This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft File: a8825ed0-210f-48ae-8970-c92773afbb48.mft (raw, json) Hash identifier: IK5lbLo/CHiXLxdIhrb+/fVmtBBZ0eU4E9LIP+kN8QM= Subject key identifier: 10:4F:1C:6E:5C:80:DF:86:EA:80:BB:EC:06:3B:24:67:3F:8E:EB:62 Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48 Certificate serial: 010D0C9F4328584C18FB2CD8DBFE9DD6EC22F9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft Manifest number: 010D0C9F4328584C0DE355E928AB7F5F1AF86A46 Signing time: Sat 06 Dec 2025 14:00:03 +0000 Manifest this update: Sat 06 Dec 2025 14:00:03 +0000 Manifest next update: Tue 09 Dec 2025 14:00:00 +0000 Files and hashes: 1: 6b5552b6-61df-3788-b537-8378e270c304.roa (hash: fmu+PyhARcpoUysKwQA5RhsnDTOK9Vn7elvL6wchC9Q=) 2: 7e8a6158-b814-305c-b02d-c4597bfdf6b0.roa (hash: dfsjpoDCxjWSqGRyftK3//pPkF6V/8gUnpVmDKU8XiU=) 3: a8825ed0-210f-48ae-8970-c92773afbb48.crl (hash: xoKlutUMNv5aabcFfbexgnyfjNbRNh7BzMWxvZaaJLg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:fb:2c:d8:db:fe:9d:d6:ec:22:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48 Validity Not Before: Dec 6 14:00:03 2025 GMT Not After : Dec 9 14:00:00 2025 GMT Subject: CN=0a0a75fa-d461-43fa-806b-630e0f151f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b8:25:bd:56:8f:e0:61:07:8f:54:ff:03:d4: 51:fb:77:7e:ee:25:6c:dd:79:77:06:49:ea:b6:fa: 05:7b:9a:b7:ac:f2:c9:53:2c:a5:89:41:27:2e:de: e9:1b:ac:c9:60:e8:fa:89:7e:bf:81:91:60:f0:7e: 27:c3:9d:a2:eb:ab:9d:a9:7e:2a:98:75:50:41:2a: 67:1d:9c:23:6f:43:17:bc:18:cf:67:88:d4:af:9e: 33:db:5b:e0:6d:d2:65:32:0c:a5:7f:96:56:90:1a: 8b:6d:72:39:20:82:7f:38:da:d2:5f:8f:13:3c:44: 6e:16:d2:81:55:6c:06:38:45:84:a8:d9:91:be:ab: f7:15:81:53:90:45:1a:79:7b:0e:bf:56:8c:a3:8b: fa:1d:3a:94:35:de:20:eb:3e:96:cc:98:71:37:9a: e0:87:a6:47:59:e4:44:9a:e8:fb:49:72:e5:f0:83: 44:b6:c7:f7:3d:6e:0d:e9:e4:e6:b6:20:0f:e0:5e: 5b:5b:d8:10:55:c4:15:43:6d:73:71:7a:a9:9f:39: 54:2b:a0:68:c8:1d:84:0c:c6:da:46:d9:e4:f6:04: 9f:f9:54:59:12:8b:73:6f:41:b4:4e:8b:d8:43:0b: 5e:3b:ed:95:2b:33:c7:89:2a:f1:9c:e5:31:0c:cf: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4F:1C:6E:5C:80:DF:86:EA:80:BB:EC:06:3B:24:67:3F:8E:EB:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl X509v3 Authority Key Identifier: keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:73:32:8d:62:f1:0b:77:e1:36:8f:5e:5a:e2:1c:a2:de:00: d1:24:4d:76:3a:a3:7a:87:3e:e6:e5:bf:b4:e4:e2:5b:4b:60: 35:0f:36:a4:8b:17:55:7d:60:ff:a1:2f:56:cd:97:db:c1:a4: 36:cf:b2:5b:01:93:93:78:03:5c:46:6c:17:73:c3:a8:f4:f2: 48:4d:48:0f:c7:01:1c:2d:cb:ff:f4:15:21:05:d3:41:0c:17: 8a:3c:c3:9a:cb:63:01:22:ab:c6:87:e8:17:63:1f:b4:74:c3: 2c:cc:8a:7c:76:99:09:33:34:40:58:3f:79:eb:be:d4:f6:e5: 8d:a8:cb:85:7f:3b:ef:4a:88:d7:86:27:4b:be:92:12:bb:ae: 29:6e:16:e6:4b:07:09:2c:20:0d:fd:94:3b:bb:34:7c:79:0e: 1f:d9:45:73:11:0e:f0:d9:36:91:47:38:0b:a1:b9:67:26:92: 65:b4:45:f6:59:76:c9:52:72:ea:76:03:74:a7:66:5e:de:3d: 1e:8d:52:8e:9e:fd:7e:34:a5:78:07:8b:60:12:bb:4f:17:d2: 71:13:e9:09:b5:95:c9:7c:a2:fc:0b:09:37:b4:3f:dd:be:d6: eb:fe:e8:b0:76:5d:25:3e:47:05:76:b4:62:fd:f0:16:be:24: 5d:79:8b:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwY+yzY2/6d1uwi+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi YjQ4MB4XDTI1MTIwNjE0MDAwM1oXDTI1MTIwOTE0MDAwMFowLzEtMCsGA1UEAxMk MGEwYTc1ZmEtZDQ2MS00M2ZhLTgwNmItNjMwZTBmMTUxZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbglvVaP4GEHj1T/A9RR+3d+7iVs3Xl3Bknq tvoFe5q3rPLJUyyliUEnLt7pG6zJYOj6iX6/gZFg8H4nw52i66udqX4qmHVQQSpn HZwjb0MXvBjPZ4jUr54z21vgbdJlMgylf5ZWkBqLbXI5IIJ/ONrSX48TPERuFtKB VWwGOEWEqNmRvqv3FYFTkEUaeXsOv1aMo4v6HTqUNd4g6z6WzJhxN5rgh6ZHWeRE muj7SXLl8INEtsf3PW4N6eTmtiAP4F5bW9gQVcQVQ21zcXqpnzlUK6BoyB2EDMba Rtnk9gSf+VRZEotzb0G0TovYQwteO+2VKzPHiSrxnOUxDM9YMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBBPHG5cgN+G6oC77AY7JGc/jutiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvYTg4MjVlZDAtMjEwZi00 OGFlLTg5NzAtYzkyNzczYWZiYjQ4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5 NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3 NzNhZmJiNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCyczKNYvELd+E2j15a4hyi 3gDRJE12OqN6hz7m5b+05OJbS2A1DzakixdVfWD/oS9WzZfbwaQ2z7JbAZOTeANc RmwXc8Oo9PJITUgPxwEcLcv/9BUhBdNBDBeKPMOay2MBIqvGh+gXYx+0dMMszIp8 dpkJMzRAWD95677U9uWNqMuFfzvvSojXhidLvpISu64pbhbmSwcJLCAN/ZQ7uzR8 eQ4f2UVzEQ7w2TaRRzgLoblnJpJltEX2WXbJUnLqdgN0p2Ze3j0ejVKOnv1+NKV4 B4tgErtPF9JxE+kJtZXJfKL8Cwk3tD/dvtbr/uiwdl0lPkcFdrRi/fAWviRdeYuk -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:42 2025 by rpki-client