This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft File: caf19008-048f-4580-9101-f0d1eb7fc3ae.mft (raw, json) Hash identifier: a6lE1ACosbMG5+88txHHwvAA9Jvvsc2eJhdeksk1i8E= Subject key identifier: 09:40:C0:68:9E:43:10:15:3C:4A:E4:C4:CC:F6:C9:21:E5:49:1F:2D Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584C500065F44F3FA9183E2E2B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft Manifest number: 010D0C9F4328584073A84561B07C62D8C8FAA1D9 Signing time: Fri 26 Dec 2025 07:00:04 +0000 Manifest this update: Fri 26 Dec 2025 07:00:04 +0000 Manifest next update: Sun 28 Dec 2025 07:00:00 +0000 Files and hashes: 1: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (hash: LprQpzEECX+liWqilk9BrMHjerkbBN2z+kCpe43yrxE=) 2: a45902da-9e70-3943-a932-51f817256e75.roa (hash: YOPIAP9M3QnL9vkDsrBvzxiagMzIO5nJt4NR/B12uFE=) 3: caf19008-048f-4580-9101-f0d1eb7fc3ae.crl (hash: AqHV4uFAyE48WR8tPt2AwDejJMVkS3vCXk+v4wR9tqM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:00:65:f4:4f:3f:a9:18:3e:2e:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Dec 26 07:00:04 2025 GMT Not After : Dec 28 07:00:00 2025 GMT Subject: CN=5c5b202b-872b-4df7-b6e8-7559af7fc3ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2d:83:6c:2d:99:2f:c7:8f:e8:5c:21:13:9e: 16:9f:88:76:fb:1a:c7:cf:e0:46:21:08:90:eb:f7: fb:c6:e3:ff:39:40:95:93:2f:c3:e1:46:7e:a6:48: ba:9f:f3:4e:e9:80:cf:05:b1:24:f2:41:bf:0f:7c: 07:34:81:28:62:06:32:66:af:3b:9f:f0:16:01:3a: b6:e6:d8:12:9a:1d:8a:34:e0:37:fe:1d:5f:84:77: fb:e8:ea:20:7f:67:29:ae:75:d2:ef:dc:e9:cc:6e: a4:89:91:0f:3f:53:be:46:82:33:3f:00:d4:75:0d: b0:12:d8:33:74:29:e5:38:d0:56:61:65:20:03:51: ff:aa:de:1d:9e:8e:45:0f:95:8b:2c:3b:0f:2e:4f: 85:53:9b:d2:f0:e7:d2:d0:e4:70:68:6b:89:c8:ec: cc:75:8c:5f:74:de:bb:dd:57:6f:f9:5b:24:84:45: ce:5d:78:34:fd:f9:22:cf:ef:48:b4:7b:46:52:df: c7:35:f2:f8:20:8a:41:b8:00:40:34:98:0d:72:8a: df:cc:73:26:88:3a:f0:7d:e3:82:a7:f3:5d:5f:36: 6c:35:98:f7:c2:09:7b:3e:f5:39:4d:09:3b:e0:72: b7:be:36:0d:5d:0e:b4:1c:e3:52:a9:57:c1:c6:b4: bc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:C0:68:9E:43:10:15:3C:4A:E4:C4:CC:F6:C9:21:E5:49:1F:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:31:dd:bc:85:c7:e3:28:15:7f:48:c6:6a:1f:ca:81:3f:d4: 33:3b:5c:07:d4:59:08:1e:b0:fa:6d:80:b9:03:28:0b:4d:3c: a2:5f:16:93:69:46:c3:45:8d:cd:57:13:62:0b:4f:a4:fc:68: ee:52:ea:6c:f3:3c:c4:81:70:ad:90:c0:08:f7:df:ec:05:6a: dc:de:eb:5b:60:fb:08:ab:1b:ca:30:c4:9b:23:2a:f1:c3:b6: 3b:d2:db:17:00:a7:93:35:1c:2a:42:16:fa:46:38:56:a8:7f: 1a:f2:42:92:30:f1:57:52:f9:9a:0d:b6:10:5f:55:e2:46:ef: 33:17:a1:d8:fc:dd:d3:c7:df:2b:d8:c7:e9:93:62:6c:d9:35: a2:3e:98:d0:24:bc:7a:ac:70:13:29:0d:52:93:50:79:91:e4: c9:64:77:f3:d5:89:d8:8f:3c:ec:bf:6f:42:3f:c7:9c:06:4d: c4:61:81:5d:3e:5d:bd:71:67:77:d0:74:d6:ea:91:77:38:a1: 81:ca:df:ad:3d:09:51:d3:3e:54:aa:57:dd:2a:94:79:04:4e: 5c:fd:7a:2a:ff:26:cf:3f:00:f4:6c:a5:42:cd:e2:6c:3e:36: 47:92:df:98:ff:0d:65:8b:f3:0d:26:8b:ef:79:95:30:97:9f: 36:5b:74:5a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExQAGX0Tz+pGD4uKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI1MTIyNjA3MDAwNFoXDTI1MTIyODA3MDAwMFowLzEtMCsGA1UEAxMk NWM1YjIwMmItODcyYi00ZGY3LWI2ZTgtNzU1OWFmN2ZjM2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4y2DbC2ZL8eP6FwhE54Wn4h2+xrHz+BGIQiQ 6/f7xuP/OUCVky/D4UZ+pki6n/NO6YDPBbEk8kG/D3wHNIEoYgYyZq87n/AWATq2 5tgSmh2KNOA3/h1fhHf76Oogf2cprnXS79zpzG6kiZEPP1O+RoIzPwDUdQ2wEtgz dCnlONBWYWUgA1H/qt4dno5FD5WLLDsPLk+FU5vS8OfS0ORwaGuJyOzMdYxfdN67 3Vdv+VskhEXOXXg0/fkiz+9ItHtGUt/HNfL4IIpBuABANJgNcorfzHMmiDrwfeOC p/NdXzZsNZj3wgl7PvU5TQk74HK3vjYNXQ60HONSqVfBxrS8/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAlAwGieQxAVPErkxMz2ySHlSR8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvY2FmMTkwMDgtMDQ4Zi00 NTgwLTkxMDEtZjBkMWViN2ZjM2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAuMd28hcfjKBV/SMZqH8qB P9QzO1wH1FkIHrD6bYC5AygLTTyiXxaTaUbDRY3NVxNiC0+k/GjuUups8zzEgXCt kMAI99/sBWrc3utbYPsIqxvKMMSbIyrxw7Y70tsXAKeTNRwqQhb6RjhWqH8a8kKS MPFXUvmaDbYQX1XiRu8zF6HY/N3Tx98r2Mfpk2Js2TWiPpjQJLx6rHATKQ1Sk1B5 keTJZHfz1YnYjzzsv29CP8ecBk3EYYFdPl29cWd30HTW6pF3OKGByt+tPQlR0z5U qlfdKpR5BE5c/Xoq/ybPPwD0bKVCzeJsPjZHkt+Y/w1li/MNJovveZUwl582W3Ra -----END CERTIFICATE-----Generated at Sat Dec 27 04:45:53 2025 by rpki-client