This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft File: ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft (raw, json) Hash identifier: FoRau/+Tg2ZUwa4KHJpR5Yofbv34r1YRHQi/Pl+cVSo= Subject key identifier: 7C:77:14:8F:60:FC:94:7F:85:E7:00:FE:7D:3A:2A:36:33:33:D1:E7 Authority key identifier: 49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C Certificate issuer: /CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38 Certificate serial: 010D0C9F4328584C3DBD2DE6ADDCFBE5A84189A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft Manifest number: 010D0C9F432858452F858565F837B3C661B1B21E Signing time: Fri 19 Dec 2025 18:00:03 +0000 Manifest this update: Fri 19 Dec 2025 18:00:03 +0000 Manifest next update: Sun 21 Dec 2025 18:00:00 +0000 Files and hashes: 1: 35d3f806-ab98-3711-84ee-81f48a1a9349.roa (hash: mdfUlmGtAgdTfSO/gXfF30zwutTwo4mmoZbMYBx6Ky8=) 2: 79f5998a-9c67-3633-9ae6-274922dd2fed.roa (hash: 3VzyQvqwsvAllaTNNZwIx93kNTt8QPmJEg/OaRB936E=) 3: ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl (hash: ymr53pvvSdwn4H5SCiSlQa6p+po+T4SvG7gXtdsgylk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:bd:2d:e6:ad:dc:fb:e5:a8:41:89:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3b04a3-b7c1-4a03-9427-c1f03d810d38 Validity Not Before: Dec 19 18:00:03 2025 GMT Not After : Dec 21 18:00:00 2025 GMT Subject: CN=684d4933-ffbe-4f50-87e8-2b268bd9782b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:18:cf:4d:40:e3:dd:1a:75:a4:29:8f:5b:20: ba:e4:6d:1f:ed:23:85:32:80:72:c0:d4:32:81:74: 2e:99:61:0b:bc:d2:b7:21:26:77:66:37:d5:df:3a: 8b:bb:9d:95:03:40:b2:4f:bc:a7:9b:af:c5:4e:bf: 7a:ff:06:59:70:d5:c5:0a:cc:35:99:b5:8c:ab:16: e8:32:ce:e5:9c:ac:cb:ff:98:80:bc:50:9f:34:dc: e4:84:ae:93:f3:9f:b3:d6:11:50:5e:86:fc:78:45: 3a:b3:c2:00:ad:b7:98:e6:a7:5d:c8:16:8c:85:f5: a0:4c:cd:0b:a2:14:64:54:15:75:5c:b6:5a:9d:34: c0:ca:b3:17:f6:ef:c3:c4:2d:6a:9a:c2:5c:22:73: 92:63:a7:34:b1:e4:81:aa:0d:5e:61:88:7d:5e:b1: b7:f6:60:e3:80:6a:3a:fe:29:82:b5:30:7f:5b:96: 90:56:1f:ea:64:8b:13:7d:8b:cf:8b:cc:7c:d1:26: e2:42:bc:fe:4a:99:b4:82:3c:ed:c7:71:92:32:c7: e2:bc:87:a2:cc:65:cf:ff:93:6a:49:19:aa:56:b5: 14:18:1a:33:25:7c:d3:ab:be:f6:77:39:10:25:54: ab:63:e8:56:4b:8a:d7:2d:fb:26:95:83:13:35:ad: 47:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:77:14:8F:60:FC:94:7F:85:E7:00:FE:7D:3A:2A:36:33:33:D1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.crl X509v3 Authority Key Identifier: keyid:49:E5:0F:F8:E6:38:B2:38:6D:84:69:D2:BF:67:42:B6:FD:23:09:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ff3b04a3-b7c1-4a03-9427-c1f03d810d38.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2a:27:67:00:0d:5f:d8:63:8d:8b:17:7e:c5:8b:6d:78:ee: ae:79:9d:e6:86:08:1b:ad:82:2b:a4:ca:e2:e7:71:c0:a8:85: 00:53:42:39:f6:f7:78:bb:9f:72:7f:fe:07:56:21:02:5c:22: e8:b3:f6:f1:b7:49:af:c9:a7:ca:5e:b7:a4:d8:27:0c:1b:e0: 13:05:75:32:48:57:c0:90:0b:85:ec:c0:f8:25:99:01:83:ef: c1:54:e3:5e:c2:b2:56:b0:30:49:3a:12:28:c5:51:dd:e1:10: 24:2b:a1:ca:ed:b4:98:b4:26:9d:3e:f7:09:b0:66:50:2d:08: 1b:0f:67:ea:bf:7b:31:45:1d:eb:7d:57:1c:af:95:c5:80:f7: 35:60:75:04:79:d5:62:36:7c:1e:82:5d:1f:e8:ff:6e:26:81: 1a:d6:c5:89:90:69:70:90:7c:ac:a3:88:c1:c3:ea:99:19:14: eb:7e:0b:37:e3:12:54:01:13:c1:da:c4:64:03:36:91:96:3b: 57:34:fa:7b:d8:eb:c9:f4:f7:af:ca:a5:90:a1:70:5d:75:51: c4:68:3c:4d:17:d5:26:4f:45:c5:45:0d:37:e0:72:6b:df:7e: 36:43:f0:07:a5:68:41:bf:9d:d7:ec:89:af:74:53:3d:9d:49: 43:0f:c0:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw9vS3mrdz75ahBiaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzYjA0YTMtYjdjMS00YTAzLTk0MjctYzFmMDNkODEw ZDM4MB4XDTI1MTIxOTE4MDAwM1oXDTI1MTIyMTE4MDAwMFowLzEtMCsGA1UEAxMk Njg0ZDQ5MzMtZmZiZS00ZjUwLTg3ZTgtMmIyNjhiZDk3ODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xjPTUDj3Rp1pCmPWyC65G0f7SOFMoBywNQy gXQumWELvNK3ISZ3ZjfV3zqLu52VA0CyT7ynm6/FTr96/wZZcNXFCsw1mbWMqxbo Ms7lnKzL/5iAvFCfNNzkhK6T85+z1hFQXob8eEU6s8IArbeY5qddyBaMhfWgTM0L ohRkVBV1XLZanTTAyrMX9u/DxC1qmsJcInOSY6c0seSBqg1eYYh9XrG39mDjgGo6 /imCtTB/W5aQVh/qZIsTfYvPi8x80SbiQrz+Spm0gjztx3GSMsfivIeizGXP/5Nq SRmqVrUUGBozJXzTq772dzkQJVSrY+hWS4rXLfsmlYMTNa1H8QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHx3FI9g/JR/hecA/n06KjYzM9HnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mZjNi MDRhMy1iN2MxLTRhMDMtOTQyNy1jMWYwM2Q4MTBkMzgvZmYzYjA0YTMtYjdjMS00 YTAzLTk0MjctYzFmMDNkODEwZDM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmYzYjA0YTMtYjdjMS00YTAzLTk0 MjctYzFmMDNkODEwZDM4L2ZmM2IwNGEzLWI3YzEtNGEwMy05NDI3LWMxZjAzZDgx MGQzOC5jcmwwHwYDVR0jBBgwFoAUSeUP+OY4sjhthGnSv2dCtv0jCVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9mZjNiMDRhMy1iN2MxLTRhMDMtOTQyNy1jMWYw M2Q4MTBkMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAKidnAA1f2GONixd+xYtt eO6ueZ3mhggbrYIrpMri53HAqIUAU0I59vd4u59yf/4HViECXCLos/bxt0mvyafK Xrek2CcMG+ATBXUySFfAkAuF7MD4JZkBg+/BVONewrJWsDBJOhIoxVHd4RAkK6HK 7bSYtCadPvcJsGZQLQgbD2fqv3sxRR3rfVccr5XFgPc1YHUEedViNnwegl0f6P9u JoEa1sWJkGlwkHyso4jBw+qZGRTrfgs34xJUARPB2sRkAzaRljtXNPp72OvJ9Pev yqWQoXBddVHEaDxNF9UmT0XFRQ034HJr3342Q/AHpWhBv53X7ImvdFM9nUlDD8Cc -----END CERTIFICATE-----Generated at Sat Dec 20 18:23:25 2025 by rpki-client