This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft File: c3e3599f-a90f-4544-a440-c15eca99db7f.mft (raw, json) Hash identifier: nf9AGbRcW1YKNeTZL/BhRqojnk3kDY0yPXGB6wiNSkc= Subject key identifier: F2:FE:8B:11:D9:70:FA:32:B6:0A:8A:8E:13:6D:77:70:8C:18:B0:10 Authority key identifier: 66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55 Certificate issuer: /CN=c3e3599f-a90f-4544-a440-c15eca99db7f Certificate serial: 010D0C9F4328584C4B94D327CC8E39DC1B39A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft Manifest number: 010D0C9F4328584073A81D4877564E5B466B38D8 Signing time: Wed 24 Dec 2025 17:00:03 +0000 Manifest this update: Wed 24 Dec 2025 17:00:03 +0000 Manifest next update: Sat 27 Dec 2025 17:00:00 +0000 Files and hashes: 1: 6fc5b20a-f85b-3f9a-9274-2dfd90a78800.roa (hash: rKP5XvD7X9HqE8KRJ+BDbWWeHfC2+SZbPwbf28T94Cs=) 2: c3e3599f-a90f-4544-a440-c15eca99db7f.crl (hash: NXNX+js3W8q6mjAhrowJjvY07IVVtmo4jfL3qIeSvXc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:94:d3:27:cc:8e:39:dc:1b:39:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e3599f-a90f-4544-a440-c15eca99db7f Validity Not Before: Dec 24 17:00:03 2025 GMT Not After : Dec 27 17:00:00 2025 GMT Subject: CN=7c5b2ec4-3144-4559-9f08-752c3ad85947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e5:b9:54:48:f1:5c:a4:87:69:eb:66:5f:bb: 95:51:9b:d5:e8:4b:51:a5:3f:f0:67:b9:c2:71:e4: 9a:a9:b4:46:2f:30:56:79:21:28:7a:82:4a:23:41: 15:56:ba:92:65:0c:b9:3d:23:dd:ae:90:99:ef:6e: b9:d3:67:b2:4b:dd:da:ab:41:03:9a:ee:8f:ae:0c: d2:84:a8:e0:e5:37:11:84:b5:d9:2c:b0:5a:54:f7: 1c:37:ef:30:09:75:08:ca:dd:ac:4c:96:ad:01:70: 09:a3:d6:3c:53:b5:22:4d:d4:c6:11:cd:76:b5:37: 9e:b3:5b:93:b5:79:cc:a2:d7:1f:88:4f:c9:2b:55: 2c:30:ab:02:08:89:78:f5:12:6d:0f:f6:96:4d:98: d2:ee:ba:b4:8a:a7:30:67:bf:65:0e:be:a5:c0:c3: be:55:9f:37:b4:b0:1a:da:d0:c5:9b:44:62:a7:ec: 66:d8:74:a7:57:f9:6e:a2:e1:51:94:3e:7b:fb:1b: 96:2a:02:a6:3a:51:64:ba:22:80:37:a9:72:b8:0f: 77:61:02:3b:51:7d:c9:88:46:86:23:2d:08:b0:09: d9:da:d6:0a:15:63:4f:d3:7f:cd:35:ff:4e:c7:d9: 78:54:0c:7c:17:54:9e:61:27:86:25:3c:81:a8:8c: 6c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:FE:8B:11:D9:70:FA:32:B6:0A:8A:8E:13:6D:77:70:8C:18:B0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f/c3e3599f-a90f-4544-a440-c15eca99db7f.crl X509v3 Authority Key Identifier: keyid:66:2D:F9:A3:3C:93:D0:EE:E2:AC:8B:F7:04:D9:73:D5:15:6C:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c3e3599f-a90f-4544-a440-c15eca99db7f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:4c:fe:5b:a2:53:36:a1:35:1f:fd:90:9e:72:67:d7:d1:d6: ed:69:3e:f5:23:ea:8e:67:df:25:ba:bb:74:f8:04:e4:05:04: 14:91:ba:38:f5:3a:a3:69:d3:86:39:8c:e8:4f:9b:1a:b1:a3: c1:67:fd:42:4d:a2:44:c7:c0:29:5d:23:02:09:6d:5f:01:1d: 81:4b:b4:8c:ba:28:c1:fb:9c:06:ce:df:0d:46:ef:0a:f5:d5: 84:05:8b:86:8e:07:10:ac:c2:6b:f2:23:fb:de:67:ea:c3:71: bb:8f:3c:9f:e1:bf:84:44:2c:dc:b2:1d:4e:43:d5:62:8c:ab: e3:5b:f5:0b:74:5e:e1:51:97:c8:14:2c:53:9a:38:cc:ad:e4: f0:65:3e:85:2c:b9:74:b9:32:47:fa:df:9c:60:dc:fd:93:49: 43:30:96:08:96:bf:ee:cf:cf:9c:e8:6a:12:ba:55:9f:e9:76: 2c:55:f9:f4:ad:3c:be:ab:c7:65:96:e9:13:36:51:01:5a:a0: 4c:51:7e:24:99:c2:32:30:3f:18:0b:c9:9d:89:37:3f:ad:13: a7:be:15:81:a4:5b:8e:04:fe:2c:be:41:bf:a2:0c:52:e5:d2: eb:5b:da:bb:36:2f:80:4e:af:6b:57:c8:ab:af:6d:7b:02:77: 11:6c:c4:ef -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExLlNMnzI453Bs5pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzNlMzU5OWYtYTkwZi00NTQ0LWE0NDAtYzE1ZWNhOTlk YjdmMB4XDTI1MTIyNDE3MDAwM1oXDTI1MTIyNzE3MDAwMFowLzEtMCsGA1UEAxMk N2M1YjJlYzQtMzE0NC00NTU5LTlmMDgtNzUyYzNhZDg1OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+W5VEjxXKSHaetmX7uVUZvV6EtRpT/wZ7nC ceSaqbRGLzBWeSEoeoJKI0EVVrqSZQy5PSPdrpCZ726502eyS93aq0EDmu6PrgzS hKjg5TcRhLXZLLBaVPccN+8wCXUIyt2sTJatAXAJo9Y8U7UiTdTGEc12tTees1uT tXnMotcfiE/JK1UsMKsCCIl49RJtD/aWTZjS7rq0iqcwZ79lDr6lwMO+VZ83tLAa 2tDFm0Rip+xm2HSnV/luouFRlD57+xuWKgKmOlFkuiKAN6lyuA93YQI7UX3JiEaG Iy0IsAnZ2tYKFWNP03/NNf9Ox9l4VAx8F1SeYSeGJTyBqIxs6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPL+ixHZcPoytgqKjhNtd3CMGLAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jM2Uz NTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVlY2E5OWRiN2YvYzNlMzU5OWYtYTkwZi00 NTQ0LWE0NDAtYzE1ZWNhOTlkYjdmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzNlMzU5OWYtYTkwZi00NTQ0LWE0 NDAtYzE1ZWNhOTlkYjdmL2MzZTM1OTlmLWE5MGYtNDU0NC1hNDQwLWMxNWVjYTk5 ZGI3Zi5jcmwwHwYDVR0jBBgwFoAUZi35ozyT0O7irIv3BNlz1RVsf1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jM2UzNTk5Zi1hOTBmLTQ1NDQtYTQ0MC1jMTVl Y2E5OWRiN2YuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAETP5bolM2oTUf/ZCecmfX 0dbtaT71I+qOZ98lurt0+ATkBQQUkbo49TqjadOGOYzoT5sasaPBZ/1CTaJEx8Ap XSMCCW1fAR2BS7SMuijB+5wGzt8NRu8K9dWEBYuGjgcQrMJr8iP73mfqw3G7jzyf 4b+ERCzcsh1OQ9VijKvjW/ULdF7hUZfIFCxTmjjMreTwZT6FLLl0uTJH+t+cYNz9 k0lDMJYIlr/uz8+c6GoSulWf6XYsVfn0rTy+q8dllukTNlEBWqBMUX4kmcIyMD8Y C8mdiTc/rROnvhWBpFuOBP4svkG/ogxS5dLrW9q7Ni+ATq9rV8irr217AncRbMTv -----END CERTIFICATE-----Generated at Wed Dec 24 21:52:49 2025 by rpki-client