This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft File: 21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft (raw, json) Hash identifier: EhOhcNpduzJlCrpoZjYyFYU7+3Q5EhS8I8ZhWRcy90s= Subject key identifier: A8:7D:63:64:99:9B:E9:50:95:28:D1:E6:21:BB:92:AC:95:5B:33:DC Authority key identifier: D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA Certificate issuer: /CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Certificate serial: 010D0C9F4328584C47DBF27C7F95E47A7A55E9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft Manifest number: 010D0C9F4328584073A849401CA199B6CDC9636D Signing time: Tue 23 Dec 2025 09:00:08 +0000 Manifest this update: Tue 23 Dec 2025 09:00:08 +0000 Manifest next update: Fri 26 Dec 2025 09:00:00 +0000 Files and hashes: 1: 21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl (hash: rgt1Z/6x2GUIf23MkLv1RQLJJomICsPf6KGygbukT8c=) 2: 63555432-fed5-3827-95ba-2c1139e7a9ac.roa (hash: B0JT82B4+T/YG2hAza8o0LHpEAED4eYTQw8ToulbqHc=) 3: aefb5437-6034-3391-9329-ca5ca351ea5d.roa (hash: YfEzSILi0AR86cYd+SmW0g0XcL4EqSXyRbBye/OcbvI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:db:f2:7c:7f:95:e4:7a:7a:55:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21ea1051-d2f6-49a6-a553-b75eb9b83b11 Validity Not Before: Dec 23 09:00:08 2025 GMT Not After : Dec 26 09:00:00 2025 GMT Subject: CN=6e0a596f-b16e-48cb-b12d-548af0f25774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:54:d2:43:ad:4d:f4:8a:8b:22:3f:1e:1a:52: f5:f3:b5:70:46:5a:cd:43:57:2a:54:65:6d:92:9c: 6e:ae:0d:ce:c5:62:4c:fb:f5:43:47:4d:1c:d3:f7: 46:f0:f7:fe:c5:e3:c1:b0:6e:e3:45:51:5b:a7:c4: 3f:fd:ec:18:31:04:bf:59:ed:d1:f4:b2:10:6b:b6: 64:f1:70:f9:25:71:b3:79:59:a1:8d:0b:8d:9f:e2: cb:26:4a:64:45:57:25:21:9f:ce:d8:d0:2b:20:2c: 78:0e:60:48:03:5c:88:a1:df:d6:a2:22:ef:ba:0b: 9e:4a:4a:4e:fa:88:4b:39:8b:37:55:74:ed:6d:3b: a9:a6:9b:79:3a:70:43:4d:2b:e4:e8:d2:b2:0f:4e: e5:c3:e0:c9:68:f2:17:21:12:95:a0:ea:32:27:9f: 2f:f8:7e:14:68:6f:da:71:09:ed:5a:70:fd:c6:38: 69:f2:53:fa:52:b5:cd:cb:c2:9a:11:80:f9:d8:72: 5d:9e:23:09:05:23:a9:b1:b9:d7:40:6a:59:d5:1c: 00:7d:b4:30:f9:c0:15:fc:cf:48:02:0c:ac:2f:7c: c5:55:b7:82:54:6a:9d:7a:53:3f:d9:cb:d9:0d:fb: cf:00:3e:82:bd:16:93:3e:df:4c:45:82:32:c2:2a: 49:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7D:63:64:99:9B:E9:50:95:28:D1:E6:21:BB:92:AC:95:5B:33:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11/21ea1051-d2f6-49a6-a553-b75eb9b83b11.crl X509v3 Authority Key Identifier: keyid:D7:BF:EC:A6:38:B4:D6:C5:30:21:19:BE:09:A7:4F:2A:F2:6B:E3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/21ea1051-d2f6-49a6-a553-b75eb9b83b11.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:93:a1:0d:c5:c0:b8:76:05:8e:9b:9c:60:cc:75:65:92:f5: 8f:68:7f:f2:12:57:40:9b:ab:9a:be:57:4f:22:f0:93:49:f0: 8f:0e:4c:f7:e7:a6:55:c9:2d:2d:dc:c7:3d:f6:13:37:b8:9e: 39:19:dc:eb:b5:e9:16:ac:f1:52:13:5b:82:29:9a:8f:16:27: 94:d2:aa:de:00:49:92:49:8e:08:9e:1b:12:1e:fc:95:99:cb: 97:34:61:24:3d:f7:d9:00:39:21:3b:d6:04:2e:c7:21:b2:22: ee:bf:66:fb:10:f0:ea:70:33:09:42:6d:b4:39:5e:00:bf:dc: af:c9:7e:09:f3:4f:1a:1a:14:ce:9d:0a:c2:7a:4f:b6:a2:2d: 54:b5:a6:d1:fc:c7:b6:05:cd:4e:f2:5c:b3:1b:71:36:b9:ed: fa:ed:e8:5e:07:46:3c:7f:2c:3c:cf:5b:21:ca:3a:ac:d7:0e: c2:16:31:ef:35:9f:1e:75:6f:69:3a:cd:bc:7e:9e:d4:62:35: 2b:66:16:e7:00:7d:45:6c:1b:c6:fd:d8:e9:b0:8a:83:ad:14: aa:08:09:6a:66:61:41:f8:f5:6c:8e:f3:68:4f:07:33:ff:fc: 7c:1d:ea:cd:ec:c4:e5:b3:03:c4:cd:3c:e0:ee:5c:84:48:f9: 6f:a8:2b:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExH2/J8f5XkenpV6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlYTEwNTEtZDJmNi00OWE2LWE1NTMtYjc1ZWI5Yjgz YjExMB4XDTI1MTIyMzA5MDAwOFoXDTI1MTIyNjA5MDAwMFowLzEtMCsGA1UEAxMk NmUwYTU5NmYtYjE2ZS00OGNiLWIxMmQtNTQ4YWYwZjI1Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/VTSQ61N9IqLIj8eGlL187VwRlrNQ1cqVGVt kpxurg3OxWJM+/VDR00c0/dG8Pf+xePBsG7jRVFbp8Q//ewYMQS/We3R9LIQa7Zk 8XD5JXGzeVmhjQuNn+LLJkpkRVclIZ/O2NArICx4DmBIA1yIod/WoiLvugueSkpO +ohLOYs3VXTtbTupppt5OnBDTSvk6NKyD07lw+DJaPIXIRKVoOoyJ58v+H4UaG/a cQntWnD9xjhp8lP6UrXNy8KaEYD52HJdniMJBSOpsbnXQGpZ1RwAfbQw+cAV/M9I AgysL3zFVbeCVGqdelM/2cvZDfvPAD6CvRaTPt9MRYIywipJyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKh9Y2SZm+lQlSjR5iG7kqyVWzPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVh MTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVlYjliODNiMTEvMjFlYTEwNTEtZDJmNi00 OWE2LWE1NTMtYjc1ZWI5YjgzYjExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjFlYTEwNTEtZDJmNi00OWE2LWE1 NTMtYjc1ZWI5YjgzYjExLzIxZWExMDUxLWQyZjYtNDlhNi1hNTUzLWI3NWViOWI4 M2IxMS5jcmwwHwYDVR0jBBgwFoAU17/spji01sUwIRm+CadPKvJr4/owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMWVhMTA1MS1kMmY2LTQ5YTYtYTU1My1iNzVl YjliODNiMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAak6ENxcC4dgWOm5xgzHVl kvWPaH/yEldAm6uavldPIvCTSfCPDkz356ZVyS0t3Mc99hM3uJ45GdzrtekWrPFS E1uCKZqPFieU0qreAEmSSY4InhsSHvyVmcuXNGEkPffZADkhO9YELschsiLuv2b7 EPDqcDMJQm20OV4Av9yvyX4J808aGhTOnQrCek+2oi1UtabR/Me2Bc1O8lyzG3E2 ue367eheB0Y8fyw8z1shyjqs1w7CFjHvNZ8edW9pOs28fp7UYjUrZhbnAH1FbBvG /djpsIqDrRSqCAlqZmFB+PVsjvNoTwcz//x8HerN7MTlswPEzTzg7lyESPlvqCtY -----END CERTIFICATE-----Generated at Wed Dec 24 08:50:21 2025 by rpki-client