This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft File: 958d43d9-c341-46e7-b131-b154f01666e6.mft (raw, json) Hash identifier: SkdO050PkF+blQIMiQtPAy16IkvhazLz/jCGqcKIcYk= Subject key identifier: 2F:78:AA:A5:97:72:07:E0:F3:EB:58:09:67:54:8E:38:0B:97:9D:6F Authority key identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 Certificate issuer: /CN=958d43d9-c341-46e7-b131-b154f01666e6 Certificate serial: 010D0C9F4328584C461D49131AFFA42B79F06D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft Manifest number: 010D0C9F4328584BD94681EE9FBA368680781228 Signing time: Mon 22 Dec 2025 18:00:08 +0000 Manifest this update: Mon 22 Dec 2025 18:00:08 +0000 Manifest next update: Wed 24 Dec 2025 18:00:00 +0000 Files and hashes: 1: 958d43d9-c341-46e7-b131-b154f01666e6.crl (hash: kXZH6fdrqkOekauPhM0JZsTKvg6JW5GSNlaXAQ5R3Tw=) 2: 990b7dd1-611c-3ea1-aafc-3d83c74060da.roa (hash: +2RG2XyqrViC1GJm5KPhMlewX2BZOT+K3skLvQSEgRM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:46:1d:49:13:1a:ff:a4:2b:79:f0:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958d43d9-c341-46e7-b131-b154f01666e6 Validity Not Before: Dec 22 18:00:08 2025 GMT Not After : Dec 24 18:00:00 2025 GMT Subject: CN=c7895727-b825-43ba-a4d4-a25d9e64e8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c0:61:4e:3f:cf:3c:6a:d8:9a:7d:75:25:65: 9f:ee:1d:e8:c0:93:1e:48:2c:bb:72:ec:c0:be:c5: aa:d4:52:70:b5:ef:c6:26:75:3d:4f:d4:2e:e0:2f: e0:28:d6:ed:fb:c0:8e:04:82:67:cc:95:d4:fb:bb: 0e:56:56:fa:75:e1:d6:e8:78:b4:44:e6:f5:91:8f: 9e:ac:d6:b1:8a:83:29:ef:25:42:4d:8b:40:22:15: e0:36:82:c3:23:f5:d3:ce:71:10:81:d9:3e:f3:b1: 2c:25:c4:a3:6b:95:32:14:8a:71:4f:af:17:7e:96: 3e:f0:18:90:ea:9c:e2:bb:69:af:80:97:d5:a4:8d: 2d:7b:17:54:43:c7:9e:c7:cc:7a:ea:74:23:a2:9e: fe:73:73:2d:c5:6a:db:7c:ad:bc:4b:3e:9e:b1:b7: 31:bb:17:d4:0b:1c:3a:e4:be:75:b0:db:a7:c3:04: 42:f1:de:f4:68:bd:52:ca:f0:a8:04:75:cf:83:a3: 6f:5b:85:b2:22:51:9b:db:2a:d8:ef:45:e2:16:71: ba:b0:21:f6:d0:47:4b:df:c0:65:6a:01:1d:85:92: d3:fa:b9:0b:56:29:49:14:54:0c:77:5a:b6:de:50: 7f:9f:a0:9b:2c:08:24:a1:f0:8a:89:58:7a:64:14: 90:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:78:AA:A5:97:72:07:E0:F3:EB:58:09:67:54:8E:38:0B:97:9D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl X509v3 Authority Key Identifier: keyid:E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:71:ce:1e:a2:34:e6:21:36:8b:e3:4c:97:11:d2:3c:07:25: 14:66:32:c5:5a:20:21:df:69:fe:cc:75:67:3d:c1:8c:94:93: a7:7e:3b:48:a6:fb:a9:ee:22:0d:e3:93:6c:c4:8b:4d:39:d8: 49:d6:9d:d8:32:de:4a:26:83:6a:29:6d:b3:e2:b1:23:8b:1e: 94:ee:fa:ed:03:47:11:ff:5d:39:97:32:d0:44:2e:03:e9:30: 34:c5:6f:16:ce:24:3c:5b:75:19:1f:ce:a1:83:3d:00:4a:b7: c8:6d:fe:40:63:12:13:f9:12:45:f7:65:bd:aa:26:41:82:e3: 0a:e7:51:89:37:0c:55:33:46:de:82:a0:a9:fe:5a:f4:42:85: 15:e6:90:7c:00:0b:e4:3d:a4:e2:42:31:83:f4:71:fc:66:3a: 02:9e:69:5e:fc:b8:22:41:8e:eb:39:ab:9e:b3:2b:06:ce:c8: b3:ce:d2:c2:03:3f:b0:f6:cc:b1:7a:7b:c8:f5:57:bf:f6:98: 6b:e1:29:16:cb:1c:4e:cb:f6:ee:65:f9:19:15:d9:0d:49:67: e8:b4:ee:4e:0c:ae:0b:75:2e:af:dc:61:cb:99:6c:c8:6a:d2: 15:e2:f1:3d:92:b7:37:7a:6d:60:db:e5:d3:4c:5b:c4:12:43: b8:bb:c5:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExGHUkTGv+kK3nwbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU4ZDQzZDktYzM0MS00NmU3LWIxMzEtYjE1NGYwMTY2 NmU2MB4XDTI1MTIyMjE4MDAwOFoXDTI1MTIyNDE4MDAwMFowLzEtMCsGA1UEAxMk Yzc4OTU3MjctYjgyNS00M2JhLWE0ZDQtYTI1ZDllNjRlOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcBhTj/PPGrYmn11JWWf7h3owJMeSCy7cuzA vsWq1FJwte/GJnU9T9Qu4C/gKNbt+8COBIJnzJXU+7sOVlb6deHW6Hi0ROb1kY+e rNaxioMp7yVCTYtAIhXgNoLDI/XTznEQgdk+87EsJcSja5UyFIpxT68XfpY+8BiQ 6pziu2mvgJfVpI0texdUQ8eex8x66nQjop7+c3MtxWrbfK28Sz6esbcxuxfUCxw6 5L51sNunwwRC8d70aL1SyvCoBHXPg6NvW4WyIlGb2yrY70XiFnG6sCH20EdL38Bl agEdhZLT+rkLVilJFFQMd1q23lB/n6CbLAgkofCKiVh6ZBSQZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC94qqWXcgfg8+tYCWdUjjgLl51vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThk NDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0ZjAxNjY2ZTYvOTU4ZDQzZDktYzM0MS00 NmU3LWIxMzEtYjE1NGYwMTY2NmU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTU4ZDQzZDktYzM0MS00NmU3LWIx MzEtYjE1NGYwMTY2NmU2Lzk1OGQ0M2Q5LWMzNDEtNDZlNy1iMTMxLWIxNTRmMDE2 NjZlNi5jcmwwHwYDVR0jBBgwFoAU5I/z/JUc+oBtA3Xf6as1wI5aKBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThkNDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0 ZjAxNjY2ZTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCacc4eojTmITaL40yXEdI8 ByUUZjLFWiAh32n+zHVnPcGMlJOnfjtIpvup7iIN45NsxItNOdhJ1p3YMt5KJoNq KW2z4rEjix6U7vrtA0cR/105lzLQRC4D6TA0xW8WziQ8W3UZH86hgz0ASrfIbf5A YxIT+RJF92W9qiZBguMK51GJNwxVM0begqCp/lr0QoUV5pB8AAvkPaTiQjGD9HH8 ZjoCnmle/LgiQY7rOauesysGzsizztLCAz+w9syxenvI9Ve/9phr4SkWyxxOy/bu ZfkZFdkNSWfotO5ODK4LdS6v3GHLmWzIatIV4vE9krc3em1g2+XTTFvEEkO4u8W5 -----END CERTIFICATE-----Generated at Tue Dec 23 03:43:51 2025 by rpki-client