This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft File: b8fa95ca-aa42-4b86-891b-7be12d533da7.mft (raw, json) Hash identifier: OlNzb/4Jlvu7Eh+pcOeNUtWc5ciJFxaOKjkSTqOgesU= Subject key identifier: A3:B6:CF:A5:77:16:24:90:E5:D5:4C:A6:FE:8D:11:7F:C4:4E:B2:28 Authority key identifier: EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD Certificate issuer: /CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Certificate serial: 010D0C9F4328584C4BB29D183681E21078220280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft Manifest number: 010D0C9F43285844CDD9816FE539D09BB31842C3 Signing time: Wed 24 Dec 2025 18:00:03 +0000 Manifest this update: Wed 24 Dec 2025 18:00:03 +0000 Manifest next update: Fri 26 Dec 2025 18:00:00 +0000 Files and hashes: 1: b8fa95ca-aa42-4b86-891b-7be12d533da7.crl (hash: 2P4XnpZuYyNkbgy/zHefbNSb1HckIjuQjxZNCZxwXSY=) 2: f157d5a8-1f48-3fa1-a5c4-fd3f8b8206a4.roa (hash: duCnZE1TmMqiGtIj+U6JXT+Am2eklF+V7kCURQwivXU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:b2:9d:18:36:81:e2:10:78:22:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8fa95ca-aa42-4b86-891b-7be12d533da7 Validity Not Before: Dec 24 18:00:03 2025 GMT Not After : Dec 26 18:00:00 2025 GMT Subject: CN=f84ba199-275b-4c03-a0ba-7dd2d81f6366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:59:37:d6:5f:6f:cc:16:ed:b4:0e:72:4a: fd:bb:33:aa:bd:bd:a7:eb:16:83:27:ac:be:2d:02: bc:30:81:f6:16:1b:02:50:17:59:96:48:00:0f:2e: 6b:ff:6c:5f:2e:96:09:35:92:e1:fb:aa:e8:4b:87: 78:b8:42:a5:5f:26:6d:85:6b:14:cc:70:9c:86:9e: c7:90:ec:27:a7:f0:72:d7:45:e5:e4:1a:f4:5a:24: e4:c0:b4:71:2a:89:ff:0c:c0:18:96:9d:43:cb:8c: d2:0f:b9:7b:1e:5b:b9:65:cb:10:e7:c1:9b:9f:b3: dd:5f:42:ae:a9:1b:de:af:61:33:dd:be:e1:67:2f: c2:78:6c:90:46:b3:26:23:86:fa:bf:89:df:9d:3f: 5f:8b:a2:3a:99:64:71:78:90:f6:bd:92:d9:b7:87: 61:fb:f3:b0:ff:df:b2:7d:a7:18:1e:68:80:1c:c9: 25:cd:0d:83:52:35:80:b5:1f:2e:7f:1a:ce:b8:5f: 16:f1:27:8e:a7:7d:dc:c9:76:60:aa:83:2c:88:e2: a6:82:3c:2b:43:76:59:b7:d9:ca:00:4e:01:47:64: 97:7c:81:32:b8:a4:d8:e9:6d:c3:11:f1:2c:54:10: 52:cb:a2:c4:5e:62:24:3a:c2:2d:93:4f:6b:78:4a: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:B6:CF:A5:77:16:24:90:E5:D5:4C:A6:FE:8D:11:7F:C4:4E:B2:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7/b8fa95ca-aa42-4b86-891b-7be12d533da7.crl X509v3 Authority Key Identifier: keyid:EE:C3:A3:27:2D:C4:BD:B3:60:BD:9A:79:33:99:80:FD:CD:91:D7:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b8fa95ca-aa42-4b86-891b-7be12d533da7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ad:25:00:82:74:ce:36:2b:bf:7a:d8:96:3e:ac:36:9e:e4: b3:5e:03:fa:86:e4:9b:90:ea:17:f5:d7:84:14:14:7c:71:ec: 57:7b:b7:1d:45:56:8e:9d:c2:fb:9b:85:db:b6:69:72:4b:38: 65:17:7f:41:a4:41:c0:c5:0c:51:ca:98:e1:73:62:10:68:c3: b2:20:58:93:f0:9b:d4:2b:ce:d1:6a:91:96:b0:76:9a:9e:3d: 18:19:fd:a3:b5:a5:90:03:5f:5b:89:e0:8a:b0:62:6b:ff:cf: 8c:ec:ad:1d:d3:9f:9b:b6:22:09:65:15:40:b2:54:c4:88:4d: 0b:37:b5:e9:46:e9:60:d5:6f:e5:24:a2:8b:ac:7a:71:56:b1: 10:f5:5e:95:81:b7:f8:bd:df:17:4d:97:16:aa:72:db:01:c9: 2e:ee:51:19:c7:6b:58:74:3f:d3:86:91:3a:7e:08:00:b9:8d: 7a:30:53:be:c9:98:f1:99:f8:31:f8:bb:a8:47:7c:73:73:cd: db:44:29:96:64:d4:61:17:0a:d0:0a:f7:c3:1e:f6:49:ae:7a: b7:c7:4c:62:fc:e6:ac:8d:8a:ba:1a:67:76:9a:90:7f:88:3e: ea:0e:a2:54:fe:eb:49:e5:0d:e5:88:73:0a:87:75:68:c7:3e: e3:0d:70:fb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExLsp0YNoHiEHgiAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5MWItN2JlMTJkNTMz ZGE3MB4XDTI1MTIyNDE4MDAwM1oXDTI1MTIyNjE4MDAwMFowLzEtMCsGA1UEAxMk Zjg0YmExOTktMjc1Yi00YzAzLWEwYmEtN2RkMmQ4MWY2MzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0NZN9Zfb8wW7bQOckr9uzOqvb2n6xaDJ6y+ LQK8MIH2FhsCUBdZlkgADy5r/2xfLpYJNZLh+6roS4d4uEKlXyZthWsUzHCchp7H kOwnp/By10Xl5Br0WiTkwLRxKon/DMAYlp1Dy4zSD7l7Hlu5ZcsQ58Gbn7PdX0Ku qRver2Ez3b7hZy/CeGyQRrMmI4b6v4nfnT9fi6I6mWRxeJD2vZLZt4dh+/Ow/9+y facYHmiAHMklzQ2DUjWAtR8ufxrOuF8W8SeOp33cyXZgqoMsiOKmgjwrQ3ZZt9nK AE4BR2SXfIEyuKTY6W3DEfEsVBBSy6LEXmIkOsItk09reEoJAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKO2z6V3FiSQ5dVMpv6NEX/ETrIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZh OTVjYS1hYTQyLTRiODYtODkxYi03YmUxMmQ1MzNkYTcvYjhmYTk1Y2EtYWE0Mi00 Yjg2LTg5MWItN2JlMTJkNTMzZGE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjhmYTk1Y2EtYWE0Mi00Yjg2LTg5 MWItN2JlMTJkNTMzZGE3L2I4ZmE5NWNhLWFhNDItNGI4Ni04OTFiLTdiZTEyZDUz M2RhNy5jcmwwHwYDVR0jBBgwFoAU7sOjJy3EvbNgvZp5M5mA/c2R1/0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iOGZhOTVjYS1hYTQyLTRiODYtODkxYi03YmUx MmQ1MzNkYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCmrSUAgnTONiu/etiWPqw2 nuSzXgP6huSbkOoX9deEFBR8cexXe7cdRVaOncL7m4XbtmlySzhlF39BpEHAxQxR ypjhc2IQaMOyIFiT8JvUK87RapGWsHaanj0YGf2jtaWQA19bieCKsGJr/8+M7K0d 05+btiIJZRVAslTEiE0LN7XpRulg1W/lJKKLrHpxVrEQ9V6Vgbf4vd8XTZcWqnLb Acku7lEZx2tYdD/ThpE6fggAuY16MFO+yZjxmfgx+LuoR3xzc83bRCmWZNRhFwrQ CvfDHvZJrnq3x0xi/OasjYq6Gmd2mpB/iD7qDqJU/utJ5Q3liHMKh3Voxz7jDXD7 -----END CERTIFICATE-----Generated at Thu Dec 25 03:35:38 2025 by rpki-client