This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft File: 3e511aed-c666-436d-b4a4-947790e6c9e5.mft (raw, json) Hash identifier: +HWr4NYyMH7LJDQmvwg+geV8s8f7mforhsFyUjaR3nA= Subject key identifier: F8:4D:99:27:71:9A:43:7D:91:6C:DD:28:1A:A6:1C:92:69:FD:5B:82 Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F4328584C17B3A5354AC126F9BCAF5100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft Manifest number: 010D0C9F432858442FB69E4685B850D03895F5E7 Signing time: Sat 06 Dec 2025 03:00:08 +0000 Manifest this update: Sat 06 Dec 2025 03:00:08 +0000 Manifest next update: Mon 08 Dec 2025 03:00:00 +0000 Files and hashes: 1: 2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (hash: RWYhTQAzbUWDVxGkVcCvxWZvkvfGM9+TUXuWbY1nQ7M=) 2: 3e511aed-c666-436d-b4a4-947790e6c9e5.crl (hash: lhOfbewTqQzHU/0/aT7AhtefgNg+hkU85GeF3KTyUKU=) 3: 938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (hash: abXImAg+Q4JTRrOlOmP00xtTyX6xiM74fyxjPz3bloo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:b3:a5:35:4a:c1:26:f9:bc:af:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Dec 6 03:00:08 2025 GMT Not After : Dec 8 03:00:00 2025 GMT Subject: CN=dbb81c94-5011-465a-8ffd-1ccd18bce9fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:9c:b8:69:5d:30:f1:70:6b:7e:8c:8f:3f: 97:0d:68:13:73:50:cf:92:40:48:8f:e6:32:10:db: e6:8d:91:e4:bf:16:42:9b:51:3e:8b:1a:ec:23:4d: 8c:ca:36:f7:46:4c:e8:86:f8:72:f3:2e:09:41:2c: c3:ed:f6:9f:40:77:bb:94:c9:b2:c1:87:83:a6:52: ec:e8:e0:8e:f2:89:55:fd:05:1c:63:ad:ce:f4:65: 2a:38:d7:d1:04:03:de:60:a2:b7:74:47:34:2e:97: c1:2a:c0:4b:7e:84:de:f8:8d:cb:07:7a:f0:88:1d: 75:a1:e5:9e:a0:a4:19:91:80:3e:a2:0a:7b:7a:ec: e0:21:9e:0e:bd:b3:c7:75:87:34:4e:a5:48:91:08: a1:3e:40:02:a6:bb:38:15:4a:11:95:67:19:de:9e: 72:8f:40:a5:00:82:f1:c0:26:6b:5e:8f:89:df:81: 4e:f1:a4:cc:9a:a8:89:31:df:14:b2:d5:0f:7f:2d: 3e:6e:69:14:a3:92:ef:94:40:32:53:54:b0:d8:5b: cd:ad:ec:34:ac:1c:33:f2:9d:d4:36:37:1c:33:de: 42:d6:cd:0b:f3:3c:ba:f7:74:74:82:28:53:c2:48: 80:a8:01:d2:f3:b8:ac:9c:ae:4f:03:ee:3f:12:ea: dc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4D:99:27:71:9A:43:7D:91:6C:DD:28:1A:A6:1C:92:69:FD:5B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:08:1d:7e:a0:f7:c2:d2:a5:f8:f2:7b:a9:25:25:3e:c8:84: 53:d4:3b:9a:e3:69:2f:1d:8f:19:b8:2e:61:fa:15:88:51:db: 28:38:a8:69:26:94:3b:06:b7:56:65:21:19:4e:cb:a1:5a:e2: 8d:4b:b6:d7:1c:de:a7:b7:22:8c:73:b7:0c:21:bc:2c:b9:a1: 62:89:02:c2:1b:66:21:53:25:a9:50:82:e5:29:ee:89:a2:c7: e8:fb:fe:0a:de:81:65:ec:94:83:68:1f:00:b6:c8:c1:0e:ac: ca:d1:e5:ef:8b:92:16:b6:41:d6:9e:03:6d:d9:d7:61:d0:54: 1e:4f:32:c5:00:e9:0a:6a:92:9f:8b:97:8f:10:94:b5:56:0b: d0:29:47:ca:64:33:b3:2e:e4:ba:d0:6d:3a:b4:74:0c:b4:b9: ea:fe:84:7f:29:48:d7:e9:fc:7d:66:8d:dd:63:67:98:09:48: 19:05:79:09:b6:29:c7:b7:04:19:ef:c3:65:b0:62:35:c7:1f: fe:3c:ba:e4:34:2e:1b:39:75:05:0a:a0:52:f3:53:9a:53:f1: 69:61:ca:f8:b8:fe:67:aa:d6:83:6c:f7:27:6c:bc:80:d1:59: 48:03:32:20:05:8c:61:9c:b9:aa:50:f4:f8:75:f2:0f:a3:54: be:db:fe:87 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXs6U1SsEm+byvUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI1MTIwNjAzMDAwOFoXDTI1MTIwODAzMDAwMFowLzEtMCsGA1UEAxMk ZGJiODFjOTQtNTAxMS00NjVhLThmZmQtMWNjZDE4YmNlOWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKCcuGldMPFwa36Mjz+XDWgTc1DPkkBIj+Yy ENvmjZHkvxZCm1E+ixrsI02Myjb3Rkzohvhy8y4JQSzD7fafQHe7lMmywYeDplLs 6OCO8olV/QUcY63O9GUqONfRBAPeYKK3dEc0LpfBKsBLfoTe+I3LB3rwiB11oeWe oKQZkYA+ogp7euzgIZ4OvbPHdYc0TqVIkQihPkACprs4FUoRlWcZ3p5yj0ClAILx wCZrXo+J34FO8aTMmqiJMd8UstUPfy0+bmkUo5LvlEAyU1Sw2FvNrew0rBwz8p3U NjccM95C1s0L8zy693R0gihTwkiAqAHS87isnK5PA+4/EurcwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPhNmSdxmkN9kWzdKBqmHJJp/VuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvM2U1MTFhZWQtYzY2Ni00 MzZkLWI0YTQtOTQ3NzkwZTZjOWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA4CB1+oPfC0qX48nupJSU+ yIRT1Dua42kvHY8ZuC5h+hWIUdsoOKhpJpQ7BrdWZSEZTsuhWuKNS7bXHN6ntyKM c7cMIbwsuaFiiQLCG2YhUyWpUILlKe6Josfo+/4K3oFl7JSDaB8AtsjBDqzK0eXv i5IWtkHWngNt2ddh0FQeTzLFAOkKapKfi5ePEJS1VgvQKUfKZDOzLuS60G06tHQM tLnq/oR/KUjX6fx9Zo3dY2eYCUgZBXkJtinHtwQZ78NlsGI1xx/+PLrkNC4bOXUF CqBS81OaU/FpYcr4uP5nqtaDbPcnbLyA0VlIAzIgBYxhnLmqUPT4dfIPo1S+2/6H -----END CERTIFICATE-----Generated at Sat Dec 6 15:32:10 2025 by rpki-client