This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: iNrchtb0BX2XVvR96WGHHrxF2cheH2s7FeX8PGRlKjg= Subject key identifier: 0E:31:29:96:D2:C0:9D:6D:35:FD:E6:96:19:CB:D7:D3:EC:99:B9:FC Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584C18841AA85D6671C2C2A57E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026CC6 Signing time: Sat 06 Dec 2025 10:00:09 +0000 Manifest this update: Sat 06 Dec 2025 10:00:09 +0000 Manifest next update: Mon 08 Dec 2025 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: xKS5dDL4uvITst9UbO+LG4cGqgdrvmgMi89oisspobc=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: YlmwmODkdiVTPWRkpt7aNDAHuS1FENLofK1jFSzpyJs=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: tyu/ZwC6SFzUuLpdo6IDvjF0vSqzmXyC9vxaQWTYx/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:84:1a:a8:5d:66:71:c2:c2:a5:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Dec 6 10:00:09 2025 GMT Not After : Dec 8 10:00:00 2025 GMT Subject: CN=98d0f611-ec2b-4571-a0e4-57a420bf74b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:33:73:be:61:a2:11:9f:9f:9f:1a:0e:c3: 13:47:cc:bc:15:75:bc:6f:d8:96:ef:48:0d:01:f2: 42:7e:4d:0e:f3:7d:56:95:3f:0c:c0:3e:b3:2c:63: 5a:10:32:3f:19:4e:12:fe:e6:4e:e6:70:60:bd:75: 43:d8:d4:86:e6:8e:79:2d:aa:51:c0:43:02:40:0f: c9:b8:08:2c:62:71:0d:db:2e:4b:4f:fa:41:d6:b1: 5a:e9:a4:fb:62:c4:d6:b0:4f:71:b0:cb:65:cb:8c: 9e:83:b3:91:a0:b6:28:bc:c4:50:91:b6:57:6b:e0: b3:07:2b:59:50:3c:e7:58:de:ca:67:30:6e:29:9b: ef:4a:88:48:6f:2e:69:4e:3d:36:b8:1a:dc:2a:b3: 4c:60:4f:b3:77:fb:20:c6:4d:a9:fa:cb:07:9f:ad: e4:75:70:a1:33:5a:59:6b:3e:db:d6:3c:0d:5a:d1: 45:47:94:5a:88:00:42:83:4c:39:a6:6c:ec:01:c3: ec:ee:88:d0:e1:90:5e:de:ae:85:b0:40:13:ab:ea: 3d:bd:b0:b7:42:c1:ea:2c:fa:92:b4:93:e2:d4:eb: 3e:df:5c:d7:e3:a5:74:06:58:22:ba:31:cd:80:1e: 75:71:c4:15:22:1f:c1:af:9e:e3:cf:21:62:b2:27: 96:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:29:96:D2:C0:9D:6D:35:FD:E6:96:19:CB:D7:D3:EC:99:B9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:73:c3:e5:d2:34:b7:2e:b4:c4:87:36:81:92:43:38:06:35: c8:82:39:18:09:31:ce:a6:a0:b2:74:3f:f0:2d:d0:5c:aa:21: 04:9e:40:d5:63:1c:9a:0a:7d:91:eb:48:67:93:ac:35:0b:96: f4:ff:d5:71:87:c7:76:33:ca:99:6b:f5:87:01:9c:13:00:af: a7:20:22:72:41:03:29:40:63:d1:b4:78:48:55:a1:5c:db:85: 56:57:5f:e3:61:99:6d:61:9d:f2:69:a7:dd:c9:b2:b1:b5:85: 6b:c1:09:a9:ce:13:c5:9c:de:f6:6f:76:63:61:83:fd:46:f4: db:c0:4e:59:8b:f2:0b:82:92:bb:15:72:cc:fb:7f:bc:fe:cc: 32:c2:44:43:ab:ba:a8:71:db:68:6b:fc:02:de:04:8e:18:4e: f4:77:4e:46:c5:b6:35:7d:66:cb:70:40:4c:34:ba:59:ad:d6: a2:7c:b8:d2:cc:41:cf:7f:dc:65:67:56:e1:0c:43:9d:9b:61: c2:ca:6d:e4:f8:fe:52:be:1c:14:67:5d:8b:d5:19:1f:7d:39: 3f:53:6f:9e:98:fd:0b:8b:c0:e6:d7:7b:b9:ee:4d:a6:33:a6: 71:da:b0:25:d1:f4:94:d2:71:22:d3:17:8c:6f:20:38:79:69: bf:0a:ea:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwYhBqoXWZxwsKlfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI1MTIwNjEwMDAwOVoXDTI1MTIwODEwMDAwMFowLzEtMCsGA1UEAxMk OThkMGY2MTEtZWMyYi00NTcxLWEwZTQtNTdhNDIwYmY3NGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngczc75hohGfn58aDsMTR8y8FXW8b9iW70gN AfJCfk0O831WlT8MwD6zLGNaEDI/GU4S/uZO5nBgvXVD2NSG5o55LapRwEMCQA/J uAgsYnEN2y5LT/pB1rFa6aT7YsTWsE9xsMtly4yeg7ORoLYovMRQkbZXa+CzBytZ UDznWN7KZzBuKZvvSohIby5pTj02uBrcKrNMYE+zd/sgxk2p+ssHn63kdXChM1pZ az7b1jwNWtFFR5RaiABCg0w5pmzsAcPs7ojQ4ZBe3q6FsEATq+o9vbC3QsHqLPqS tJPi1Os+31zX46V0BlgiujHNgB51ccQVIh/Br57jzyFisieWWwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA4xKZbSwJ1tNf3mlhnL19Psmbn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCwc8Pl0jS3LrTEhzaBkkM4 BjXIgjkYCTHOpqCydD/wLdBcqiEEnkDVYxyaCn2R60hnk6w1C5b0/9Vxh8d2M8qZ a/WHAZwTAK+nICJyQQMpQGPRtHhIVaFc24VWV1/jYZltYZ3yaafdybKxtYVrwQmp zhPFnN72b3ZjYYP9RvTbwE5Zi/ILgpK7FXLM+3+8/swywkRDq7qocdtoa/wC3gSO GE70d05GxbY1fWbLcEBMNLpZrdaifLjSzEHPf9xlZ1bhDEOdm2HCym3k+P5SvhwU Z12L1RkffTk/U2+emP0Li8Dm13u57k2mM6Zx2rAl0fSU0nEi0xeMbyA4eWm/Cuqi -----END CERTIFICATE-----Generated at Sat Dec 6 14:55:32 2025 by rpki-client