This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft File: 023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft (raw, json) Hash identifier: RIAFI7DFH0ExrQzlsOpIkJWFB1yRYKgurOcjGQhe0GA= Subject key identifier: 71:5C:99:1E:A0:A6:54:C4:79:B2:9F:CD:9A:4A:3A:EC:63:45:9D:5A Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D Certificate issuer: /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a Certificate serial: 010D0C9F4328584C16A7A20FAF568F302F710E70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft Manifest number: 010D0C9F4328584670942F3E020B1F44173F1F20 Signing time: Fri 05 Dec 2025 18:00:08 +0000 Manifest this update: Fri 05 Dec 2025 18:00:08 +0000 Manifest next update: Mon 08 Dec 2025 18:00:00 +0000 Files and hashes: 1: 023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl (hash: pXA8sJwwqDp4dsHQpQCAQ1rpdmn8QlP3MUS1xXOOWmc=) 2: 771dd2e1-2b73-373d-bb0b-444a6b060cfc.roa (hash: aSVmq+U0wwdGR0t1CtLmgXx+T3vCXYkL4/xRIwCUEmU=) 3: f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa (hash: bEiNBSfBtP6GCpagpqz1UNp4cLDTjMtZuCvg/X0N7w8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:a7:a2:0f:af:56:8f:30:2f:71:0e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a Validity Not Before: Dec 5 18:00:08 2025 GMT Not After : Dec 8 18:00:00 2025 GMT Subject: CN=50784008-dfe8-4627-acdc-556a259e0007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:37:10:cc:39:f6:8d:03:30:75:21:07:27:9e: 81:40:1b:3e:58:12:cf:99:7e:34:93:55:f9:f2:d9: ca:5d:d8:ff:79:ba:91:b6:93:1c:65:df:69:dc:e7: 75:56:9f:82:76:97:a0:de:c5:a6:54:30:83:75:44: 0c:40:b3:63:71:89:a1:b2:37:32:61:e3:f9:e1:af: 4f:c9:71:c7:ee:35:41:b1:fb:52:31:7e:56:8b:cb: 05:0a:6c:d9:09:1e:1c:81:77:5c:a5:cb:d4:01:25: 62:23:96:eb:6e:c8:b2:7c:98:19:41:54:d9:ba:7d: 57:1b:b6:58:7a:9c:50:1c:68:bf:8c:ad:1d:18:bd: 92:67:8f:f2:89:1b:98:ca:6f:b8:99:ad:59:e0:c3: 18:f9:0d:55:37:41:93:db:20:59:d0:6f:de:16:d9: a9:93:31:e3:d6:f5:b5:1a:9d:7d:33:a0:74:3e:98: 0b:20:74:d0:af:bc:25:63:80:1b:87:f1:4c:83:1b: fc:14:7d:ea:fe:8b:a0:5e:40:56:70:98:87:a9:9a: 15:8d:21:f3:39:b2:73:cd:17:49:4f:84:32:ef:96: bd:77:80:71:75:ac:77:ef:5b:d3:f9:94:ea:e1:d5: c6:cf:f7:7e:08:13:bf:4e:02:9f:77:88:9b:31:11: 8b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5C:99:1E:A0:A6:54:C4:79:B2:9F:CD:9A:4A:3A:EC:63:45:9D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl X509v3 Authority Key Identifier: keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:3f:31:84:d7:92:d9:27:0a:e4:ee:f6:39:e1:b3:6d:43:d9: bf:f4:a1:91:04:28:34:ef:60:40:eb:d9:45:f6:de:55:82:7c: 55:55:4c:95:f2:e1:e2:bc:8f:e3:9a:ea:ed:38:1f:0e:a6:0e: 8a:26:43:4f:97:3f:dc:ab:e8:ec:b7:a5:02:d3:1d:b9:35:41: 57:b7:27:bd:90:5e:04:1f:5c:50:32:4a:cc:d9:f7:9a:a8:f5: 17:a9:83:3d:ff:46:7a:bd:b5:d4:5b:49:f0:71:1b:00:ef:9f: 48:d9:f9:42:8e:a6:a4:c4:e3:17:4d:12:58:dd:87:b7:04:d8: f1:f1:a2:7a:8c:82:88:4f:bd:98:ed:3c:9a:51:5c:ea:c9:ce: 03:1a:84:c1:51:06:1d:11:26:d1:e5:c5:d4:ef:c8:02:01:f6: 11:fb:0d:78:3b:29:58:60:7d:a8:35:ea:33:f8:f2:81:9d:87: a2:df:41:63:9a:b2:5f:03:c3:bc:5c:ae:b8:29:93:7f:bc:23: a7:45:63:62:a7:4d:79:5b:1b:1c:21:bc:93:98:00:65:1c:78: d7:2e:6f:f8:aa:13:62:51:96:ed:ab:ab:08:a4:1d:44:43:6e: 9b:91:cb:55:9d:f6:aa:a3:fe:bd:57:8a:94:8e:53:cd:07:01: e0:0d:13:b0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWp6IPr1aPMC9xDnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIzYWZmNDEtODRkYy00ODA4LWE1ZDktN2UwMTFkNGMz ZTNhMB4XDTI1MTIwNTE4MDAwOFoXDTI1MTIwODE4MDAwMFowLzEtMCsGA1UEAxMk NTA3ODQwMDgtZGZlOC00NjI3LWFjZGMtNTU2YTI1OWUwMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDcQzDn2jQMwdSEHJ56BQBs+WBLPmX40k1X5 8tnKXdj/ebqRtpMcZd9p3Od1Vp+Cdpeg3sWmVDCDdUQMQLNjcYmhsjcyYeP54a9P yXHH7jVBsftSMX5Wi8sFCmzZCR4cgXdcpcvUASViI5brbsiyfJgZQVTZun1XG7ZY epxQHGi/jK0dGL2SZ4/yiRuYym+4ma1Z4MMY+Q1VN0GT2yBZ0G/eFtmpkzHj1vW1 Gp19M6B0PpgLIHTQr7wlY4Abh/FMgxv8FH3q/ougXkBWcJiHqZoVjSHzObJzzRdJ T4Qy75a9d4Bxdax371vT+ZTq4dXGz/d+CBO/TgKfd4ibMRGLuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHFcmR6gplTEebKfzZpKOuxjRZ1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wMjNh ZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAxMWQ0YzNlM2EvMDIzYWZmNDEtODRkYy00 ODA4LWE1ZDktN2UwMTFkNGMzZTNhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDIzYWZmNDEtODRkYy00ODA4LWE1 ZDktN2UwMTFkNGMzZTNhLzAyM2FmZjQxLTg0ZGMtNDgwOC1hNWQ5LTdlMDExZDRj M2UzYS5jcmwwHwYDVR0jBBgwFoAU/DD3r+bRBzO9UL8KT9i2VjcgAB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wMjNhZmY0MS04NGRjLTQ4MDgtYTVkOS03ZTAx MWQ0YzNlM2EuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrPzGE15LZJwrk7vY54bNt Q9m/9KGRBCg072BA69lF9t5VgnxVVUyV8uHivI/jmurtOB8Opg6KJkNPlz/cq+js t6UC0x25NUFXtye9kF4EH1xQMkrM2feaqPUXqYM9/0Z6vbXUW0nwcRsA759I2flC jqakxOMXTRJY3Ye3BNjx8aJ6jIKIT72Y7TyaUVzqyc4DGoTBUQYdESbR5cXU78gC AfYR+w14OylYYH2oNeoz+PKBnYei30FjmrJfA8O8XK64KZN/vCOnRWNip015Wxsc IbyTmABlHHjXLm/4qhNiUZbtq6sIpB1EQ26bkctVnfaqo/69V4qUjlPNBwHgDROw -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:57 2025 by rpki-client