This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft File: 8d3868d4-1e91-4773-9cef-51b84f43c20e.mft (raw, json) Hash identifier: pFZoU5AIhElRiYxISaE/utMquOk5bre9MHbkbNuIFHI= Subject key identifier: 48:17:B1:64:F4:58:EA:F8:95:FE:7C:4C:A1:6D:95:63:4D:AD:67:63 Authority key identifier: C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A Certificate issuer: /CN=8d3868d4-1e91-4773-9cef-51b84f43c20e Certificate serial: 010D0C9F4328584C463B03894EA465B0CD30E600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft Manifest number: 010D0C9F4328584073A81F5B29C8A372777F4E56 Signing time: Mon 22 Dec 2025 19:00:03 +0000 Manifest this update: Mon 22 Dec 2025 19:00:03 +0000 Manifest next update: Thu 25 Dec 2025 19:00:00 +0000 Files and hashes: 1: 542db07c-1ce5-3496-a24b-1970b9d4bceb.roa (hash: hSXfGRWhpCsh5IO6NJYpwURiZQB+EioU5mQpzu+ntHQ=) 2: 8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa (hash: 8Y84OtAOh1G8JSGYRBSnoAQoxXRdW+jAQ9zUYIBUJYc=) 3: 8d3868d4-1e91-4773-9cef-51b84f43c20e.crl (hash: n0SwJFN7ejIEm72T6pGhD+RqJhEnLA77homb7drIRIY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:46:3b:03:89:4e:a4:65:b0:cd:30:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3868d4-1e91-4773-9cef-51b84f43c20e Validity Not Before: Dec 22 19:00:03 2025 GMT Not After : Dec 25 19:00:00 2025 GMT Subject: CN=d62e1650-7811-4683-909d-52b6c42aacca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:27:63:b6:98:68:d9:87:c7:16:af:6f:57:15: b2:a0:2a:03:d5:a0:e7:95:b1:0d:98:60:35:41:7a: 57:dc:a8:70:c6:7c:bd:5c:09:ec:69:ca:0e:8b:ae: 9f:1f:8f:de:55:f0:a0:3e:75:85:dd:c2:6d:f1:55: 7b:6a:43:93:d7:58:e8:37:aa:1b:de:5c:bb:85:ba: 69:ba:1f:b0:2f:8c:86:21:ec:b6:1d:d9:cb:44:a2: f3:b5:78:8f:a5:7d:0e:8d:3e:d4:1e:b8:d9:f0:62: 7f:8d:80:87:b7:dd:1a:5f:4f:a1:60:59:8e:96:e6: cf:35:5c:d6:8b:6e:14:3e:fe:5e:17:74:00:ee:b7: 14:1d:85:2b:69:67:1c:d0:6e:11:eb:13:e3:cd:fc: 20:81:ef:35:df:40:ff:d1:68:55:b5:3e:d2:00:b4: cd:3e:12:f8:27:ee:ee:c6:a9:5a:66:47:0b:95:89: eb:c6:39:be:22:3d:6a:c0:84:a2:de:d3:87:04:90: 41:00:b5:fc:77:3c:21:74:38:23:73:22:fc:2a:f1: 87:fd:1a:fe:73:d3:e3:fd:09:1a:8e:5c:22:8b:54: 73:10:26:72:c3:5a:d4:a3:7a:55:78:f2:04:49:1d: df:f1:7a:30:82:8a:34:d5:6f:3a:9e:fd:47:91:7a: 79:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:17:B1:64:F4:58:EA:F8:95:FE:7C:4C:A1:6D:95:63:4D:AD:67:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl X509v3 Authority Key Identifier: keyid:C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:b0:f1:03:4c:61:ca:15:4a:d3:9f:b5:58:46:fc:61:2f:25: 9e:7d:ec:6d:40:55:24:69:05:6d:fa:66:13:57:bd:80:bc:a6: 48:00:0a:72:f6:44:7b:1d:3f:86:4e:db:c4:54:eb:64:61:34: a0:62:f2:d7:5e:f5:cf:3a:85:3a:85:aa:65:58:84:fe:b0:cd: 6e:28:6c:07:cf:e8:43:11:7f:e1:83:2d:2e:56:7d:8b:91:03: b3:8a:0a:e1:e2:44:ae:0c:72:cc:8d:a7:85:56:a9:8b:b0:d8: 29:19:e0:89:e2:65:7d:50:7a:05:5a:25:58:56:7c:17:4d:3f: a5:ad:ce:20:de:cb:15:94:91:bf:8f:37:0e:0c:b6:16:02:81: cf:8b:11:13:7d:5e:7b:a7:36:9c:00:73:f9:37:47:41:13:ef: 4a:a5:50:35:18:19:f0:82:2a:bf:7c:45:dd:72:bb:31:40:57: 64:9c:1b:2f:db:ec:72:e4:2e:2e:53:11:56:81:0f:aa:14:75: 4d:06:63:22:92:6c:8f:3c:c0:6d:c3:db:de:35:85:80:bc:f5: 97:2a:0a:86:21:d9:cc:37:6b:07:6f:ba:10:c5:47:60:13:c5: 52:06:f6:60:a6:89:44:86:e0:f5:71:33:b9:02:07:e5:32:da: 1b:9c:f4:60 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExGOwOJTqRlsM0w5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzODY4ZDQtMWU5MS00NzczLTljZWYtNTFiODRmNDNj MjBlMB4XDTI1MTIyMjE5MDAwM1oXDTI1MTIyNTE5MDAwMFowLzEtMCsGA1UEAxMk ZDYyZTE2NTAtNzgxMS00NjgzLTkwOWQtNTJiNmM0MmFhY2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiydjtpho2YfHFq9vVxWyoCoD1aDnlbENmGA1 QXpX3Khwxny9XAnsacoOi66fH4/eVfCgPnWF3cJt8VV7akOT11joN6ob3ly7hbpp uh+wL4yGIey2HdnLRKLztXiPpX0OjT7UHrjZ8GJ/jYCHt90aX0+hYFmOlubPNVzW i24UPv5eF3QA7rcUHYUraWcc0G4R6xPjzfwgge8130D/0WhVtT7SALTNPhL4J+7u xqlaZkcLlYnrxjm+Ij1qwISi3tOHBJBBALX8dzwhdDgjcyL8KvGH/Rr+c9Pj/Qka jlwii1RzECZyw1rUo3pVePIESR3f8Xowgoo01W86nv1HkXp5EwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEgXsWT0WOr4lf58TKFtlWNNrWdjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZDM4 NjhkNC0xZTkxLTQ3NzMtOWNlZi01MWI4NGY0M2MyMGUvOGQzODY4ZDQtMWU5MS00 NzczLTljZWYtNTFiODRmNDNjMjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGQzODY4ZDQtMWU5MS00NzczLTlj ZWYtNTFiODRmNDNjMjBlLzhkMzg2OGQ0LTFlOTEtNDc3My05Y2VmLTUxYjg0ZjQz YzIwZS5jcmwwHwYDVR0jBBgwFoAUw99vQ7x1F08JDM2+r7OE9K3N9gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZDM4NjhkNC0xZTkxLTQ3NzMtOWNlZi01MWI4 NGY0M2MyMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDDsPEDTGHKFUrTn7VYRvxh LyWefextQFUkaQVt+mYTV72AvKZIAApy9kR7HT+GTtvEVOtkYTSgYvLXXvXPOoU6 haplWIT+sM1uKGwHz+hDEX/hgy0uVn2LkQOzigrh4kSuDHLMjaeFVqmLsNgpGeCJ 4mV9UHoFWiVYVnwXTT+lrc4g3ssVlJG/jzcODLYWAoHPixETfV57pzacAHP5N0dB E+9KpVA1GBnwgiq/fEXdcrsxQFdknBsv2+xy5C4uUxFWgQ+qFHVNBmMikmyPPMBt w9veNYWAvPWXKgqGIdnMN2sHb7oQxUdgE8VSBvZgpolEhuD1cTO5AgflMtobnPRg -----END CERTIFICATE-----Generated at Tue Dec 23 05:19:59 2025 by rpki-client