This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft File: 08e3f98b-676d-49af-91dd-964a1e63df3b.mft (raw, json) Hash identifier: tRkgzzrLjIOH8jdsoWx44lggMsw6Gg70ri2xCos9f/0= Subject key identifier: 02:09:EE:E8:3D:FF:5F:B6:79:6D:8D:D7:DD:FB:87:7E:0E:34:04:D6 Authority key identifier: FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F Certificate issuer: /CN=08e3f98b-676d-49af-91dd-964a1e63df3b Certificate serial: 010D0C9F4328584C15F4ED3CE6E4EB80A731B54E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft Manifest number: 010D0C9F43285847010F1411C82259ABAF2C76E8 Signing time: Fri 05 Dec 2025 12:00:04 +0000 Manifest this update: Fri 05 Dec 2025 12:00:04 +0000 Manifest next update: Mon 08 Dec 2025 12:00:00 +0000 Files and hashes: 1: 02d4a276-da1e-38dd-8c6d-9f57f0550d7e.roa (hash: LruDP09qNlLUra3LQWVn9XCeWYazc3irigxi6kz55J4=) 2: 08e3f98b-676d-49af-91dd-964a1e63df3b.crl (hash: dxaAeX7mQcAn1UhHpDoKWZRjF3Q1anoSBgYXj7VNj6U=) 3: 1d6b7359-9fa8-32fe-8de3-f31be739cf6e.roa (hash: 2Ho6SsmRNuD/l7ufumP6t8FuikA7bbE5+Rz4efEdF9s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:15:f4:ed:3c:e6:e4:eb:80:a7:31:b5:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08e3f98b-676d-49af-91dd-964a1e63df3b Validity Not Before: Dec 5 12:00:04 2025 GMT Not After : Dec 8 12:00:00 2025 GMT Subject: CN=0aee5377-af07-4c19-87b2-24f5763e363e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8a:26:5e:ee:5f:e4:f5:9f:93:d9:2e:61:c0: 34:a1:90:31:55:d3:1f:af:74:2e:5c:19:5b:2c:c9: 86:3e:f3:84:c3:20:e7:da:cf:a2:ab:ed:61:1d:2c: 44:2c:4b:bd:4d:24:51:c0:26:1e:45:1d:f4:d8:50: 86:b2:75:3d:2c:42:d5:d0:c9:a9:02:7d:45:7d:f1: d9:34:5b:3b:a5:ca:e4:d0:29:f2:30:a9:36:de:03: 3d:74:16:4f:35:89:6b:4f:47:52:87:c7:50:5a:23: 05:68:18:c2:40:d3:6b:2e:a2:ac:dc:86:fa:f7:af: 6b:4f:22:1c:57:65:4d:f0:10:fb:7a:30:56:86:e7: 13:bb:bf:f8:8f:ac:af:0b:dc:1b:6f:2d:96:dc:83: 05:6c:e3:3f:4e:aa:a8:79:99:81:b8:7f:ed:8d:32: 1a:45:b9:c5:6f:fa:68:f0:f5:12:32:d1:9d:18:d2: 76:33:14:bb:f5:87:36:61:91:fe:8d:f5:cb:4a:f7: 96:c6:68:81:42:f1:70:22:01:36:f2:bb:14:66:94: 39:26:60:22:d0:c6:c7:50:9f:62:32:be:e0:e1:82: f0:89:c0:29:fd:1a:f8:80:44:ac:d8:4c:0d:6e:71: 36:6d:39:a6:40:5f:43:10:0a:38:10:29:0a:6c:37: ac:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:09:EE:E8:3D:FF:5F:B6:79:6D:8D:D7:DD:FB:87:7E:0E:34:04:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b/08e3f98b-676d-49af-91dd-964a1e63df3b.crl X509v3 Authority Key Identifier: keyid:FB:EC:CD:B3:66:98:39:A6:94:58:CD:4D:D2:2B:01:99:FE:8A:B1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/08e3f98b-676d-49af-91dd-964a1e63df3b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:6e:e7:88:d0:cf:fa:22:08:32:38:92:cb:df:61:52:62:b4: 43:c2:8f:92:3b:af:59:2b:ac:de:8f:5f:66:c5:67:0e:3b:63: 70:33:d2:6c:7c:b0:f4:1f:fc:d6:d8:d2:96:14:d1:d6:4b:7c: 32:74:40:ba:d5:fd:da:a7:fd:e3:a6:90:c8:9d:8e:91:c7:29: f5:f7:1e:f6:4f:8d:91:7e:89:2e:b0:cd:0c:1c:24:0f:cc:e1: ba:00:19:ca:b7:6a:0e:2d:05:c5:49:3c:ca:7c:ef:7f:ac:96: e6:f8:59:fe:1e:73:f8:b1:d0:a5:a6:8a:7c:45:07:2d:d3:03: 69:95:9a:ed:25:c2:8c:4d:f2:27:70:ff:5c:d8:06:b5:e2:21: f8:62:ad:e1:82:56:dd:4f:f8:7f:7b:14:82:a1:f4:18:b1:f8: 94:67:17:28:85:38:ff:e3:09:b3:43:d7:03:6d:56:a1:1d:e6: 3e:f5:a7:16:6d:4d:f0:e9:50:83:f2:ab:60:78:19:ba:a3:ee: aa:c3:df:b4:a9:c3:08:b3:95:72:9b:28:e8:54:35:31:36:73: d1:70:86:8f:32:40:4f:f5:12:ba:86:f7:56:ea:93:d7:84:d7: 56:74:93:13:d1:98:cb:ec:3a:48:c9:3d:1c:50:2a:6f:a0:15: f8:42:08:d8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwV9O085uTrgKcxtU4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDhlM2Y5OGItNjc2ZC00OWFmLTkxZGQtOTY0YTFlNjNk ZjNiMB4XDTI1MTIwNTEyMDAwNFoXDTI1MTIwODEyMDAwMFowLzEtMCsGA1UEAxMk MGFlZTUzNzctYWYwNy00YzE5LTg3YjItMjRmNTc2M2UzNjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IomXu5f5PWfk9kuYcA0oZAxVdMfr3QuXBlb LMmGPvOEwyDn2s+iq+1hHSxELEu9TSRRwCYeRR302FCGsnU9LELV0MmpAn1FffHZ NFs7pcrk0CnyMKk23gM9dBZPNYlrT0dSh8dQWiMFaBjCQNNrLqKs3Ib6969rTyIc V2VN8BD7ejBWhucTu7/4j6yvC9wbby2W3IMFbOM/TqqoeZmBuH/tjTIaRbnFb/po 8PUSMtGdGNJ2MxS79Yc2YZH+jfXLSveWxmiBQvFwIgE28rsUZpQ5JmAi0MbHUJ9i Mr7g4YLwicAp/Rr4gESs2EwNbnE2bTmmQF9DEAo4ECkKbDes4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAIJ7ug9/1+2eW2N1937h34ONATWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wOGUz Zjk4Yi02NzZkLTQ5YWYtOTFkZC05NjRhMWU2M2RmM2IvMDhlM2Y5OGItNjc2ZC00 OWFmLTkxZGQtOTY0YTFlNjNkZjNiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMDhlM2Y5OGItNjc2ZC00OWFmLTkx ZGQtOTY0YTFlNjNkZjNiLzA4ZTNmOThiLTY3NmQtNDlhZi05MWRkLTk2NGExZTYz ZGYzYi5jcmwwHwYDVR0jBBgwFoAU++zNs2aYOaaUWM1N0isBmf6KsQ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wOGUzZjk4Yi02NzZkLTQ5YWYtOTFkZC05NjRh MWU2M2RmM2IuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNbueI0M/6IggyOJLL32FS YrRDwo+SO69ZK6zej19mxWcOO2NwM9JsfLD0H/zW2NKWFNHWS3wydEC61f3ap/3j ppDInY6Rxyn19x72T42RfokusM0MHCQPzOG6ABnKt2oOLQXFSTzKfO9/rJbm+Fn+ HnP4sdClpop8RQct0wNplZrtJcKMTfIncP9c2Aa14iH4Yq3hglbdT/h/exSCofQY sfiUZxcohTj/4wmzQ9cDbVahHeY+9acWbU3w6VCD8qtgeBm6o+6qw9+0qcMIs5Vy myjoVDUxNnPRcIaPMkBP9RK6hvdW6pPXhNdWdJMT0ZjL7DpIyT0cUCpvoBX4QgjY -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:07 2025 by rpki-client