This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft File: 954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft (raw, json) Hash identifier: lM5lfRvNbHyg69Sn93hu9z4LrIpp7wKCiR43OtOMvqc= Subject key identifier: 2C:DA:4B:8A:A0:C3:B3:DA:48:2B:2D:15:B0:29:A8:C5:4B:F2:46:EF Authority key identifier: 72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC Certificate issuer: /CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Certificate serial: 010D0C9F4328584C16A7A1F0CED786844F156E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft Manifest number: 010D0C9F4328584C112324F43AA2908752839A04 Signing time: Fri 05 Dec 2025 18:00:08 +0000 Manifest this update: Fri 05 Dec 2025 18:00:08 +0000 Manifest next update: Mon 08 Dec 2025 18:00:00 +0000 Files and hashes: 1: 7f37d838-7ff6-3d1f-ada9-65965fc7a645.roa (hash: Tglr5Xmqq96HOTy2USQMJKMiRYt1+ZuXcB1Md8SgQvw=) 2: 954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl (hash: ZGD9XSqtnwaTLgkFT9qA6KS8B+AFDvjnCCNSBjrdFoE=) 3: b8c7c247-e134-3bd3-981f-d9dc44d8acf5.roa (hash: 49MYpcoifKRR+5crRvJRw2ghYbJUkMAt1bct33y3RSE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:a7:a1:f0:ce:d7:86:84:4f:15:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=954c01ba-d9ad-44e8-b48c-1a48f20d8b7d Validity Not Before: Dec 5 18:00:08 2025 GMT Not After : Dec 8 18:00:00 2025 GMT Subject: CN=b74348a4-f93d-47df-b0a8-e15e39d85402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ab:36:f2:a8:79:e2:6e:1c:4c:f6:68:83:2b: 0a:f5:9a:de:4a:ef:2a:90:d6:d7:ba:e0:4a:f2:76: de:07:9e:bb:7f:d8:46:98:74:c5:50:5e:1d:2a:ad: a7:ef:a4:8a:c5:54:53:26:c8:db:56:0e:84:21:47: 75:40:42:be:13:c0:38:70:ae:74:84:fc:62:f2:63: 4e:1b:f1:1a:27:0e:9b:cd:e1:a5:01:a0:3a:36:e5: f5:b7:30:b5:e6:fd:23:5f:fd:61:d9:58:8e:57:1e: a3:2b:b4:57:02:3b:de:d8:0a:0c:d5:85:30:22:1c: 85:79:ab:8a:02:70:14:77:87:1e:5e:26:27:f1:31: 20:af:ef:f1:aa:48:ea:05:06:e9:17:19:52:4c:b8: 8f:92:ae:3a:a3:0c:2a:55:48:33:b1:28:96:38:cd: 47:41:86:c4:7c:b3:56:27:a1:2d:de:85:a3:99:ef: 7d:8d:5f:29:38:a3:e5:49:a1:8f:26:2f:cb:52:2d: df:12:43:87:90:5f:4c:77:dd:1a:44:48:7b:b9:c0: de:db:5c:30:98:a3:9a:13:92:33:1d:3e:9c:96:54: e4:2b:bf:5e:37:19:ce:2d:c7:e6:91:48:45:f7:f0: b3:c2:1e:36:a5:4f:7c:0c:97:b6:66:d3:8c:6e:33: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:DA:4B:8A:A0:C3:B3:DA:48:2B:2D:15:B0:29:A8:C5:4B:F2:46:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.crl X509v3 Authority Key Identifier: keyid:72:A8:3D:57:8C:66:88:34:8C:9E:2B:8E:F0:43:BD:E2:7C:A5:90:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/954c01ba-d9ad-44e8-b48c-1a48f20d8b7d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f7:b8:3b:f4:c4:1c:13:31:fe:29:8f:fb:39:a4:ea:60:00: 4a:29:2c:48:f3:fb:f9:ae:ab:2b:50:c0:5e:f6:7e:46:56:8b: 31:d6:4a:07:f1:5a:46:0d:fc:f8:ce:31:61:cd:6d:db:9d:26: 58:60:e8:75:5c:79:8e:c7:b6:b7:61:83:a0:78:fd:7a:06:2f: 19:97:bd:7b:15:33:75:59:5b:0b:91:63:63:31:05:e1:17:ce: df:3c:9d:2b:d9:b0:68:37:8b:d3:ec:10:4c:e9:04:36:c7:67: 94:b0:c6:82:0d:e1:6d:2b:d0:6f:eb:f0:bb:70:59:0f:f6:4e: c6:a2:9a:a9:96:6a:28:a2:8a:8c:70:ba:49:a9:f5:19:d9:6a: 92:9c:1a:df:0f:ff:30:4d:27:7a:7d:a8:59:36:e7:0c:f2:ac: 9b:33:9c:7e:38:2a:a8:2d:ce:75:25:90:39:14:6f:0f:78:7d: 3e:3e:6f:32:04:a8:b0:93:1d:6f:03:25:79:91:87:a7:ce:84: 0d:ee:52:93:e5:de:3e:e5:17:8c:c4:6c:59:ea:10:3b:f3:cf: 6e:0d:6d:26:60:6c:3b:1c:c0:80:14:b9:5c:bf:17:e2:77:5c: 20:8e:2e:93:da:47:f3:eb:d9:06:a8:88:e0:20:35:c5:49:32: 9c:e5:26:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWp6HwzteGhE8VboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU0YzAxYmEtZDlhZC00NGU4LWI0OGMtMWE0OGYyMGQ4 YjdkMB4XDTI1MTIwNTE4MDAwOFoXDTI1MTIwODE4MDAwMFowLzEtMCsGA1UEAxMk Yjc0MzQ4YTQtZjkzZC00N2RmLWIwYTgtZTE1ZTM5ZDg1NDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6s28qh54m4cTPZogysK9ZreSu8qkNbXuuBK 8nbeB567f9hGmHTFUF4dKq2n76SKxVRTJsjbVg6EIUd1QEK+E8A4cK50hPxi8mNO G/EaJw6bzeGlAaA6NuX1tzC15v0jX/1h2ViOVx6jK7RXAjve2AoM1YUwIhyFeauK AnAUd4ceXiYn8TEgr+/xqkjqBQbpFxlSTLiPkq46owwqVUgzsSiWOM1HQYbEfLNW J6Et3oWjme99jV8pOKPlSaGPJi/LUi3fEkOHkF9Md90aREh7ucDe21wwmKOaE5Iz HT6cllTkK79eNxnOLcfmkUhF9/Czwh42pU98DJe2ZtOMbjOPEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCzaS4qgw7PaSCstFbApqMVL8kbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRj MDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4ZjIwZDhiN2QvOTU0YzAxYmEtZDlhZC00 NGU4LWI0OGMtMWE0OGYyMGQ4YjdkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTU0YzAxYmEtZDlhZC00NGU4LWI0 OGMtMWE0OGYyMGQ4YjdkLzk1NGMwMWJhLWQ5YWQtNDRlOC1iNDhjLTFhNDhmMjBk OGI3ZC5jcmwwHwYDVR0jBBgwFoAUcqg9V4xmiDSMniuO8EO94nylkNwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85NTRjMDFiYS1kOWFkLTQ0ZTgtYjQ4Yy0xYTQ4 ZjIwZDhiN2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAq97g79MQcEzH+KY/7OaTq YABKKSxI8/v5rqsrUMBe9n5GVosx1koH8VpGDfz4zjFhzW3bnSZYYOh1XHmOx7a3 YYOgeP16Bi8Zl717FTN1WVsLkWNjMQXhF87fPJ0r2bBoN4vT7BBM6QQ2x2eUsMaC DeFtK9Bv6/C7cFkP9k7GopqplmooooqMcLpJqfUZ2WqSnBrfD/8wTSd6fahZNucM 8qybM5x+OCqoLc51JZA5FG8PeH0+Pm8yBKiwkx1vAyV5kYenzoQN7lKT5d4+5ReM xGxZ6hA7889uDW0mYGw7HMCAFLlcvxfid1wgji6T2kfz69kGqIjgIDXFSTKc5Sbi -----END CERTIFICATE-----Generated at Sat Dec 6 15:35:23 2025 by rpki-client