This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.mft File: b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.mft (raw, json) Hash identifier: Xx5E2J+Rvz1oI/mt/cdoukGac01SL0/GmWPhq3ARv50= Subject key identifier: A1:45:F8:73:6C:56:67:9C:0B:D0:5B:AE:05:6E:B1:46:BC:83:AD:9E Authority key identifier: 95:8F:5B:39:E1:F6:78:59:9C:DF:59:58:74:83:6A:F2:41:A3:A1:08 Certificate issuer: /CN=b7ab4c87-4845-4e51-9a77-1a7ef61e43f3 Certificate serial: 010D0C9F4328584C186646FACD64461A42E34500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.mft Manifest number: 010D0C9F4328584BD835809EFD17AB73C12BA418 Signing time: Sat 06 Dec 2025 09:00:03 +0000 Manifest this update: Sat 06 Dec 2025 09:00:03 +0000 Manifest next update: Mon 08 Dec 2025 09:00:00 +0000 Files and hashes: 1: 44262d20-a7f2-3f99-938d-03f03424f35e.roa (hash: BCNwzazjHMJFG1thbi8twMNGpzXOfnnw5H+7ODiMIiI=) 2: b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.crl (hash: gpwnbBaOLZK+KgPDPaFVka4/9eWays+Pvgw1UvvjnEc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:66:46:fa:cd:64:46:1a:42:e3:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7ab4c87-4845-4e51-9a77-1a7ef61e43f3 Validity Not Before: Dec 6 09:00:03 2025 GMT Not After : Dec 8 09:00:00 2025 GMT Subject: CN=c92c2351-201f-44f3-ba37-9f4b46f42cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:d9:72:9b:d5:f8:00:26:82:81:55:1d:b6: 04:be:97:a8:17:80:6e:91:b2:bc:34:fa:f6:2c:22: 12:23:4c:48:ad:e7:c3:5c:9f:0e:f7:5e:54:d1:13: 3a:aa:13:84:65:5e:86:d1:90:b1:8a:98:b5:bf:bf: 03:ab:a6:cb:ae:66:04:65:33:61:9e:6c:e2:87:f1: df:71:a5:65:35:ee:3d:9f:21:67:91:33:6a:01:4a: c7:42:ce:5b:15:78:d9:a9:60:cf:80:8b:2d:e3:e0: 0c:48:c3:0e:0a:de:ec:60:75:11:e9:7e:de:f9:43: 31:b1:2b:63:80:e9:8d:e8:64:1b:3b:b4:d9:9a:97: 5a:cb:59:68:6e:b0:b7:24:e1:50:ae:f9:0a:0e:7d: 3c:7a:18:93:ef:c7:b1:52:b5:67:42:91:a4:c4:ae: 87:b5:41:46:59:bd:9d:92:09:22:39:38:63:48:59: 76:90:c3:0c:a9:bc:4e:9c:bc:b9:de:ea:03:6a:38: 83:96:f5:a4:79:4f:91:12:28:31:03:d2:c0:78:0e: 1d:00:65:2d:98:ca:41:99:93:92:9f:62:86:7e:d6: b9:67:f7:e3:89:35:83:94:1b:98:f9:0c:a4:49:f9: 6d:e2:9d:7e:76:91:d2:44:c3:66:39:4c:9d:1c:f5: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:45:F8:73:6C:56:67:9C:0B:D0:5B:AE:05:6E:B1:46:BC:83:AD:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.crl X509v3 Authority Key Identifier: keyid:95:8F:5B:39:E1:F6:78:59:9C:DF:59:58:74:83:6A:F2:41:A3:A1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b7ab4c87-4845-4e51-9a77-1a7ef61e43f3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:53:8a:af:da:eb:e6:4c:54:84:76:ef:57:69:61:6c:4b:55: 29:8c:98:d6:af:da:36:4d:cb:90:26:62:89:c2:5b:55:28:02: 9d:1e:00:0d:b5:c7:0e:95:0f:34:10:56:4e:dc:51:9a:2b:bc: 50:bc:da:3f:d3:80:29:67:c9:e0:c4:0d:ef:06:8d:ff:f7:2d: fb:19:83:fd:39:55:b6:71:1c:15:7a:1b:cb:8a:0c:80:15:88: 45:b4:44:89:6b:73:6c:de:88:66:eb:03:ef:ec:d2:c1:cf:5b: 2b:df:8d:38:e3:23:58:db:c2:80:2e:25:2e:e6:a5:34:45:f6: 11:b9:89:03:a0:f1:92:88:59:77:2c:49:22:16:3d:82:e8:c0: e8:bd:7a:aa:90:98:ee:d6:a4:70:f9:24:99:9b:e6:86:57:0c: 6c:64:54:fb:6b:d0:d1:31:cc:6a:ba:3c:5a:95:d8:4a:43:09: be:bf:5f:ab:14:ca:ba:0a:26:0b:d2:f3:fd:08:42:08:27:24: 42:4d:a2:2c:a0:0d:f6:eb:02:cd:6d:0e:fe:f6:ff:82:80:25: 28:1d:82:df:98:c2:c8:2d:df:1b:23:f8:a1:cb:2c:48:f1:08: 90:c6:d8:7e:c9:a4:d6:52:b4:2c:04:90:14:7d:f2:e5:61:bf: 99:cf:9c:4a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwYZkb6zWRGGkLjRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjdhYjRjODctNDg0NS00ZTUxLTlhNzctMWE3ZWY2MWU0 M2YzMB4XDTI1MTIwNjA5MDAwM1oXDTI1MTIwODA5MDAwMFowLzEtMCsGA1UEAxMk YzkyYzIzNTEtMjAxZi00NGYzLWJhMzctOWY0YjQ2ZjQyY2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTrZcpvV+AAmgoFVHbYEvpeoF4BukbK8NPr2 LCISI0xIrefDXJ8O915U0RM6qhOEZV6G0ZCxipi1v78Dq6bLrmYEZTNhnmzih/Hf caVlNe49nyFnkTNqAUrHQs5bFXjZqWDPgIst4+AMSMMOCt7sYHUR6X7e+UMxsStj gOmN6GQbO7TZmpday1lobrC3JOFQrvkKDn08ehiT78exUrVnQpGkxK6HtUFGWb2d kgkiOThjSFl2kMMMqbxOnLy53uoDajiDlvWkeU+REigxA9LAeA4dAGUtmMpBmZOS n2KGfta5Z/fjiTWDlBuY+QykSflt4p1+dpHSRMNmOUydHPVpTwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKFF+HNsVmecC9BbrgVusUa8g62eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iN2Fi NGM4Ny00ODQ1LTRlNTEtOWE3Ny0xYTdlZjYxZTQzZjMvYjdhYjRjODctNDg0NS00 ZTUxLTlhNzctMWE3ZWY2MWU0M2YzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjdhYjRjODctNDg0NS00ZTUxLTlh NzctMWE3ZWY2MWU0M2YzL2I3YWI0Yzg3LTQ4NDUtNGU1MS05YTc3LTFhN2VmNjFl NDNmMy5jcmwwHwYDVR0jBBgwFoAUlY9bOeH2eFmc31lYdINq8kGjoQgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iN2FiNGM4Ny00ODQ1LTRlNTEtOWE3Ny0xYTdl ZjYxZTQzZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcU4qv2uvmTFSEdu9XaWFs S1UpjJjWr9o2TcuQJmKJwltVKAKdHgANtccOlQ80EFZO3FGaK7xQvNo/04ApZ8ng xA3vBo3/9y37GYP9OVW2cRwVehvLigyAFYhFtESJa3Ns3ohm6wPv7NLBz1sr3404 4yNY28KALiUu5qU0RfYRuYkDoPGSiFl3LEkiFj2C6MDovXqqkJju1qRw+SSZm+aG VwxsZFT7a9DRMcxqujxaldhKQwm+v1+rFMq6CiYL0vP9CEIIJyRCTaIsoA326wLN bQ7+9v+CgCUoHYLfmMLILd8bI/ihyyxI8QiQxth+yaTWUrQsBJAUffLlYb+Zz5xK -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:04 2025 by rpki-client