This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft File: 491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft (raw, json) Hash identifier: csClgjXT46YzWpdwFR1/1Ayu58bkn27kcwYu18Kz3ag= Subject key identifier: 76:56:58:02:F1:6D:D1:57:11:3F:B0:7C:5E:9D:3C:93:EF:42:B1:7F Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3 Certificate issuer: /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169 Certificate serial: 010D0C9F4328584C17780B904137D7FBAF8D6580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft Manifest number: 010D0C9F43285846D04DEB0A3F8731BCB37F08C7 Signing time: Sat 06 Dec 2025 01:00:04 +0000 Manifest this update: Sat 06 Dec 2025 01:00:04 +0000 Manifest next update: Tue 09 Dec 2025 01:00:00 +0000 Files and hashes: 1: 340b93af-d882-36e8-acb4-1af84b9fcca3.roa (hash: 2pHyw4to74Fc5gzPPqBUfEcpMDpGn/7K2PaOuR+YsP8=) 2: 491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl (hash: rM8ZT3oPGU4wPFWWkqgEk7szo8oYyINJ2Pso/2V+C+A=) 3: ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa (hash: dPf/iVLzWvhWH8UwRrptUZsOo/ZYEJBcGau+r4T9lLE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:78:0b:90:41:37:d7:fb:af:8d:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169 Validity Not Before: Dec 6 01:00:04 2025 GMT Not After : Dec 9 01:00:00 2025 GMT Subject: CN=345ae1a1-a3c6-4d56-ad19-a76f6467a556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:81:ce:5d:c7:c0:4d:46:95:0c:39:6a:10: 0b:b5:3e:45:0a:32:98:1c:f0:09:78:99:68:f9:ba: a4:b8:94:e1:c2:c9:c3:22:42:d1:39:58:a8:8e:a7: 38:54:d6:74:27:89:f0:ca:60:57:ba:49:c8:d2:90: 6d:fa:89:2a:61:a1:7a:82:6a:31:c5:d0:b4:71:e6: 5a:88:86:92:09:4b:03:bd:f5:93:f9:ec:d0:8c:eb: 15:dc:ef:84:bb:57:fe:75:ac:13:cb:c5:a0:cc:95: e6:7a:3b:60:a7:f7:cd:f9:57:73:bb:5c:99:5c:7e: de:8c:48:e2:80:07:42:a9:ff:ee:1f:c8:3a:88:b8: de:5a:c4:8a:6e:13:37:7a:08:2c:f0:56:7d:f2:23: 6e:32:d6:6a:32:8d:ee:c3:3e:bd:c9:47:bd:a8:78: 1f:4e:59:81:75:e6:1f:a5:70:78:14:87:90:6e:a7: a8:de:c2:62:51:e4:81:55:53:df:9d:14:9b:83:5b: 5f:6e:2a:4c:65:35:38:8f:9b:c9:fd:fa:53:5f:18: d7:6a:d6:b0:91:52:10:88:69:3d:1d:87:cf:0a:cc: 76:56:b4:51:64:47:37:36:d0:19:b9:cb:d4:9a:67: 9b:30:82:68:3f:c9:b8:e5:ac:11:fd:2f:cf:b7:df: d8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:56:58:02:F1:6D:D1:57:11:3F:B0:7C:5E:9D:3C:93:EF:42:B1:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl X509v3 Authority Key Identifier: keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:5d:58:89:87:ef:2a:46:8c:34:a7:cc:cf:60:e8:e9:72:ea: fd:b7:2e:7b:09:a4:be:3d:de:25:cb:2f:ee:3f:b4:3c:c6:50: 84:1c:ca:31:4e:0e:b7:49:97:ee:4f:3e:13:c8:b2:d5:3d:9d: f8:61:73:d3:0b:90:1b:97:0c:9b:43:cb:ab:45:b0:cc:1f:a7: 69:2d:04:eb:5c:0e:f5:de:df:d3:0c:ee:95:6e:d9:bd:18:4e: 12:50:c4:af:9c:0a:2b:92:df:3a:d0:25:8b:ef:7c:9d:06:22: bf:75:34:2a:aa:45:56:cb:de:db:f4:45:23:6a:61:c2:bc:7b: df:22:76:35:6e:2f:49:98:7b:0e:4e:0a:3e:3d:0b:ee:e1:cc: f9:29:c7:28:bf:74:a8:9a:f6:f8:c4:c2:37:54:0d:3e:6e:5d: d3:52:ba:74:f4:d1:62:74:f7:60:dd:00:e4:ab:f0:1e:f0:cb: da:d8:f7:26:29:c0:fb:09:29:14:dd:ab:e5:ff:e5:67:6e:c8: d2:9b:cc:fe:a6:8e:22:c6:07:8a:0a:e7:14:58:99:61:b2:dc: a9:25:50:1c:9a:5f:85:a2:fd:83:98:c1:a3:a3:fb:fd:a7:7f: a7:bc:9b:93:25:b0:74:f7:c2:03:d8:ba:0d:24:1c:b5:d8:c3: b6:92:02:f4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXeAuQQTfX+6+NZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkxZDlhZTctNGZhZC00YTQ5LWE5YjItOWNmMWU0YzE5 MTY5MB4XDTI1MTIwNjAxMDAwNFoXDTI1MTIwOTAxMDAwMFowLzEtMCsGA1UEAxMk MzQ1YWUxYTEtYTNjNi00ZDU2LWFkMTktYTc2ZjY0NjdhNTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol+Bzl3HwE1GlQw5ahALtT5FCjKYHPAJeJlo +bqkuJThwsnDIkLROViojqc4VNZ0J4nwymBXuknI0pBt+okqYaF6gmoxxdC0ceZa iIaSCUsDvfWT+ezQjOsV3O+Eu1f+dawTy8WgzJXmejtgp/fN+Vdzu1yZXH7ejEji gAdCqf/uH8g6iLjeWsSKbhM3eggs8FZ98iNuMtZqMo3uwz69yUe9qHgfTlmBdeYf pXB4FIeQbqeo3sJiUeSBVVPfnRSbg1tfbipMZTU4j5vJ/fpTXxjXatawkVIQiGk9 HYfPCsx2VrRRZEc3NtAZucvUmmebMIJoP8m45awR/S/Pt9/YsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHZWWALxbdFXET+wfF6dPJPvQrF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80OTFk OWFlNy00ZmFkLTRhNDktYTliMi05Y2YxZTRjMTkxNjkvNDkxZDlhZTctNGZhZC00 YTQ5LWE5YjItOWNmMWU0YzE5MTY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDkxZDlhZTctNGZhZC00YTQ5LWE5 YjItOWNmMWU0YzE5MTY5LzQ5MWQ5YWU3LTRmYWQtNGE0OS1hOWIyLTljZjFlNGMx OTE2OS5jcmwwHwYDVR0jBBgwFoAU2Qx290Iwvei74XRBifL+f+cYKMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80OTFkOWFlNy00ZmFkLTRhNDktYTliMi05Y2Yx ZTRjMTkxNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDDXViJh+8qRow0p8zPYOjp cur9ty57CaS+Pd4lyy/uP7Q8xlCEHMoxTg63SZfuTz4TyLLVPZ34YXPTC5Ablwyb Q8urRbDMH6dpLQTrXA713t/TDO6Vbtm9GE4SUMSvnAorkt860CWL73ydBiK/dTQq qkVWy97b9EUjamHCvHvfInY1bi9JmHsOTgo+PQvu4cz5Kccov3Somvb4xMI3VA0+ bl3TUrp09NFidPdg3QDkq/Ae8Mva2PcmKcD7CSkU3avl/+VnbsjSm8z+po4ixgeK CucUWJlhstypJVAcml+Fov2DmMGjo/v9p3+nvJuTJbB098ID2LoNJBy12MO2kgL0 -----END CERTIFICATE-----Generated at Sat Dec 6 14:30:59 2025 by rpki-client