This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft File: 3555956f-7142-453a-8aea-177a684dd7aa.mft (raw, json) Hash identifier: QVg3bVSKXdhvXHXQ4GBXK9pwEmjXYZgrmb8C0BRyoaQ= Subject key identifier: 10:29:65:0B:2D:04:21:51:D0:87:DB:58:97:F4:FB:31:E8:04:CE:D9 Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F Certificate issuer: /CN=3555956f-7142-453a-8aea-177a684dd7aa Certificate serial: 010D0C9F4328584C171EB797ABB9357C864B9B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft Manifest number: 010D0C9F4328584073A82C1D57198DAF4CDC3454 Signing time: Fri 05 Dec 2025 22:00:04 +0000 Manifest this update: Fri 05 Dec 2025 22:00:04 +0000 Manifest next update: Sun 07 Dec 2025 22:00:00 +0000 Files and hashes: 1: 3555956f-7142-453a-8aea-177a684dd7aa.crl (hash: yjODDGZzHKG9d1DQZ4fQFS+FRQtWDpr92V51YEY1ZHU=) 2: 43abee32-0b0c-3284-ab75-86047f53ab34.roa (hash: DLRlvSpsW/7+rS+pHHfNi7hbWHAkm6PTpH7Hz5VY/h0=) 3: 99a0fa77-1eec-3eec-a0e9-aa8fb4c2abd3.roa (hash: UeEE6P+9eSQnBu7cTaRQWpFcGI4j0t/bZFCMxnGsQ6A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:1e:b7:97:ab:b9:35:7c:86:4b:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa Validity Not Before: Dec 5 22:00:04 2025 GMT Not After : Dec 7 22:00:00 2025 GMT Subject: CN=13bd4a7f-f40a-42de-90c5-8691cb71b6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:9d:a6:bc:23:12:87:81:5e:44:dc:55:72: 60:6d:f3:02:59:4b:2b:15:ad:b5:ec:4c:54:84:91: dd:43:7b:3e:9e:5a:f5:10:46:d7:0a:77:58:a3:c1: 4e:0e:f6:e6:9a:2a:92:01:a5:0b:a4:38:8a:e2:b6: fe:56:66:7f:c4:49:0f:60:a3:12:c9:4d:b2:0d:3a: b1:74:73:2a:4d:f8:b5:87:ba:6b:65:23:fd:6f:6e: c7:17:49:9f:92:7a:c5:e9:6a:c0:36:e2:0a:c5:13: 0b:3c:9e:f1:91:50:25:bb:ba:0c:00:3b:5c:91:d1: bd:7b:71:c4:dc:c8:3a:d1:d7:92:cf:e8:04:32:75: fb:14:18:7d:a3:92:66:6d:8b:19:32:af:45:f4:6d: b3:bd:4f:4e:ae:4e:a5:8c:c7:28:aa:95:db:f5:73: 73:0c:8d:ff:91:64:48:fc:77:ba:dc:54:50:10:82: 41:12:6b:9c:be:7c:13:44:ef:89:bf:bd:14:04:d8: 30:15:7d:ea:8c:38:d4:80:6f:a0:6d:ae:40:a3:d1: 74:22:c5:63:8a:f0:9f:e0:b5:05:14:2d:a4:15:fa: 09:be:9c:20:99:73:a9:e1:9d:fb:c3:d4:60:28:74: bd:c6:0d:12:d1:a2:34:c7:1a:1c:90:e2:1c:91:66: 4b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:29:65:0B:2D:04:21:51:D0:87:DB:58:97:F4:FB:31:E8:04:CE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl X509v3 Authority Key Identifier: keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:47:81:1f:9d:b4:43:79:93:ea:de:a7:75:7b:51:38:8f:a3: 06:23:10:b3:3a:e1:9f:57:8a:8a:2f:73:65:0e:68:d1:ad:74: 2b:62:55:62:9e:66:64:85:ba:fd:cf:ce:e0:55:e9:eb:05:6e: 9a:e1:5d:9f:42:b2:35:68:73:01:e6:ac:46:0c:26:db:a3:7c: f9:a9:fd:14:3a:0b:d6:37:6a:64:95:e8:9a:7f:3b:9b:39:9d: 3c:dc:86:db:73:8d:04:ee:b5:5d:9a:ae:6c:40:52:09:e8:78: b1:aa:de:d6:a4:f3:e5:31:42:f3:fb:7d:17:5b:ec:f6:41:55: f5:39:29:25:6f:26:66:d8:b0:7b:71:2b:ff:69:5e:7f:18:0c: 00:18:e7:fb:d9:49:a7:b2:d5:32:e4:bf:9d:07:04:68:72:80: 7e:0e:62:d7:a4:8a:91:a5:54:b2:0b:07:7f:6f:c4:3a:41:ca: dd:2c:a0:3d:6c:32:97:3e:15:f5:9f:4d:56:db:a6:48:98:31: 00:0a:09:49:2b:4f:a7:92:a3:f7:d9:fa:99:b8:b9:10:83:be: dc:c5:3a:eb:a1:05:17:77:05:71:ae:00:8c:83:e5:13:84:8e: cb:6a:38:c5:77:ed:d3:26:61:ab:91:ba:de:39:60:c5:84:a9: fd:20:e9:10 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXHreXq7k1fIZLm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU1NTk1NmYtNzE0Mi00NTNhLThhZWEtMTc3YTY4NGRk N2FhMB4XDTI1MTIwNTIyMDAwNFoXDTI1MTIwNzIyMDAwMFowLzEtMCsGA1UEAxMk MTNiZDRhN2YtZjQwYS00MmRlLTkwYzUtODY5MWNiNzFiNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGqdprwjEoeBXkTcVXJgbfMCWUsrFa217ExU hJHdQ3s+nlr1EEbXCndYo8FODvbmmiqSAaULpDiK4rb+VmZ/xEkPYKMSyU2yDTqx dHMqTfi1h7prZSP9b27HF0mfknrF6WrANuIKxRMLPJ7xkVAlu7oMADtckdG9e3HE 3Mg60deSz+gEMnX7FBh9o5JmbYsZMq9F9G2zvU9Ork6ljMcoqpXb9XNzDI3/kWRI /He63FRQEIJBEmucvnwTRO+Jv70UBNgwFX3qjDjUgG+gba5Ao9F0IsVjivCf4LUF FC2kFfoJvpwgmXOp4Z37w9RgKHS9xg0S0aI0xxockOIckWZLiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBApZQstBCFR0IfbWJf0+zHoBM7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1 OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdhNjg0ZGQ3YWEvMzU1NTk1NmYtNzE0Mi00 NTNhLThhZWEtMTc3YTY4NGRkN2FhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzU1NTk1NmYtNzE0Mi00NTNhLThh ZWEtMTc3YTY4NGRkN2FhLzM1NTU5NTZmLTcxNDItNDUzYS04YWVhLTE3N2E2ODRk ZDdhYS5jcmwwHwYDVR0jBBgwFoAUTnp2SaFOHZM02c2odqnRmGb0SA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNTU1OTU2Zi03MTQyLTQ1M2EtOGFlYS0xNzdh Njg0ZGQ3YWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBR4EfnbRDeZPq3qd1e1E4 j6MGIxCzOuGfV4qKL3NlDmjRrXQrYlVinmZkhbr9z87gVenrBW6a4V2fQrI1aHMB 5qxGDCbbo3z5qf0UOgvWN2pkleiafzubOZ083Ibbc40E7rVdmq5sQFIJ6Hixqt7W pPPlMULz+30XW+z2QVX1OSklbyZm2LB7cSv/aV5/GAwAGOf72UmnstUy5L+dBwRo coB+DmLXpIqRpVSyCwd/b8Q6QcrdLKA9bDKXPhX1n01W26ZImDEACglJK0+nkqP3 2fqZuLkQg77cxTrroQUXdwVxrgCMg+UThI7LajjFd+3TJmGrkbreOWDFhKn9IOkQ -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:59 2025 by rpki-client