This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft File: d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft (raw, json) Hash identifier: 7q3SVulbHr2wgQDsJAzYLdUfYUt7FU2tB7lGLOCm+Os= Subject key identifier: 82:B1:C9:AF:F0:DA:D9:C1:EE:60:42:EA:31:B4:6E:57:CC:8D:7C:C6 Authority key identifier: 47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F Certificate issuer: /CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Certificate serial: 010D0C9F4328584C4440C79851BCCCC11F608CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft Manifest number: 010D0C9F4328584073A836239D3A75822B1705D6 Signing time: Mon 22 Dec 2025 02:00:04 +0000 Manifest this update: Mon 22 Dec 2025 02:00:04 +0000 Manifest next update: Wed 24 Dec 2025 02:00:00 +0000 Files and hashes: 1: 454c9603-4dfb-34e7-9bc2-02242c547e78.roa (hash: CH2nkMXNpGOEdgNktVxA2gKTPaekUJjMddaLTnxl3hY=) 2: 7c69f6d0-f92d-3ea9-91d2-5d8a53da8b6b.roa (hash: 3HVCaoUAgEypQT42N2PJkh5mCE/yY2Aj+8mG5qGxHZk=) 3: d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl (hash: GSxlLsnG+K0hu1Mh2crCo++2idfVGUH5TlhecO9y5Tw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:40:c7:98:51:bc:cc:c1:1f:60:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Validity Not Before: Dec 22 02:00:04 2025 GMT Not After : Dec 24 02:00:00 2025 GMT Subject: CN=5d085522-8bdf-4d51-b9c9-42d575c7bf36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:96:57:9b:bb:38:6d:6c:ee:07:e0:00:aa: 98:5e:66:7c:46:f2:28:c4:bf:31:ba:e2:b2:04:67: 39:0d:14:8a:41:57:1a:c6:13:41:a4:98:fa:64:c9: e2:cd:b0:66:63:92:54:06:1b:96:d0:b6:e2:5f:7d: c7:9d:28:ac:82:a3:76:af:83:ef:27:a2:9b:64:fa: 4b:3d:89:76:d5:df:a4:28:01:13:00:9b:d7:c6:6a: c3:6b:9f:03:18:8d:c2:52:09:71:b5:ed:dd:00:c0: 61:83:55:22:26:76:8e:b4:e2:31:9a:8b:45:eb:45: 5a:13:a2:18:5f:8c:50:9c:2c:c8:99:d6:f0:77:1f: 86:c4:d5:1e:a8:aa:0b:71:09:ed:c2:91:90:4e:02: 41:99:b1:d9:03:f2:33:0b:1c:2b:db:00:2d:9c:90: 70:01:00:04:fd:12:12:80:f5:d6:7d:4f:ae:5a:01: db:00:d9:7b:a4:f6:53:b9:5d:b3:18:09:ca:b7:6e: b8:6a:60:d2:36:71:7d:18:5f:70:5d:16:41:25:3f: e7:5f:63:b6:04:22:3e:36:07:d8:0a:bc:bb:cc:75: 6e:d2:23:34:f1:5f:f6:dc:cb:c5:6e:5f:99:1d:76: dc:8a:f3:39:46:f2:31:55:91:ee:ac:51:89:49:21: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B1:C9:AF:F0:DA:D9:C1:EE:60:42:EA:31:B4:6E:57:CC:8D:7C:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl X509v3 Authority Key Identifier: keyid:47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d6:ad:37:58:d0:0d:a5:bd:7e:58:92:9c:bd:25:66:d9:ae: 71:40:f5:d1:93:24:86:80:4f:f5:75:f3:0c:ab:d6:a8:bc:5c: 57:63:f1:be:13:75:74:a6:9d:00:d8:d5:db:12:6e:33:5a:9e: d1:47:92:da:9f:23:d6:18:77:43:85:49:56:bf:de:bf:3a:df: c6:d9:83:c7:50:31:1f:78:87:32:ef:83:a0:ea:3a:79:21:bd: db:58:a3:29:14:8b:84:c6:96:76:b5:7e:a7:75:54:db:4d:53: c0:66:35:7c:a5:77:f2:76:c9:7d:c1:42:bf:43:4f:3a:cb:dd: b9:7d:16:c8:79:58:66:07:ab:17:53:8f:cc:55:a0:a2:97:08: eb:e2:2b:16:90:eb:e4:cb:26:96:83:f8:6b:01:3c:bd:c9:d3: e5:3d:4f:0f:de:32:c5:02:66:e1:b7:f2:b3:5b:ac:2d:c2:ee: 73:bd:87:de:b8:d5:ff:05:a3:c8:1d:0e:0f:61:07:88:24:e4: 4e:8c:a2:dd:c6:a0:52:43:b5:0b:90:d2:a6:ca:b1:b9:18:73: b4:b5:fc:e8:43:3f:b9:f3:51:58:43:9d:6f:0d:5f:23:85:41: 7d:e4:00:32:3b:69:ff:f3:2e:82:8f:55:b9:bf:d3:49:55:9f: f3:fb:9c:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExEQMeYUbzMwR9gjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3MWU5NWMtZTQ4NC00YjUzLTkxZmYtZTE0ZDMzZWFh MmE2MB4XDTI1MTIyMjAyMDAwNFoXDTI1MTIyNDAyMDAwMFowLzEtMCsGA1UEAxMk NWQwODU1MjItOGJkZi00ZDUxLWI5YzktNDJkNTc1YzdiZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZKWV5u7OG1s7gfgAKqYXmZ8RvIoxL8xuuKy BGc5DRSKQVcaxhNBpJj6ZMnizbBmY5JUBhuW0LbiX33HnSisgqN2r4PvJ6KbZPpL PYl21d+kKAETAJvXxmrDa58DGI3CUglxte3dAMBhg1UiJnaOtOIxmotF60VaE6IY X4xQnCzImdbwdx+GxNUeqKoLcQntwpGQTgJBmbHZA/IzCxwr2wAtnJBwAQAE/RIS gPXWfU+uWgHbANl7pPZTuV2zGAnKt264amDSNnF9GF9wXRZBJT/nX2O2BCI+NgfY Cry7zHVu0iM08V/23MvFbl+ZHXbcivM5RvIxVZHurFGJSSEZFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIKxya/w2tnB7mBC6jG0blfMjXzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcx ZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRkMzNlYWEyYTYvZDY3MWU5NWMtZTQ4NC00 YjUzLTkxZmYtZTE0ZDMzZWFhMmE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDY3MWU5NWMtZTQ4NC00YjUzLTkx ZmYtZTE0ZDMzZWFhMmE2L2Q2NzFlOTVjLWU0ODQtNGI1My05MWZmLWUxNGQzM2Vh YTJhNi5jcmwwHwYDVR0jBBgwFoAUR9sbpctPjkRcwmwsWddit+ypMW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcxZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRk MzNlYWEyYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBc1q03WNANpb1+WJKcvSVm 2a5xQPXRkySGgE/1dfMMq9aovFxXY/G+E3V0pp0A2NXbEm4zWp7RR5LanyPWGHdD hUlWv96/Ot/G2YPHUDEfeIcy74Og6jp5Ib3bWKMpFIuExpZ2tX6ndVTbTVPAZjV8 pXfydsl9wUK/Q086y925fRbIeVhmB6sXU4/MVaCilwjr4isWkOvkyyaWg/hrATy9 ydPlPU8P3jLFAmbht/KzW6wtwu5zvYfeuNX/BaPIHQ4PYQeIJOROjKLdxqBSQ7UL kNKmyrG5GHO0tfzoQz+581FYQ51vDV8jhUF95AAyO2n/8y6Cj1W5v9NJVZ/z+5xG -----END CERTIFICATE-----Generated at Tue Dec 23 00:43:43 2025 by rpki-client