This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft File: af4b288d-bc7b-443a-b3f4-52662b22717a.mft (raw, json) Hash identifier: cfRP0qcKcVUjTjOKjVn4nHbERQyC+g8BjJYijD6l8Rc= Subject key identifier: E9:39:25:99:B8:74:6A:5E:D5:B7:89:C6:8D:F7:67:9D:99:C7:D6:B1 Authority key identifier: 33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC Certificate issuer: /CN=af4b288d-bc7b-443a-b3f4-52662b22717a Certificate serial: 010D0C9F4328584C1795DF2110A7572EF56C3380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft Manifest number: 010D0C9F43285847A76E497E4523218081E862EC Signing time: Sat 06 Dec 2025 02:00:08 +0000 Manifest this update: Sat 06 Dec 2025 02:00:08 +0000 Manifest next update: Mon 08 Dec 2025 02:00:00 +0000 Files and hashes: 1: 09762465-b2e6-360a-b0d4-36522e5d15ce.roa (hash: aNAzKU0B1uvxwr+fCUeC7WJLmtfPRlyhwyxd0gN5xzs=) 2: 67048364-819f-3191-853f-4269ffe18a99.roa (hash: UE5VqhUriowvZPkqh8bZr0VKiVrn4CuvspUy9aVvlto=) 3: 842e43e1-9687-3482-aa4c-e20b9020a6ad.roa (hash: LDUjlJknMv32PtCIoSntBYHaFL7Fmrz4xgok1DIbGCc=) 4: af4b288d-bc7b-443a-b3f4-52662b22717a.crl (hash: sMNGvPKjn1mP2FKp69af4bqg3bzrRl9mbnhhJTWpuME=) 5: e6d28505-b7fb-390f-8e44-e0df401bef2e.roa (hash: R2q/aWm3u7dMtVikhhQS9SnuNWyUK//84ilEwfFBFcs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:95:df:21:10:a7:57:2e:f5:6c:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4b288d-bc7b-443a-b3f4-52662b22717a Validity Not Before: Dec 6 02:00:08 2025 GMT Not After : Dec 8 02:00:00 2025 GMT Subject: CN=3e217d1f-c491-4071-bc70-ceb1decf9c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:dd:a2:40:a1:90:77:a2:95:69:39:45:dd: bf:6e:68:37:f2:e9:67:61:d7:5a:b1:cf:a0:ba:d0: d5:f8:97:3b:32:04:62:ec:0c:56:ff:ee:3a:96:85: b8:05:38:3b:3d:ad:db:c7:e3:64:c6:91:d7:6f:bd: 48:2d:11:6e:f5:45:9a:0d:c0:8e:b0:b2:30:af:4d: dd:3e:75:a0:48:02:71:61:2b:4d:a8:39:dd:3e:88: 30:df:be:dc:b0:79:b7:8b:d9:18:98:90:05:d3:d1: 97:2f:9e:eb:90:37:d6:9e:a7:c0:39:c8:ec:10:03: b7:2a:b6:11:f8:d5:c2:94:40:f9:e7:36:ca:ec:d4: 7f:79:87:07:59:ae:f5:9f:9f:41:b2:8f:36:ba:fe: 48:1b:82:2d:a3:3e:e6:08:23:f1:82:c6:f4:f5:5a: a3:ec:09:f8:d1:b6:2a:c2:c9:76:18:89:95:af:89: 11:b8:60:6b:6d:ec:dd:68:0e:86:1e:01:ac:44:aa: 2d:cd:89:5d:4e:05:a2:35:00:04:52:d6:4a:19:41: 8b:1f:7b:32:e6:e8:96:7e:1c:da:f2:5a:dc:ef:bf: a1:40:58:12:1d:f6:db:5d:75:d9:11:d0:19:52:2c: 5a:3a:f7:fe:a0:ad:c0:e9:56:db:07:4a:af:74:f0: 54:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:39:25:99:B8:74:6A:5E:D5:B7:89:C6:8D:F7:67:9D:99:C7:D6:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a/af4b288d-bc7b-443a-b3f4-52662b22717a.crl X509v3 Authority Key Identifier: keyid:33:00:06:6E:0F:90:44:FD:C5:20:B6:BA:C7:52:F3:7D:C9:E2:A4:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/af4b288d-bc7b-443a-b3f4-52662b22717a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:2e:77:34:02:29:d1:a1:4e:d1:c5:65:21:f1:0f:a7:a0:13: d1:dc:22:1a:27:32:aa:06:3e:8d:19:86:54:11:6a:59:4a:f6: 0e:64:ec:d9:99:4f:70:e1:e3:c2:e3:9a:f1:46:21:03:24:27: 48:c2:f4:a2:a4:f0:0e:c3:1a:d6:46:30:e3:13:e6:f3:7b:13: 88:cb:50:3c:1d:aa:95:18:0a:89:eb:8f:d5:90:87:fa:6c:f0: bc:df:99:45:40:9a:2c:eb:5b:f9:bf:3b:46:f4:31:dd:9e:b2: bc:21:58:2f:e5:ff:8b:e9:e0:b0:d8:a7:09:af:0a:e5:9f:e5: e2:3a:a2:da:55:50:5b:29:cf:a4:a0:2d:08:c1:6c:7e:8a:5a: 34:95:6f:c8:fe:81:cc:6b:a7:28:07:5e:e5:1b:4f:2d:95:84: de:bd:30:a1:7d:92:f3:c2:82:27:7d:6e:a2:a8:27:bd:10:14: 2e:22:bb:cd:75:77:09:9e:17:66:08:9d:8b:db:a4:38:d7:75: 88:e3:62:e3:76:eb:d9:f7:af:1c:1f:6b:67:61:0c:0b:f4:61: 6e:51:49:ac:bd:80:09:81:07:c6:5b:d9:cc:7b:98:fd:61:2b: a8:23:3c:70:fd:02:68:c9:49:95:4e:dc:61:fe:07:57:1b:62: 01:15:82:42 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXld8hEKdXLvVsM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY0YjI4OGQtYmM3Yi00NDNhLWIzZjQtNTI2NjJiMjI3 MTdhMB4XDTI1MTIwNjAyMDAwOFoXDTI1MTIwODAyMDAwMFowLzEtMCsGA1UEAxMk M2UyMTdkMWYtYzQ5MS00MDcxLWJjNzAtY2ViMWRlY2Y5YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbrdokChkHeilWk5Rd2/bmg38ulnYddasc+g utDV+Jc7MgRi7AxW/+46loW4BTg7Pa3bx+NkxpHXb71ILRFu9UWaDcCOsLIwr03d PnWgSAJxYStNqDndPogw377csHm3i9kYmJAF09GXL57rkDfWnqfAOcjsEAO3KrYR +NXClED55zbK7NR/eYcHWa71n59Bso82uv5IG4Itoz7mCCPxgsb09Vqj7An40bYq wsl2GImVr4kRuGBrbezdaA6GHgGsRKotzYldTgWiNQAEUtZKGUGLH3sy5uiWfhza 8lrc77+hQFgSHfbbXXXZEdAZUixaOvf+oK3A6VbbB0qvdPBUdwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOk5JZm4dGpe1beJxo33Z52Zx9axMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRi Mjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2MmIyMjcxN2EvYWY0YjI4OGQtYmM3Yi00 NDNhLWIzZjQtNTI2NjJiMjI3MTdhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWY0YjI4OGQtYmM3Yi00NDNhLWIz ZjQtNTI2NjJiMjI3MTdhL2FmNGIyODhkLWJjN2ItNDQzYS1iM2Y0LTUyNjYyYjIy NzE3YS5jcmwwHwYDVR0jBBgwFoAUMwAGbg+QRP3FILa6x1LzfcnipMwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZjRiMjg4ZC1iYzdiLTQ0M2EtYjNmNC01MjY2 MmIyMjcxN2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC4Lnc0AinRoU7RxWUh8Q+n oBPR3CIaJzKqBj6NGYZUEWpZSvYOZOzZmU9w4ePC45rxRiEDJCdIwvSipPAOwxrW RjDjE+bzexOIy1A8HaqVGAqJ64/VkIf6bPC835lFQJos61v5vztG9DHdnrK8IVgv 5f+L6eCw2KcJrwrln+XiOqLaVVBbKc+koC0IwWx+ilo0lW/I/oHMa6coB17lG08t lYTevTChfZLzwoInfW6iqCe9EBQuIrvNdXcJnhdmCJ2L26Q413WI42LjduvZ968c H2tnYQwL9GFuUUmsvYAJgQfGW9nMe5j9YSuoIzxw/QJoyUmVTtxh/gdXG2IBFYJC -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:37 2025 by rpki-client