This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft File: 3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft (raw, json) Hash identifier: NB8efe85E95dZ/+Hgasluqv3lFCc3mJvAcj89H6ks0k= Subject key identifier: A3:C9:36:29:B1:7D:FC:82:04:0C:FB:11:75:1F:87:D1:5B:E5:49:FD Authority key identifier: AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 Certificate issuer: /CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Certificate serial: 010D0C9F4328584C1DFBA64F44551EDDF2CE3AA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft Manifest number: 010D0C9F4328584B120BDF6A0EF65D42B2E15BE4 Signing time: Mon 08 Dec 2025 09:00:03 +0000 Manifest this update: Mon 08 Dec 2025 09:00:03 +0000 Manifest next update: Thu 11 Dec 2025 09:00:00 +0000 Files and hashes: 1: 3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl (hash: cLzrVsxzA1Lobf4uImfK7+xE/SdMEd7waJQCCR9c10o=) 2: 3e1ce97b-af4f-329d-8f7b-493a58e2d2c6.roa (hash: 5ULofnWQF5/WTaZabulDCzZa75NV6QkHreVgsPvt+hU=) 3: 99f33a63-94ff-3938-870c-e85542261111.roa (hash: twRrJDy9QcJT2ZFY1i+K+tV9TLx5JYiSr/+nthr7Owg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1d:fb:a6:4f:44:55:1e:dd:f2:ce:3a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8 Validity Not Before: Dec 8 09:00:03 2025 GMT Not After : Dec 11 09:00:00 2025 GMT Subject: CN=bc66386e-9a39-4a1e-9c73-e0724775ffd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:22:d6:39:6b:17:20:c9:e0:65:20:1c:84:52: 2b:8e:f4:f4:57:76:57:32:6a:81:39:50:f7:e7:0c: 99:a8:54:d7:16:a1:cb:01:d4:23:cf:bd:72:b6:66: 56:78:dc:d3:42:0c:4a:c2:46:7e:55:36:ad:73:f9: f6:d1:fe:ee:12:9a:ad:e7:03:43:67:b7:83:52:bc: c7:4a:ba:d7:c8:4f:f3:1c:e3:d5:9c:b6:7c:15:77: 69:f4:30:45:a6:ab:47:0b:62:30:df:59:9a:01:48: 45:c9:3b:29:cf:92:3a:5d:06:17:a9:f7:88:00:19: af:6f:9d:67:7b:bf:62:0c:df:04:ac:47:58:4d:ce: 7e:7c:ba:be:ec:7d:c6:53:18:70:53:25:2f:bb:ac: 5a:3e:b7:43:49:17:48:2a:a1:fe:7a:8f:a4:2b:9b: 0f:f6:40:86:15:a4:53:95:2e:b2:1d:4f:73:36:df: 11:81:56:3f:26:66:4a:85:fc:e8:1a:8c:98:88:ed: 08:6c:04:85:68:ed:ec:5c:96:b0:a4:83:41:c5:3f: eb:6d:11:9a:af:f0:50:f1:aa:66:3a:b3:ec:85:aa: b8:1c:d2:f4:4a:3b:7e:e1:f3:8b:63:17:6f:c7:4e: 80:00:d4:82:cd:87:48:5a:85:6c:63:04:f8:f1:95: 6c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C9:36:29:B1:7D:FC:82:04:0C:FB:11:75:1F:87:D1:5B:E5:49:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.crl X509v3 Authority Key Identifier: keyid:AB:0C:FE:A3:8C:C5:9E:1B:00:48:9F:12:D5:2F:57:2E:7A:16:12:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aa05b31-3c1f-40c1-a07d-e6aa7ff122c8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:21:b7:fa:bc:ed:7b:dc:e9:27:ec:a8:d7:53:6d:5c:dd:78: 29:74:69:0b:60:f1:97:be:bd:7b:43:47:f2:1c:f0:75:e5:0c: 29:56:88:b7:d4:29:58:f8:d3:ac:f8:41:03:db:3c:f9:07:9b: c8:6f:17:fe:9a:19:66:b0:e3:52:2d:d7:67:a0:6d:b0:d4:46: 20:17:fd:d7:ea:f3:27:5e:16:16:41:4d:59:d4:f8:f1:ce:74: b7:c5:93:ba:38:80:f4:a2:f2:a4:f4:6e:f7:1e:2e:12:33:47: 19:69:0b:7e:90:a6:f1:52:bb:78:41:e5:0a:d7:b7:c7:d6:16: 51:98:a3:8d:c6:90:bd:cd:b7:48:41:41:e5:3e:c5:ae:41:7c: 81:67:4e:a2:be:c2:37:f2:cd:a3:9b:f5:1d:8c:89:be:80:4c: 30:93:68:60:a7:60:bd:53:0c:84:94:fd:f7:f8:7b:aa:27:59: b9:10:07:b8:c2:48:f4:f1:8f:9c:54:42:8b:f9:ba:16:0a:f8: 4d:84:99:65:57:e2:2f:3a:10:f9:77:0b:ca:b7:45:43:f0:4b: 6c:4c:90:cd:15:8e:28:87:23:b8:ad:42:78:75:cb:0d:f7:be: 04:26:06:d8:0b:ca:14:d2:07:9d:fd:c3:fd:d9:59:fb:06:44: 78:2d:10:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwd+6ZPRFUe3fLOOqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FhMDViMzEtM2MxZi00MGMxLWEwN2QtZTZhYTdmZjEy MmM4MB4XDTI1MTIwODA5MDAwM1oXDTI1MTIxMTA5MDAwMFowLzEtMCsGA1UEAxMk YmM2NjM4NmUtOWEzOS00YTFlLTljNzMtZTA3MjQ3NzVmZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7SLWOWsXIMngZSAchFIrjvT0V3ZXMmqBOVD3 5wyZqFTXFqHLAdQjz71ytmZWeNzTQgxKwkZ+VTatc/n20f7uEpqt5wNDZ7eDUrzH SrrXyE/zHOPVnLZ8FXdp9DBFpqtHC2Iw31maAUhFyTspz5I6XQYXqfeIABmvb51n e79iDN8ErEdYTc5+fLq+7H3GUxhwUyUvu6xaPrdDSRdIKqH+eo+kK5sP9kCGFaRT lS6yHU9zNt8RgVY/JmZKhfzoGoyYiO0IbASFaO3sXJawpINBxT/rbRGar/BQ8apm OrPshaq4HNL0Sjt+4fOLYxdvx06AANSCzYdIWoVsYwT48ZVsKwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKPJNimxffyCBAz7EXUfh9Fb5Un9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEw NWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFhN2ZmMTIyYzgvM2FhMDViMzEtM2MxZi00 MGMxLWEwN2QtZTZhYTdmZjEyMmM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FhMDViMzEtM2MxZi00MGMxLWEw N2QtZTZhYTdmZjEyMmM4LzNhYTA1YjMxLTNjMWYtNDBjMS1hMDdkLWU2YWE3ZmYx MjJjOC5jcmwwHwYDVR0jBBgwFoAUqwz+o4zFnhsASJ8S1S9XLnoWEkkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYWEwNWIzMS0zYzFmLTQwYzEtYTA3ZC1lNmFh N2ZmMTIyYzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmIbf6vO173Okn7KjXU21c 3XgpdGkLYPGXvr17Q0fyHPB15QwpVoi31ClY+NOs+EED2zz5B5vIbxf+mhlmsONS LddnoG2w1EYgF/3X6vMnXhYWQU1Z1PjxznS3xZO6OID0ovKk9G73Hi4SM0cZaQt+ kKbxUrt4QeUK17fH1hZRmKONxpC9zbdIQUHlPsWuQXyBZ06ivsI38s2jm/UdjIm+ gEwwk2hgp2C9UwyElP33+HuqJ1m5EAe4wkj08Y+cVEKL+boWCvhNhJllV+IvOhD5 dwvKt0VD8EtsTJDNFY4ohyO4rUJ4dcsN974EJgbYC8oU0ged/cP92Vn7BkR4LRCD -----END CERTIFICATE-----Generated at Mon Dec 8 11:16:04 2025 by rpki-client