This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft File: 85306d90-0f37-49a8-b00e-068a8e4ff307.mft (raw, json) Hash identifier: gAzL1lotCIYSqxvmA6VlsBhPKNxRo83UOYzd0j0gM2o= Subject key identifier: CF:E9:A7:82:AB:6C:D4:E3:2E:4B:46:AF:45:55:52:7F:66:E9:8C:B9 Authority key identifier: E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 Certificate issuer: /CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Certificate serial: 010D0C9F4328584C1795DF85E7618AA9F2987100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft Manifest number: 010D0C9F4328584BE5637334FE2E75DB51377B64 Signing time: Sat 06 Dec 2025 02:00:08 +0000 Manifest this update: Sat 06 Dec 2025 02:00:08 +0000 Manifest next update: Tue 09 Dec 2025 02:00:00 +0000 Files and hashes: 1: 85306d90-0f37-49a8-b00e-068a8e4ff307.crl (hash: 5MbR/MlYGJi2VKn35YcEY5I0L20jEKRmqCDH00tQ/KY=) 2: 977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa (hash: VY6+CB2TjgddRCib/782DadX+w0K+d4Fam2mgz+71oc=) 3: 9fd150ce-2142-3c1e-a371-3207dc1e5083.roa (hash: S+wmuTCoKoL32XsZCLADSepmPSJujajPang9IRptuek=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:95:df:85:e7:61:8a:a9:f2:98:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Validity Not Before: Dec 6 02:00:08 2025 GMT Not After : Dec 9 02:00:00 2025 GMT Subject: CN=23de87c9-27f1-4c57-8631-42d6260b0510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:27:df:3d:20:ea:1a:21:d0:fc:64:85:4c:54: cf:5f:7e:45:21:75:74:18:99:07:e3:9e:82:44:08: c1:82:a7:9f:d8:cb:3c:35:c4:07:1b:c0:2b:26:d4: 20:f2:dd:e8:6b:ec:98:3d:17:4e:06:40:80:99:b3: 8a:b8:72:fc:63:62:f4:78:a3:44:c3:ba:f4:87:84: 6a:cd:bc:62:83:db:90:89:ec:cf:65:c8:5f:16:9a: a9:61:96:0a:82:4f:18:d2:f0:48:69:3a:e0:fb:51: 69:99:4c:be:3f:4b:b5:39:89:ff:eb:fa:fd:88:0e: 3d:02:57:4a:a5:a1:ab:30:79:55:cd:74:be:22:3c: ee:2c:05:3d:f2:83:d5:b1:90:51:56:b5:e9:3a:a7: ea:c8:89:2b:26:16:5b:c3:dd:65:ed:a2:8a:19:a2: 90:e3:22:ba:e5:1e:04:73:fc:02:7e:64:54:ab:b1: aa:a9:eb:e5:99:b2:9d:ff:92:09:90:3a:9b:15:37: 4e:90:66:f0:1a:cc:08:60:8e:13:0b:d7:3f:93:48: a6:92:0c:69:ed:4a:56:dd:c3:0a:2f:72:e5:eb:f9: 8c:b5:32:c9:ca:ac:54:c5:7b:0a:fc:d4:19:00:c4: 5b:89:16:5d:52:c6:68:20:a7:83:ed:43:12:29:1a: a0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E9:A7:82:AB:6C:D4:E3:2E:4B:46:AF:45:55:52:7F:66:E9:8C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl X509v3 Authority Key Identifier: keyid:E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b8:55:ba:c3:c2:1b:bc:7d:d9:88:6d:3b:d1:52:bb:e1:6a: 84:62:68:7d:6a:e3:67:29:0b:47:6d:c7:0c:0f:b8:b3:4c:32: 37:14:6a:91:67:fc:ec:07:dd:f2:76:e6:cb:0d:ef:3c:0c:6f: 0f:bc:4b:6f:33:bc:d0:8b:6f:f6:2a:27:07:7f:88:d2:9f:b6: 5e:b9:bb:24:2c:62:23:c6:9d:ff:e9:06:c2:5e:cb:a8:cd:7d: 93:3b:c8:2b:23:0b:f2:33:66:8f:01:6a:a1:03:df:27:af:aa: 4c:33:8c:a3:ed:6b:c7:d3:06:49:ef:2f:21:b5:a1:b1:11:08: 2d:b3:ee:a5:fc:39:fa:6f:a7:db:fe:33:8f:e5:a3:af:87:40: 13:45:21:1d:d9:5f:5d:7e:9b:f7:6c:46:f5:c6:3f:55:a4:e4: c9:04:1e:d0:97:b8:ee:90:3c:c2:59:4b:91:1b:cc:f3:3c:33: af:70:27:b0:81:a3:3e:36:76:1c:86:6a:e0:b7:73:06:cf:47: 54:d0:8e:f4:2c:d1:93:0f:a0:d1:57:0a:e9:de:83:67:36:09: 14:e3:06:e8:7e:ea:0c:d3:cf:65:3e:27:ca:42:a1:2f:c8:72: 55:8b:d2:44:03:25:0f:ed:8c:ab:75:69:8e:25:77:fe:64:ce: ac:a4:3c:44 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXld+F52GKqfKYcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUzMDZkOTAtMGYzNy00OWE4LWIwMGUtMDY4YThlNGZm MzA3MB4XDTI1MTIwNjAyMDAwOFoXDTI1MTIwOTAyMDAwMFowLzEtMCsGA1UEAxMk MjNkZTg3YzktMjdmMS00YzU3LTg2MzEtNDJkNjI2MGIwNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iffPSDqGiHQ/GSFTFTPX35FIXV0GJkH456C RAjBgqef2Ms8NcQHG8ArJtQg8t3oa+yYPRdOBkCAmbOKuHL8Y2L0eKNEw7r0h4Rq zbxig9uQiezPZchfFpqpYZYKgk8Y0vBIaTrg+1FpmUy+P0u1OYn/6/r9iA49AldK paGrMHlVzXS+IjzuLAU98oPVsZBRVrXpOqfqyIkrJhZbw91l7aKKGaKQ4yK65R4E c/wCfmRUq7GqqevlmbKd/5IJkDqbFTdOkGbwGswIYI4TC9c/k0imkgxp7UpW3cMK L3Ll6/mMtTLJyqxUxXsK/NQZAMRbiRZdUsZoIKeD7UMSKRqgiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFM/pp4KrbNTjLktGr0VVUn9m6Yy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMw NmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhhOGU0ZmYzMDcvODUzMDZkOTAtMGYzNy00 OWE4LWIwMGUtMDY4YThlNGZmMzA3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODUzMDZkOTAtMGYzNy00OWE4LWIw MGUtMDY4YThlNGZmMzA3Lzg1MzA2ZDkwLTBmMzctNDlhOC1iMDBlLTA2OGE4ZTRm ZjMwNy5jcmwwHwYDVR0jBBgwFoAU6W+vjk/ijY/2WK04zp8PXNFY//gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMwNmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhh OGU0ZmYzMDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6uFW6w8IbvH3ZiG070VK7 4WqEYmh9auNnKQtHbccMD7izTDI3FGqRZ/zsB93ydubLDe88DG8PvEtvM7zQi2/2 KicHf4jSn7ZeubskLGIjxp3/6QbCXsuozX2TO8grIwvyM2aPAWqhA98nr6pMM4yj 7WvH0wZJ7y8htaGxEQgts+6l/Dn6b6fb/jOP5aOvh0ATRSEd2V9dfpv3bEb1xj9V pOTJBB7Ql7jukDzCWUuRG8zzPDOvcCewgaM+NnYchmrgt3MGz0dU0I70LNGTD6DR Vwrp3oNnNgkU4wbofuoM089lPifKQqEvyHJVi9JEAyUP7YyrdWmOJXf+ZM6spDxE -----END CERTIFICATE-----Generated at Sat Dec 6 12:02:58 2025 by rpki-client