This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft File: caf19008-048f-4580-9101-f0d1eb7fc3ae.mft (raw, json) Hash identifier: hjBJQ/NdIkKrjJahH1T72NaEnUUKPyrRE0pnT3RhEnM= Subject key identifier: 33:D0:6E:A7:2F:3D:E5:CC:1F:02:E5:69:34:AF:90:DC:18:C0:A7:FD Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584C47A065AFD9A94F6727676B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft Manifest number: 010D0C9F4328584073A84561B07C62D8C8FAA1D6 Signing time: Tue 23 Dec 2025 07:00:08 +0000 Manifest this update: Tue 23 Dec 2025 07:00:08 +0000 Manifest next update: Fri 26 Dec 2025 07:00:00 +0000 Files and hashes: 1: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (hash: LprQpzEECX+liWqilk9BrMHjerkbBN2z+kCpe43yrxE=) 2: a45902da-9e70-3943-a932-51f817256e75.roa (hash: YOPIAP9M3QnL9vkDsrBvzxiagMzIO5nJt4NR/B12uFE=) 3: caf19008-048f-4580-9101-f0d1eb7fc3ae.crl (hash: NUgpf3j/EZWDefqCF1niw5iATkMlsBk4XJGbziPscvg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:47:a0:65:af:d9:a9:4f:67:27:67:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Dec 23 07:00:08 2025 GMT Not After : Dec 26 07:00:00 2025 GMT Subject: CN=5e7952e1-711c-42b5-b924-c9c31887e88c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:10:20:54:a8:ae:f5:44:3a:4f:20:47:7e:73: b6:ac:d3:90:aa:96:9f:f1:17:66:5f:f6:52:9a:99: b4:41:45:53:c4:72:4b:37:86:de:4a:9f:20:01:82: 37:07:3e:fc:05:54:de:ba:db:e1:2d:f0:4f:41:27: 25:7e:be:c6:08:a5:20:c9:e5:3f:56:a3:f7:b4:9b: e0:dd:c1:cb:78:ff:83:3c:44:01:86:e3:0b:48:a9: 37:3d:4a:1b:d4:db:16:6f:e4:f0:e9:64:c8:e5:84: 5b:c7:9d:2a:b7:21:a5:1e:ed:fd:9b:76:d3:a8:2d: 42:15:9c:bf:11:6c:2d:77:84:9d:d5:c4:ba:76:f4: b0:da:83:67:e4:ea:f9:c8:4e:24:75:1a:d8:ec:53: 34:14:f5:69:73:65:81:a6:dd:6a:7c:07:0f:ef:a8: b2:3b:b1:12:cb:c0:8f:80:27:b5:70:8e:63:92:8d: ce:7f:93:7a:10:23:17:88:b3:a6:94:00:78:07:b9: c9:35:2e:15:60:20:df:be:77:40:38:35:9b:46:47: 8a:73:a2:28:0d:bc:65:0a:fb:32:50:fe:bf:2e:54: 98:a2:aa:8f:6a:4c:11:99:fd:92:81:cc:04:a6:66: 60:76:20:19:16:c2:0c:ca:f1:2e:ed:9b:b2:0f:0e: bd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D0:6E:A7:2F:3D:E5:CC:1F:02:E5:69:34:AF:90:DC:18:C0:A7:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d2:be:ba:6d:61:65:1a:27:91:fa:c3:df:97:f3:47:ae:c4: 86:2b:46:00:07:69:64:93:27:83:10:2a:66:fb:67:49:37:2d: 55:58:8f:ec:a7:f1:46:22:76:78:fe:d0:79:10:01:c7:52:24: 1a:55:8f:ae:cd:67:c8:97:8e:90:ea:53:70:ce:71:97:15:76: a3:29:30:96:9f:18:4b:f4:8c:f6:0d:26:27:66:2e:ab:99:9c: 18:22:e5:d9:26:be:7a:91:d0:f8:8a:bc:c0:02:28:9f:ee:7f: 1b:4b:1a:b9:f2:d0:fb:04:03:c4:ca:03:85:21:0d:5e:9b:fc: bf:45:bf:e1:6b:02:5a:da:6c:e9:4c:fc:9c:32:e7:0a:04:b3: 99:e1:88:f4:ba:32:f2:d9:5d:47:1f:33:66:86:8a:97:8e:21: 16:a0:09:85:81:4c:32:ac:56:4d:e4:d5:71:b7:73:16:77:af: 97:c2:78:d2:1a:04:c9:e4:a0:d9:60:78:79:35:ca:19:7e:b7: 9f:1e:b5:5f:01:60:8f:3e:64:02:ec:5d:6f:69:7b:7e:ea:cf: ae:76:20:b9:6b:bc:2f:2e:0f:36:95:cd:21:0b:dd:aa:17:53: 64:0d:89:85:e6:b7:0b:05:24:81:58:2a:dc:14:d0:e6:83:b2: 4b:47:4e:02 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExHoGWv2alPZydna4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI1MTIyMzA3MDAwOFoXDTI1MTIyNjA3MDAwMFowLzEtMCsGA1UEAxMk NWU3OTUyZTEtNzExYy00MmI1LWI5MjQtYzljMzE4ODdlODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hAgVKiu9UQ6TyBHfnO2rNOQqpaf8RdmX/ZS mpm0QUVTxHJLN4beSp8gAYI3Bz78BVTeutvhLfBPQSclfr7GCKUgyeU/VqP3tJvg 3cHLeP+DPEQBhuMLSKk3PUob1NsWb+Tw6WTI5YRbx50qtyGlHu39m3bTqC1CFZy/ EWwtd4Sd1cS6dvSw2oNn5Or5yE4kdRrY7FM0FPVpc2WBpt1qfAcP76iyO7ESy8CP gCe1cI5jko3Of5N6ECMXiLOmlAB4B7nJNS4VYCDfvndAODWbRkeKc6IoDbxlCvsy UP6/LlSYoqqPakwRmf2SgcwEpmZgdiAZFsIMyvEu7ZuyDw69lwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDPQbqcvPeXMHwLlaTSvkNwYwKf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvY2FmMTkwMDgtMDQ4Zi00 NTgwLTkxMDEtZjBkMWViN2ZjM2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBL0r66bWFlGieR+sPfl/NH rsSGK0YAB2lkkyeDECpm+2dJNy1VWI/sp/FGInZ4/tB5EAHHUiQaVY+uzWfIl46Q 6lNwznGXFXajKTCWnxhL9Iz2DSYnZi6rmZwYIuXZJr56kdD4irzAAiif7n8bSxq5 8tD7BAPEygOFIQ1em/y/Rb/hawJa2mzpTPycMucKBLOZ4Yj0ujLy2V1HHzNmhoqX jiEWoAmFgUwyrFZN5NVxt3MWd6+XwnjSGgTJ5KDZYHh5NcoZfrefHrVfAWCPPmQC 7F1vaXt+6s+udiC5a7wvLg82lc0hC92qF1NkDYmF5rcLBSSBWCrcFNDmg7JLR04C -----END CERTIFICATE-----Generated at Tue Dec 23 09:11:38 2025 by rpki-client