This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft File: 2ce98e57-da60-49a3-b167-e6998e0d2945.mft (raw, json) Hash identifier: UUUNX7grDrhi611a+rnZ5PVSBO+bNxFZz7KNQ+BE51I= Subject key identifier: 0F:BD:35:07:FB:46:CE:2C:50:FD:10:E6:34:F4:FE:EE:B7:2D:AB:B3 Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584C19E964AFCE3BB24897E3EA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft Manifest number: 010D0C9F4328584B647ED64DB623142887471503 Signing time: Sat 06 Dec 2025 22:00:03 +0000 Manifest this update: Sat 06 Dec 2025 22:00:03 +0000 Manifest next update: Mon 08 Dec 2025 22:00:00 +0000 Files and hashes: 1: 256d24fc-eda3-3794-a5c2-a337859acf22.roa (hash: fG0oRf1uXZKRgP1OEVJlGGGM507Vnru4Sj8N9fpxA9w=) 2: 2ce98e57-da60-49a3-b167-e6998e0d2945.crl (hash: MbPT/kfo/J+9wTHDOunMuViVB7mPl52NLU20Mo2fEns=) 3: a18bc8e5-3031-3334-b765-3392f5d4fe56.roa (hash: w38RZlnzkBGS5upDczKN0Nv967tcKJ/OKOgZP3jrxpE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:19:e9:64:af:ce:3b:b2:48:97:e3:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Dec 6 22:00:03 2025 GMT Not After : Dec 8 22:00:00 2025 GMT Subject: CN=3c055647-d18e-4e0c-b58a-636e6ea2b319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:17:a2:d7:b3:0c:64:dd:52:c8:fe:99:5f: ce:fe:bd:53:9d:9a:a7:85:27:15:15:95:b3:fa:c5: 3e:b6:b9:2b:85:96:23:c6:b8:a5:16:13:53:b9:54: e9:4a:3c:3e:e6:e9:28:88:bf:f7:58:db:81:b1:1d: e3:bc:21:1b:bc:85:ad:bd:b4:2e:77:0a:ad:3e:dc: c5:72:1a:57:56:8c:d0:48:1e:06:c8:bf:6e:12:6f: a9:41:ab:55:a0:0c:e0:a8:11:fa:21:39:dc:a6:83: f4:cf:32:5d:33:d7:56:2e:27:32:5f:6a:1a:49:22: 0d:02:7b:25:3e:e3:9f:96:0a:36:ce:5e:e7:37:da: 9f:92:d8:a0:2f:f3:3f:8c:eb:f3:4a:af:39:48:c4: ba:89:1a:10:30:df:4c:0c:4f:70:74:11:35:62:4c: f4:10:75:f8:e3:fe:38:a8:e2:9e:52:d6:eb:10:2a: 9d:f2:05:d3:09:2c:cc:aa:2d:a6:86:59:e6:c6:97: 05:04:6b:71:ea:01:b9:81:8a:bc:0d:62:94:fa:c7: 3b:34:cb:33:fb:ce:98:d2:bf:7a:03:53:1f:04:50: e0:45:2e:a5:a1:69:0a:a2:d7:78:ba:55:47:3e:ff: f1:64:70:7d:84:f5:23:0f:eb:96:c3:20:03:a6:1e: 65:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BD:35:07:FB:46:CE:2C:50:FD:10:E6:34:F4:FE:EE:B7:2D:AB:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:63:5f:ba:28:c5:eb:fd:f9:91:9f:5f:3a:7e:64:40:d1:79: df:9f:a5:4f:c9:df:ed:68:88:c3:ea:7b:b1:a1:04:fb:9b:2f: 6d:56:13:81:f8:fd:e3:46:74:eb:a0:bd:66:75:d4:84:0b:9b: 03:38:29:3a:9b:4f:ca:6d:d9:ae:1f:fa:22:19:d7:28:ad:e8: c0:e0:5f:3d:e0:0d:dc:e4:8e:d6:2b:31:1c:c7:10:70:59:4c: 16:8e:ef:95:2d:e5:37:0d:ba:b8:9a:b4:f2:51:fa:1d:0d:a2: 49:91:5a:8e:92:76:b3:c0:af:a0:83:8b:fc:44:38:c5:bf:b0: 2f:81:ac:bb:db:8f:3a:12:11:21:bf:80:02:d4:85:d5:8f:ce: ec:b6:4f:72:65:85:e9:ce:0c:1f:b9:69:4b:25:3f:d0:d0:ff: 4f:c9:8c:a3:90:25:2d:d6:95:84:9a:72:83:36:9a:73:1a:8b: 8d:d1:6b:c8:18:4b:c4:e2:7b:5a:5a:9d:81:29:2f:87:79:f5: 93:e6:34:be:b0:2e:9e:83:d0:65:f3:23:17:3e:a1:0e:a3:da: 5e:e4:0e:f5:13:84:17:c3:2f:32:53:7e:f5:4a:18:3e:24:71: 23:43:b4:74:df:da:b1:ea:a6:27:ab:d1:5e:d0:53:29:c0:e7: 50:d5:21:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwZ6WSvzjuySJfj6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI1MTIwNjIyMDAwM1oXDTI1MTIwODIyMDAwMFowLzEtMCsGA1UEAxMk M2MwNTU2NDctZDE4ZS00ZTBjLWI1OGEtNjM2ZTZlYTJiMzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkAXotezDGTdUsj+mV/O/r1TnZqnhScVFZWz +sU+trkrhZYjxrilFhNTuVTpSjw+5ukoiL/3WNuBsR3jvCEbvIWtvbQudwqtPtzF chpXVozQSB4GyL9uEm+pQatVoAzgqBH6ITncpoP0zzJdM9dWLicyX2oaSSINAnsl PuOflgo2zl7nN9qfktigL/M/jOvzSq85SMS6iRoQMN9MDE9wdBE1Ykz0EHX44/44 qOKeUtbrECqd8gXTCSzMqi2mhlnmxpcFBGtx6gG5gYq8DWKU+sc7NMsz+86Y0r96 A1MfBFDgRS6loWkKotd4ulVHPv/xZHB9hPUjD+uWwyADph5lZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA+9NQf7Rs4sUP0Q5jT0/u63LauzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvMmNlOThlNTctZGE2MC00 OWEzLWIxNjctZTY5OThlMGQyOTQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDPY1+6KMXr/fmRn186fmRA 0Xnfn6VPyd/taIjD6nuxoQT7my9tVhOB+P3jRnTroL1mddSEC5sDOCk6m0/Kbdmu H/oiGdcorejA4F894A3c5I7WKzEcxxBwWUwWju+VLeU3Dbq4mrTyUfodDaJJkVqO knazwK+gg4v8RDjFv7Avgay72486EhEhv4AC1IXVj87stk9yZYXpzgwfuWlLJT/Q 0P9PyYyjkCUt1pWEmnKDNppzGouN0WvIGEvE4ntaWp2BKS+HefWT5jS+sC6eg9Bl 8yMXPqEOo9pe5A71E4QXwy8yU371Shg+JHEjQ7R039qx6qYnq9Fe0FMpwOdQ1SH7 -----END CERTIFICATE-----Generated at Sun Dec 7 02:35:56 2025 by rpki-client