This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft File: 2a85a41a-8114-4e04-abdb-a3a032b37a04.mft (raw, json) Hash identifier: /KeLuoHDFzir2thwv2DMMM3DXMdpSS9fodwT+lj1q+0= Subject key identifier: A3:58:6F:B8:8F:C9:73:9F:2D:21:2E:24:59:E2:1B:53:20:3B:DE:F9 Authority key identifier: EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE Certificate issuer: /CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Certificate serial: 010D0C9F4328584C163087F7866C499366BF4F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft Manifest number: 010D0C9F4328584812E7A32F35C9A24960EDDE19 Signing time: Fri 05 Dec 2025 14:00:09 +0000 Manifest this update: Fri 05 Dec 2025 14:00:09 +0000 Manifest next update: Mon 08 Dec 2025 14:00:00 +0000 Files and hashes: 1: 2a85a41a-8114-4e04-abdb-a3a032b37a04.crl (hash: 341UmuTtIkMflrZj4R9f8KRJziocP1VnYzHLpus2wlI=) 2: d0012998-e5d3-32a9-ad3a-dcd7f461552b.roa (hash: cMvHYjAOSx3lo/HH///HlQ5lbiDUSklR+PBu4L1sHHM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:87:f7:86:6c:49:93:66:bf:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a85a41a-8114-4e04-abdb-a3a032b37a04 Validity Not Before: Dec 5 14:00:09 2025 GMT Not After : Dec 8 14:00:00 2025 GMT Subject: CN=4b75a7d5-d2ed-4437-a3d6-7e1df0e2c71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f1:a5:52:92:8a:f7:a2:dc:3f:96:19:31:ae: f6:b7:4a:af:39:1a:4e:dc:3a:a9:49:90:a3:15:48: be:db:2a:c0:f1:c7:6e:26:8f:b1:68:3f:50:04:3a: 0c:df:5b:c4:ed:ed:50:b6:4a:ce:c9:74:15:6f:f9: c3:15:ec:de:c5:d7:8d:6e:07:55:61:27:73:5c:3f: 23:e0:aa:77:17:35:b6:d7:0e:2b:32:f9:08:5b:ee: 17:e9:3b:09:bb:f9:ed:50:40:f0:10:f4:0f:e6:39: 0e:4f:90:96:1b:df:ba:3b:15:da:48:a0:64:b4:82: d8:dd:17:51:f0:8d:a1:04:80:ea:36:d5:e7:c2:a0: e3:17:8c:17:3d:0f:b3:40:51:1a:cd:9e:64:dc:9e: 40:2d:e8:ad:7b:6a:7b:da:c1:e9:4f:36:35:bb:72: 18:8b:90:d2:8c:1a:74:d7:5e:e0:d1:ba:2e:fb:38: 1f:b1:c7:ed:5a:cb:32:ca:63:c6:d6:9e:93:5d:a6: f1:48:cc:8b:2f:d0:cd:bc:10:c1:bf:25:07:1b:6e: d5:c5:bb:b8:f7:15:8a:80:8e:9d:ac:c7:a8:df:a9: 6d:a8:1a:46:74:1c:20:eb:d8:3d:cb:35:70:4b:16: a9:2a:10:fb:72:c8:be:38:9c:96:6d:cc:e7:c5:d0: 38:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:58:6F:B8:8F:C9:73:9F:2D:21:2E:24:59:E2:1B:53:20:3B:DE:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04/2a85a41a-8114-4e04-abdb-a3a032b37a04.crl X509v3 Authority Key Identifier: keyid:EF:AA:19:DE:FC:FF:A0:6B:BE:27:30:8C:6D:35:6A:E4:83:A9:30:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2a85a41a-8114-4e04-abdb-a3a032b37a04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:3c:54:c9:83:eb:8d:9a:4b:fd:8a:23:9a:17:f3:8e:83:ea: 47:37:51:79:66:dc:72:f3:79:3a:66:64:79:c5:76:db:0a:3a: b2:9f:9a:1d:98:6d:07:ae:02:15:e6:ca:ed:81:65:2c:fa:ca: 97:37:44:00:50:5e:5f:bf:3f:b8:2d:32:ad:b8:4a:df:c0:59: 8d:95:81:8e:49:92:dc:43:d1:0b:95:d1:96:f6:c4:3c:5a:82: 63:de:ee:60:41:cf:02:45:f4:be:62:13:42:29:43:1a:61:31: 4d:91:62:10:ce:57:b0:88:28:4c:96:23:9a:16:6f:e4:2d:27: 5d:15:fd:5a:2c:5b:95:b0:a7:0f:6e:3f:28:0c:85:7e:bb:fe: 51:28:a5:de:d4:7a:fe:b5:a7:b9:5a:7b:e0:32:c5:fd:a5:76: 10:a5:79:ff:ed:60:30:7c:86:0a:93:47:a3:d6:62:70:93:d9: 2b:5f:72:08:f9:2c:ae:f4:3a:6a:c2:65:cb:94:d6:56:91:c5: 56:f6:4f:c7:0f:21:3d:fe:b1:45:0e:9e:ad:fe:ec:a4:d4:44: 1c:fa:32:f4:7f:52:b2:36:24:07:68:e8:d3:ea:2d:de:73:09: 10:f1:81:42:91:a7:b4:df:a9:43:0a:33:b7:f6:54:c2:67:d9: a1:b2:e5:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWMIf3hmxJk2a/T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE4NWE0MWEtODExNC00ZTA0LWFiZGItYTNhMDMyYjM3 YTA0MB4XDTI1MTIwNTE0MDAwOVoXDTI1MTIwODE0MDAwMFowLzEtMCsGA1UEAxMk NGI3NWE3ZDUtZDJlZC00NDM3LWEzZDYtN2UxZGYwZTJjNzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvGlUpKK96LcP5YZMa72t0qvORpO3DqpSZCj FUi+2yrA8cduJo+xaD9QBDoM31vE7e1QtkrOyXQVb/nDFezexdeNbgdVYSdzXD8j 4Kp3FzW21w4rMvkIW+4X6TsJu/ntUEDwEPQP5jkOT5CWG9+6OxXaSKBktILY3RdR 8I2hBIDqNtXnwqDjF4wXPQ+zQFEazZ5k3J5ALeite2p72sHpTzY1u3IYi5DSjBp0 117g0bou+zgfscftWssyymPG1p6TXabxSMyLL9DNvBDBvyUHG27Vxbu49xWKgI6d rMeo36ltqBpGdBwg69g9yzVwSxapKhD7csi+OJyWbcznxdA4aQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKNYb7iPyXOfLSEuJFniG1MgO975MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1 YTQxYS04MTE0LTRlMDQtYWJkYi1hM2EwMzJiMzdhMDQvMmE4NWE0MWEtODExNC00 ZTA0LWFiZGItYTNhMDMyYjM3YTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmE4NWE0MWEtODExNC00ZTA0LWFi ZGItYTNhMDMyYjM3YTA0LzJhODVhNDFhLTgxMTQtNGUwNC1hYmRiLWEzYTAzMmIz N2EwNC5jcmwwHwYDVR0jBBgwFoAU76oZ3vz/oGu+JzCMbTVq5IOpML4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yYTg1YTQxYS04MTE0LTRlMDQtYWJkYi1hM2Ew MzJiMzdhMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAkPFTJg+uNmkv9iiOaF/OO g+pHN1F5Ztxy83k6ZmR5xXbbCjqyn5odmG0HrgIV5srtgWUs+sqXN0QAUF5fvz+4 LTKtuErfwFmNlYGOSZLcQ9ELldGW9sQ8WoJj3u5gQc8CRfS+YhNCKUMaYTFNkWIQ zlewiChMliOaFm/kLSddFf1aLFuVsKcPbj8oDIV+u/5RKKXe1Hr+tae5WnvgMsX9 pXYQpXn/7WAwfIYKk0ej1mJwk9krX3II+Syu9DpqwmXLlNZWkcVW9k/HDyE9/rFF Dp6t/uyk1EQc+jL0f1KyNiQHaOjT6i3ecwkQ8YFCkae036lDCjO39lTCZ9mhsuVG -----END CERTIFICATE-----Generated at Sat Dec 6 11:47:03 2025 by rpki-client