This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft File: 1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft (raw, json) Hash identifier: BR8Lr+IidnMb6udtcXyZ4aYQK7k+M1NxahfEXGXWI10= Subject key identifier: 2C:61:0C:FB:A4:97:90:4E:5D:61:03:AE:8D:BE:59:1C:25:10:27:FF Authority key identifier: 06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21 Certificate issuer: /CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea Certificate serial: 010D0C9F4328584C17D16090D439B7E881F98740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft Manifest number: 010D0C9F4328584B8C422ADA4A549533C5FAE4F3 Signing time: Sat 06 Dec 2025 04:00:03 +0000 Manifest this update: Sat 06 Dec 2025 04:00:03 +0000 Manifest next update: Tue 09 Dec 2025 04:00:00 +0000 Files and hashes: 1: 1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl (hash: WVg0WDtjzTW4WicsZTJw8KUt0EW/LssxyKD1tOH9HOE=) 2: 20ae5c38-5db9-3012-8a24-81e62ff8e7ae.roa (hash: qvbcmiBjEpksBIaU2OT7wa7IadIF9zDrNBUitVasv1Q=) 3: a8a7b368-d581-32bf-98ab-f43fc17a31c0.roa (hash: 3AYezZ0+EAwvPIXLqjl1GlelRhcT9fgnB/9f0/hRptk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:d1:60:90:d4:39:b7:e8:81:f9:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ce9c50c-e327-4243-8c1e-067bd3d4ebea Validity Not Before: Dec 6 04:00:03 2025 GMT Not After : Dec 9 04:00:00 2025 GMT Subject: CN=671d7aac-eee3-4d3f-86b8-572941764547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:42:e9:3b:bc:b9:f5:6c:2d:84:0a:5d:d8: 78:e1:7f:59:31:82:b3:77:cc:b7:d6:0f:8a:9e:6b: 86:41:0a:90:8f:ea:bf:c4:c9:59:27:06:08:4e:bb: 62:46:bc:61:9b:7d:ff:a8:05:67:32:8d:86:9d:30: 18:d2:ed:92:df:32:e5:dd:bd:c4:33:ed:bd:df:95: d3:d8:05:26:53:30:28:bb:c2:17:5a:98:88:ee:c0: a3:54:7b:ed:b2:24:00:8e:54:27:6e:7d:19:ed:9b: 13:51:f1:ad:05:06:21:7c:4a:44:44:a3:d0:fe:0f: 69:60:68:98:65:57:29:6e:8b:3e:c3:94:4e:f2:34: 1b:9b:db:96:7f:10:84:99:af:7b:ef:1e:6b:3b:2f: 72:fa:a0:a2:5d:2a:08:e5:30:c3:79:b9:39:cc:a5: 56:c9:04:bd:ce:c0:d1:f7:ed:92:d5:ed:6c:5e:22: 0e:79:cf:4c:8c:21:7e:0e:fd:2e:db:d0:62:55:0b: 40:02:02:64:a8:fc:89:3f:d3:58:e6:18:39:c5:d1: 0a:0a:d7:02:af:bb:f9:e1:e6:15:ac:fd:d9:10:07: e0:03:94:54:0c:39:bd:d6:ce:3c:10:fe:e6:b0:b9: 80:95:02:73:45:57:f4:f1:b9:6e:4d:7b:e1:0a:d2: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:61:0C:FB:A4:97:90:4E:5D:61:03:AE:8D:BE:59:1C:25:10:27:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.crl X509v3 Authority Key Identifier: keyid:06:4A:64:E9:DF:94:C9:D6:40:7A:6E:12:55:D1:0C:5D:B1:35:A8:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1ce9c50c-e327-4243-8c1e-067bd3d4ebea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:01:6c:5f:c7:8d:8b:aa:4b:d6:2e:1f:9a:47:c2:53:92:1d: 23:ce:e6:01:e3:4a:36:64:bd:28:7d:7c:78:c5:18:46:5a:45: d1:e9:b8:3e:02:aa:55:d1:ee:39:10:f4:6d:a2:1c:02:ea:d6: f1:a5:3e:79:e2:ad:00:49:11:40:9a:cb:db:a2:72:73:59:8d: 2f:67:57:10:0b:d5:65:c2:c0:73:7e:cc:69:98:64:8b:eb:e7: 7e:25:b8:ff:cf:9c:65:96:56:12:52:60:4b:ae:c0:da:12:57: dd:10:6b:cb:7a:f0:f7:63:ae:a2:4a:94:95:28:3f:70:5c:69: 0b:ab:d3:8c:ed:2d:de:ef:61:05:f9:50:1c:ed:b2:cd:2c:5f: 6f:b4:06:d0:49:11:af:ca:49:4e:02:4c:06:ac:c2:d1:73:b2: 9f:16:f4:aa:10:7d:48:8b:3c:cc:c2:28:28:f5:72:ec:9e:7f: 09:97:b9:d4:eb:b6:f4:a6:70:be:0f:18:40:1f:bd:45:f2:d7: d2:d4:5b:ef:ba:28:2e:d7:79:51:4a:00:11:c2:b2:4e:b7:a0: b6:35:9f:1d:51:d7:c2:df:8d:ca:a9:5e:66:28:ae:a4:d9:51: 07:c0:b0:d7:dd:09:9e:79:c9:77:f1:ef:32:c2:6b:ec:10:53: f9:e2:ef:59 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwX0WCQ1Dm36IH5h0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNlOWM1MGMtZTMyNy00MjQzLThjMWUtMDY3YmQzZDRl YmVhMB4XDTI1MTIwNjA0MDAwM1oXDTI1MTIwOTA0MDAwMFowLzEtMCsGA1UEAxMk NjcxZDdhYWMtZWVlMy00ZDNmLTg2YjgtNTcyOTQxNzY0NTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gpC6Tu8ufVsLYQKXdh44X9ZMYKzd8y31g+K nmuGQQqQj+q/xMlZJwYITrtiRrxhm33/qAVnMo2GnTAY0u2S3zLl3b3EM+2935XT 2AUmUzAou8IXWpiI7sCjVHvtsiQAjlQnbn0Z7ZsTUfGtBQYhfEpERKPQ/g9pYGiY ZVcpbos+w5RO8jQbm9uWfxCEma977x5rOy9y+qCiXSoI5TDDebk5zKVWyQS9zsDR 9+2S1e1sXiIOec9MjCF+Dv0u29BiVQtAAgJkqPyJP9NY5hg5xdEKCtcCr7v54eYV rP3ZEAfgA5RUDDm91s48EP7msLmAlQJzRVf08bluTXvhCtL/hwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCxhDPukl5BOXWEDro2+WRwlECf/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2U5 YzUwYy1lMzI3LTQyNDMtOGMxZS0wNjdiZDNkNGViZWEvMWNlOWM1MGMtZTMyNy00 MjQzLThjMWUtMDY3YmQzZDRlYmVhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWNlOWM1MGMtZTMyNy00MjQzLThj MWUtMDY3YmQzZDRlYmVhLzFjZTljNTBjLWUzMjctNDI0My04YzFlLTA2N2JkM2Q0 ZWJlYS5jcmwwHwYDVR0jBBgwFoAUBkpk6d+UydZAem4SVdEMXbE1qCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xY2U5YzUwYy1lMzI3LTQyNDMtOGMxZS0wNjdi ZDNkNGViZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9AWxfx42LqkvWLh+aR8JT kh0jzuYB40o2ZL0ofXx4xRhGWkXR6bg+AqpV0e45EPRtohwC6tbxpT554q0ASRFA msvbonJzWY0vZ1cQC9VlwsBzfsxpmGSL6+d+Jbj/z5xlllYSUmBLrsDaElfdEGvL evD3Y66iSpSVKD9wXGkLq9OM7S3e72EF+VAc7bLNLF9vtAbQSRGvyklOAkwGrMLR c7KfFvSqEH1IizzMwigo9XLsnn8Jl7nU67b0pnC+DxhAH71F8tfS1Fvvuigu13lR SgARwrJOt6C2NZ8dUdfC343KqV5mKK6k2VEHwLDX3Qmeecl38e8ywmvsEFP54u9Z -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:50 2025 by rpki-client