This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft File: 3b72c968-d673-4a7a-bfec-4071a7be5317.mft (raw, json) Hash identifier: 2aR6ptZlcBCkFsIwUH1k6veCFIIVOB3qoAgF93ns1ZM= Subject key identifier: DA:70:86:2D:EA:9B:38:AC:51:88:23:4A:EC:7F:0C:3E:25:67:63:E5 Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F Certificate issuer: /CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Certificate serial: 010D0C9F4328584C404C57A0283F7003116C0C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft Manifest number: 010D0C9F4328584073A81BDF619690B6FD17C7A9 Signing time: Sat 20 Dec 2025 16:00:09 +0000 Manifest this update: Sat 20 Dec 2025 16:00:09 +0000 Manifest next update: Tue 23 Dec 2025 16:00:00 +0000 Files and hashes: 1: 0fb6d382-f0fb-39bb-a947-10e2bb7ff6d0.roa (hash: r1KzN2jUI4wF6eH4VRzFb1ye/D0wI3T8V/oC9NpJCyk=) 2: 3b72c968-d673-4a7a-bfec-4071a7be5317.crl (hash: 4tT24V2xBKT0/nV70WQppXEnnjKirr1w2Ba8uTpzxP4=) 3: 3df446ef-8f84-35ef-9354-563bf5792560.roa (hash: /+y4mV0rBVBGGp12rDwxD4nYlxOEEauEgJcDnCsnLSk=) 4: 828c35a4-d70a-329b-afc8-43f0c6744f3e.roa (hash: 66ZCbTqNoMjitCCWKpU+phTH0cYKb5ztTfVb720rYUM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:4c:57:a0:28:3f:70:03:11:6c:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317 Validity Not Before: Dec 20 16:00:09 2025 GMT Not After : Dec 23 16:00:00 2025 GMT Subject: CN=25dd51fc-5404-4a22-9fd4-2e0d7f5a265d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:17:c2:56:47:0b:57:8d:e9:bc:6a:30:04:d2: ae:0e:96:c5:ec:e2:87:6f:97:d2:14:03:59:46:57: c9:27:fc:fe:7d:dc:20:49:90:bc:bc:84:ed:f2:d0: 65:44:7d:56:e7:45:d7:38:b5:53:ca:4d:53:32:a6: 23:43:b5:55:12:65:58:97:40:44:c0:b9:eb:96:33: 23:77:cf:6a:61:47:05:60:00:ab:ec:09:0b:90:ce: 0b:b0:d1:4e:f5:5e:55:1c:dc:a2:ee:78:1c:68:94: db:91:e7:72:90:e3:ab:93:6c:f2:5c:d8:ad:3f:3e: b3:aa:27:7f:7f:8b:8f:e1:31:46:fe:c7:24:57:d3: e9:13:80:e9:85:e0:00:2b:24:cd:48:d9:23:3d:ed: 8d:16:ad:85:62:69:f4:de:4c:d0:73:76:15:d9:7e: dd:b0:ae:72:ef:ca:e9:2c:82:a7:a9:76:1e:f1:2c: bf:de:01:b5:97:01:45:eb:75:67:45:52:a6:9c:91: b8:70:f5:26:b8:8c:ba:41:ac:bf:1b:7e:9f:83:0b: 75:be:fa:14:9a:0b:ee:3c:da:4b:90:65:22:a1:d7: b1:16:1e:ad:cf:2c:f1:55:21:e0:54:86:31:d1:e0: 61:aa:ee:4f:cc:1c:e5:d0:74:55:52:ed:d7:ee:87: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:70:86:2D:EA:9B:38:AC:51:88:23:4A:EC:7F:0C:3E:25:67:63:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl X509v3 Authority Key Identifier: keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:5b:99:bf:f5:14:66:30:e5:eb:f0:09:fa:a6:c7:55:c2:26: 90:24:21:78:de:a4:3a:79:44:bb:25:86:fd:6e:2b:93:d9:ed: 48:8c:15:de:2a:44:b0:1d:ce:69:36:04:4b:d0:66:ac:9a:e3: 98:93:05:89:12:fb:26:80:90:c9:c0:02:a8:a6:f0:e5:45:84: d6:a9:be:95:27:0c:b8:b4:44:ef:36:93:3c:4b:7a:50:11:ae: b4:2f:ba:6b:ee:86:1b:43:a6:58:8e:ce:bf:17:19:e3:16:b8: fc:74:ba:bc:e2:e1:f3:18:9a:f7:3b:77:b3:e5:c6:e2:95:4a: 96:2d:6d:8d:aa:f6:99:f4:cc:e5:c9:f4:93:a5:7a:d9:e4:d5: aa:28:10:6e:1c:7b:2f:46:38:a4:6d:7f:32:c5:24:e8:63:2d: 83:d7:94:05:d2:43:d7:39:65:87:d8:37:97:49:77:22:37:2f: 09:de:44:d9:38:c1:ea:e3:01:8f:7d:aa:fe:2f:e5:ae:e9:c7: 91:cf:54:7e:35:ac:f6:88:3b:6e:1a:63:b7:c5:7c:bd:bb:94: 11:47:55:28:a3:b4:39:02:46:74:f7:0a:cf:57:cc:90:ef:7e: af:7c:f8:52:eb:f4:f0:04:6b:cc:a8:21:28:61:fa:34:b2:5a: 8e:7f:7a:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExATFegKD9wAxFsDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I3MmM5NjgtZDY3My00YTdhLWJmZWMtNDA3MWE3YmU1 MzE3MB4XDTI1MTIyMDE2MDAwOVoXDTI1MTIyMzE2MDAwMFowLzEtMCsGA1UEAxMk MjVkZDUxZmMtNTQwNC00YTIyLTlmZDQtMmUwZDdmNWEyNjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRfCVkcLV43pvGowBNKuDpbF7OKHb5fSFANZ RlfJJ/z+fdwgSZC8vITt8tBlRH1W50XXOLVTyk1TMqYjQ7VVEmVYl0BEwLnrljMj d89qYUcFYACr7AkLkM4LsNFO9V5VHNyi7ngcaJTbkedykOOrk2zyXNitPz6zqid/ f4uP4TFG/sckV9PpE4DpheAAKyTNSNkjPe2NFq2FYmn03kzQc3YV2X7dsK5y78rp LIKnqXYe8Sy/3gG1lwFF63VnRVKmnJG4cPUmuIy6Qay/G36fgwt1vvoUmgvuPNpL kGUiodexFh6tzyzxVSHgVIYx0eBhqu5PzBzl0HRVUu3X7ofx4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNpwhi3qmzisUYgjSux/DD4lZ2PlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcy Yzk2OC1kNjczLTRhN2EtYmZlYy00MDcxYTdiZTUzMTcvM2I3MmM5NjgtZDY3My00 YTdhLWJmZWMtNDA3MWE3YmU1MzE3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2I3MmM5NjgtZDY3My00YTdhLWJm ZWMtNDA3MWE3YmU1MzE3LzNiNzJjOTY4LWQ2NzMtNGE3YS1iZmVjLTQwNzFhN2Jl NTMxNy5jcmwwHwYDVR0jBBgwFoAU1NBs4Y/5cx1TIiNtNj849oEDtW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zYjcyYzk2OC1kNjczLTRhN2EtYmZlYy00MDcx YTdiZTUzMTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvW5m/9RRmMOXr8An6psdV wiaQJCF43qQ6eUS7JYb9biuT2e1IjBXeKkSwHc5pNgRL0GasmuOYkwWJEvsmgJDJ wAKopvDlRYTWqb6VJwy4tETvNpM8S3pQEa60L7pr7oYbQ6ZYjs6/FxnjFrj8dLq8 4uHzGJr3O3ez5cbilUqWLW2NqvaZ9MzlyfSTpXrZ5NWqKBBuHHsvRjikbX8yxSTo Yy2D15QF0kPXOWWH2DeXSXciNy8J3kTZOMHq4wGPfar+L+Wu6ceRz1R+Naz2iDtu GmO3xXy9u5QRR1Uoo7Q5AkZ09wrPV8yQ736vfPhS6/TwBGvMqCEoYfo0slqOf3qQ -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:37 2025 by rpki-client