This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft File: cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft (raw, json) Hash identifier: CUS1eMHiN0qkt1TPKYE2SSheB8RduPct09z4tHDP86M= Subject key identifier: B2:89:8E:DE:2C:73:1D:29:C4:42:00:CE:F1:B6:16:F9:5C:8E:FF:15 Authority key identifier: 82:B6:6E:60:AF:4C:46:CB:04:58:D3:DF:12:5A:8F:B9:38:6F:8F:60 Certificate issuer: /CN=cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35 Certificate serial: 010D0C9F4328584C3DDAF51778A7C4F23640F48E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft Manifest number: 010D0C9F4328584B23E4D921A679524045491029 Signing time: Fri 19 Dec 2025 19:00:03 +0000 Manifest this update: Fri 19 Dec 2025 19:00:03 +0000 Manifest next update: Sun 21 Dec 2025 19:00:00 +0000 Files and hashes: 1: b0b7b93f-b3bc-3bed-8790-a7d7c2dece2c.roa (hash: WoKLTW+AuXNhPoJCDQgOEq0nMFz0xwambkUb7OuDtao=) 2: cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.crl (hash: ohzcO8Dju4VV/zon/d4ePOBoxdIW4nP+nbYi2CIP+Js=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:da:f5:17:78:a7:c4:f2:36:40:f4:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35 Validity Not Before: Dec 19 19:00:03 2025 GMT Not After : Dec 21 19:00:00 2025 GMT Subject: CN=4717b465-bc00-47cf-a60e-fe30be32756f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ea:53:ac:37:84:72:c2:cc:b6:92:d5:a4:47: 88:95:87:4c:e2:fc:d0:44:a2:86:7a:13:4c:a4:6e: 64:05:df:b0:33:4a:a9:4f:18:8b:0b:1b:3d:4b:2c: 06:02:9c:d1:e1:99:46:50:bd:98:07:e4:ea:17:77: 37:c4:79:11:c5:6b:ee:08:ef:ce:4e:86:db:79:8a: db:15:13:50:f2:3c:06:47:2e:82:cb:97:76:ef:1c: 7f:c9:e2:1d:3a:fd:b9:57:34:be:5c:65:e6:60:b2: a7:cf:a4:76:ab:bb:d7:f7:95:56:4a:03:de:85:cd: 5f:a8:2b:09:d9:50:ad:d8:05:1f:7f:e4:4d:2b:2f: 1d:27:a4:99:d5:69:7b:13:78:4d:a3:14:b4:4d:57: 54:08:71:fb:95:26:8c:77:f9:7a:ac:84:44:52:bd: 7c:0a:54:40:31:c6:67:c9:c4:6b:92:76:c0:6a:41: 7a:c1:71:1a:8d:5d:96:08:28:b9:70:81:94:e3:77: f6:99:15:77:0b:bc:19:b4:97:c5:db:86:3e:13:f0: 07:98:2a:51:a6:52:fc:ce:b0:9a:03:44:ba:93:f3: 65:0a:c5:6e:2f:f8:48:39:2b:eb:9c:3d:bc:14:c2: 3a:f1:30:ce:74:c0:e4:13:75:26:af:ac:77:79:2f: 7a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:89:8E:DE:2C:73:1D:29:C4:42:00:CE:F1:B6:16:F9:5C:8E:FF:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.crl X509v3 Authority Key Identifier: keyid:82:B6:6E:60:AF:4C:46:CB:04:58:D3:DF:12:5A:8F:B9:38:6F:8F:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cafb5180-eb65-4aa3-8ce0-9d2bd57e9a35.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:69:c9:ff:06:2d:4d:17:f5:d2:b6:3d:0a:22:2d:73:21:8f: f0:82:48:d3:47:45:97:bc:70:e2:e4:a3:69:cc:46:79:89:70: b6:87:eb:fb:66:6f:8c:3e:30:64:9d:6c:51:5c:47:45:31:f4: 31:e9:c0:d5:de:50:0a:4e:de:9e:cd:38:d6:d5:02:d5:87:05: 49:31:1b:5d:e7:f9:f1:ea:29:22:4f:f6:64:e6:84:8c:ae:26: 78:c4:4c:67:d6:a4:db:3b:c1:d9:50:87:a6:01:90:91:89:e9: ff:1f:5f:86:b2:7d:58:ba:35:24:03:c1:1b:70:ee:d6:54:e2: 19:97:f6:70:e7:1f:08:22:78:8e:6a:d8:a0:12:b7:7a:7e:2f: 3d:91:06:ea:15:06:aa:c4:0a:41:1f:d7:25:69:87:b3:d9:67: 0f:2c:a5:9d:11:ac:47:75:d9:f9:99:4b:15:b0:ac:ea:dd:9c: 2c:65:c7:60:f8:18:0c:89:e0:5b:80:6f:1b:0b:3a:7f:b0:38: 98:f4:f8:c3:1e:ab:49:8e:a7:cc:55:c0:98:73:77:83:b1:09: d0:aa:4d:26:9b:6d:dc:ea:02:6e:02:26:b8:05:28:4c:57:45: 10:5e:e8:86:32:36:9c:00:98:65:f9:4f:9f:2b:b1:27:c2:36: 31:5a:77:e8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw92vUXeKfE8jZA9I4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmYjUxODAtZWI2NS00YWEzLThjZTAtOWQyYmQ1N2U5 YTM1MB4XDTI1MTIxOTE5MDAwM1oXDTI1MTIyMTE5MDAwMFowLzEtMCsGA1UEAxMk NDcxN2I0NjUtYmMwMC00N2NmLWE2MGUtZmUzMGJlMzI3NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OpTrDeEcsLMtpLVpEeIlYdM4vzQRKKGehNM pG5kBd+wM0qpTxiLCxs9SywGApzR4ZlGUL2YB+TqF3c3xHkRxWvuCO/OTobbeYrb FRNQ8jwGRy6Cy5d27xx/yeIdOv25VzS+XGXmYLKnz6R2q7vX95VWSgPehc1fqCsJ 2VCt2AUff+RNKy8dJ6SZ1Wl7E3hNoxS0TVdUCHH7lSaMd/l6rIREUr18ClRAMcZn ycRrknbAakF6wXEajV2WCCi5cIGU43f2mRV3C7wZtJfF24Y+E/AHmCpRplL8zrCa A0S6k/NlCsVuL/hIOSvrnD28FMI68TDOdMDkE3Umr6x3eS96MwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLKJjt4scx0pxEIAzvG2Fvlcjv8VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jYWZi NTE4MC1lYjY1LTRhYTMtOGNlMC05ZDJiZDU3ZTlhMzUvY2FmYjUxODAtZWI2NS00 YWEzLThjZTAtOWQyYmQ1N2U5YTM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2FmYjUxODAtZWI2NS00YWEzLThj ZTAtOWQyYmQ1N2U5YTM1L2NhZmI1MTgwLWViNjUtNGFhMy04Y2UwLTlkMmJkNTdl OWEzNS5jcmwwHwYDVR0jBBgwFoAUgrZuYK9MRssEWNPfElqPuThvj2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jYWZiNTE4MC1lYjY1LTRhYTMtOGNlMC05ZDJi ZDU3ZTlhMzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCZacn/Bi1NF/XStj0KIi1z IY/wgkjTR0WXvHDi5KNpzEZ5iXC2h+v7Zm+MPjBknWxRXEdFMfQx6cDV3lAKTt6e zTjW1QLVhwVJMRtd5/nx6ikiT/Zk5oSMriZ4xExn1qTbO8HZUIemAZCRien/H1+G sn1YujUkA8EbcO7WVOIZl/Zw5x8IIniOatigErd6fi89kQbqFQaqxApBH9claYez 2WcPLKWdEaxHddn5mUsVsKzq3ZwsZcdg+BgMieBbgG8bCzp/sDiY9PjDHqtJjqfM VcCYc3eDsQnQqk0mm23c6gJuAia4BShMV0UQXuiGMjacAJhl+U+fK7EnwjYxWnfo -----END CERTIFICATE-----Generated at Sat Dec 20 18:57:54 2025 by rpki-client