This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.mft (raw, json) Hash identifier: Io/WR/T8qKPuNBABc5u65cXEChfvvnYuZ+sV8rWOniY= Subject key identifier: C3:14:29:12:02:AA:93:1E:2C:28:E3:A7:5A:F3:D2:23:CB:C6:6E:B2 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584C171EB8F553265C1D44B39F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft Manifest number: 010D0C9F4328584200D9C72B5C6113CC8D160874 Signing time: Fri 05 Dec 2025 22:00:04 +0000 Manifest this update: Fri 05 Dec 2025 22:00:04 +0000 Manifest next update: Sun 07 Dec 2025 22:00:00 +0000 Files and hashes: 1: 0af21de0-2cae-45f7-b42c-9598c4271ef0.crl (hash: HPLhDCVRaDm/mlzLjJbU4RboaAcaalU2aNXZ0c24H6k=) 2: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (hash: i5f+PQMcneKVzCLqj+o9qGquF3BnF9iknTY4YXBoBSE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:1e:b8:f5:53:26:5c:1d:44:b3:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Dec 5 22:00:04 2025 GMT Not After : Dec 7 22:00:00 2025 GMT Subject: CN=7a97bf09-d615-4a03-905d-e077dd55500f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8d:65:20:92:20:d4:76:06:9f:0b:b0:82:10: f5:39:0e:ee:6e:4b:65:21:f7:d8:92:c6:88:bb:41: 33:2a:f2:d9:ed:57:95:98:cc:d7:8f:5d:fa:ab:af: f4:b9:62:e1:ce:91:0f:b7:a4:d3:2c:5c:07:7b:88: 6e:7f:29:1c:5d:12:2c:ab:dc:33:ba:b1:3f:54:a8: 07:4f:ec:2f:20:46:47:a8:d0:ce:f5:3c:11:fb:30: 52:76:1f:ff:a7:98:04:af:31:e5:2b:3d:63:fe:17: 14:b5:e9:17:2d:a1:97:eb:99:d9:6f:13:29:17:e1: 88:31:68:a7:58:ff:7c:37:5c:6c:4d:90:23:fb:40: 60:48:ff:4d:9f:2a:38:ff:b4:9c:2d:ae:db:79:7c: bb:31:30:5c:60:b0:18:e7:ce:ed:49:9a:ad:53:86: 8e:9b:ed:44:c5:41:d9:77:df:13:db:71:0f:32:0c: 37:81:e6:8a:98:ba:3e:48:20:54:c5:29:0f:1e:7a: 0b:44:ea:4b:6b:98:0f:4b:24:04:25:49:6a:11:a8: b9:ad:5c:2a:ac:6c:f5:69:04:f9:fb:a9:a6:74:45: 63:e6:e2:4b:54:1f:fc:f3:d3:b7:b5:a9:00:89:cd: 65:06:d5:05:18:34:68:e4:7e:f4:f8:f6:5b:ce:d0: 1a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:14:29:12:02:AA:93:1E:2C:28:E3:A7:5A:F3:D2:23:CB:C6:6E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:7e:a9:aa:7b:af:33:4a:31:45:2a:3c:59:c9:c4:17:00:89: e7:dc:dc:81:dd:2a:26:f3:bc:39:52:ee:24:5d:a6:57:ca:fd: 4d:2c:d9:87:50:66:b9:63:e3:29:e0:cd:2a:23:94:74:25:1f: 1c:ea:a6:59:81:a3:19:71:e3:ca:ca:29:6e:60:6c:99:a6:07: b6:35:5a:53:ef:39:a8:f7:bc:19:15:43:7d:57:5d:4f:a1:2b: db:0d:45:5e:c4:9d:32:65:a8:df:42:d1:44:e0:cb:4f:6e:3e: 0b:f1:de:20:9b:cb:87:d3:88:af:ec:bf:dd:5a:1d:88:7e:f4: 4e:fa:09:f9:50:4b:33:8a:79:e3:ce:e5:59:4a:ee:18:00:53: a8:4d:4e:dd:a1:7c:17:77:7e:d3:0a:f0:15:87:dd:89:3f:43: 8a:f1:0b:12:42:a2:71:37:db:8b:fd:f8:1e:6a:30:19:af:d3: 1b:35:b1:72:0b:eb:f0:bc:76:ef:9e:c9:f6:20:63:b2:b7:da: c6:08:01:81:e0:d5:9b:4f:ec:7a:68:55:1b:5f:98:dc:53:c9: 07:ba:0f:d6:b0:8a:76:6c:e7:aa:b2:ee:55:d3:59:57:66:fb: 1b:80:b2:1c:73:1b:2f:da:96:54:06:31:de:cc:0e:61:1e:a0: 7d:fa:b3:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXHrj1UyZcHUSznwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI1MTIwNTIyMDAwNFoXDTI1MTIwNzIyMDAwMFowLzEtMCsGA1UEAxMk N2E5N2JmMDktZDYxNS00YTAzLTkwNWQtZTA3N2RkNTU1MDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY1lIJIg1HYGnwuwghD1OQ7ubktlIffYksaI u0EzKvLZ7VeVmMzXj136q6/0uWLhzpEPt6TTLFwHe4hufykcXRIsq9wzurE/VKgH T+wvIEZHqNDO9TwR+zBSdh//p5gErzHlKz1j/hcUtekXLaGX65nZbxMpF+GIMWin WP98N1xsTZAj+0BgSP9Nnyo4/7ScLa7beXy7MTBcYLAY587tSZqtU4aOm+1ExUHZ d98T23EPMgw3geaKmLo+SCBUxSkPHnoLROpLa5gPSyQEJUlqEai5rVwqrGz1aQT5 +6mmdEVj5uJLVB/889O3takAic1lBtUFGDRo5H70+PZbztAanQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMMUKRICqpMeLCjjp1rz0iPLxm6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMGFmMjFkZTAtMmNhZS00 NWY3LWI0MmMtOTU5OGM0MjcxZWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChfqmqe68zSjFFKjxZycQX AInn3NyB3Som87w5Uu4kXaZXyv1NLNmHUGa5Y+Mp4M0qI5R0JR8c6qZZgaMZcePK yiluYGyZpge2NVpT7zmo97wZFUN9V11PoSvbDUVexJ0yZajfQtFE4MtPbj4L8d4g m8uH04iv7L/dWh2IfvRO+gn5UEszinnjzuVZSu4YAFOoTU7doXwXd37TCvAVh92J P0OK8QsSQqJxN9uL/fgeajAZr9MbNbFyC+vwvHbvnsn2IGOyt9rGCAGB4NWbT+x6 aFUbX5jcU8kHug/WsIp2bOeqsu5V01lXZvsbgLIccxsv2pZUBjHezA5hHqB9+rOY -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:01 2025 by rpki-client