This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.mft File: 0cbd7d11-5d6b-43e8-95af-8f22df70ae10.mft (raw, json) Hash identifier: oN23lk+DhDp/NpgifyIXeVOaDC2CDwQhx5YkcWUdWcs= Subject key identifier: C1:79:F3:1C:87:1F:6B:10:DE:58:19:1B:DB:EC:82:D5:CD:62:97:40 Authority key identifier: 5F:E8:42:A0:DC:43:05:81:66:46:2E:57:CD:B6:54:7B:19:F5:65:4F Certificate issuer: /CN=0cbd7d11-5d6b-43e8-95af-8f22df70ae10 Certificate serial: 010D0C9F4328584C1689D567324B6A8881190F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.mft Manifest number: 010D0C9F4328584B2946A46A1BA3120B6005B657 Signing time: Fri 05 Dec 2025 17:00:03 +0000 Manifest this update: Fri 05 Dec 2025 17:00:03 +0000 Manifest next update: Sun 07 Dec 2025 17:00:00 +0000 Files and hashes: 1: 0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl (hash: ylnHKKQQ8BS7fv376Y93tNwdyJL0F7WcWUFtechR/cs=) 2: 56eb46a4-ce70-3335-9f2d-bc016978086e.roa (hash: w9nvDYVH+sCEApM0zNhE3a5XFOKecvufnylVNN8zXj8=) 3: 7faa0d30-0e2f-3a0b-80c9-29459d80136d.roa (hash: mRCE/+vWGc8/TeizCk9QmJVDKFZ7Ge5OZFXwc2blSiY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:89:d5:67:32:4b:6a:88:81:19:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cbd7d11-5d6b-43e8-95af-8f22df70ae10 Validity Not Before: Dec 5 17:00:03 2025 GMT Not After : Dec 7 17:00:00 2025 GMT Subject: CN=b880b389-2f11-482d-87b2-5ebbeb32645d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:74:61:db:c9:b5:87:f7:68:b6:7d:30:70: 84:27:b3:2e:2c:08:18:bf:eb:67:41:aa:ed:93:8f: 9c:d5:09:c2:2b:d0:7b:d1:31:26:3a:19:8b:01:a5: ad:ee:6f:ef:6b:da:c4:56:b3:49:d1:c1:1e:2d:37: cc:4e:03:f7:d8:08:fe:44:8b:7e:b6:2f:dc:5d:2d: e2:de:ca:86:ab:f8:92:84:83:7a:90:f1:0e:2b:d6: ca:fc:04:26:e3:8a:be:2e:14:80:f3:51:88:9c:8f: 5f:a5:0a:82:ca:f7:49:c5:c2:ff:70:32:1f:5f:17: 68:5b:ae:13:fe:35:1d:21:b6:3c:24:db:af:e3:80: 76:09:cc:80:f0:ab:b5:13:8b:5d:13:9d:23:3a:85: 29:7a:f5:77:71:f2:f4:95:0a:97:2a:69:0c:c2:71: c7:62:ca:25:02:38:4f:6d:1c:ce:27:4f:e5:25:50: 53:27:82:d7:00:ae:6d:2f:46:4b:2a:d7:2e:f6:e8: c8:90:85:9a:ad:60:6f:a4:86:cf:46:98:0a:b1:54: cd:d8:32:c6:56:26:49:93:12:88:a2:ba:bf:62:51: 09:44:49:40:28:ea:51:f3:9f:55:18:71:12:e7:5f: c5:e6:e4:07:99:e1:17:4a:73:80:e6:57:5a:e6:28: d9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:79:F3:1C:87:1F:6B:10:DE:58:19:1B:DB:EC:82:D5:CD:62:97:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.crl X509v3 Authority Key Identifier: keyid:5F:E8:42:A0:DC:43:05:81:66:46:2E:57:CD:B6:54:7B:19:F5:65:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cbd7d11-5d6b-43e8-95af-8f22df70ae10.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6a:74:26:b0:5e:4d:a4:ff:67:ed:32:86:45:e6:ad:90:25: 37:d7:41:58:29:47:ce:17:b5:ec:c5:2b:24:73:a8:56:67:fa: df:59:c4:19:af:d0:47:0d:96:50:08:27:a8:7d:83:c3:f3:38: f7:28:05:2c:2a:05:ab:d8:4b:2b:62:77:6e:e6:75:bb:26:d2: af:a1:07:36:34:f8:b8:61:8f:17:c0:42:6e:07:e1:eb:f5:61: 2b:00:e3:4a:cc:26:bb:89:c5:fd:bc:ce:f4:37:fc:fa:ac:db: 50:9e:17:39:a2:28:7b:1c:e6:e4:27:b8:a0:69:aa:10:f2:61: c8:f6:6f:2a:b9:c8:58:44:2d:90:16:5f:4c:ce:5f:09:35:b5: 4a:83:29:78:77:fd:16:7a:ce:60:78:47:3c:74:f8:d0:51:bf: 00:5a:ee:cd:60:7e:c9:4a:96:88:46:2b:c5:36:6c:e0:be:5b: 4c:d7:a9:c3:c2:08:e5:4c:68:39:27:1d:36:30:58:72:79:94: af:76:b5:cf:2e:61:d7:3d:5a:c6:73:05:86:df:ce:be:6d:33: 1c:46:6b:c3:9a:df:f2:ed:c4:ed:50:15:07:48:2b:64:fa:52: 6f:4c:08:3f:fd:ce:fe:36:ec:1c:bc:94:5c:d3:47:70:45:94: f8:70:2f:f6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWidVnMktqiIEZD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNiZDdkMTEtNWQ2Yi00M2U4LTk1YWYtOGYyMmRmNzBh ZTEwMB4XDTI1MTIwNTE3MDAwM1oXDTI1MTIwNzE3MDAwMFowLzEtMCsGA1UEAxMk Yjg4MGIzODktMmYxMS00ODJkLTg3YjItNWViYmViMzI2NDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qJ0YdvJtYf3aLZ9MHCEJ7MuLAgYv+tnQart k4+c1QnCK9B70TEmOhmLAaWt7m/va9rEVrNJ0cEeLTfMTgP32Aj+RIt+ti/cXS3i 3sqGq/iShIN6kPEOK9bK/AQm44q+LhSA81GInI9fpQqCyvdJxcL/cDIfXxdoW64T /jUdIbY8JNuv44B2CcyA8Ku1E4tdE50jOoUpevV3cfL0lQqXKmkMwnHHYsolAjhP bRzOJ0/lJVBTJ4LXAK5tL0ZLKtcu9ujIkIWarWBvpIbPRpgKsVTN2DLGViZJkxKI orq/YlEJRElAKOpR859VGHES51/F5uQHmeEXSnOA5lda5ijZfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMF58xyHH2sQ3lgZG9vsgtXNYpdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wY2Jk N2QxMS01ZDZiLTQzZTgtOTVhZi04ZjIyZGY3MGFlMTAvMGNiZDdkMTEtNWQ2Yi00 M2U4LTk1YWYtOGYyMmRmNzBhZTEwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGNiZDdkMTEtNWQ2Yi00M2U4LTk1 YWYtOGYyMmRmNzBhZTEwLzBjYmQ3ZDExLTVkNmItNDNlOC05NWFmLThmMjJkZjcw YWUxMC5jcmwwHwYDVR0jBBgwFoAUX+hCoNxDBYFmRi5XzbZUexn1ZU8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wY2JkN2QxMS01ZDZiLTQzZTgtOTVhZi04ZjIy ZGY3MGFlMTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTanQmsF5NpP9n7TKGReat kCU310FYKUfOF7XsxSskc6hWZ/rfWcQZr9BHDZZQCCeofYPD8zj3KAUsKgWr2Esr Yndu5nW7JtKvoQc2NPi4YY8XwEJuB+Hr9WErAONKzCa7icX9vM70N/z6rNtQnhc5 oih7HObkJ7igaaoQ8mHI9m8quchYRC2QFl9Mzl8JNbVKgyl4d/0Wes5geEc8dPjQ Ub8AWu7NYH7JSpaIRivFNmzgvltM16nDwgjlTGg5Jx02MFhyeZSvdrXPLmHXPVrG cwWG386+bTMcRmvDmt/y7cTtUBUHSCtk+lJvTAg//c7+NuwcvJRc00dwRZT4cC/2 -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:05 2025 by rpki-client