This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft File: 8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft (raw, json) Hash identifier: qkT6UFUoA9LHkuurhBDrWK/o49k1ptzRn4/rmAtpwwk= Subject key identifier: 45:5F:47:9F:37:B1:83:E9:90:12:47:CD:75:1B:1F:53:3D:E8:CB:68 Authority key identifier: CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A Certificate issuer: /CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6 Certificate serial: 010D0C9F4328584C4B3B8D723DCCAD64A9B6E8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft Manifest number: 010D0C9F4328584073A85954D1D18CB092344258 Signing time: Wed 24 Dec 2025 14:00:09 +0000 Manifest this update: Wed 24 Dec 2025 14:00:09 +0000 Manifest next update: Fri 26 Dec 2025 14:00:00 +0000 Files and hashes: 1: 3e223fd6-e6be-376b-be27-58334385989f.roa (hash: cW/nBeGfgO1YoZANxT0xlhCeF+d09XHLIr4mCQaxvuE=) 2: 8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl (hash: METPTewJ0/arUikKKSHSr6wHqFH6zmmrtwT828LG6es=) 3: d1facf3a-0252-3062-bd40-b1752bcaaa35.roa (hash: BfVvVU4iMr+bRWvCbYwMAgDejo0suj5nYswRP2TqjGQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:3b:8d:72:3d:cc:ad:64:a9:b6:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8598a5e1-9eb9-4087-b2c1-d25a58f900c6 Validity Not Before: Dec 24 14:00:09 2025 GMT Not After : Dec 26 14:00:00 2025 GMT Subject: CN=b9a0c395-a7c1-42eb-b392-6f102a03cd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:22:74:48:f6:c2:32:34:87:6d:ea:bf:34:f5: 21:0d:dc:57:be:78:a5:6a:4f:f0:df:6f:b9:ae:5d: 14:96:03:26:b5:c8:d7:a5:b0:fb:4d:32:a5:4f:09: ca:2a:c6:0b:6d:38:56:6b:23:cb:41:7e:9b:4f:d9: c5:14:69:ab:de:30:a8:57:d2:ba:de:eb:12:f3:97: 29:7b:82:be:cd:5d:05:bf:04:ab:70:f4:8f:dc:63: 7b:4e:02:ae:31:32:3e:e8:7d:5a:34:6d:b2:e5:be: 29:20:d7:c5:69:7c:53:ec:04:ad:b4:a1:1a:5d:70: ba:6f:f5:a2:d0:61:1b:24:e7:d2:09:d2:49:b7:9e: ed:85:07:dd:9a:57:2f:13:23:fc:6b:1c:53:e9:7e: 83:5c:fc:ba:66:ef:65:39:cb:07:de:ca:6a:29:09: e4:a8:d7:92:df:7d:cf:a6:4d:90:e6:58:14:cc:e4: 82:09:9e:4a:03:e1:24:3e:4f:27:37:27:5e:dc:53: 54:3a:dc:f0:a9:48:24:be:ea:f1:91:6a:0e:2b:67: 94:88:43:75:86:0e:cb:14:66:54:5d:9a:d7:8f:a5: e5:f2:8f:0d:1b:20:f8:f7:d4:a9:8a:cb:cc:76:b7: b0:a7:f1:5e:26:83:15:90:ff:40:53:12:4a:5b:47: 01:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5F:47:9F:37:B1:83:E9:90:12:47:CD:75:1B:1F:53:3D:E8:CB:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.crl X509v3 Authority Key Identifier: keyid:CA:54:1F:4E:17:01:2C:AA:E6:3A:05:8A:6E:A2:32:56:8E:9C:15:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8598a5e1-9eb9-4087-b2c1-d25a58f900c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:60:4a:fc:af:54:11:eb:41:e6:53:01:f2:22:a0:39:11:8e: b9:d5:5d:f3:0d:c5:0c:db:e8:8e:7e:fa:a7:59:f4:0c:87:aa: 9f:af:22:57:84:d2:45:f1:36:7a:ed:51:13:81:20:6e:6d:84: df:01:fc:88:d5:3c:33:e9:77:30:5e:fd:1c:ba:4d:dc:27:c9: 83:1d:a1:87:0f:96:3d:99:b1:99:1e:89:8e:b2:b2:c3:8c:89: f7:e9:89:42:f8:04:07:79:19:b0:b4:a3:d5:10:ce:78:77:7f: 78:b2:92:08:ef:7a:5b:7c:05:59:72:60:03:26:83:57:0a:3c: e9:16:40:91:c7:df:f9:4a:66:1b:b7:b4:cd:93:b3:cd:de:a6: 67:16:7d:e0:6a:2d:18:b3:60:64:22:0f:94:66:f3:d5:84:9a: 5a:11:10:52:8e:7c:b6:fe:7f:aa:f5:2f:66:6f:1b:40:03:16: 37:f5:4f:96:ff:5b:a1:31:d8:20:de:d3:a9:a8:a1:ae:09:9c: 4e:4a:8c:2c:08:d4:bf:d0:dc:b5:dd:f9:af:bd:27:18:39:71: f8:2e:e5:2a:23:5f:1b:ad:e0:55:f0:d3:7b:86:08:bf:0c:8a: 6a:94:08:77:60:cd:57:89:c6:32:24:a3:63:23:4d:ad:5d:c4: 14:9d:75:7a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExLO41yPcytZKm26MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODU5OGE1ZTEtOWViOS00MDg3LWIyYzEtZDI1YTU4Zjkw MGM2MB4XDTI1MTIyNDE0MDAwOVoXDTI1MTIyNjE0MDAwMFowLzEtMCsGA1UEAxMk YjlhMGMzOTUtYTdjMS00MmViLWIzOTItNmYxMDJhMDNjZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCJ0SPbCMjSHbeq/NPUhDdxXvnilak/w32+5 rl0UlgMmtcjXpbD7TTKlTwnKKsYLbThWayPLQX6bT9nFFGmr3jCoV9K63usS85cp e4K+zV0FvwSrcPSP3GN7TgKuMTI+6H1aNG2y5b4pINfFaXxT7ASttKEaXXC6b/Wi 0GEbJOfSCdJJt57thQfdmlcvEyP8axxT6X6DXPy6Zu9lOcsH3spqKQnkqNeS333P pk2Q5lgUzOSCCZ5KA+EkPk8nNyde3FNUOtzwqUgkvurxkWoOK2eUiEN1hg7LFGZU XZrXj6Xl8o8NGyD499SpisvMdrewp/FeJoMVkP9AUxJKW0cBdQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEVfR583sYPpkBJHzXUbH1M96MtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84NTk4 YTVlMS05ZWI5LTQwODctYjJjMS1kMjVhNThmOTAwYzYvODU5OGE1ZTEtOWViOS00 MDg3LWIyYzEtZDI1YTU4ZjkwMGM2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODU5OGE1ZTEtOWViOS00MDg3LWIy YzEtZDI1YTU4ZjkwMGM2Lzg1OThhNWUxLTllYjktNDA4Ny1iMmMxLWQyNWE1OGY5 MDBjNi5jcmwwHwYDVR0jBBgwFoAUylQfThcBLKrmOgWKbqIyVo6cFSowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84NTk4YTVlMS05ZWI5LTQwODctYjJjMS1kMjVh NThmOTAwYzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxYEr8r1QR60HmUwHyIqA5 EY651V3zDcUM2+iOfvqnWfQMh6qfryJXhNJF8TZ67VETgSBubYTfAfyI1Twz6Xcw Xv0cuk3cJ8mDHaGHD5Y9mbGZHomOsrLDjIn36YlC+AQHeRmwtKPVEM54d394spII 73pbfAVZcmADJoNXCjzpFkCRx9/5SmYbt7TNk7PN3qZnFn3gai0Ys2BkIg+UZvPV hJpaERBSjny2/n+q9S9mbxtAAxY39U+W/1uhMdgg3tOpqKGuCZxOSowsCNS/0Ny1 3fmvvScYOXH4LuUqI18breBV8NN7hgi/DIpqlAh3YM1XicYyJKNjI02tXcQUnXV6 -----END CERTIFICATE-----Generated at Thu Dec 25 03:42:42 2025 by rpki-client