This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/937a2532-a0fd-4a4e-9622-800185b4f9fc.mft File: 937a2532-a0fd-4a4e-9622-800185b4f9fc.mft (raw, json) Hash identifier: KWOn7Fp+ETnmVvIdNVV74PPKM+mN4n1iDHDs5N5NQBQ= Subject key identifier: 32:D8:C2:61:75:DB:6A:82:A5:5D:48:A0:64:18:99:22:E6:50:A7:61 Authority key identifier: C5:2D:36:72:56:3C:1A:32:D0:B4:16:7A:F1:8A:DA:18:95:95:66:E8 Certificate issuer: /CN=937a2532-a0fd-4a4e-9622-800185b4f9fc Certificate serial: 010D0C9F4328584C4D8F17E6D6FC9DC67D473D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/937a2532-a0fd-4a4e-9622-800185b4f9fc.mft Manifest number: 010D0C9F4328584073A84D1A2FD7C264F80B0045 Signing time: Thu 25 Dec 2025 10:00:09 +0000 Manifest this update: Thu 25 Dec 2025 10:00:09 +0000 Manifest next update: Sun 28 Dec 2025 10:00:00 +0000 Files and hashes: 1: 1f3ecf85-e2cd-3017-abe6-b061fd426693.roa (hash: ZxS5qKg4VFQUN5mxeSatqYxh6qR1g7yLJ9ced6V13u8=) 2: 937a2532-a0fd-4a4e-9622-800185b4f9fc.crl (hash: thZqeVEnUW5Fdp1Nte0lw9uNghDkxgO1Vafe5Jw6w/Q=) 3: d0fd3ffc-733a-3b19-afd8-f2596ecf7a2a.roa (hash: DHkjAZWO+fU4NkohbReYGM0CJ+fGzd1JxpsHMdm0bUU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/937a2532-a0fd-4a4e-9622-800185b4f9fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/937a2532-a0fd-4a4e-9622-800185b4f9fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4d:8f:17:e6:d6:fc:9d:c6:7d:47:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=937a2532-a0fd-4a4e-9622-800185b4f9fc Validity Not Before: Dec 25 10:00:09 2025 GMT Not After : Dec 28 10:00:00 2025 GMT Subject: CN=ca8cd89b-d6cd-4caa-9b68-6ac6546a6011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f0:92:0c:6d:1d:b7:11:ff:6f:1f:80:0f:5d: d5:8c:63:34:da:ef:60:e1:5c:dc:dc:d8:6b:b2:9b: c2:e1:29:94:8d:a9:63:45:f5:74:3c:29:c6:23:ac: 72:ca:f7:bf:49:95:2d:7d:fd:32:7a:81:da:c6:be: a2:78:12:6b:f9:20:4c:79:8d:20:85:5f:6c:c3:d8: b3:b9:8e:3b:fb:9e:ca:13:37:50:be:17:72:b9:44: 70:5b:b4:60:37:15:bb:82:82:ca:96:dc:4c:26:28: 8f:d9:b5:3e:2d:e7:40:55:e3:a5:20:7a:09:fb:7c: 1b:b4:cc:81:49:4a:78:06:54:10:1c:54:2e:d6:8f: 0e:7e:3d:7b:73:d6:65:fc:3d:60:7c:26:c4:41:95: 1e:5c:d8:b4:f1:c4:6f:d1:5f:de:0d:42:a5:e3:e3: 77:3a:48:48:6b:03:2c:e3:b6:ce:58:1a:d5:e8:54: 86:ef:99:c6:ec:e8:21:97:47:ac:cb:46:43:fd:0a: 1c:4f:29:8b:a3:3a:f4:d3:f0:b7:e8:e4:25:0d:1c: 6a:9c:e7:c9:4a:d0:6d:a9:66:3c:a4:8a:cd:c4:25: 4c:7f:50:42:17:a4:84:8b:8c:a5:57:ec:a3:c1:20: 68:1a:40:53:29:20:da:12:fd:3c:24:eb:0f:dc:f8: d5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D8:C2:61:75:DB:6A:82:A5:5D:48:A0:64:18:99:22:E6:50:A7:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/937a2532-a0fd-4a4e-9622-800185b4f9fc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc/937a2532-a0fd-4a4e-9622-800185b4f9fc.crl X509v3 Authority Key Identifier: keyid:C5:2D:36:72:56:3C:1A:32:D0:B4:16:7A:F1:8A:DA:18:95:95:66:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a2532-a0fd-4a4e-9622-800185b4f9fc.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:73:5a:14:dc:c5:fd:cf:97:d5:a3:ea:69:cd:5e:90:26:17: 1b:6e:5d:f4:22:83:44:82:89:fb:eb:64:cf:60:04:86:eb:01: 3e:b9:4c:64:32:40:b5:e4:05:b8:2f:51:78:72:90:5a:dc:8b: e4:97:be:42:f7:3f:20:b9:29:3c:11:fd:21:d6:e0:d6:53:3f: fe:f6:14:53:e6:f0:4b:8f:28:6a:c2:47:5d:7a:0e:0d:69:ac: 97:78:8e:4c:88:81:09:d1:ab:be:de:90:f2:8b:33:fc:2d:d9: d1:d5:38:55:17:31:3b:7e:8e:fa:9c:79:b4:51:44:48:e7:23: 84:17:bd:46:57:f8:e1:27:d4:51:e5:89:a1:db:9f:0e:f4:46: a8:1d:ee:7e:ec:1e:eb:87:86:89:72:87:82:72:2e:16:bb:0d: 69:70:af:4c:77:9d:0a:f5:37:be:ba:df:66:80:e4:8a:9f:c8: 90:be:e8:3d:7a:51:fb:e0:a4:2c:43:f4:52:2e:0b:d9:8d:a2: 30:24:e3:d2:73:de:f2:d3:b0:00:c1:c2:4b:75:34:b5:59:5e: 78:d0:33:99:ab:23:24:50:b1:e0:2f:34:a1:c0:b7:75:c9:55: 2c:33:84:b9:26:29:da:64:b0:cd:26:36:10:ae:85:a7:55:9d: dd:8d:e4:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExNjxfm1vydxn1HPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM3YTI1MzItYTBmZC00YTRlLTk2MjItODAwMTg1YjRm OWZjMB4XDTI1MTIyNTEwMDAwOVoXDTI1MTIyODEwMDAwMFowLzEtMCsGA1UEAxMk Y2E4Y2Q4OWItZDZjZC00Y2FhLTliNjgtNmFjNjU0NmE2MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvCSDG0dtxH/bx+AD13VjGM02u9g4Vzc3Nhr spvC4SmUjaljRfV0PCnGI6xyyve/SZUtff0yeoHaxr6ieBJr+SBMeY0ghV9sw9iz uY47+57KEzdQvhdyuURwW7RgNxW7goLKltxMJiiP2bU+LedAVeOlIHoJ+3wbtMyB SUp4BlQQHFQu1o8Ofj17c9Zl/D1gfCbEQZUeXNi08cRv0V/eDUKl4+N3OkhIawMs 47bOWBrV6FSG75nG7Oghl0esy0ZD/QocTymLozr00/C36OQlDRxqnOfJStBtqWY8 pIrNxCVMf1BCF6SEi4ylV+yjwSBoGkBTKSDaEv08JOsP3PjV8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDLYwmF122qCpV1IoGQYmSLmUKdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85Mzdh MjUzMi1hMGZkLTRhNGUtOTYyMi04MDAxODViNGY5ZmMvOTM3YTI1MzItYTBmZC00 YTRlLTk2MjItODAwMTg1YjRmOWZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTM3YTI1MzItYTBmZC00YTRlLTk2 MjItODAwMTg1YjRmOWZjLzkzN2EyNTMyLWEwZmQtNGE0ZS05NjIyLTgwMDE4NWI0 ZjlmYy5jcmwwHwYDVR0jBBgwFoAUxS02clY8GjLQtBZ68YraGJWVZugwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzdhMjUzMi1hMGZkLTRhNGUtOTYyMi04MDAx ODViNGY5ZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyc1oU3MX9z5fVo+ppzV6Q Jhcbbl30IoNEgon762TPYASG6wE+uUxkMkC15AW4L1F4cpBa3Ivkl75C9z8guSk8 Ef0h1uDWUz/+9hRT5vBLjyhqwkddeg4NaayXeI5MiIEJ0au+3pDyizP8LdnR1ThV FzE7fo76nHm0UURI5yOEF71GV/jhJ9RR5Ymh258O9EaoHe5+7B7rh4aJcoeCci4W uw1pcK9Md50K9Te+ut9mgOSKn8iQvug9elH74KQsQ/RSLgvZjaIwJOPSc97y07AA wcJLdTS1WV540DOZqyMkULHgLzShwLd1yVUsM4S5JinaZLDNJjYQroWnVZ3djeSz -----END CERTIFICATE-----Generated at Fri Dec 26 09:38:00 2025 by rpki-client