This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: Bj1K1kVC52dFHh0n93A7AaJeAIHuHmHhFgj5y7koYPY= Subject key identifier: 2F:DC:73:5D:35:AD:30:DF:EA:ED:0D:D2:80:36:19:63:49:F9:07:EB Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584C16A7A463793E7E9C5B1CB700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401F939 Signing time: Fri 05 Dec 2025 18:00:08 +0000 Manifest this update: Fri 05 Dec 2025 18:00:08 +0000 Manifest next update: Mon 08 Dec 2025 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: qh+b9t6P9j5hS32a5JJCadunydckyzGM4vAkvrbeYS8=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: NNMMU+pOI8OgyPDKaXXTlh/Mlf9BiwfXOYf3RzBh0VE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:a7:a4:63:79:3e:7e:9c:5b:1c:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Dec 5 18:00:08 2025 GMT Not After : Dec 8 18:00:00 2025 GMT Subject: CN=5c9472a8-6c1a-4c25-b3dd-aefb6d14a082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:66:90:c0:c9:8e:0a:a7:ad:04:8f:ee:32:a1: 9b:f4:9b:c8:45:9b:2f:1f:ef:4e:08:e5:6b:10:61: 88:30:01:2e:d1:ad:ca:1b:7b:c0:96:fb:18:f6:48: 68:8a:0f:d9:b5:92:04:51:1b:88:70:64:ed:fa:20: a0:e9:95:d0:a5:35:b1:23:ed:80:02:32:bb:05:a1: 7b:db:6e:e0:05:2d:99:7a:9d:7e:b1:2e:fc:7e:a4: c4:39:7d:53:0b:25:30:d0:4f:a3:b7:5f:b9:2e:eb: 4e:ee:0d:d0:ff:46:91:3e:02:e1:ed:7e:8f:06:33: fa:05:35:21:54:9d:a1:de:f8:ef:6c:45:bb:bd:51: ff:1b:03:a8:e2:81:97:cc:2f:70:46:72:34:aa:35: 6f:10:a7:0c:fd:97:dc:fc:e6:46:b9:d1:c6:1e:5a: 8e:de:f2:18:65:be:e2:34:ee:35:5a:23:e1:50:47: d8:8e:b4:e0:b0:93:f0:1b:9f:1a:cb:b8:b3:41:1a: 04:74:10:69:5b:a7:34:fd:c8:19:0f:12:66:f9:f6: c2:19:b1:3c:1f:94:41:d3:8e:fd:8c:46:e8:99:1b: 3f:fb:7b:fa:48:5b:fa:23:6a:e3:a9:b1:25:51:51: 6a:a9:16:93:97:0b:b7:7c:d6:85:b5:5e:1e:5d:13: e4:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DC:73:5D:35:AD:30:DF:EA:ED:0D:D2:80:36:19:63:49:F9:07:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bf:4f:e3:07:e4:ab:9a:3d:cc:12:28:93:29:54:f9:97:90: 72:fc:85:da:d9:0d:67:fa:e5:b3:7c:6f:3b:60:c6:04:27:56: 01:6d:25:83:fe:fc:3a:17:a4:56:f6:41:f5:45:39:ce:cc:37: eb:5f:50:be:c5:16:a8:e9:3b:a8:4d:d4:e6:0f:73:53:f4:ab: 19:9c:c5:e8:46:38:34:22:e7:49:83:ba:e5:53:d4:05:3a:a8: d6:e6:ab:af:f7:25:b2:2a:45:ab:e5:e3:d9:5d:03:e1:e8:e4: 04:79:33:c7:ba:65:a1:e0:e0:48:c2:79:f3:4b:64:58:27:f5: f7:1d:0d:38:0c:7a:2d:85:7e:2f:3d:24:57:78:b0:6d:21:e0: 93:2e:60:9f:91:5c:b0:b5:0b:9d:ed:63:4b:0f:32:6e:96:9d: 49:ab:5d:6e:5a:7f:98:a2:6c:30:7e:9f:cb:3e:d5:14:0e:08: 97:d8:d6:ed:9a:83:4c:c1:69:04:f5:77:20:5f:b7:0b:6f:1e: ee:4c:a9:81:04:2b:e9:11:18:33:14:13:0a:9a:1e:ed:4c:68: ca:22:3c:cf:15:6e:58:fe:66:53:d3:e9:f6:6a:0d:72:93:31: 3d:19:3e:1a:9a:71:9f:2d:c6:f8:31:f6:9c:58:c1:29:d2:ab: 62:61:05:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWp6RjeT5+nFsctwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI1MTIwNTE4MDAwOFoXDTI1MTIwODE4MDAwMFowLzEtMCsGA1UEAxMk NWM5NDcyYTgtNmMxYS00YzI1LWIzZGQtYWVmYjZkMTRhMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WaQwMmOCqetBI/uMqGb9JvIRZsvH+9OCOVr EGGIMAEu0a3KG3vAlvsY9khoig/ZtZIEURuIcGTt+iCg6ZXQpTWxI+2AAjK7BaF7 227gBS2Zep1+sS78fqTEOX1TCyUw0E+jt1+5LutO7g3Q/0aRPgLh7X6PBjP6BTUh VJ2h3vjvbEW7vVH/GwOo4oGXzC9wRnI0qjVvEKcM/Zfc/OZGudHGHlqO3vIYZb7i NO41WiPhUEfYjrTgsJPwG58ay7izQRoEdBBpW6c0/cgZDxJm+fbCGbE8H5RB0479 jEbomRs/+3v6SFv6I2rjqbElUVFqqRaTlwu3fNaFtV4eXRPkmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC/cc101rTDf6u0N0oA2GWNJ+QfrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAlv0/jB+Srmj3MEiiTKVT5 l5By/IXa2Q1n+uWzfG87YMYEJ1YBbSWD/vw6F6RW9kH1RTnOzDfrX1C+xRao6Tuo TdTmD3NT9KsZnMXoRjg0IudJg7rlU9QFOqjW5quv9yWyKkWr5ePZXQPh6OQEeTPH umWh4OBIwnnzS2RYJ/X3HQ04DHothX4vPSRXeLBtIeCTLmCfkVywtQud7WNLDzJu lp1Jq11uWn+Yomwwfp/LPtUUDgiX2NbtmoNMwWkE9XcgX7cLbx7uTKmBBCvpERgz FBMKmh7tTGjKIjzPFW5Y/mZT0+n2ag1ykzE9GT4amnGfLcb4MfacWMEp0qtiYQWS -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:55 2025 by rpki-client