This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft File: 958d43d9-c341-46e7-b131-b154f01666e6.mft (raw, json) Hash identifier: HblkDLN2ln/RZ2VKV7EM9FnY/lwBCaJPWwn2+yyX/vs= Subject key identifier: 5F:E3:3D:38:9A:3C:09:F2:4A:28:DF:B2:74:04:AC:F9:F3:27:D1:75 Authority key identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 Certificate issuer: /CN=958d43d9-c341-46e7-b131-b154f01666e6 Certificate serial: 010D0C9F4328584C16A7A784B3EF1C73602A9300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft Manifest number: 010D0C9F4328584BD94681EE9FBA368680781217 Signing time: Fri 05 Dec 2025 18:00:08 +0000 Manifest this update: Fri 05 Dec 2025 18:00:08 +0000 Manifest next update: Mon 08 Dec 2025 18:00:00 +0000 Files and hashes: 1: 958d43d9-c341-46e7-b131-b154f01666e6.crl (hash: C18Z1E9WNpnHRV4debpSe6D0s1LxV+V9ddwyBzTgs8E=) 2: 990b7dd1-611c-3ea1-aafc-3d83c74060da.roa (hash: +2RG2XyqrViC1GJm5KPhMlewX2BZOT+K3skLvQSEgRM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:a7:a7:84:b3:ef:1c:73:60:2a:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958d43d9-c341-46e7-b131-b154f01666e6 Validity Not Before: Dec 5 18:00:08 2025 GMT Not After : Dec 8 18:00:00 2025 GMT Subject: CN=3e6fa8fc-eaea-41d4-b90b-eaf3380e26bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b7:58:6b:bc:7b:7e:c1:ae:41:02:8f:f6:c5: 3b:81:5c:6f:e1:b5:b5:4f:c8:14:e4:9f:56:25:0b: 92:19:d0:10:b8:b6:34:78:20:e0:67:89:a3:90:a5: 66:1c:81:06:1b:c6:ff:37:c3:eb:41:fc:5d:a1:70: 02:1a:c9:59:58:00:4a:f9:d0:00:86:a9:46:dd:e4: bc:9a:55:d0:14:80:7f:56:8e:22:c0:71:c6:09:28: 89:cc:08:e8:42:55:0c:32:5d:e3:ce:59:71:b7:2a: dc:8a:96:21:d2:49:3b:dd:4c:57:64:ba:68:5c:eb: 5b:6e:ec:36:1a:e2:d8:89:42:d9:6b:71:bf:93:4a: b9:8d:17:fa:ec:dc:fc:cd:ae:40:9a:03:8d:16:88: f2:86:9d:c2:5b:ef:67:5b:79:7f:7a:0e:b6:06:37: 90:af:f8:f4:5a:85:6a:e5:31:cd:44:e6:f7:d6:46: 32:50:0c:86:ce:ce:60:dd:fb:b8:63:17:ef:a9:16: ea:f9:d3:27:09:c2:6b:9d:56:bd:48:df:85:1c:2a: 2f:8b:23:92:df:c5:92:1b:47:45:cb:40:7c:c5:a7: 87:e7:7e:8c:7a:78:0b:9f:de:bb:15:33:29:80:68: 97:3e:c5:61:47:3f:ce:e4:1d:41:bb:0f:ef:0a:22: 66:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E3:3D:38:9A:3C:09:F2:4A:28:DF:B2:74:04:AC:F9:F3:27:D1:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl X509v3 Authority Key Identifier: keyid:E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ca:62:68:69:14:03:a7:db:44:7e:fc:32:1f:97:e3:9c:4c: f4:1a:92:8a:e7:56:13:47:66:5b:66:a5:21:63:4a:17:6c:a2: f0:eb:e9:e5:17:5e:b3:53:d6:77:a5:8e:ff:68:42:43:44:92: 3e:63:23:96:e7:de:9d:2b:4e:9b:cd:d6:98:b3:36:3e:4e:08: 73:09:4a:8b:86:90:d5:bc:8c:cb:0f:36:92:b8:d3:fb:12:04: b5:80:ea:6f:45:df:7e:ad:3c:38:b4:7b:b8:e4:bf:63:95:3c: 18:a8:1a:a0:ab:88:58:54:43:dd:63:86:c2:e7:6a:39:66:47: 2d:bc:2f:64:31:2c:cd:01:76:12:1a:9a:47:36:39:39:e9:90: ff:d2:d1:aa:9b:78:28:96:ad:f0:0c:79:7b:f2:65:1d:6c:59: df:25:29:47:2d:fb:82:fb:6c:e9:6f:ea:8c:af:dc:e4:f3:db: 61:13:49:12:4e:4d:3b:5c:6c:11:aa:6f:64:42:26:f6:91:93: e0:10:c9:c8:47:76:27:79:a4:7c:aa:2c:bc:20:b8:ac:23:1d: 86:d8:ec:8f:b1:51:48:bb:7f:38:e3:9d:25:de:a3:d6:c9:e3: 3b:f6:3f:85:50:6c:1b:b4:e1:41:c5:6f:84:12:27:27:16:fe: 4c:c4:86:36 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWp6eEs+8cc2AqkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU4ZDQzZDktYzM0MS00NmU3LWIxMzEtYjE1NGYwMTY2 NmU2MB4XDTI1MTIwNTE4MDAwOFoXDTI1MTIwODE4MDAwMFowLzEtMCsGA1UEAxMk M2U2ZmE4ZmMtZWFlYS00MWQ0LWI5MGItZWFmMzM4MGUyNmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLdYa7x7fsGuQQKP9sU7gVxv4bW1T8gU5J9W JQuSGdAQuLY0eCDgZ4mjkKVmHIEGG8b/N8PrQfxdoXACGslZWABK+dAAhqlG3eS8 mlXQFIB/Vo4iwHHGCSiJzAjoQlUMMl3jzllxtyrcipYh0kk73UxXZLpoXOtbbuw2 GuLYiULZa3G/k0q5jRf67Nz8za5AmgONFojyhp3CW+9nW3l/eg62BjeQr/j0WoVq 5THNROb31kYyUAyGzs5g3fu4YxfvqRbq+dMnCcJrnVa9SN+FHCoviyOS38WSG0dF y0B8xaeH536MengLn967FTMpgGiXPsVhRz/O5B1Buw/vCiJmewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF/jPTiaPAnySijfsnQErPnzJ9F1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThk NDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0ZjAxNjY2ZTYvOTU4ZDQzZDktYzM0MS00 NmU3LWIxMzEtYjE1NGYwMTY2NmU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTU4ZDQzZDktYzM0MS00NmU3LWIx MzEtYjE1NGYwMTY2NmU2Lzk1OGQ0M2Q5LWMzNDEtNDZlNy1iMTMxLWIxNTRmMDE2 NjZlNi5jcmwwHwYDVR0jBBgwFoAU5I/z/JUc+oBtA3Xf6as1wI5aKBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThkNDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0 ZjAxNjY2ZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/ymJoaRQDp9tEfvwyH5fj nEz0GpKK51YTR2ZbZqUhY0oXbKLw6+nlF16zU9Z3pY7/aEJDRJI+YyOW596dK06b zdaYszY+TghzCUqLhpDVvIzLDzaSuNP7EgS1gOpvRd9+rTw4tHu45L9jlTwYqBqg q4hYVEPdY4bC52o5ZkctvC9kMSzNAXYSGppHNjk56ZD/0tGqm3golq3wDHl78mUd bFnfJSlHLfuC+2zpb+qMr9zk89thE0kSTk07XGwRqm9kQib2kZPgEMnIR3YneaR8 qiy8ILisIx2G2OyPsVFIu384450l3qPWyeM79j+FUGwbtOFBxW+EEicnFv5MxIY2 -----END CERTIFICATE-----Generated at Sat Dec 6 08:58:42 2025 by rpki-client