This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.mft File: 5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.mft (raw, json) Hash identifier: 3jwnpcBsViNA8pKHL53qr0OUEI4fqnP7h1hB6PvwMiw= Subject key identifier: 9B:FA:42:47:B3:5C:A0:1B:48:B7:92:AA:20:C5:81:2E:90:56:0A:4B Authority key identifier: B2:93:8C:DF:4E:61:AC:DE:34:BC:B0:1F:BB:7C:32:EE:04:26:A1:EE Certificate issuer: /CN=5c95ce3d-c60a-4a89-8fef-bc6c44d54f54 Certificate serial: 010D0C9F4328584C1612C16E3F0C6C55CAC37880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.mft Manifest number: 010D0C9F43285846CEE89259DDC585C66D1B246F Signing time: Fri 05 Dec 2025 13:00:08 +0000 Manifest this update: Fri 05 Dec 2025 13:00:08 +0000 Manifest next update: Mon 08 Dec 2025 13:00:00 +0000 Files and hashes: 1: 108f695e-beb6-3f8c-917a-4c9a702aff9d.roa (hash: zSSYgGFnsnAEn/Amy7FzxjW8z4DXXcFzxKqI6qzK0Z0=) 2: 4d278963-82fb-3f6c-ba65-1835ae17af4b.roa (hash: 96l0rB6oMtMCTAcw57Hsy5IDBEa2IkmUF+3YxKOU038=) 3: 5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl (hash: lVtV971n6vD78CvUXW6SCfyNrYDotwa4tSTPynXR2sE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:12:c1:6e:3f:0c:6c:55:ca:c3:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c95ce3d-c60a-4a89-8fef-bc6c44d54f54 Validity Not Before: Dec 5 13:00:08 2025 GMT Not After : Dec 8 13:00:00 2025 GMT Subject: CN=cba9d65b-9d98-4ae4-ae79-a764eb0c9081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3d:6f:1f:21:30:43:eb:a6:fa:16:29:df:a1: 03:ac:65:54:d0:cf:dc:23:6b:fd:c8:ee:61:ab:9c: 81:55:c8:35:89:a9:8d:e4:c5:9e:05:11:7e:ff:d1: dc:05:00:05:15:5c:6b:90:c3:f6:83:1b:05:d3:64: e2:d7:62:5d:3e:cd:3b:8f:4a:80:8f:91:d7:80:76: 8b:50:82:77:e1:61:c1:15:1f:66:ef:49:a0:84:08: 55:4c:a8:7d:fa:2b:3b:ab:c5:2d:05:cf:c0:b6:d6: b5:44:2f:05:68:d5:32:db:46:f0:b5:84:67:13:00: b0:06:76:c5:8d:f3:b0:bf:37:d0:33:5d:4a:2a:ad: 3a:43:63:a1:80:ed:74:9c:2f:22:bd:06:a1:ae:ec: 53:64:8b:67:76:22:3a:44:22:9d:e1:c0:1b:9e:8f: 40:b3:35:12:5e:9f:40:b2:78:15:22:81:91:41:b8: 0b:71:83:ce:79:8a:0a:11:e3:4c:46:78:a2:06:46: 6a:ff:a9:bd:96:a1:ba:7e:1c:c7:55:3c:be:ab:15: 50:8c:c6:e8:f4:b2:54:0f:db:08:c8:9b:dd:96:ba: 88:b8:f2:b6:02:a6:bb:fb:9e:00:59:31:42:72:ba: 11:bb:17:e9:a1:26:e6:f1:db:58:40:6b:d5:26:d3: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FA:42:47:B3:5C:A0:1B:48:B7:92:AA:20:C5:81:2E:90:56:0A:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.crl X509v3 Authority Key Identifier: keyid:B2:93:8C:DF:4E:61:AC:DE:34:BC:B0:1F:BB:7C:32:EE:04:26:A1:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c95ce3d-c60a-4a89-8fef-bc6c44d54f54.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:0b:86:c7:80:a6:16:7b:7c:f3:c1:f9:c7:3c:2e:95:4e:e8: 50:a3:1a:a0:f9:75:88:ae:56:00:01:bc:fd:65:93:eb:38:dd: 71:12:ad:c1:61:e2:bf:f3:95:ae:2a:72:95:3e:25:ee:3d:91: 83:e5:1b:25:28:49:72:04:1b:03:25:ba:80:f1:e2:71:6c:e4: d7:b0:c8:6a:5e:7e:58:5c:98:88:5c:dd:d9:b5:96:5b:a1:6a: 76:92:d8:17:1c:7f:3a:f4:91:60:b4:e4:57:15:ae:09:06:52: e3:b8:d5:6c:a4:fa:d0:da:6a:c3:49:c5:67:c1:60:7b:d8:f8: 96:11:b4:9e:80:fb:55:7c:1d:e4:9d:c3:fe:d9:33:76:d8:58: 49:be:0b:0c:65:f1:cd:b5:a4:98:18:5d:d4:8a:98:fd:b9:25: de:54:8b:7b:b0:9f:41:3b:58:bc:a9:4f:d4:e1:7d:c0:a9:65: e9:ee:d2:31:d2:ac:cb:8c:a7:f1:c2:f6:be:87:d4:d4:4b:b3: 36:89:4d:3d:1b:95:6b:8f:70:b6:47:64:b3:68:54:e0:33:fd: c0:0d:41:6e:03:ff:ea:e9:76:d0:46:c7:ab:62:d5:f0:a9:b1: 66:38:84:7a:51:65:8c:40:7f:db:02:ce:be:d6:1a:8b:47:26: 0d:13:4f:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWEsFuPwxsVcrDeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM5NWNlM2QtYzYwYS00YTg5LThmZWYtYmM2YzQ0ZDU0 ZjU0MB4XDTI1MTIwNTEzMDAwOFoXDTI1MTIwODEzMDAwMFowLzEtMCsGA1UEAxMk Y2JhOWQ2NWItOWQ5OC00YWU0LWFlNzktYTc2NGViMGM5MDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD1vHyEwQ+um+hYp36EDrGVU0M/cI2v9yO5h q5yBVcg1iamN5MWeBRF+/9HcBQAFFVxrkMP2gxsF02Ti12JdPs07j0qAj5HXgHaL UIJ34WHBFR9m70mghAhVTKh9+is7q8UtBc/Atta1RC8FaNUy20bwtYRnEwCwBnbF jfOwvzfQM11KKq06Q2OhgO10nC8ivQahruxTZItndiI6RCKd4cAbno9AszUSXp9A sngVIoGRQbgLcYPOeYoKEeNMRniiBkZq/6m9lqG6fhzHVTy+qxVQjMbo9LJUD9sI yJvdlrqIuPK2Aqa7+54AWTFCcroRuxfpoSbm8dtYQGvVJtOuMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJv6QkezXKAbSLeSqiDFgS6QVgpLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81Yzk1 Y2UzZC1jNjBhLTRhODktOGZlZi1iYzZjNDRkNTRmNTQvNWM5NWNlM2QtYzYwYS00 YTg5LThmZWYtYmM2YzQ0ZDU0ZjU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWM5NWNlM2QtYzYwYS00YTg5LThm ZWYtYmM2YzQ0ZDU0ZjU0LzVjOTVjZTNkLWM2MGEtNGE4OS04ZmVmLWJjNmM0NGQ1 NGY1NC5jcmwwHwYDVR0jBBgwFoAUspOM305hrN40vLAfu3wy7gQmoe4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81Yzk1Y2UzZC1jNjBhLTRhODktOGZlZi1iYzZj NDRkNTRmNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC+C4bHgKYWe3zzwfnHPC6V TuhQoxqg+XWIrlYAAbz9ZZPrON1xEq3BYeK/85WuKnKVPiXuPZGD5RslKElyBBsD JbqA8eJxbOTXsMhqXn5YXJiIXN3ZtZZboWp2ktgXHH869JFgtORXFa4JBlLjuNVs pPrQ2mrDScVnwWB72PiWEbSegPtVfB3kncP+2TN22FhJvgsMZfHNtaSYGF3Uipj9 uSXeVIt7sJ9BO1i8qU/U4X3AqWXp7tIx0qzLjKfxwva+h9TUS7M2iU09G5Vrj3C2 R2SzaFTgM/3ADUFuA//q6XbQRserYtXwqbFmOIR6UWWMQH/bAs6+1hqLRyYNE087 -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:11 2025 by rpki-client