This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft File: 1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft (raw, json) Hash identifier: 8hrS9R9PXAP1ysCsgQETJNFN4jA4e36p98EG28oj9wo= Subject key identifier: A6:A6:E5:7E:28:B0:74:96:F7:1F:79:2C:85:6A:C6:89:A5:30:F2:07 Authority key identifier: 84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F Certificate issuer: /CN=1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2 Certificate serial: 010D0C9F4328584C171EB651553F2E458C558D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft Manifest number: 010D0C9F432858486A5B1BFC3DF2BB3535E20B40 Signing time: Fri 05 Dec 2025 22:00:04 +0000 Manifest this update: Fri 05 Dec 2025 22:00:04 +0000 Manifest next update: Sun 07 Dec 2025 22:00:00 +0000 Files and hashes: 1: 1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.crl (hash: QOHj6tuErhTVgkzxXTzURSsoUDq84f+yAYTJ1POLvpQ=) 2: 7cb41544-a439-3a88-a95f-2f531691a7a6.roa (hash: +i6btlNu76knDc9w22tuhpEyssiURyRGPdQZC48qLao=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:1e:b6:51:55:3f:2e:45:8c:55:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2 Validity Not Before: Dec 5 22:00:04 2025 GMT Not After : Dec 7 22:00:00 2025 GMT Subject: CN=f64ebf25-74ba-4a84-b113-93ea52be99da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d9:b7:c4:7e:b5:07:0d:71:17:f4:2a:d2:06: 9f:51:1e:6d:bc:3f:d3:90:9a:38:98:84:bf:df:54: cf:f0:a8:17:bd:37:34:78:c0:97:85:55:97:6c:4f: 32:ca:fb:f8:56:64:13:e4:7b:b8:53:0c:46:12:1c: 8c:a9:12:05:7f:89:a8:76:3c:97:01:13:8f:2e:09: 04:e1:39:0d:02:00:8c:c4:1f:ce:12:3c:00:62:a4: 2f:33:44:a7:fe:d7:27:c1:6f:93:cc:6d:10:76:fa: d1:16:e3:20:9f:0e:ac:4c:99:b8:8a:c1:02:ae:80: a5:52:83:df:f2:89:7d:78:7f:0b:c0:3c:a0:8a:75: 81:53:89:e4:9f:e4:b2:e7:45:79:64:af:c0:07:46: e0:5e:60:63:0f:b6:9b:26:0e:4e:70:7d:78:f7:47: 16:ce:17:71:aa:8b:86:49:83:85:4b:25:50:62:ba: fc:35:dd:9c:e7:80:5c:90:b7:18:25:64:9a:e4:67: 5d:fb:3f:b1:27:a3:12:66:69:72:96:05:65:a9:32: 89:f7:0b:d8:1f:7d:e4:96:ff:ad:6d:e4:65:ec:f0: f7:38:b0:91:3f:94:f0:54:fd:5d:50:c4:8c:d4:ae: da:d5:0a:d6:69:7b:7d:44:89:8b:5b:8c:0d:1b:1a: 73:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A6:E5:7E:28:B0:74:96:F7:1F:79:2C:85:6A:C6:89:A5:30:F2:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.crl X509v3 Authority Key Identifier: keyid:84:B3:AF:0F:57:DE:57:AC:3A:6E:54:05:6F:1D:26:88:BB:87:29:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1de9d8f0-8b1d-480d-bc9e-770cecd4c8f2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:44:48:29:61:f8:a1:9f:4a:d1:59:33:23:6d:09:1c:27:bd: 84:d6:3a:3e:f8:a8:b0:f4:ac:62:c8:ad:22:0e:15:5a:18:a8: 86:7f:ae:03:9a:25:8a:b4:2b:db:3d:90:9f:42:80:8a:5a:4f: 64:56:d6:22:62:24:37:e8:b0:c0:c1:bc:e1:30:3f:af:cd:79: 37:5b:dd:5d:d5:62:5e:c4:63:38:99:fd:46:9c:34:b3:ff:de: 26:9a:42:1b:d8:7a:a7:8e:b9:3f:43:a4:fc:67:89:df:76:50: a6:52:b4:4c:ca:e2:dd:7e:b8:ff:54:f6:72:ee:f0:cf:a3:04: d9:83:35:61:41:85:b1:62:12:8d:a8:2b:8b:aa:2d:31:91:16: 8e:c0:a4:ff:6d:34:4f:20:bc:19:5f:17:f6:8a:d1:ac:ac:f1: 37:df:d8:b2:11:9c:2f:d9:9b:c5:20:73:20:f3:90:5c:e5:42: e1:7d:ad:31:1c:c8:36:97:26:24:bd:7b:7a:f4:77:73:3b:71: 5e:e7:29:6b:da:b1:da:81:1d:48:a2:eb:66:3a:08:4d:3f:51: 2b:f5:ca:19:78:fe:73:90:f4:0b:4e:76:9f:15:37:97:5c:a4: 25:b2:39:43:dd:47:33:25:53:41:cb:88:40:c1:bc:c3:9d:c3: 0e:2b:e3:93 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXHrZRVT8uRYxVjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRlOWQ4ZjAtOGIxZC00ODBkLWJjOWUtNzcwY2VjZDRj OGYyMB4XDTI1MTIwNTIyMDAwNFoXDTI1MTIwNzIyMDAwMFowLzEtMCsGA1UEAxMk ZjY0ZWJmMjUtNzRiYS00YTg0LWIxMTMtOTNlYTUyYmU5OWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNm3xH61Bw1xF/Qq0gafUR5tvD/TkJo4mIS/ 31TP8KgXvTc0eMCXhVWXbE8yyvv4VmQT5Hu4UwxGEhyMqRIFf4modjyXAROPLgkE 4TkNAgCMxB/OEjwAYqQvM0Sn/tcnwW+TzG0QdvrRFuMgnw6sTJm4isECroClUoPf 8ol9eH8LwDyginWBU4nkn+Sy50V5ZK/AB0bgXmBjD7abJg5OcH1490cWzhdxqouG SYOFSyVQYrr8Nd2c54BckLcYJWSa5Gdd+z+xJ6MSZmlylgVlqTKJ9wvYH33klv+t beRl7PD3OLCRP5TwVP1dUMSM1K7a1QrWaXt9RImLW4wNGxpzJQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKam5X4osHSW9x95LIVqxomlMPIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xZGU5 ZDhmMC04YjFkLTQ4MGQtYmM5ZS03NzBjZWNkNGM4ZjIvMWRlOWQ4ZjAtOGIxZC00 ODBkLWJjOWUtNzcwY2VjZDRjOGYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWRlOWQ4ZjAtOGIxZC00ODBkLWJj OWUtNzcwY2VjZDRjOGYyLzFkZTlkOGYwLThiMWQtNDgwZC1iYzllLTc3MGNlY2Q0 YzhmMi5jcmwwHwYDVR0jBBgwFoAUhLOvD1feV6w6blQFbx0miLuHKZ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xZGU5ZDhmMC04YjFkLTQ4MGQtYmM5ZS03NzBj ZWNkNGM4ZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQREgpYfihn0rRWTMjbQkc J72E1jo++Kiw9KxiyK0iDhVaGKiGf64DmiWKtCvbPZCfQoCKWk9kVtYiYiQ36LDA wbzhMD+vzXk3W91d1WJexGM4mf1GnDSz/94mmkIb2Hqnjrk/Q6T8Z4nfdlCmUrRM yuLdfrj/VPZy7vDPowTZgzVhQYWxYhKNqCuLqi0xkRaOwKT/bTRPILwZXxf2itGs rPE339iyEZwv2ZvFIHMg85Bc5ULhfa0xHMg2lyYkvXt69HdzO3Fe5ylr2rHagR1I outmOghNP1Er9coZeP5zkPQLTnafFTeXXKQlsjlD3UczJVNBy4hAwbzDncMOK+OT -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:13 2025 by rpki-client