This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft File: 8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft (raw, json) Hash identifier: MW7njCPa6eYv6FsnEAjMnMdDSbzS+bykBLvy0Ldn8uw= Subject key identifier: EE:CA:0A:92:A4:C5:EB:11:71:7E:F2:E6:77:3E:C8:0E:84:72:9D:32 Authority key identifier: 1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A Certificate issuer: /CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Certificate serial: 010D0C9F4328584C19ADD729C26774487FE71C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft Manifest number: 010D0C9F43285847F21A18875DF0F9C9A1C25BC6 Signing time: Sat 06 Dec 2025 20:00:03 +0000 Manifest this update: Sat 06 Dec 2025 20:00:03 +0000 Manifest next update: Mon 08 Dec 2025 20:00:00 +0000 Files and hashes: 1: 5fab7624-7ba0-38cc-939d-47dd362b1a68.roa (hash: h4+XAtjxchDc2DkeA29bCsGD2lpaF79qNqDY809DbQs=) 2: 8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl (hash: 3jtdDYOjsCM4sveHTBzD8cCt05xxDY5o/OwniWlTn4k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:19:ad:d7:29:c2:67:74:48:7f:e7:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ffe7f4e-e1bd-427a-8194-4ea4396e548f Validity Not Before: Dec 6 20:00:03 2025 GMT Not After : Dec 8 20:00:00 2025 GMT Subject: CN=b9576b72-fdd5-4258-a664-42463409d03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ec:71:a3:5c:ac:9f:54:7f:55:29:10:f9:33: 9b:9b:50:c6:e6:09:82:ca:cd:75:be:10:0b:08:9a: 66:2c:9e:ab:9a:35:ee:bd:38:17:8a:93:89:56:c7: 16:5f:13:40:d9:5f:0d:e8:9e:09:14:89:90:f8:0f: fa:4d:f1:dd:6e:ef:9d:46:5f:bd:97:a8:35:f4:0f: b4:38:9a:99:70:44:6d:8b:3a:6a:13:23:6a:33:8c: 49:fa:08:e5:d7:aa:0f:86:19:22:cd:be:01:32:50: 67:1e:ea:16:3b:70:3a:9b:47:88:35:fe:13:35:af: 3c:f2:04:31:74:83:e8:e1:e9:c4:f9:e7:a9:80:66: 7d:1a:6d:08:43:34:c2:42:dd:8d:88:ae:f7:33:3d: 8d:b3:d2:30:e6:95:d0:22:7f:e3:ee:f0:22:16:f7: ca:69:28:4c:f2:57:c5:ca:eb:c4:b6:bc:90:77:14: c7:da:98:0c:aa:79:d3:7f:a2:02:0c:90:ea:1d:02: 8a:98:c7:e0:23:74:a8:6b:8f:e6:23:23:40:2d:f0: 82:5b:0d:68:cf:84:be:a4:d8:56:8f:45:98:78:ce: 8d:de:bb:60:16:b1:68:94:bd:de:26:6f:3a:fe:47: d5:c7:4a:3d:81:b8:25:51:7a:77:ca:04:c7:50:67: 93:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:0A:92:A4:C5:EB:11:71:7E:F2:E6:77:3E:C8:0E:84:72:9D:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.crl X509v3 Authority Key Identifier: keyid:1A:E6:8C:00:28:DF:8B:BA:90:C5:64:5B:60:10:3F:20:2C:92:AF:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8ffe7f4e-e1bd-427a-8194-4ea4396e548f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e0:ad:5c:cd:e2:2f:36:f1:26:8e:aa:57:16:8d:93:ae:ca: e0:54:8d:68:c6:af:70:2d:ea:3a:40:f9:43:95:f1:3d:f7:d2: dc:ee:66:45:f9:31:04:6e:72:8b:38:91:ff:2f:e4:dd:93:83: e6:a7:92:df:09:a0:54:ef:c7:49:5a:82:9d:68:7e:dc:9e:d2: 81:8d:86:19:fc:96:e2:84:03:f4:90:9a:46:ce:9c:31:e6:5a: ad:8d:cc:a0:a2:b0:1f:36:64:10:58:d4:a7:91:35:7d:31:04: 9c:4b:72:cf:16:fd:bc:83:1d:b7:2b:00:c5:34:ed:8f:ec:b8: 1e:f9:76:eb:3c:dc:bf:32:45:4a:38:9b:b9:5c:de:f8:d8:bf: df:2d:ee:cb:1c:1e:ff:fa:5d:13:5d:08:4c:be:35:41:cd:aa: 85:22:72:27:84:45:81:6a:a2:8d:60:d7:2f:38:14:75:c7:52: 37:0a:aa:31:92:ed:ba:80:a8:40:5f:fc:5b:7a:a9:97:5e:71: f1:5b:87:82:29:98:73:96:9f:f6:2f:b3:b2:b2:13:96:9e:d1: bc:0c:da:76:87:61:88:9c:1d:47:28:25:b4:5b:0e:22:67:53: 9c:7d:22:af:af:d5:7d:e3:18:5d:85:d7:69:0a:3d:8d:70:6e: bb:66:0f:79 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwZrdcpwmd0SH/nHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZmZTdmNGUtZTFiZC00MjdhLTgxOTQtNGVhNDM5NmU1 NDhmMB4XDTI1MTIwNjIwMDAwM1oXDTI1MTIwODIwMDAwMFowLzEtMCsGA1UEAxMk Yjk1NzZiNzItZmRkNS00MjU4LWE2NjQtNDI0NjM0MDlkMDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOxxo1ysn1R/VSkQ+TObm1DG5gmCys11vhAL CJpmLJ6rmjXuvTgXipOJVscWXxNA2V8N6J4JFImQ+A/6TfHdbu+dRl+9l6g19A+0 OJqZcERtizpqEyNqM4xJ+gjl16oPhhkizb4BMlBnHuoWO3A6m0eINf4TNa888gQx dIPo4enE+eepgGZ9Gm0IQzTCQt2NiK73Mz2Ns9Iw5pXQIn/j7vAiFvfKaShM8lfF yuvEtryQdxTH2pgMqnnTf6ICDJDqHQKKmMfgI3Soa4/mIyNALfCCWw1oz4S+pNhW j0WYeM6N3rtgFrFolL3eJm86/kfVx0o9gbglUXp3ygTHUGeTzwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFO7KCpKkxesRcX7y5nc+yA6Ecp0yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZl N2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0Mzk2ZTU0OGYvOGZmZTdmNGUtZTFiZC00 MjdhLTgxOTQtNGVhNDM5NmU1NDhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZmZTdmNGUtZTFiZC00MjdhLTgx OTQtNGVhNDM5NmU1NDhmLzhmZmU3ZjRlLWUxYmQtNDI3YS04MTk0LTRlYTQzOTZl NTQ4Zi5jcmwwHwYDVR0jBBgwFoAUGuaMACjfi7qQxWRbYBA/ICySr5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmZlN2Y0ZS1lMWJkLTQyN2EtODE5NC00ZWE0 Mzk2ZTU0OGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAr4K1czeIvNvEmjqpXFo2T rsrgVI1oxq9wLeo6QPlDlfE999Lc7mZF+TEEbnKLOJH/L+Tdk4Pmp5LfCaBU78dJ WoKdaH7cntKBjYYZ/JbihAP0kJpGzpwx5lqtjcygorAfNmQQWNSnkTV9MQScS3LP Fv28gx23KwDFNO2P7Lge+XbrPNy/MkVKOJu5XN742L/fLe7LHB7/+l0TXQhMvjVB zaqFInInhEWBaqKNYNcvOBR1x1I3Cqoxku26gKhAX/xbeqmXXnHxW4eCKZhzlp/2 L7OyshOWntG8DNp2h2GInB1HKCW0Ww4iZ1OcfSKvr9V94xhdhddpCj2NcG67Zg95 -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:50 2025 by rpki-client