This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft File: 38ec4694-a70f-4329-b713-f4da59e49973.mft (raw, json) Hash identifier: I3I6FlqFn+a6a8V3DF4/qdcquPHVwr0xUcQBQ5JcExc= Subject key identifier: C8:75:63:E6:47:56:18:5C:51:92:88:91:D0:B7:AC:A4:49:91:3C:A5 Authority key identifier: B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 Certificate issuer: /CN=38ec4694-a70f-4329-b713-f4da59e49973 Certificate serial: 010D0C9F4328584C19902274677C3886DEDBA680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft Manifest number: 010D0C9F4328584073A81FB6CCA512A58B3512C6 Signing time: Sat 06 Dec 2025 19:00:10 +0000 Manifest this update: Sat 06 Dec 2025 19:00:10 +0000 Manifest next update: Tue 09 Dec 2025 19:00:00 +0000 Files and hashes: 1: 38ec4694-a70f-4329-b713-f4da59e49973.crl (hash: 4kgBk2dpuVTxnc1J4k7XkegpXuyPx+ZeXHnkG0FYAC0=) 2: 41b495a1-3627-3667-af41-d2072d5d9889.roa (hash: D4XbKxffLS2tBP1QySFfskNbahreQqhI4Bx97muyYFg=) 3: db68ef86-9475-3cb0-b54e-de67c51a1d6b.roa (hash: 4JoN5T2APYDurUDVNhDti+TXMqUrbB3tU5YafgvlfyM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:19:90:22:74:67:7c:38:86:de:db:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38ec4694-a70f-4329-b713-f4da59e49973 Validity Not Before: Dec 6 19:00:10 2025 GMT Not After : Dec 9 19:00:00 2025 GMT Subject: CN=20d80998-0c3c-49d0-96c2-06d376469e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e3:0d:bd:ac:0d:85:5f:70:47:8f:fc:2f:97: a5:2d:ad:e8:2e:29:cd:a1:6a:c4:89:a4:3f:ce:80: 1c:4b:82:82:44:c5:b9:1f:46:41:f3:c7:6e:21:82: 87:2a:ac:9f:f9:cc:ad:2a:31:bb:d3:68:58:6a:aa: 0d:fd:7b:f6:15:fe:ca:fe:47:2e:9e:a2:99:67:3a: 25:07:d8:8e:ee:67:9d:dc:ad:c9:16:3d:14:75:23: a1:26:5a:dd:64:a2:4b:02:87:fe:f9:16:0e:ce:da: 93:7e:c2:b8:2f:5e:54:83:38:8f:91:1c:b5:46:47: 03:12:ac:6a:7b:d7:42:1d:13:3f:41:ea:68:f7:6a: 87:0a:dc:27:f0:00:a4:33:0e:49:ac:3e:11:76:aa: b7:4b:1d:52:6d:67:6b:a7:65:b6:9b:ff:3e:51:cf: 68:15:bc:36:d5:b8:ae:7d:57:bf:44:ae:25:8f:a5: 43:0b:b1:78:d4:7e:ec:02:bb:e8:1b:89:9d:9f:0d: ea:f5:75:23:08:fe:21:7f:03:fc:70:93:3a:e1:42: 64:2c:9b:89:d0:d1:e4:7e:27:43:53:17:56:61:6c: 1a:7c:8f:16:ba:96:37:94:76:b8:a8:5e:2b:88:23: 1d:93:61:2f:e7:32:6d:ce:1b:05:43:46:2a:4b:77: 55:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:75:63:E6:47:56:18:5C:51:92:88:91:D0:B7:AC:A4:49:91:3C:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973/38ec4694-a70f-4329-b713-f4da59e49973.crl X509v3 Authority Key Identifier: keyid:B6:D1:08:1D:37:82:AE:20:58:F3:76:D9:DC:18:7B:0C:14:93:2B:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38ec4694-a70f-4329-b713-f4da59e49973.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:3e:8c:41:21:b3:8e:b1:95:4b:9b:c1:04:20:a9:85:3d:1d: 09:fe:74:b1:e8:65:f5:e9:98:7a:fc:74:da:59:33:20:be:b6: 49:c4:9f:45:a9:c5:93:77:b4:1a:da:83:71:17:f3:21:93:15: c7:74:90:2a:e4:41:02:ca:7c:e5:b3:39:1c:5f:92:e2:f6:8b: a6:65:47:1c:42:e5:39:de:e2:16:48:4f:4b:58:44:70:3b:c1: be:ef:fe:64:4c:4b:2b:f7:57:07:81:d2:e8:08:14:ab:62:05: 07:3a:fc:de:ca:e0:ea:73:33:bc:46:b7:c6:f9:4c:97:fa:6d: da:19:57:f9:3a:65:75:d1:30:ec:d4:4e:42:fa:6b:a7:ac:ed: 84:6c:95:c3:ee:31:a0:11:f5:ae:a7:e3:6e:cf:2d:f8:7b:be: 0d:75:3c:f6:2c:99:93:8f:ef:3b:79:46:24:c1:44:1e:35:6d: 40:df:e7:9d:84:32:9a:d0:2e:4d:7b:3b:d5:7e:98:ce:31:e8: d2:e0:f8:d2:9a:62:9c:8f:ca:2e:ab:7c:fe:2c:24:5c:fa:ff: 61:1a:31:fb:01:ce:fa:da:71:b7:18:e1:f7:37:fb:4c:2f:19: 64:db:0d:59:18:ef:04:75:1f:bb:67:2c:92:18:0a:3c:15:b3: a3:44:61:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwZkCJ0Z3w4ht7bpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhlYzQ2OTQtYTcwZi00MzI5LWI3MTMtZjRkYTU5ZTQ5 OTczMB4XDTI1MTIwNjE5MDAxMFoXDTI1MTIwOTE5MDAwMFowLzEtMCsGA1UEAxMk MjBkODA5OTgtMGMzYy00OWQwLTk2YzItMDZkMzc2NDY5ZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6uMNvawNhV9wR4/8L5elLa3oLinNoWrEiaQ/ zoAcS4KCRMW5H0ZB88duIYKHKqyf+cytKjG702hYaqoN/Xv2Ff7K/kcunqKZZzol B9iO7med3K3JFj0UdSOhJlrdZKJLAof++RYOztqTfsK4L15UgziPkRy1RkcDEqxq e9dCHRM/Qepo92qHCtwn8ACkMw5JrD4Rdqq3Sx1SbWdrp2W2m/8+Uc9oFbw21biu fVe/RK4lj6VDC7F41H7sArvoG4mdnw3q9XUjCP4hfwP8cJM64UJkLJuJ0NHkfidD UxdWYWwafI8WupY3lHa4qF4riCMdk2Ev5zJtzhsFQ0YqS3dVrwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMh1Y+ZHVhhcUZKIkdC3rKRJkTylMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVj NDY5NC1hNzBmLTQzMjktYjcxMy1mNGRhNTllNDk5NzMvMzhlYzQ2OTQtYTcwZi00 MzI5LWI3MTMtZjRkYTU5ZTQ5OTczLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhlYzQ2OTQtYTcwZi00MzI5LWI3 MTMtZjRkYTU5ZTQ5OTczLzM4ZWM0Njk0LWE3MGYtNDMyOS1iNzEzLWY0ZGE1OWU0 OTk3My5jcmwwHwYDVR0jBBgwFoAUttEIHTeCriBY83bZ3Bh7DBSTK7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGVjNDY5NC1hNzBmLTQzMjktYjcxMy1mNGRh NTllNDk5NzMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAgPoxBIbOOsZVLm8EEIKmF PR0J/nSx6GX16Zh6/HTaWTMgvrZJxJ9FqcWTd7Qa2oNxF/MhkxXHdJAq5EECynzl szkcX5Li9oumZUccQuU53uIWSE9LWERwO8G+7/5kTEsr91cHgdLoCBSrYgUHOvze yuDqczO8RrfG+UyX+m3aGVf5OmV10TDs1E5C+munrO2EbJXD7jGgEfWup+Nuzy34 e74NdTz2LJmTj+87eUYkwUQeNW1A3+edhDKa0C5NezvVfpjOMejS4PjSmmKcj8ou q3z+LCRc+v9hGjH7Ac762nG3GOH3N/tMLxlk2w1ZGO8EdR+7ZyySGAo8FbOjRGHR -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:45 2025 by rpki-client