This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft File: a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft (raw, json) Hash identifier: IcGeOzFDUtrhnQAwMoIhM3POAOIqJJYx5pjg2ncS6Oo= Subject key identifier: 71:D8:35:36:BF:2C:41:BB:56:8D:CD:94:6D:0B:23:EA:66:D1:D8:4B Authority key identifier: DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55 Certificate issuer: /CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245 Certificate serial: 010D0C9F4328584C5930E80671EA8CD2A75B7E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft Manifest number: 010D0C9F432858414A6A2A37940949E8B5D05B20 Signing time: Mon 29 Dec 2025 14:00:03 +0000 Manifest this update: Mon 29 Dec 2025 14:00:03 +0000 Manifest next update: Thu 01 Jan 2026 14:00:00 +0000 Files and hashes: 1: 3bf6dbf8-3dca-3fa9-b25a-176db2bbec92.roa (hash: zRr6h95Zxte89mOvcatM5FjkDKE5gbI0IwpddN2miY4=) 2: a9c50514-eeba-4ab2-b8e0-2a64274eb245.crl (hash: d/8h7RmtS2BECKSyqj223GFFfwI8FU8ULwhf1Oets7k=) 3: e243a063-2fee-35ac-9d0e-667f57577af5.roa (hash: y1Ot8d9Q0kbVppnUnF5+RISfsu5ytkLjWvZIpc9pQzg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:30:e8:06:71:ea:8c:d2:a7:5b:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9c50514-eeba-4ab2-b8e0-2a64274eb245 Validity Not Before: Dec 29 14:00:03 2025 GMT Not After : Jan 1 14:00:00 2026 GMT Subject: CN=5ff07b7e-236f-435b-adad-46cccc3ab86f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:65:bd:c9:ec:7f:49:db:62:61:b9:70:d8: b1:db:ee:29:fa:5a:3f:01:db:a5:a1:24:ed:cc:2a: ee:b3:ad:5d:0a:56:61:7d:be:e5:f6:e9:87:f1:77: 44:ee:c2:6e:69:de:27:f2:9e:c2:88:8c:7d:e3:0b: 84:2b:50:7d:4f:9d:6c:05:55:a2:06:b7:05:21:8d: 78:29:34:6f:fa:74:69:85:bf:10:f2:9f:8b:7c:ab: 01:76:4c:7e:56:9d:28:5f:25:84:5e:77:77:ed:e7: 67:bb:12:f2:7e:f6:3e:10:8c:95:c4:46:bf:e5:d8: 51:5a:52:9c:7a:e1:99:33:25:3c:fc:29:19:ea:e7: a2:14:5b:d2:a7:e5:a2:06:57:16:44:ad:27:44:ea: 5b:ab:cb:ef:e5:2d:77:17:39:8f:54:91:84:07:51: 19:44:a8:ed:d6:1e:a3:64:42:e7:e5:c8:1f:db:cf: 67:78:ce:b0:da:b0:7c:aa:e2:a1:53:c2:34:49:7a: 88:96:77:87:a5:64:be:ff:87:e5:1e:15:42:22:9a: fb:49:8a:d3:98:49:77:60:41:04:04:9b:69:50:a1: bd:44:90:69:c5:91:f5:63:e1:06:1d:44:be:18:0a: 43:e3:7a:67:7b:c6:dc:7d:a9:3c:48:1f:ad:23:56: bd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D8:35:36:BF:2C:41:BB:56:8D:CD:94:6D:0B:23:EA:66:D1:D8:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245/a9c50514-eeba-4ab2-b8e0-2a64274eb245.crl X509v3 Authority Key Identifier: keyid:DD:96:29:8E:1D:68:C3:A1:A2:39:C8:B5:D5:92:C3:98:C6:C1:3D:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a9c50514-eeba-4ab2-b8e0-2a64274eb245.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:9d:5f:16:50:2f:fe:d6:1d:d2:52:42:04:30:5f:29:49:b3: 6e:cf:e3:02:63:3b:a9:b1:0e:6d:e1:c2:1c:7b:66:20:03:f0: 86:59:9f:db:72:a5:4f:50:b6:e2:94:fb:69:51:fb:96:ea:12: ec:d3:80:00:2a:f5:bb:b5:17:3a:56:dd:60:1f:74:c6:cc:91: 22:14:3f:5a:06:8f:75:95:a1:4a:a4:d5:68:10:46:ab:18:10: 46:f8:7e:a8:c6:da:c0:f4:f7:20:58:3e:c6:60:b8:8d:72:8d: 74:bf:24:2e:6c:f4:5c:0b:74:88:62:5c:fa:51:ab:7f:f2:53: 6d:3d:b8:4f:c7:37:77:b4:a5:db:49:ea:b8:06:bd:e0:01:9f: 3a:da:dd:c7:ea:1b:04:10:fa:f6:d6:f1:5d:42:ca:4b:d6:83: ec:26:f0:c9:f6:5b:ef:55:9a:44:30:52:e7:7e:28:2a:83:ff: 40:5d:65:68:a9:f1:6c:5a:05:a7:a5:0e:25:8c:67:a4:ed:72: c7:2b:f1:f4:16:c9:62:68:11:4b:67:80:f0:9b:03:63:ed:d9: 7f:e5:83:03:65:89:f8:62:73:f2:55:6b:ba:9d:c2:65:6a:03: 42:f5:e4:35:85:96:43:c8:f8:a3:dd:ce:5c:61:48:8f:a8:1e: 5c:92:15:a2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExZMOgGceqM0qdbfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTljNTA1MTQtZWViYS00YWIyLWI4ZTAtMmE2NDI3NGVi MjQ1MB4XDTI1MTIyOTE0MDAwM1oXDTI2MDEwMTE0MDAwMFowLzEtMCsGA1UEAxMk NWZmMDdiN2UtMjM2Zi00MzViLWFkYWQtNDZjY2NjM2FiODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhplvcnsf0nbYmG5cNix2+4p+lo/AduloSTt zCrus61dClZhfb7l9umH8XdE7sJuad4n8p7CiIx94wuEK1B9T51sBVWiBrcFIY14 KTRv+nRphb8Q8p+LfKsBdkx+Vp0oXyWEXnd37ednuxLyfvY+EIyVxEa/5dhRWlKc euGZMyU8/CkZ6ueiFFvSp+WiBlcWRK0nROpbq8vv5S13FzmPVJGEB1EZRKjt1h6j ZELn5cgf289neM6w2rB8quKhU8I0SXqIlneHpWS+/4flHhVCIpr7SYrTmEl3YEEE BJtpUKG9RJBpxZH1Y+EGHUS+GApD43pne8bcfak8SB+tI1a9gwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHHYNTa/LEG7Vo3NlG0LI+pm0dhLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hOWM1 MDUxNC1lZWJhLTRhYjItYjhlMC0yYTY0Mjc0ZWIyNDUvYTljNTA1MTQtZWViYS00 YWIyLWI4ZTAtMmE2NDI3NGViMjQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTljNTA1MTQtZWViYS00YWIyLWI4 ZTAtMmE2NDI3NGViMjQ1L2E5YzUwNTE0LWVlYmEtNGFiMi1iOGUwLTJhNjQyNzRl YjI0NS5jcmwwHwYDVR0jBBgwFoAU3ZYpjh1ow6GiOci11ZLDmMbBPVUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hOWM1MDUxNC1lZWJhLTRhYjItYjhlMC0yYTY0 Mjc0ZWIyNDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPnV8WUC/+1h3SUkIEMF8p SbNuz+MCYzupsQ5t4cIce2YgA/CGWZ/bcqVPULbilPtpUfuW6hLs04AAKvW7tRc6 Vt1gH3TGzJEiFD9aBo91laFKpNVoEEarGBBG+H6oxtrA9PcgWD7GYLiNco10vyQu bPRcC3SIYlz6Uat/8lNtPbhPxzd3tKXbSeq4Br3gAZ862t3H6hsEEPr21vFdQspL 1oPsJvDJ9lvvVZpEMFLnfigqg/9AXWVoqfFsWgWnpQ4ljGek7XLHK/H0FsliaBFL Z4DwmwNj7dl/5YMDZYn4YnPyVWu6ncJlagNC9eQ1hZZDyPij3c5cYUiPqB5ckhWi -----END CERTIFICATE-----Generated at Mon Dec 29 16:27:55 2025 by rpki-client