2jg3N17XHiL0db/2WsB3THVtzfoUszwZ7xxQXPElKnQg1sPGutmSXVzoCtFe17RD Pnnse134jq6QpgUVXwybLph3UL33xjzcJuv/fPKQWqltYzlBp6zGwcT+ZeIU2WQg -----END CERTIFICATE-----Generated at Sat Dec 6 16:31:15 2025 by rpki-client