This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft File: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft (raw, json) Hash identifier: G3WqAapULykvw88bV+B0GseVC6cP6szgR7Vrd1/vCMQ= Subject key identifier: FB:EA:61:45:71:95:24:89:85:A9:6D:4A:52:CD:89:60:35:68:02:3F Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1 Certificate issuer: /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1 Certificate serial: 3FE273A8E4BB73E06BFF147E248BD89015D1BE14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft Manifest number: 0701 Signing time: Fri 19 Dec 2025 21:53:12 +0000 Manifest this update: Fri 19 Dec 2025 21:48:12 +0000 Manifest next update: Sun 21 Dec 2025 01:15:12 +0000 Files and hashes: 1: 3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (hash: iSVzEtaduQywCQdcSyMNmFI0Id4YYz6qHsCZbxVt1kQ=) 2: 5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl (hash: cM0boarEQllpPVVzsyiQCeIiWlmScNAvl040u0FpfAk=) 3: 3139322e36342e3230342e302f32342d3234203d3e203336323336.roa (hash: cjPRK9qLuIrk2Qcz5MIry+JIAYYQot59N/+6dxX+1TU=) 4: 3139382e3137392e3232352e302f32342d3234203d3e203336323336.roa (hash: Ga42+36DBXvhFJL9fNOGskBUD02TlB8rrrReqjfGPPc=) 5: 3230352e3134372e3130352e302f32342d3234203d3e203336323336.roa (hash: M+kaKR8R1hpLE6n7CVRBmAYxGjsp1XCYpKk2aIr5Q3Q=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 01:15:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e2:73:a8:e4:bb:73:e0:6b:ff:14:7e:24:8b:d8:90:15:d1:be:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1 Validity Not Before: Dec 19 21:48:12 2025 GMT Not After : Dec 21 01:15:12 2025 GMT Subject: CN=FBEA61457195248985A96D4A52CD89603568023F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5d:1b:88:ee:c8:01:0e:7d:00:71:b4:a0:79: 4f:10:16:05:af:0c:c4:1f:62:87:e9:58:83:0e:6a: 77:e1:20:c1:39:6b:c4:db:3b:fe:db:7f:61:3d:e7: b7:c4:6f:69:68:a5:0e:4f:d3:28:f5:26:c9:ad:9c: 50:e2:96:4c:4b:1c:1b:b0:87:1d:f4:d7:5b:e9:07: 0f:87:d2:b5:df:c9:be:4c:62:4d:26:2e:c0:40:e0: 37:cf:8c:50:90:fb:d5:2a:5a:2f:97:58:c4:ad:7c: 58:54:2c:ac:7b:9d:2e:bf:85:72:a2:a4:13:70:6c: 25:d7:80:e3:10:56:e9:64:c3:d3:a7:c4:fd:97:56: ec:a7:fd:e1:e3:4b:7d:91:65:87:fc:03:22:62:f5: 5b:91:6c:1e:20:cf:8a:47:6c:27:a5:b5:08:f8:c4: 50:f1:3e:cf:87:d9:f4:fe:d9:63:a9:93:25:90:60: 67:d0:a2:0b:aa:95:fb:3d:21:63:cd:71:87:40:b2: ca:c4:3a:10:b0:46:41:a5:f0:95:dd:50:99:fe:8b: 45:55:3b:35:60:11:ef:3e:92:52:55:06:f1:c2:be: 36:bd:f2:c1:43:5e:53:de:67:af:8c:7d:8e:a2:96: 98:68:84:99:1f:92:60:b1:f4:ca:36:25:f9:d7:75: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:EA:61:45:71:95:24:89:85:A9:6D:4A:52:CD:89:60:35:68:02:3F X509v3 Authority Key Identifier: keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:39:da:cd:e5:f7:df:eb:5a:a0:be:7f:f2:2c:ad:93:65:80: 36:c6:75:a2:9f:f7:d7:e4:73:db:51:02:6f:43:7e:fa:47:2d: 6f:b9:09:da:17:68:73:77:58:af:8d:96:7d:4b:83:8c:37:7f: 3c:3e:a5:23:61:0b:f2:8c:2a:71:57:80:f7:77:5e:1e:6e:a6: f0:6c:3d:50:b9:e5:9d:8a:43:82:29:4a:f9:42:9f:00:44:04: f9:37:41:d8:7e:a6:65:d5:2a:bd:79:a6:a5:f1:ab:2a:cd:f0: f9:0b:90:be:77:52:b6:ee:be:76:d8:ff:d3:56:a3:24:9b:8c: 0a:94:d7:25:c7:9a:5e:b5:39:9d:46:1d:81:63:33:ba:bf:e2: 6a:8a:a9:e3:54:7c:7b:a8:ed:e8:67:40:e6:5c:c4:3a:48:28: 58:9b:dd:ea:bb:f9:ee:ab:95:57:02:27:90:01:e7:04:9a:16: 4f:da:db:7f:2e:73:e4:98:18:be:dd:f3:2f:12:c7:5c:48:22: 5a:dc:19:7c:d4:f9:ea:01:0d:9f:91:96:ae:4d:e1:93:d7:37: 49:f7:31:5e:f9:26:74:8b:7c:0e:af:50:ab:cf:90:2a:f2:70: b4:02:1c:e7:a3:3b:f6:bd:75:61:1d:34:34:da:43:5b:6b:28: 46:db:a6:90 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUP+JzqOS7c+Br/xR+JIvYkBXRvhQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRDg1QTIwMDAwMTEwLwYDVQQFEyg1RUQ1Rjc5MjFB Qzg2NTQxRDkyOTM2RjY5MUNCMUNEQkY2RDVDMkExMB4XDTI1MTIxOTIxNDgxMloX DTI1MTIyMTAxMTUxMlowMzExMC8GA1UEAxMoRkJFQTYxNDU3MTk1MjQ4OTg1QTk2 RDRBNTJDRDg5NjAzNTY4MDIzRjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMBdG4juyAEOfQBxtKB5TxAWBa8MxB9ih+lYgw5qd+EgwTlrxNs7/tt/YT3n t8RvaWilDk/TKPUmya2cUOKWTEscG7CHHfTXW+kHD4fStd/JvkxiTSYuwEDgN8+M UJD71SpaL5dYxK18WFQsrHudLr+FcqKkE3BsJdeA4xBW6WTD06fE/ZdW7Kf94eNL fZFlh/wDImL1W5FsHiDPikdsJ6W1CPjEUPE+z4fZ9P7ZY6mTJZBgZ9CiC6qV+z0h Y81xh0CyysQ6ELBGQaXwld1Qmf6LRVU7NWAR7z6SUlUG8cK+Nr3ywUNeU95nr4x9 jqKWmGiEmR+SYLH0yjYl+dd1z8MCAwEAAaOCAkYwggJCMB0GA1UdDgQWBBT76mFF cZUkiYWpbUpSzYlgNWgCPzAfBgNVHSMEGDAWgBRe1feSGshlQdkpNvaRyxzb9tXC oTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4M2Y2 ODY2MTA4NGI4Ni8yLzVFRDVGNzkyMUFDODY1NDFEOTI5MzZGNjkxQ0IxQ0RCRjZE NUMyQTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3 QzcyRkQxRkYyL1h0WDNraHJJWlVIWktUYjJrY3NjMl9iVndxRS5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2 LzIvNUVENUY3OTIxQUM4NjU0MUQ5MjkzNkY2OTFDQjFDREJGNkQ1QzJBMS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAEE52s3l99/rWqC+f/IsrZNlgDbGdaKf99fkc9tRAm9DfvpHLW+5CdoX aHN3WK+Nln1Lg4w3fzw+pSNhC/KMKnFXgPd3Xh5upvBsPVC55Z2KQ4IpSvlCnwBE BPk3Qdh+pmXVKr15pqXxqyrN8PkLkL53UrbuvnbY/9NWoySbjAqU1yXHml61OZ1G HYFjM7q/4mqKqeNUfHuo7ehnQOZcxDpIKFib3eq7+e6rlVcCJ5AB5wSaFk/a238u c+SYGL7d8y8Sx1xIIlrcGXzU+eoBDZ+Rlq5N4ZPXN0n3MV75JnSLfA6vUKvPkCry cLQCHOejO/a9dWEdNDTaQ1trKEbbppA= -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:31 2025 by rpki-client