This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft File: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft (raw, json) Hash identifier: J/dKl8yG+ICeYflXWyM0VwwLIgmIUvmpLvny7NNqo7k= Subject key identifier: 33:3E:A5:C8:A5:7C:61:5D:FC:D5:34:EE:5D:6A:9B:D3:98:E1:A3:0A Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584C1612C20DA248F0E304C6B780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft Manifest number: 010D0C9F4328584073A85689C6C67E2F0E4CA787 Signing time: Fri 05 Dec 2025 13:00:08 +0000 Manifest this update: Fri 05 Dec 2025 13:00:08 +0000 Manifest next update: Mon 08 Dec 2025 13:00:00 +0000 Files and hashes: 1: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (hash: FWJJRM+VtW1Pzul29d44cpLLuUEdPIh5dJxxWh2HxgQ=) 2: 2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl (hash: S4Nv8uaHyJ2sBGiaNGAEWb6Zzhi+NIyWB6zZWcP1sfg=) 3: cd3cb7de-2625-3893-a323-d1bec7d259a0.roa (hash: MwO9KQBq3k6/kh/MMo6oqoC2rldluv8NwCS4hmvutwc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:12:c2:0d:a2:48:f0:e3:04:c6:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Dec 5 13:00:08 2025 GMT Not After : Dec 8 13:00:00 2025 GMT Subject: CN=2b8d3ec6-81e9-4fd5-b432-1093646def28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:9d:60:cb:43:b8:6f:a3:11:84:d1:53:65: a1:ba:b3:39:0e:4a:76:11:04:a8:97:b1:e3:cd:a9: 4c:de:dc:72:1f:c8:bd:00:f4:44:c0:ed:55:d4:6d: 50:bc:75:6a:90:e9:5d:86:99:b7:b8:d9:67:92:8b: 7a:2f:23:a5:95:88:86:1b:eb:b9:a3:59:19:b9:92: be:b2:0b:ee:3f:7c:82:b9:13:e9:d4:f8:2b:3b:7b: 8b:81:9e:61:57:22:95:3a:0b:e5:13:ff:99:40:aa: c6:dd:61:0f:f3:6b:60:9d:bc:6c:42:a2:97:76:60: 63:38:e5:7f:15:90:ff:69:73:e8:2f:d2:cc:59:6c: 89:09:29:01:a0:2f:53:a4:c2:85:d8:2d:85:63:54: a7:95:9e:a2:78:3e:d2:5f:a0:23:a0:82:d8:6a:17: d9:65:3a:bd:83:22:d7:17:49:1b:1f:a3:fa:e0:5e: e3:f4:8a:17:ae:e8:6d:d3:01:80:c4:f4:d3:84:0f: 23:6a:ac:d3:79:b8:c2:f3:bb:c8:30:68:6b:b1:ca: 91:e6:00:3c:14:6f:85:43:67:6b:b7:88:1a:48:f8: 4e:fb:9f:64:a2:e7:1e:0a:ff:f5:3b:6e:0f:0f:38: 6a:3a:a6:b2:74:09:92:3a:7a:5a:8d:de:2a:2a:b7: da:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:A5:C8:A5:7C:61:5D:FC:D5:34:EE:5D:6A:9B:D3:98:E1:A3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4b:bd:85:86:fb:ec:98:e8:ac:b4:a1:df:3d:bc:c8:65:c6: 41:92:d8:7e:c3:37:bf:d3:8e:de:c0:77:d4:cd:f3:09:25:27: 7d:e9:ac:0d:44:f4:44:34:94:fe:b5:f0:12:da:9d:00:1d:67: 77:5e:a6:93:6e:49:8f:37:91:90:96:ad:23:4e:83:e4:8d:1b: a5:28:97:3b:70:3e:7c:2e:2b:e0:1e:be:03:a3:e8:a2:39:b7: a7:fc:16:5e:ad:9c:5c:ab:26:b1:fe:e2:d8:8c:79:5a:51:b0: 06:d6:11:18:9e:49:29:00:7e:e5:0b:37:89:c1:42:4a:2a:5e: 4a:c9:81:69:5d:1c:bd:4c:70:ec:e8:9e:b7:52:e9:29:2d:d6: 94:ec:bd:14:11:21:72:36:eb:1b:c3:b7:5f:7d:48:33:c6:d2: fb:bc:5e:eb:a8:85:9d:71:22:40:63:93:00:e4:95:fa:9c:9b: 94:68:a4:36:cd:7e:a2:54:b2:e0:a5:96:4b:d9:d2:8f:6c:94: 34:32:f8:9e:ab:69:b4:c6:6e:e0:c7:f4:6c:4e:9f:f7:06:ef: f6:d4:fd:ad:5e:35:03:88:54:13:68:bc:a1:cd:da:da:12:62: 97:d1:67:51:f5:91:de:4d:2f:bc:f5:4a:5f:f0:88:0b:77:0b: 14:32:af:79 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWEsINokjw4wTGt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI1MTIwNTEzMDAwOFoXDTI1MTIwODEzMDAwMFowLzEtMCsGA1UEAxMk MmI4ZDNlYzYtODFlOS00ZmQ1LWI0MzItMTA5MzY0NmRlZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZSdYMtDuG+jEYTRU2WhurM5Dkp2EQSol7Hj zalM3txyH8i9APREwO1V1G1QvHVqkOldhpm3uNlnkot6LyOllYiGG+u5o1kZuZK+ sgvuP3yCuRPp1PgrO3uLgZ5hVyKVOgvlE/+ZQKrG3WEP82tgnbxsQqKXdmBjOOV/ FZD/aXPoL9LMWWyJCSkBoC9TpMKF2C2FY1SnlZ6ieD7SX6AjoILYahfZZTq9gyLX F0kbH6P64F7j9IoXruht0wGAxPTThA8jaqzTebjC87vIMGhrscqR5gA8FG+FQ2dr t4gaSPhO+59kouceCv/1O24PDzhqOqaydAmSOnpajd4qKrfahQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDM+pcilfGFd/NU07l1qm9OY4aMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMmExZTk3MzQtMGE3Zi00 OGU2LTg3ZDMtY2E3ZDgzN2Y0ZTUwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgS72FhvvsmOistKHfPbzI ZcZBkth+wze/047ewHfUzfMJJSd96awNRPRENJT+tfAS2p0AHWd3XqaTbkmPN5GQ lq0jToPkjRulKJc7cD58LivgHr4Do+iiOben/BZerZxcqyax/uLYjHlaUbAG1hEY nkkpAH7lCzeJwUJKKl5KyYFpXRy9THDs6J63UukpLdaU7L0UESFyNusbw7dffUgz xtL7vF7rqIWdcSJAY5MA5JX6nJuUaKQ2zX6iVLLgpZZL2dKPbJQ0Mvieq2m0xm7g x/RsTp/3Bu/21P2tXjUDiFQTaLyhzdraEmKX0WdR9ZHeTS+89Upf8IgLdwsUMq95 -----END CERTIFICATE-----Generated at Sat Dec 6 09:22:02 2025 by rpki-client