This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft File: caf19008-048f-4580-9101-f0d1eb7fc3ae.mft (raw, json) Hash identifier: me1YvAA9AXbPc2KbrEtojGsf21OgeKJ6IYhX58eN4gM= Subject key identifier: 5D:69:C0:5B:FE:6F:D7:B4:6C:CD:A6:56:6C:57:27:DC:5C:75:FC:3A Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584C5B2B2346B86487073CF67900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft Manifest number: 010D0C9F4328584073A84561B07C62D8C8FAA1DD Signing time: Tue 30 Dec 2025 07:00:03 +0000 Manifest this update: Tue 30 Dec 2025 07:00:03 +0000 Manifest next update: Thu 01 Jan 2026 07:00:00 +0000 Files and hashes: 1: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (hash: LprQpzEECX+liWqilk9BrMHjerkbBN2z+kCpe43yrxE=) 2: a45902da-9e70-3943-a932-51f817256e75.roa (hash: YOPIAP9M3QnL9vkDsrBvzxiagMzIO5nJt4NR/B12uFE=) 3: caf19008-048f-4580-9101-f0d1eb7fc3ae.crl (hash: 1PGtUk2f9yPQiP6odW14nGbY4YT/T/wVQplPdcy6LaE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5b:2b:23:46:b8:64:87:07:3c:f6:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Dec 30 07:00:03 2025 GMT Not After : Jan 1 07:00:00 2026 GMT Subject: CN=67fbecd0-dc18-4cfc-b37b-7a4b589d093e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:5c:47:a7:7d:05:b7:14:b4:a2:83:35:f2: 3e:ff:31:42:18:9e:1a:e5:9e:8d:14:4b:21:59:04: 30:6a:a8:24:a2:41:ba:42:f3:79:1c:31:4f:fb:3a: f4:25:8c:f2:19:93:78:ad:2f:b2:fa:e7:cf:c2:f3: 17:78:d4:bf:28:9d:da:70:f8:7f:a8:cf:f5:b7:92: 16:e1:f8:33:89:17:7d:93:ef:d7:9a:20:3b:16:8c: e4:4e:b9:89:8d:bd:db:7b:2d:fe:20:c7:ca:8a:10: 44:c7:c9:fb:06:e2:54:5f:65:a7:76:bd:b3:0f:eb: 67:4e:c4:dd:34:3e:82:b7:dc:2c:f7:8c:bf:cc:b6: 8b:5b:cd:33:74:f9:21:38:8e:38:91:59:12:6b:08: f1:40:2b:ad:50:c4:47:4c:da:52:d3:19:3c:7c:a1: 3e:1d:82:0a:f8:8c:c3:b8:43:80:ec:61:46:b4:9e: 49:a0:6c:2a:40:eb:3e:da:95:9f:00:54:1d:f6:2c: 11:05:35:2b:e7:b9:3b:ce:10:58:38:5d:97:1a:ba: 96:a3:fc:0d:b1:f0:76:9a:f6:49:53:af:db:d5:31: 78:b8:ea:2d:90:25:e0:c3:58:77:d1:a5:a3:5b:e5: a1:12:71:3c:bb:ba:f1:0c:f5:af:49:a2:31:98:0d: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:69:C0:5B:FE:6F:D7:B4:6C:CD:A6:56:6C:57:27:DC:5C:75:FC:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:63:62:11:c7:dd:a6:9d:27:ab:8d:d5:35:e0:e0:8b:e3:77: 0d:c6:7c:5d:af:39:fc:47:92:88:3d:10:ef:98:c5:73:85:7a: d1:24:9d:0f:f8:ff:e2:75:2d:32:4f:26:00:d3:9a:bf:b1:da: 73:e5:3a:31:65:c7:af:98:44:73:4a:96:13:f8:31:03:6c:36: aa:66:3c:08:d7:21:3e:52:76:f5:0b:a2:b6:02:2d:61:16:e0: 62:ad:3e:6d:21:95:e5:e7:57:1b:3c:b7:11:30:d4:47:a7:04: c1:eb:99:a8:67:cd:b1:2b:5b:29:22:b3:5b:23:7e:9b:8b:0a: f7:f5:c7:78:c8:be:bb:de:e9:54:99:d1:9f:e9:a8:a2:06:3a: ff:f5:6a:09:1d:5c:18:d4:02:da:6d:d7:95:9f:1e:75:c2:69: e3:be:33:aa:45:8b:56:18:6d:9b:5d:f0:46:58:4f:e3:d1:21: a7:12:b0:3c:2e:c5:49:25:42:cd:f0:ea:8f:ee:d0:53:88:9a: 90:b3:d2:cc:af:bb:23:af:f3:97:e7:de:90:85:b4:5a:b1:84: 28:18:b1:0f:b5:a2:79:e5:9c:59:21:d1:3c:0b:1a:01:95:7e: d2:ce:2c:ec:47:7b:44:0c:55:8d:d0:f2:02:cc:cc:2c:7a:42: 19:39:bf:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExbKyNGuGSHBzz2eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI1MTIzMDA3MDAwM1oXDTI2MDEwMTA3MDAwMFowLzEtMCsGA1UEAxMk NjdmYmVjZDAtZGMxOC00Y2ZjLWIzN2ItN2E0YjU4OWQwOTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXlcR6d9BbcUtKKDNfI+/zFCGJ4a5Z6NFEsh WQQwaqgkokG6QvN5HDFP+zr0JYzyGZN4rS+y+ufPwvMXeNS/KJ3acPh/qM/1t5IW 4fgziRd9k+/XmiA7FozkTrmJjb3bey3+IMfKihBEx8n7BuJUX2Wndr2zD+tnTsTd ND6Ct9ws94y/zLaLW80zdPkhOI44kVkSawjxQCutUMRHTNpS0xk8fKE+HYIK+IzD uEOA7GFGtJ5JoGwqQOs+2pWfAFQd9iwRBTUr57k7zhBYOF2XGrqWo/wNsfB2mvZJ U6/b1TF4uOotkCXgw1h30aWjW+WhEnE8u7rxDPWvSaIxmA1ogQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF1pwFv+b9e0bM2mVmxXJ9xcdfw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvY2FmMTkwMDgtMDQ4Zi00 NTgwLTkxMDEtZjBkMWViN2ZjM2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOY2IRx92mnSerjdU14OCL 43cNxnxdrzn8R5KIPRDvmMVzhXrRJJ0P+P/idS0yTyYA05q/sdpz5ToxZcevmERz SpYT+DEDbDaqZjwI1yE+Unb1C6K2Ai1hFuBirT5tIZXl51cbPLcRMNRHpwTB65mo Z82xK1spIrNbI36biwr39cd4yL673ulUmdGf6aiiBjr/9WoJHVwY1ALabdeVnx51 wmnjvjOqRYtWGG2bXfBGWE/j0SGnErA8LsVJJULN8OqP7tBTiJqQs9LMr7sjr/OX 596QhbRasYQoGLEPtaJ55ZxZIdE8CxoBlX7SzizsR3tEDFWN0PICzMwsekIZOb+z -----END CERTIFICATE-----Generated at Tue Dec 30 16:34:45 2025 by rpki-client