This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft File: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft (raw, json) Hash identifier: EqzHFWQ3hTmcPuX1GT1CWUGewkZKozTl6vji5ywpxko= Subject key identifier: 86:32:01:9C:5C:95:FF:19:58:CC:CB:F9:37:63:56:D4:31:93:12:00 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F4328584C16A7A24701CE73BC1EC4B200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft Manifest number: 010D0C9F432858493B4550F98B85D16859A8BF4D Signing time: Fri 05 Dec 2025 18:00:08 +0000 Manifest this update: Fri 05 Dec 2025 18:00:08 +0000 Manifest next update: Mon 08 Dec 2025 18:00:00 +0000 Files and hashes: 1: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl (hash: PKNhPz61PwhA+Of0kIgVAutptO08AtWy9k6ObxFDP7s=) 2: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (hash: ZesMiu02dPAu6hTno0oIHi+KVGqLmYbzYiwUaNMtwBY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:a7:a2:47:01:ce:73:bc:1e:c4:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Dec 5 18:00:08 2025 GMT Not After : Dec 8 18:00:00 2025 GMT Subject: CN=7dbc7ff3-b252-438f-a8a0-62d71a119444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f6:c1:52:8b:b7:a1:9f:ac:57:29:8c:ff:e5: cd:e7:3a:8a:7e:ca:0f:bd:8d:ec:5b:38:e7:50:dc: c7:44:59:96:ae:15:85:d6:1e:a2:8e:c9:a0:8a:4e: b7:5f:69:3c:b4:6f:8c:f3:96:65:d5:0f:41:da:73: 71:d1:38:56:29:0c:32:e1:c2:06:66:e2:f2:39:46: 4c:ea:81:d3:ba:0c:4d:ff:6a:e8:eb:43:1b:6b:61: 9c:7a:53:02:35:69:aa:38:a1:7b:1b:a7:3c:4e:65: 9c:eb:94:b6:4e:a1:4e:f9:69:14:7c:92:d6:08:d1: b4:0f:f0:65:0e:4c:c4:45:f2:78:5a:58:2d:f4:5c: fb:5a:89:5b:27:1f:3f:6e:7b:44:04:4b:d2:db:66: 24:aa:a0:62:09:54:ea:ab:ff:d5:4f:af:64:be:8a: c8:39:f8:c5:bf:b5:f4:42:f5:ce:a6:5d:53:35:c3: b8:19:ab:33:dd:6e:14:74:1f:37:22:8e:2f:d7:10: ad:d9:18:ba:90:cc:4b:f1:49:51:da:40:47:6d:0e: 35:a9:d9:4d:72:4f:ed:a6:3a:15:be:42:65:d1:d7: d6:a9:1c:1e:f8:f5:09:b8:15:75:53:98:06:71:04: 0e:d7:83:1b:4d:2d:9b:43:f0:37:08:e8:91:51:da: 12:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:32:01:9C:5C:95:FF:19:58:CC:CB:F9:37:63:56:D4:31:93:12:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:61:85:74:9a:ac:d6:71:50:7a:5d:56:9d:8e:ee:e8:0a:5a: e3:41:d1:b8:3e:cf:17:82:6c:c3:76:83:e9:52:13:75:86:12: 04:20:83:dd:a5:a6:82:e8:4d:4f:2f:3b:dd:c8:4b:fc:77:4e: da:11:ab:af:e5:09:47:18:9e:ea:86:97:71:77:f4:3b:8b:a3: a2:91:6a:40:48:fe:bd:05:60:0a:b1:fa:6c:6a:f2:12:bc:c5: b4:90:b3:f9:d9:1c:d9:dc:da:9d:51:5b:08:7d:6f:83:7c:96: cd:28:b3:79:e5:4d:dc:c9:54:dd:65:4b:54:56:4d:6c:e8:06: 4d:8a:91:76:0b:e2:77:0b:8e:bc:b0:0d:61:b7:1e:8e:31:f0: 35:fb:6f:08:eb:05:c1:d1:96:71:9b:cc:43:ba:7c:74:37:d0: d5:63:c6:74:72:c8:4f:bf:59:75:84:cc:6e:e8:2d:0a:2a:d6: 9e:2b:a9:a7:5e:54:9e:64:57:4f:82:11:53:93:fd:16:b7:b7: fc:2c:7e:60:3c:2d:9b:b6:50:86:f3:9b:da:0b:49:58:66:fe: ba:e3:42:51:e7:12:35:8f:1a:1e:dc:32:0b:0c:4f:17:c3:a4: 16:0c:d9:48:eb:c1:7b:72:e7:c6:b9:b9:bd:18:d2:ab:9a:53: 78:de:68:7d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWp6JHAc5zvB7EsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI1MTIwNTE4MDAwOFoXDTI1MTIwODE4MDAwMFowLzEtMCsGA1UEAxMk N2RiYzdmZjMtYjI1Mi00MzhmLWE4YTAtNjJkNzFhMTE5NDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvbBUou3oZ+sVymM/+XN5zqKfsoPvY3sWzjn UNzHRFmWrhWF1h6ijsmgik63X2k8tG+M85Zl1Q9B2nNx0ThWKQwy4cIGZuLyOUZM 6oHTugxN/2ro60Mba2GcelMCNWmqOKF7G6c8TmWc65S2TqFO+WkUfJLWCNG0D/Bl DkzERfJ4Wlgt9Fz7WolbJx8/bntEBEvS22YkqqBiCVTqq//VT69kvorIOfjFv7X0 QvXOpl1TNcO4Gasz3W4UdB83Io4v1xCt2Ri6kMxL8UlR2kBHbQ41qdlNck/tpjoV vkJl0dfWqRwe+PUJuBV1U5gGcQQO14MbTS2bQ/A3COiRUdoS2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIYyAZxclf8ZWMzL+TdjVtQxkxIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvMzI3OGU3MDgtZDEyOC00 NzkwLWE4ZTMtMWUwZjRhMWE2ZjRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9YYV0mqzWcVB6XVadju7o ClrjQdG4Ps8XgmzDdoPpUhN1hhIEIIPdpaaC6E1PLzvdyEv8d07aEauv5QlHGJ7q hpdxd/Q7i6OikWpASP69BWAKsfpsavISvMW0kLP52RzZ3NqdUVsIfW+DfJbNKLN5 5U3cyVTdZUtUVk1s6AZNipF2C+J3C468sA1htx6OMfA1+28I6wXB0ZZxm8xDunx0 N9DVY8Z0cshPv1l1hMxu6C0KKtaeK6mnXlSeZFdPghFTk/0Wt7f8LH5gPC2btlCG 85vaC0lYZv6640JR5xI1jxoe3DILDE8Xw6QWDNlI68F7cufGubm9GNKrmlN43mh9 -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:59 2025 by rpki-client