This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft File: 71fff491-7667-44b2-bd66-cb5aeb51a394.mft (raw, json) Hash identifier: 31iAxRT/VGMR2NC8kJim2AL9SPHCyof3fP1bC98pB1A= Subject key identifier: 15:5E:A7:C0:21:95:D4:21:A5:38:F1:29:E2:96:12:28:3C:B5:30:9E Authority key identifier: 05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 Certificate issuer: /CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Certificate serial: 010D0C9F4328584C17780C4BD31AF717209F8F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft Manifest number: 010D0C9F432858498FD2459324F7C67623684C6D Signing time: Sat 06 Dec 2025 01:00:04 +0000 Manifest this update: Sat 06 Dec 2025 01:00:04 +0000 Manifest next update: Tue 09 Dec 2025 01:00:00 +0000 Files and hashes: 1: 048aa03a-d6ce-37bd-8455-177c3fe11c3b.roa (hash: KhTlQWYwDSbMvGpPH/wFOOs4Zzk9/TBvXLOPL3v5Skw=) 2: 71fff491-7667-44b2-bd66-cb5aeb51a394.crl (hash: ZJcsUBWG1sSGo21YV0BdWORJmVpVmG/EVpzPME1bE8Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:78:0c:4b:d3:1a:f7:17:20:9f:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71fff491-7667-44b2-bd66-cb5aeb51a394 Validity Not Before: Dec 6 01:00:04 2025 GMT Not After : Dec 9 01:00:00 2025 GMT Subject: CN=731d7180-3148-4a6d-8779-9f3f00bd1d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e3:67:ff:d1:77:36:2f:c4:07:99:b0:d2:82: de:7f:bb:d4:f0:f9:28:01:90:68:fa:c2:5f:f2:c9: 73:64:87:2f:35:fc:78:90:68:4b:13:a5:e7:35:fb: 7c:c2:57:6c:20:ca:96:00:e3:e2:18:81:0c:ad:68: 5f:d3:3e:44:ea:3b:f6:dc:46:e0:6d:27:21:4e:96: d1:4a:6c:8a:af:1f:61:82:cc:92:f7:a0:b9:26:ba: a4:0e:89:0a:70:63:6e:c6:af:43:72:b2:84:6b:6b: ec:7a:19:26:74:53:b6:95:ad:d3:53:46:8f:42:04: 04:c4:b3:42:b5:1b:65:fb:ba:89:6e:ac:24:6c:7b: f5:f0:3f:4f:82:4d:36:9b:5b:21:3d:d4:d7:82:b1: 30:6d:09:e1:47:ba:39:d9:19:4b:9e:76:35:88:f4: c6:c9:a2:e9:a6:66:92:27:d9:c7:49:2e:79:6d:27: b9:c7:41:18:aa:f6:59:e2:74:ab:07:8d:40:54:6c: 92:7a:dc:33:40:9f:20:01:57:ba:2b:40:24:b7:50: fd:3b:90:60:04:7c:3d:02:54:5c:3c:fa:3d:04:bb: 5b:56:09:41:02:fb:d3:b9:b1:b1:03:97:79:e3:a2: d4:17:d3:72:f0:d6:9e:e9:e5:98:41:6c:82:cb:18: 2a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5E:A7:C0:21:95:D4:21:A5:38:F1:29:E2:96:12:28:3C:B5:30:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394/71fff491-7667-44b2-bd66-cb5aeb51a394.crl X509v3 Authority Key Identifier: keyid:05:EC:1F:A7:91:0F:A2:4E:58:50:9F:7E:D2:74:35:E4:05:35:B5:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/71fff491-7667-44b2-bd66-cb5aeb51a394.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9d:7d:6f:12:29:0b:6f:50:03:a8:6d:80:65:f3:cf:ef:38: 70:0d:c7:28:78:a9:8f:bd:1c:ea:59:0f:1a:e8:d0:0a:3e:a8: 0d:32:76:22:61:ff:ac:2a:fa:e2:7c:96:23:ac:d0:33:d6:fe: c2:7a:1a:fa:43:6f:96:94:a4:c6:75:17:7c:8f:30:b1:34:fd: 2b:64:8f:f3:8c:50:eb:78:bb:3d:5b:19:9e:7f:a0:65:83:dd: 60:81:db:6e:19:09:2c:b5:b6:80:c9:00:51:8f:2b:89:b2:c5: d2:a4:0a:7e:f7:de:ae:5a:06:4c:91:6b:16:c1:e3:f8:83:34: 01:bb:f9:9d:1f:64:f8:5a:b7:bc:eb:6e:88:8c:c3:93:ef:ad: 79:b6:6f:73:37:cd:90:62:7d:ee:b8:3f:6c:28:24:83:e5:ae: 00:65:bc:45:e3:23:de:46:8e:0b:2f:cf:81:dc:a8:ed:ec:a6: ea:7e:13:1e:1c:49:32:1d:40:21:27:55:16:0b:c6:c6:a6:f8: d7:39:1a:14:2d:87:b1:b0:23:66:e7:ae:b1:6a:90:f7:00:c0: 04:dc:21:fe:8d:4f:d3:7f:10:df:5b:cd:76:10:92:30:96:04: e7:51:8b:cd:89:39:87:e8:20:49:2a:c6:4c:53:0e:28:ca:34: 7e:56:e8:ff -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXeAxL0xr3FyCfj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzFmZmY0OTEtNzY2Ny00NGIyLWJkNjYtY2I1YWViNTFh Mzk0MB4XDTI1MTIwNjAxMDAwNFoXDTI1MTIwOTAxMDAwMFowLzEtMCsGA1UEAxMk NzMxZDcxODAtMzE0OC00YTZkLTg3NzktOWYzZjAwYmQxZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eNn/9F3Ni/EB5mw0oLef7vU8PkoAZBo+sJf 8slzZIcvNfx4kGhLE6XnNft8wldsIMqWAOPiGIEMrWhf0z5E6jv23EbgbSchTpbR SmyKrx9hgsyS96C5JrqkDokKcGNuxq9DcrKEa2vsehkmdFO2la3TU0aPQgQExLNC tRtl+7qJbqwkbHv18D9Pgk02m1shPdTXgrEwbQnhR7o52RlLnnY1iPTGyaLppmaS J9nHSS55bSe5x0EYqvZZ4nSrB41AVGySetwzQJ8gAVe6K0Akt1D9O5BgBHw9AlRc PPo9BLtbVglBAvvTubGxA5d546LUF9Ny8Nae6eWYQWyCyxgqOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBVep8AhldQhpTjxKeKWEig8tTCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83MWZm ZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVhZWI1MWEzOTQvNzFmZmY0OTEtNzY2Ny00 NGIyLWJkNjYtY2I1YWViNTFhMzk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNzFmZmY0OTEtNzY2Ny00NGIyLWJk NjYtY2I1YWViNTFhMzk0LzcxZmZmNDkxLTc2NjctNDRiMi1iZDY2LWNiNWFlYjUx YTM5NC5jcmwwHwYDVR0jBBgwFoAUBewfp5EPok5YUJ9+0nQ15AU1tfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83MWZmZjQ5MS03NjY3LTQ0YjItYmQ2Ni1jYjVh ZWI1MWEzOTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgnX1vEikLb1ADqG2AZfPP 7zhwDccoeKmPvRzqWQ8a6NAKPqgNMnYiYf+sKvrifJYjrNAz1v7Cehr6Q2+WlKTG dRd8jzCxNP0rZI/zjFDreLs9Wxmef6Blg91ggdtuGQkstbaAyQBRjyuJssXSpAp+ 996uWgZMkWsWweP4gzQBu/mdH2T4Wre8626IjMOT7615tm9zN82QYn3uuD9sKCSD 5a4AZbxF4yPeRo4LL8+B3Kjt7KbqfhMeHEkyHUAhJ1UWC8bGpvjXORoULYexsCNm 566xapD3AMAE3CH+jU/TfxDfW812EJIwlgTnUYvNiTmH6CBJKsZMUw4oyjR+Vuj/ -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:27 2025 by rpki-client