This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft File: dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft (raw, json) Hash identifier: D++PB5tk3lsjfEcMEFinocOtxG3dfK/nI2aXOpBUzQI= Subject key identifier: B4:DB:66:CE:27:80:33:4C:00:A8:5F:B1:19:50:E3:AF:4A:44:8A:6A Authority key identifier: 56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12 Certificate issuer: /CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7 Certificate serial: 010D0C9F4328584C166C170C981F6DF91B518280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft Manifest number: 010D0C9F432858413C6ECA503DB5BF15E31FED7C Signing time: Fri 05 Dec 2025 16:00:08 +0000 Manifest this update: Fri 05 Dec 2025 16:00:08 +0000 Manifest next update: Sun 07 Dec 2025 16:00:00 +0000 Files and hashes: 1: 381aa0d8-0713-3628-808e-2235213b6efc.roa (hash: 1MbWy6W3LsOGjtdJq2VWEPcxLF0lBHnUnIOE6IFHQuw=) 2: dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl (hash: nNjhY6QLWKE+TpqdKsOSx+b25B5ewBmQVClQjF+Qls4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:6c:17:0c:98:1f:6d:f9:1b:51:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7 Validity Not Before: Dec 5 16:00:08 2025 GMT Not After : Dec 7 16:00:00 2025 GMT Subject: CN=387673a8-45a8-4117-acec-b7d07f1793a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:92:73:b1:4d:56:d6:87:d4:25:be:69:d8:86: eb:4e:e5:9c:f1:08:3f:ef:35:fc:a5:29:da:80:c3: 81:11:51:57:19:16:9b:dd:3f:e9:03:59:62:fe:32: 3f:94:e6:64:24:41:70:ed:62:67:da:61:a7:cd:95: 15:91:4f:41:36:25:d3:7e:1d:a4:4d:2a:ce:b2:98: 15:90:af:62:f0:b2:92:fd:0f:2c:66:9d:d2:af:db: 6f:27:90:9f:a7:a1:bb:81:d2:1f:9e:4c:52:8f:b4: dc:3d:8e:31:a3:d4:65:48:3d:5c:0b:52:72:7b:99: d9:db:14:30:0a:0f:11:73:ed:a3:7a:34:6d:a9:00: b4:84:22:f1:4c:b3:17:31:dc:86:41:a1:e8:8f:71: 65:d6:8b:6a:96:6f:12:20:d7:84:b8:b7:1b:83:a1: 04:b4:d6:f3:81:94:c5:7a:c2:1a:a0:0b:fa:96:8e: 22:08:5f:6d:f4:bd:4e:c9:f8:5c:c3:81:26:1a:b3: 09:a2:98:e0:43:6e:6b:80:ff:2c:f7:25:de:76:fd: 85:0c:e8:13:b0:43:c8:3e:ea:ca:0c:e5:35:eb:bc: 4f:46:40:c7:93:53:3e:8b:2f:9d:24:23:a3:32:b4: 09:cd:1d:27:d5:cd:68:6f:79:ca:4f:8e:b1:94:6b: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:DB:66:CE:27:80:33:4C:00:A8:5F:B1:19:50:E3:AF:4A:44:8A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl X509v3 Authority Key Identifier: keyid:56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:17:98:0b:c2:e1:56:7d:36:b3:aa:c7:d6:45:84:84:69:77: 35:a0:74:55:98:35:2f:49:d7:57:4c:97:37:34:05:cf:d8:e2: 55:02:1a:de:78:e0:ca:d9:be:0c:bc:62:3a:cd:c0:d0:39:06: ba:6c:34:0d:0f:c3:16:e2:b2:86:f4:8f:3d:bc:79:d7:a3:fe: a8:96:15:59:f2:b8:7e:3c:fa:46:10:5b:38:17:69:e4:4a:9f: d2:04:62:d5:23:d3:6f:a6:0e:bd:39:5b:05:90:bb:50:3b:38: cd:74:1d:a5:e0:81:32:59:24:50:2d:a9:12:f9:c3:68:d3:89: 8b:98:cd:4a:49:c8:19:ce:ed:2a:25:bb:0f:95:a4:4c:69:03: b8:cd:5c:39:f6:54:38:25:da:eb:ae:fe:89:68:82:c9:7f:b2: 7d:4f:25:b6:af:9c:8b:b7:c0:b8:12:fd:fb:30:27:86:81:f1: ab:f3:73:30:7e:22:33:ea:9a:cb:1c:21:1a:e7:ea:b6:f5:e9: 02:5a:4b:34:58:d0:4f:a3:bb:e2:ea:cb:0d:82:b4:2b:bd:69: 45:06:ec:c5:d7:ee:c8:6f:b4:11:f4:e1:42:3b:07:01:a2:1e: c6:a6:74:fb:21:b5:40:7e:b5:1c:06:2d:3b:58:1e:2f:0b:5b: 02:4d:8d:a8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWbBcMmB9t+RtRgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGM4M2UyOGEtZDM3Zi00YjdmLWJlNDktM2MyZTM1NTcw N2U3MB4XDTI1MTIwNTE2MDAwOFoXDTI1MTIwNzE2MDAwMFowLzEtMCsGA1UEAxMk Mzg3NjczYTgtNDVhOC00MTE3LWFjZWMtYjdkMDdmMTc5M2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppJzsU1W1ofUJb5p2IbrTuWc8Qg/7zX8pSna gMOBEVFXGRab3T/pA1li/jI/lOZkJEFw7WJn2mGnzZUVkU9BNiXTfh2kTSrOspgV kK9i8LKS/Q8sZp3Sr9tvJ5Cfp6G7gdIfnkxSj7TcPY4xo9RlSD1cC1Jye5nZ2xQw Cg8Rc+2jejRtqQC0hCLxTLMXMdyGQaHoj3Fl1otqlm8SINeEuLcbg6EEtNbzgZTF esIaoAv6lo4iCF9t9L1Oyfhcw4EmGrMJopjgQ25rgP8s9yXedv2FDOgTsEPIPurK DOU167xPRkDHk1M+iy+dJCOjMrQJzR0n1c1ob3nKT46xlGuX6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLTbZs4ngDNMAKhfsRlQ469KRIpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYzgz ZTI4YS1kMzdmLTRiN2YtYmU0OS0zYzJlMzU1NzA3ZTcvZGM4M2UyOGEtZDM3Zi00 YjdmLWJlNDktM2MyZTM1NTcwN2U3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGM4M2UyOGEtZDM3Zi00YjdmLWJl NDktM2MyZTM1NTcwN2U3L2RjODNlMjhhLWQzN2YtNGI3Zi1iZTQ5LTNjMmUzNTU3 MDdlNy5jcmwwHwYDVR0jBBgwFoAUVoA8g5cCkprdAA37bl0MJQG6mBIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYzgzZTI4YS1kMzdmLTRiN2YtYmU0OS0zYzJl MzU1NzA3ZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCdF5gLwuFWfTazqsfWRYSE aXc1oHRVmDUvSddXTJc3NAXP2OJVAhreeODK2b4MvGI6zcDQOQa6bDQND8MW4rKG 9I89vHnXo/6olhVZ8rh+PPpGEFs4F2nkSp/SBGLVI9Nvpg69OVsFkLtQOzjNdB2l 4IEyWSRQLakS+cNo04mLmM1KScgZzu0qJbsPlaRMaQO4zVw59lQ4Jdrrrv6JaILJ f7J9TyW2r5yLt8C4Ev37MCeGgfGr83MwfiIz6prLHCEa5+q29ekCWks0WNBPo7vi 6ssNgrQrvWlFBuzF1+7Ib7QR9OFCOwcBoh7GpnT7IbVAfrUcBi07WB4vC1sCTY2o -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:10 2025 by rpki-client