This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft File: 3F67057F77B86603B6C216FF577CB3146053E4E5.mft (raw, json) Hash identifier: hVj8006fGzP39NRYgAyNE2dYV3Cg5Yr/K3EmrOJounU= Subject key identifier: 2A:9B:43:A5:08:DC:E6:F9:A0:87:89:1F:90:01:72:88:55:F5:2D:3D Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5 Certificate issuer: /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5 Certificate serial: 52FC6F759E90AC77D937846D43000F240C4BC5BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft Manifest number: 011D Signing time: Sun 21 Dec 2025 00:51:28 +0000 Manifest this update: Sun 21 Dec 2025 00:46:28 +0000 Manifest next update: Mon 22 Dec 2025 04:00:28 +0000 Files and hashes: 1: 3136352e39392e3132342e302f32332d3233203d3e20343031363832.roa (hash: 85gBMcl8T92cShSttg2IE1+cL7srToN1WMPpMffNR/c=) 2: 3F67057F77B86603B6C216FF577CB3146053E4E5.crl (hash: UCu77gSJ5SjZuCfIow/XTsMqOYp3jJ6vF02PGOsSAtQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 04:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:fc:6f:75:9e:90:ac:77:d9:37:84:6d:43:00:0f:24:0c:4b:c5:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5 Validity Not Before: Dec 21 00:46:28 2025 GMT Not After : Dec 22 04:00:28 2025 GMT Subject: CN=2A9B43A508DCE6F9A087891F9001728855F52D3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ff:50:e0:82:24:06:b1:4c:1e:4a:19:26:ec: d8:40:ed:4f:59:94:f6:bb:bf:5d:cb:8c:49:74:ba: 76:ab:3b:c7:7e:a7:53:56:9a:10:c1:99:13:2c:cb: 43:d5:58:f8:b0:62:c0:db:b4:c0:95:eb:aa:28:7f: 26:68:3f:2e:98:b0:3d:50:4d:30:93:a0:2a:b0:3a: 0c:cd:fd:dd:a9:76:f3:84:af:6e:2a:c4:8e:2a:a5: f7:65:09:99:a8:2a:79:73:f8:51:7a:8d:13:fd:3d: 1c:1b:64:bc:e9:4c:36:9d:0e:62:d4:b3:09:1c:a4: 13:d2:1a:83:8f:e0:a2:1d:c0:10:76:7d:a6:ba:6f: 0b:56:ad:b7:86:2e:ba:f8:20:25:f2:9d:1c:ff:c9: 84:e2:2d:75:5e:1d:d0:07:08:72:57:64:13:5d:89: b0:15:c0:6c:ae:87:70:99:2b:65:6f:11:6f:b8:5c: 78:1d:85:47:cf:a7:24:be:77:ab:cb:c8:f5:c6:29: 05:29:56:25:64:43:4a:25:b6:67:ab:6b:00:50:1e: e3:2c:90:2c:f2:79:a1:37:39:78:0f:e2:14:f1:f9: 4e:5a:b2:f6:fe:82:f0:c6:4c:85:3c:bd:d9:9b:bf: d8:ed:24:4a:ab:77:28:ee:90:92:f1:66:37:5e:ec: c6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9B:43:A5:08:DC:E6:F9:A0:87:89:1F:90:01:72:88:55:F5:2D:3D X509v3 Authority Key Identifier: keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:08:ac:b2:72:29:e1:52:74:de:4e:3d:3d:09:e9:47:5a:e3: 5e:95:65:67:6c:c3:a6:5b:22:c6:90:b3:69:ad:9a:d5:e2:ad: e9:6c:8e:18:46:73:21:d2:15:94:5f:6c:e7:b6:5e:a6:66:e4: 0e:76:67:00:28:0d:5e:6b:6c:3b:8b:3e:5b:fe:36:c3:cd:62: 55:06:1f:27:e6:05:6c:55:dc:31:33:d5:39:77:06:b5:aa:9c: de:df:54:fb:07:92:49:76:50:3c:49:31:2b:8d:c8:6c:4c:e7: b4:46:7d:57:05:1b:cb:2e:1c:0f:72:c1:00:c9:a1:f3:91:b9: ef:80:47:f1:a3:d0:02:44:53:14:cf:8b:23:c3:9c:62:e2:30: 19:74:c0:84:6a:1e:11:1d:71:25:9e:90:ac:ba:2d:c3:ea:76: 46:c0:6a:cf:17:0e:fd:aa:0b:4d:8e:d4:a6:07:e7:14:8a:7b: 59:88:c8:50:1c:06:64:40:48:b0:be:cf:ae:37:74:4c:fa:85: e1:65:fe:d2:47:98:70:4b:32:6a:ea:12:ec:1b:98:4f:73:c2: 28:20:66:43:d8:b3:7b:2b:65:29:b5:bf:bf:0a:7d:7f:45:92: 61:17:bf:7c:76:39:c3:46:e6:cc:5d:56:86:d5:ab:9c:8c:a1: a8:e6:15:49 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUUvxvdZ6QrHfZN4RtQwAPJAxLxb8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMzAxRUUwMDAwMTEwLwYDVQQFEygzRjY3MDU3Rjc3 Qjg2NjAzQjZDMjE2RkY1NzdDQjMxNDYwNTNFNEU1MB4XDTI1MTIyMTAwNDYyOFoX DTI1MTIyMjA0MDAyOFowMzExMC8GA1UEAxMoMkE5QjQzQTUwOERDRTZGOUEwODc4 OTFGOTAwMTcyODg1NUY1MkQzRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMD/UOCCJAaxTB5KGSbs2EDtT1mU9ru/XcuMSXS6dqs7x36nU1aaEMGZEyzL Q9VY+LBiwNu0wJXrqih/Jmg/LpiwPVBNMJOgKrA6DM393al284SvbirEjiql92UJ magqeXP4UXqNE/09HBtkvOlMNp0OYtSzCRykE9Iag4/goh3AEHZ9prpvC1att4Yu uvggJfKdHP/JhOItdV4d0AcIcldkE12JsBXAbK6HcJkrZW8Rb7hceB2FR8+nJL53 q8vI9cYpBSlWJWRDSiW2Z6trAFAe4yyQLPJ5oTc5eA/iFPH5Tlqy9v6C8MZMhTy9 2Zu/2O0kSqt3KO6QkvFmN17sxo8CAwEAAaOCAkYwggJCMB0GA1UdDgQWBBQqm0Ol CNzm+aCHiR+QAXKIVfUtPTAfBgNVHSMEGDAWgBQ/ZwV/d7hmA7bCFv9XfLMUYFPk 5TAOBgNVHQ8BAf8EBAMCB4AwgYUGA1UdHwR+MHwweqB4oHaGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNWRhNDEzZTQ0Mzg0ZDdiODdlMGE3 NGI0MmNhMTg2Ny8wLzNGNjcwNTdGNzdCODY2MDNCNkMyMTZGRjU3N0NCMzE0NjA1 M0U0RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9y cGtpLmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3 QzcyRkQxRkYyL1AyY0ZmM2U0WmdPMndoYl9WM3l6RkdCVDVPVS5jZXIwgZMGCCsG AQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJwcy5hcmlu Lm5ldC9yZXBvc2l0b3J5L2M1ZGE0MTNlNDQzODRkN2I4N2UwYTc0YjQyY2ExODY3 LzAvM0Y2NzA1N0Y3N0I4NjYwM0I2QzIxNkZGNTc3Q0IzMTQ2MDUzRTRFNS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8IrLJyKeFSdN5OPT0J6Uda416VZWdsw6ZbIsaQs2mtmtXirelsjhhG cyHSFZRfbOe2XqZm5A52ZwAoDV5rbDuLPlv+NsPNYlUGHyfmBWxV3DEz1Tl3BrWq nN7fVPsHkkl2UDxJMSuNyGxM57RGfVcFG8suHA9ywQDJofORue+AR/Gj0AJEUxTP iyPDnGLiMBl0wIRqHhEdcSWekKy6LcPqdkbAas8XDv2qC02O1KYH5xSKe1mIyFAc BmRASLC+z643dEz6heFl/tJHmHBLMmrqEuwbmE9zwiggZkPYs3srZSm1v78KfX9F kmEXv3x2OcNG5sxdVobVq5yMoajmFUk= -----END CERTIFICATE-----Generated at Sun Dec 21 17:11:52 2025 by rpki-client