This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft File: a856eb04-e27d-4da2-8c39-a38263828e38.mft (raw, json) Hash identifier: yN6wdxBhAeovMAW5+1DL5ZtEgfWqNtR3TgUp4BdZlqk= Subject key identifier: 1F:02:0F:35:4B:69:D0:2C:BF:42:9B:92:B6:70:DC:9F:D2:4F:45:DD Authority key identifier: 7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 Certificate issuer: /CN=a856eb04-e27d-4da2-8c39-a38263828e38 Certificate serial: 010D0C9F4328584C1700EDBF91AEB385DBC93F48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft Manifest number: 010D0C9F432858482F910EBCA643DC9360F493EF Signing time: Fri 05 Dec 2025 21:00:03 +0000 Manifest this update: Fri 05 Dec 2025 21:00:03 +0000 Manifest next update: Mon 08 Dec 2025 21:00:00 +0000 Files and hashes: 1: 82be32f8-6a7c-3ac5-9559-807dea4ec27d.roa (hash: pgv6+F1SJYkRDt/Fpr+CuUVQMdOY/Fl7w3mPBidyexs=) 2: a856eb04-e27d-4da2-8c39-a38263828e38.crl (hash: TXgSeg4pOMfIDfAbTchATvCUUo4lGuplUI8HAY38FTI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:00:ed:bf:91:ae:b3:85:db:c9:3f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a856eb04-e27d-4da2-8c39-a38263828e38 Validity Not Before: Dec 5 21:00:03 2025 GMT Not After : Dec 8 21:00:00 2025 GMT Subject: CN=837e83c3-b247-479e-a0eb-ee32447f5e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:f9:ef:9e:ad:3e:c5:2e:29:81:ae:81:fc: 12:64:3f:eb:c5:f8:a5:9e:7a:3e:01:68:bd:2c:82: c7:01:e6:d9:ae:88:03:fe:bd:13:05:99:49:65:3a: a4:1f:97:49:3d:77:4a:b3:ca:30:a2:b2:15:e2:79: de:88:3d:3a:3e:81:88:62:b1:04:30:2f:e7:0a:19: c9:a8:56:9a:ae:af:ab:23:86:ef:94:ca:bd:fd:06: 67:f0:7e:fc:bf:92:aa:3c:fe:8d:82:76:ab:22:33: 2d:a2:58:01:e9:a6:cc:14:6d:d7:a8:2c:88:2e:6b: 8d:1e:a9:e4:bb:40:fa:31:ca:42:4d:f0:15:55:7d: 76:84:be:b1:b5:8c:bd:15:e2:64:f6:97:d1:20:1c: aa:d8:93:f1:f1:69:7a:cd:6e:e6:6f:38:38:72:33: de:4e:45:ac:6b:fe:b3:34:41:2e:31:27:a9:6a:13: d6:c8:9b:83:a6:f9:ad:d5:e4:f4:85:1a:81:01:73: 8c:57:97:5f:ad:8e:54:df:58:94:81:86:7e:2b:8a: 66:26:7a:4d:af:7a:27:38:3b:6a:f8:2b:7c:31:66: 16:90:a8:8f:74:71:f7:01:68:fb:88:8e:18:03:3d: e3:47:c6:93:04:fd:57:9f:f4:75:31:ed:ba:ed:49: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:02:0F:35:4B:69:D0:2C:BF:42:9B:92:B6:70:DC:9F:D2:4F:45:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38/a856eb04-e27d-4da2-8c39-a38263828e38.crl X509v3 Authority Key Identifier: keyid:7A:DD:97:21:BB:C0:9A:10:69:15:FB:59:5D:D0:69:D7:A9:9A:79:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a856eb04-e27d-4da2-8c39-a38263828e38.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:1f:81:cb:cf:c3:6f:ed:b2:b0:eb:00:b9:2c:4c:11:01:a7: 00:45:ac:89:ee:28:b4:a1:e4:8d:d2:c2:dd:6e:b6:6b:76:14: 86:60:df:70:b5:1a:e8:95:b9:76:39:aa:ad:8b:f3:db:af:25: 65:98:f6:ad:fa:f2:dc:68:ae:76:5f:53:07:4e:35:32:61:ff: 99:81:8a:0c:50:10:51:63:ea:9d:c8:c0:41:e2:a9:23:1e:ae: a9:f7:3f:75:80:0b:9f:a0:9f:54:6a:42:cd:a7:20:7a:f3:7b: a2:40:66:9d:6f:56:5c:5b:1f:52:53:a1:fb:b1:0f:b8:ab:30: 7e:a8:51:2b:df:34:dd:e7:00:e9:c9:14:d2:24:97:c0:cc:c7: 67:a3:1e:19:9f:7a:b2:72:0c:46:03:5f:f2:f0:8e:be:74:e1: 6c:10:86:30:3c:60:af:4a:b7:e4:95:39:e0:9b:1b:4a:9b:01: d2:5d:f1:5c:34:72:d8:76:63:a5:04:7f:e8:dc:28:c3:e0:06: 09:ca:f0:4a:e8:81:d0:92:fd:23:43:75:98:26:93:3d:5d:ec: 05:ea:1d:8e:b9:d5:61:f3:62:e2:2b:36:fc:75:39:2f:d0:23: 0b:9b:4a:a7:5a:9c:9c:c8:c0:74:c4:d1:68:2b:d6:40:a3:9d: 9d:fd:3b:c5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXAO2/ka6zhdvJP0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg1NmViMDQtZTI3ZC00ZGEyLThjMzktYTM4MjYzODI4 ZTM4MB4XDTI1MTIwNTIxMDAwM1oXDTI1MTIwODIxMDAwMFowLzEtMCsGA1UEAxMk ODM3ZTgzYzMtYjI0Ny00NzllLWEwZWItZWUzMjQ0N2Y1ZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswX5756tPsUuKYGugfwSZD/rxfilnno+AWi9 LILHAebZrogD/r0TBZlJZTqkH5dJPXdKs8oworIV4nneiD06PoGIYrEEMC/nChnJ qFaarq+rI4bvlMq9/QZn8H78v5KqPP6NgnarIjMtolgB6abMFG3XqCyILmuNHqnk u0D6McpCTfAVVX12hL6xtYy9FeJk9pfRIByq2JPx8Wl6zW7mbzg4cjPeTkWsa/6z NEEuMSepahPWyJuDpvmt1eT0hRqBAXOMV5dfrY5U31iUgYZ+K4pmJnpNr3onODtq +Ct8MWYWkKiPdHH3AWj7iI4YAz3jR8aTBP1Xn/R1Me267UmqjQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB8CDzVLadAsv0KbkrZw3J/ST0XdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hODU2 ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgyNjM4MjhlMzgvYTg1NmViMDQtZTI3ZC00 ZGEyLThjMzktYTM4MjYzODI4ZTM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTg1NmViMDQtZTI3ZC00ZGEyLThj MzktYTM4MjYzODI4ZTM4L2E4NTZlYjA0LWUyN2QtNGRhMi04YzM5LWEzODI2Mzgy OGUzOC5jcmwwHwYDVR0jBBgwFoAUet2XIbvAmhBpFftZXdBp16maeaAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hODU2ZWIwNC1lMjdkLTRkYTItOGMzOS1hMzgy NjM4MjhlMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9H4HLz8Nv7bKw6wC5LEwR AacARayJ7ii0oeSN0sLdbrZrdhSGYN9wtRrolbl2Oaqti/PbryVlmPat+vLcaK52 X1MHTjUyYf+ZgYoMUBBRY+qdyMBB4qkjHq6p9z91gAufoJ9UakLNpyB683uiQGad b1ZcWx9SU6H7sQ+4qzB+qFEr3zTd5wDpyRTSJJfAzMdnox4Zn3qycgxGA1/y8I6+ dOFsEIYwPGCvSrfklTngmxtKmwHSXfFcNHLYdmOlBH/o3CjD4AYJyvBK6IHQkv0j Q3WYJpM9XewF6h2OudVh82LiKzb8dTkv0CMLm0qnWpycyMB0xNFoK9ZAo52d/TvF -----END CERTIFICATE-----Generated at Sat Dec 6 10:57:28 2025 by rpki-client