This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: 0SkisFdEw/MgnV7eFjgx9rMh/fSLzk4krQDnZcYezEk= Subject key identifier: 90:2F:E3:1E:38:C3:68:99:67:1D:97:9B:C5:78:57:FA:BC:9A:B4:DB Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584C1612BFDFCCB2BFF4F8A82700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11C04 Signing time: Fri 05 Dec 2025 13:00:08 +0000 Manifest this update: Fri 05 Dec 2025 13:00:08 +0000 Manifest next update: Mon 08 Dec 2025 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: tgMdEvw3hihtfknRLFdH7kxkAJ/beP+5DxnJwEX+yUo=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: +xMkIEVm6jbXJt8n3QVTuKUU6pvV9Ue8M0AW1y203ds=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: nh+kWIbdKhZOMAE1+gOCXS/38s7VP5r/HUozmAcdeVA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:12:bf:df:cc:b2:bf:f4:f8:a8:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Dec 5 13:00:08 2025 GMT Not After : Dec 8 13:00:00 2025 GMT Subject: CN=110d02f9-4b5b-45dc-9cb9-136229c86248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:31:88:d7:72:69:4e:b7:60:55:02:8e:62: 5d:79:23:63:9c:4a:7c:69:da:0e:a6:9f:60:19:b0: dd:2e:9b:65:d4:27:fa:c7:ee:aa:36:be:31:9c:b1: e0:7b:20:a0:2a:95:b8:e5:9a:23:86:7c:6e:8a:5b: 00:e5:52:4f:8b:f0:3b:19:9e:3d:df:70:ea:8e:0b: d5:76:45:d5:19:98:57:0b:10:db:a9:82:fb:2f:1f: 10:6e:e7:6c:4c:e9:48:6f:4b:bb:99:7d:e0:05:fd: 4e:f6:a4:07:24:ea:8e:2a:b4:ef:7a:8c:01:6e:6e: 84:e2:67:37:98:28:ed:ae:a4:55:f9:75:12:d2:b8: b0:eb:c7:b8:58:8a:36:da:bc:2d:a5:82:cc:ba:a4: 83:5d:66:57:2e:4a:4a:6d:c9:7e:fa:ff:87:4b:79: 76:f7:58:51:52:a4:c1:73:96:ca:41:dd:69:94:41: 0c:f7:b5:2c:97:a1:ac:c3:63:d3:c1:f7:a9:c3:98: 61:fb:6d:94:95:13:1d:5d:75:36:d4:b1:88:f6:55: bc:6e:31:11:10:4b:4e:5d:16:a3:53:6c:01:d5:ac: 81:7d:42:a1:8f:f8:d3:db:0f:7a:0c:af:60:f6:24: 81:34:77:c7:a4:24:58:34:14:90:b4:ac:27:96:57: b2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:2F:E3:1E:38:C3:68:99:67:1D:97:9B:C5:78:57:FA:BC:9A:B4:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:9f:b6:21:8f:05:32:85:93:1c:1a:59:3c:db:0d:15:b1:bf: 13:0a:d1:c5:f1:50:ce:af:9d:4b:8f:47:b1:5b:29:40:a0:0d: c7:09:d0:90:96:3b:11:5e:83:60:d4:b3:8f:e0:76:44:d3:d1: 33:19:5e:16:80:bf:d2:cf:03:aa:89:6e:d3:8f:20:68:03:fc: bf:46:90:5c:d0:12:12:09:1c:30:d0:e8:71:a4:fb:e0:22:06: 2a:57:53:fc:b7:ac:48:c1:1e:48:18:ae:39:8f:36:50:19:ef: ad:b7:15:4b:84:29:37:6e:2c:b6:8e:5c:6e:11:5a:66:6c:13: a8:10:c8:58:fe:90:61:c6:ef:5f:d3:da:46:3a:c3:de:84:f7: dc:05:8a:36:5c:57:ad:ed:6f:f1:68:40:be:6d:00:5e:d5:b9: 1a:c4:31:37:56:c8:99:1e:a1:b3:c6:5d:6a:dd:49:36:5c:5b: 4e:20:2d:c7:7b:f9:ef:2e:98:ce:3d:1d:06:17:20:ca:0e:96: ef:b7:b1:41:d8:62:57:95:4f:79:f2:df:1f:63:76:28:a3:62: 01:fc:06:e5:37:8f:22:72:9d:9b:87:ed:d6:65:58:6f:90:92: 5e:3e:17:e2:48:46:91:ae:9f:1e:5c:e8:fa:87:b5:7e:72:91: 14:1d:a2:b1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWEr/fzLK/9PioJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI1MTIwNTEzMDAwOFoXDTI1MTIwODEzMDAwMFowLzEtMCsGA1UEAxMk MTEwZDAyZjktNGI1Yi00NWRjLTljYjktMTM2MjI5Yzg2MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgsxiNdyaU63YFUCjmJdeSNjnEp8adoOpp9g GbDdLptl1Cf6x+6qNr4xnLHgeyCgKpW45ZojhnxuilsA5VJPi/A7GZ4933DqjgvV dkXVGZhXCxDbqYL7Lx8QbudsTOlIb0u7mX3gBf1O9qQHJOqOKrTveowBbm6E4mc3 mCjtrqRV+XUS0riw68e4WIo22rwtpYLMuqSDXWZXLkpKbcl++v+HS3l291hRUqTB c5bKQd1plEEM97Usl6Gsw2PTwfepw5hh+22UlRMdXXU21LGI9lW8bjEREEtOXRaj U2wB1ayBfUKhj/jT2w96DK9g9iSBNHfHpCRYNBSQtKwnlleySQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJAv4x44w2iZZx2Xm8V4V/q8mrTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCyn7YhjwUyhZMcGlk82w0V sb8TCtHF8VDOr51Lj0exWylAoA3HCdCQljsRXoNg1LOP4HZE09EzGV4WgL/SzwOq iW7TjyBoA/y/RpBc0BISCRww0OhxpPvgIgYqV1P8t6xIwR5IGK45jzZQGe+ttxVL hCk3biy2jlxuEVpmbBOoEMhY/pBhxu9f09pGOsPehPfcBYo2XFet7W/xaEC+bQBe 1bkaxDE3VsiZHqGzxl1q3Uk2XFtOIC3He/nvLpjOPR0GFyDKDpbvt7FB2GJXlU95 8t8fY3Yoo2IB/AblN48icp2bh+3WZVhvkJJePhfiSEaRrp8eXOj6h7V+cpEUHaKx -----END CERTIFICATE-----Generated at Sat Dec 6 09:25:27 2025 by rpki-client