This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft File: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft (raw, json) Hash identifier: j6ywR96JNMUe3b3X7lhN+KwXnAvi9PtOBa/X8EThHBE= Subject key identifier: C3:D8:4A:46:58:45:56:37:27:75:4A:06:D9:0B:02:DF:E8:42:5F:60 Authority key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Certificate issuer: /CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Certificate serial: 010D0C9F4328584C182ABADA7B1EA59529444018 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft Manifest number: 010D0C9F4328584073A845B1E7CF882A25356485 Signing time: Sat 06 Dec 2025 07:00:04 +0000 Manifest this update: Sat 06 Dec 2025 07:00:04 +0000 Manifest next update: Mon 08 Dec 2025 07:00:00 +0000 Files and hashes: 1: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl (hash: X2f1KAXzHqxOpyw5WkKIVp+jX4nhs/fCVulMmFbyIpQ=) 2: 44e6412a-ad9a-3379-a2fe-2eda7500f614.roa (hash: ww+E2//TcQhbrtAPxlqyfAP8oKFYpGeUR3jVnG1BoYU=) 3: d73a5915-ee1f-33f2-8b70-f050ef95069f.roa (hash: 8ySd6lSRHwO2zZnLC3OKz2eQGlDvNdEuAU+bpGzev0Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:2a:ba:da:7b:1e:a5:95:29:44:40:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Validity Not Before: Dec 6 07:00:04 2025 GMT Not After : Dec 8 07:00:00 2025 GMT Subject: CN=091a054c-243a-445d-847f-a5e0decfd045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:60:41:93:d7:2a:45:c5:0f:b5:5b:04:18:bf: 29:bc:94:d5:24:c5:d9:fa:cd:65:38:31:b4:92:a8: 72:a5:a3:63:bf:a7:8f:1d:8b:1e:6d:39:3f:1f:5b: 04:70:b0:2e:f3:e7:21:a9:96:2f:25:5e:f1:39:0c: 43:62:3b:c1:aa:e6:7f:9a:3b:2d:15:65:62:34:8a: 86:f5:b8:7a:3e:af:a4:2b:4b:04:a7:e7:32:f9:51: 21:0f:a6:bf:41:5e:01:c2:2a:42:1d:c1:c1:4f:dd: 16:10:c2:a9:f0:ba:54:23:9d:8d:31:81:58:e4:31: 53:47:3d:b9:8e:c6:22:a9:df:e5:ae:3c:5c:c2:f2: a6:c2:60:01:35:5f:28:fb:dd:21:11:f9:7d:dd:48: 8c:5f:5c:04:34:fc:2a:81:80:8e:4e:4c:4a:0d:79: df:28:c8:d8:e3:b9:3a:e6:c4:5d:d0:34:e6:d4:a6: e1:bd:fe:3d:20:48:f4:47:14:77:2b:80:fd:47:75: bf:5a:ab:4b:ff:12:cd:14:d1:59:03:e7:6b:58:0b: 36:35:c3:b5:88:a0:f9:1b:9f:0d:52:eb:d9:c1:44: 58:74:85:bc:76:9a:7c:c2:04:b2:08:5e:3a:30:07: 7a:85:98:f1:b4:1a:01:96:e5:b0:f5:6c:05:49:21: b1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D8:4A:46:58:45:56:37:27:75:4A:06:D9:0B:02:DF:E8:42:5F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl X509v3 Authority Key Identifier: keyid:C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:86:b0:f0:67:76:86:6a:bc:a5:a1:1a:34:0e:dc:ac:00:76: a3:fc:a4:7d:19:f6:ea:ae:e1:31:37:d9:5c:60:cd:70:fc:4f: aa:99:2b:ba:93:0b:d6:71:22:01:d6:9f:63:2a:0c:2e:37:ae: 09:a2:25:41:87:94:75:97:c7:64:2f:65:3b:74:96:f1:e8:43: 47:43:ce:c7:3c:10:88:46:99:72:ee:69:78:02:a9:44:97:56: e2:bb:e4:cc:b2:ca:91:43:65:7b:79:93:88:92:cc:df:74:1d: 4e:bf:2b:5b:75:78:c3:b6:af:e1:e6:95:47:84:3b:81:17:1f: 75:e6:49:5f:02:38:75:ff:c7:72:bd:7e:b0:2e:1b:ed:c7:e4: cd:06:b5:5a:06:be:67:f8:f1:3d:d6:20:e5:d1:eb:5e:54:c8: 63:23:27:ff:80:98:7b:d2:79:fe:f4:4b:15:5b:ab:b4:c6:78: 67:d5:72:aa:01:34:64:a9:bb:4a:68:89:75:d8:1a:8b:f7:3b: 06:70:6e:15:39:18:aa:16:0f:78:8d:ed:13:81:e1:05:f9:cd: d3:12:1d:48:d4:e8:d5:21:12:ba:5c:bf:df:28:30:72:9e:ca: 03:0c:e0:85:e9:51:ff:ba:46:88:3a:1c:fc:ee:43:d2:af:0f: e0:51:2d:4c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwYKrraex6llSlEQBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyOGI2MmMtN2M1MC00Y2NmLWJhYzUtYTZjZWQ5YzUx MGFlMB4XDTI1MTIwNjA3MDAwNFoXDTI1MTIwODA3MDAwMFowLzEtMCsGA1UEAxMk MDkxYTA1NGMtMjQzYS00NDVkLTg0N2YtYTVlMGRlY2ZkMDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmBBk9cqRcUPtVsEGL8pvJTVJMXZ+s1lODG0 kqhypaNjv6ePHYsebTk/H1sEcLAu8+chqZYvJV7xOQxDYjvBquZ/mjstFWViNIqG 9bh6Pq+kK0sEp+cy+VEhD6a/QV4BwipCHcHBT90WEMKp8LpUI52NMYFY5DFTRz25 jsYiqd/lrjxcwvKmwmABNV8o+90hEfl93UiMX1wENPwqgYCOTkxKDXnfKMjY47k6 5sRd0DTm1Kbhvf49IEj0RxR3K4D9R3W/WqtL/xLNFNFZA+drWAs2NcO1iKD5G58N UuvZwURYdIW8dpp8wgSyCF46MAd6hZjxtBoBluWw9WwFSSGxmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMPYSkZYRVY3J3VKBtkLAt/oQl9gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4 YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDljNTEwYWUvM2YyOGI2MmMtN2M1MC00 Y2NmLWJhYzUtYTZjZWQ5YzUxMGFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2YyOGI2MmMtN2M1MC00Y2NmLWJh YzUtYTZjZWQ5YzUxMGFlLzNmMjhiNjJjLTdjNTAtNGNjZi1iYWM1LWE2Y2VkOWM1 MTBhZS5jcmwwHwYDVR0jBBgwFoAUx41gkQp7ujkifr5s5i8FjtJm/YYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNl ZDljNTEwYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKhrDwZ3aGaryloRo0Dtys AHaj/KR9GfbqruExN9lcYM1w/E+qmSu6kwvWcSIB1p9jKgwuN64JoiVBh5R1l8dk L2U7dJbx6ENHQ87HPBCIRply7ml4AqlEl1biu+TMssqRQ2V7eZOIkszfdB1Ovytb dXjDtq/h5pVHhDuBFx915klfAjh1/8dyvX6wLhvtx+TNBrVaBr5n+PE91iDl0ete VMhjIyf/gJh70nn+9EsVW6u0xnhn1XKqATRkqbtKaIl12BqL9zsGcG4VORiqFg94 je0TgeEF+c3TEh1I1OjVIRK6XL/fKDBynsoDDOCF6VH/ukaIOhz87kPSrw/gUS1M -----END CERTIFICATE-----Generated at Sat Dec 6 17:11:01 2025 by rpki-client