This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft File: 2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft (raw, json) Hash identifier: tn+GIUaVGuIdDujN91QsR3cCNtSW8SH2bSsOnxVIBj0= Subject key identifier: 5A:3D:09:FA:ED:4F:A1:1C:65:9B:43:FC:89:1A:8B:AE:43:D5:FE:4F Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Certificate serial: 010D0C9F4328584C45C4F1328A17443AFB747F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft Manifest number: 010D0C9F4328584073A85A0DA80DD3D1C162DC58 Signing time: Mon 22 Dec 2025 15:02:09 +0000 Manifest this update: Mon 22 Dec 2025 15:02:09 +0000 Manifest next update: Wed 24 Dec 2025 15:00:00 +0000 Files and hashes: 1: 2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl (hash: MDMSjTk63M7gZQaM6Qy0g/NdO+ZTJ2rIsJxQ9Uikp4Q=) 2: 78358e57-94d9-3749-be72-74f054906580.roa (hash: kVF0DfGXIw1AkGaBdNLFm5mJtZpL+iUAeDfzZQrs8JU=) 3: feab4e24-c427-3262-ae07-c36619833029.roa (hash: Ishp8OYphCKlHOLc5eFWhDaKWdASWNCOY1ma7BpBYxk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:45:c4:f1:32:8a:17:44:3a:fb:74:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Validity Not Before: Dec 22 15:02:09 2025 GMT Not After : Dec 24 15:00:00 2025 GMT Subject: CN=d615ab26-bcd9-4e46-8068-002b9a335b37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f6:ca:ca:e4:32:e2:35:4f:5c:31:e0:e2:2e: 18:f7:89:23:cf:6c:35:69:7b:1e:1c:24:e0:4e:8e: d3:e3:d6:02:62:3c:20:5d:62:1d:dd:8f:0a:c1:54: 8a:f9:fc:76:7e:b1:f5:3c:eb:06:97:c6:fa:0e:26: 0e:cd:2f:3c:dd:5b:a0:ef:b1:3e:c1:47:b1:28:dd: 4d:52:dd:4b:cf:c5:16:32:c1:80:6d:f5:57:f9:86: 89:80:65:0f:34:bb:19:29:cf:ae:89:61:47:11:45: 53:71:ed:ae:a2:bf:8c:6e:fc:2d:b6:fa:e8:b0:6e: 20:8e:86:69:87:45:e2:4e:bf:99:75:b2:23:af:1d: 07:2f:6e:39:e4:e1:9b:7f:57:26:d5:3a:fd:14:8b: 46:d4:21:03:58:6d:6b:c2:05:31:b0:e0:7f:17:a1: a3:ef:61:3b:2d:d3:6d:76:10:a7:9a:d3:c2:6c:57: 6d:cb:f0:77:68:ee:a9:eb:47:d6:c1:3e:31:c7:76: b6:4b:7f:5f:e1:63:c3:71:84:88:e4:81:68:2a:50: 0d:6d:01:91:93:8b:6e:39:a9:bf:4b:8a:51:b7:3a: d7:65:27:9d:9b:19:0e:dd:10:77:39:af:57:8c:03: 09:95:1b:d2:d7:96:a0:ec:2a:40:fd:dd:4e:4a:43: b7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3D:09:FA:ED:4F:A1:1C:65:9B:43:FC:89:1A:8B:AE:43:D5:FE:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl X509v3 Authority Key Identifier: keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:55:53:12:21:8d:f6:98:fa:26:35:4a:dd:40:26:5c:dd:f5: ab:81:3d:39:cb:87:d4:fc:b5:7d:95:95:33:ef:0a:0c:03:f7: 14:3b:7b:b8:7f:ed:c6:b6:ca:97:27:3a:52:f3:a6:b3:05:7b: f4:93:fa:4a:5c:9b:3d:de:ed:4d:d3:4a:c3:b6:8c:69:eb:f2: ff:84:3a:21:58:af:aa:ff:be:80:b9:18:8d:86:e1:f3:ec:94: 2a:4e:c9:d1:f9:84:04:bd:2e:64:1d:b5:ad:3a:a8:af:d1:98: 3f:15:d7:1e:c9:dd:1a:1a:57:69:38:ab:71:c7:79:e6:bd:3d: 9a:06:e6:12:0d:75:a1:d7:c8:2a:37:00:c8:ea:56:53:c0:14: 68:ff:34:09:11:98:0d:40:37:49:ec:91:a9:1d:79:21:64:3e: 8b:e7:e9:8f:90:fc:6f:20:03:3b:5c:d8:6b:08:da:2f:73:59: 0e:60:44:78:2f:5d:02:ff:30:0f:ca:a9:39:2e:21:d5:73:74: 75:5d:c9:a9:dc:78:9a:bf:2f:2f:39:6f:36:6d:62:a1:27:57: 08:01:f0:55:a2:5f:a7:52:00:38:67:5a:cd:df:ff:18:92:3b: 1a:34:db:1f:d9:ac:0c:c4:fa:a7:bb:90:2a:e7:87:af:1c:96: 0a:1a:e8:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExFxPEyihdEOvt0f0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4 YTUzMB4XDTI1MTIyMjE1MDIwOVoXDTI1MTIyNDE1MDAwMFowLzEtMCsGA1UEAxMk ZDYxNWFiMjYtYmNkOS00ZTQ2LTgwNjgtMDAyYjlhMzM1YjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/bKyuQy4jVPXDHg4i4Y94kjz2w1aXseHCTg To7T49YCYjwgXWId3Y8KwVSK+fx2frH1POsGl8b6DiYOzS883Vug77E+wUexKN1N Ut1Lz8UWMsGAbfVX+YaJgGUPNLsZKc+uiWFHEUVTce2uor+MbvwttvrosG4gjoZp h0XiTr+ZdbIjrx0HL2455OGbf1cm1Tr9FItG1CEDWG1rwgUxsOB/F6Gj72E7LdNt dhCnmtPCbFdty/B3aO6p60fWwT4xx3a2S39f4WPDcYSI5IFoKlANbQGRk4tuOam/ S4pRtzrXZSedmxkO3RB3Oa9XjAMJlRvS15ag7CpA/d1OSkO3jwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFo9CfrtT6EcZZtD/Ikai65D1f5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0 MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvMmQxNDA3ZjktMzI4ZC00 YzQ0LWFiYzktMTFlNmQxOGU4YTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2 ZDE4ZThhNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbVVMSIY32mPomNUrdQCZc 3fWrgT05y4fU/LV9lZUz7woMA/cUO3u4f+3GtsqXJzpS86azBXv0k/pKXJs93u1N 00rDtoxp6/L/hDohWK+q/76AuRiNhuHz7JQqTsnR+YQEvS5kHbWtOqiv0Zg/Fdce yd0aGldpOKtxx3nmvT2aBuYSDXWh18gqNwDI6lZTwBRo/zQJEZgNQDdJ7JGpHXkh ZD6L5+mPkPxvIAM7XNhrCNovc1kOYER4L10C/zAPyqk5LiHVc3R1Xcmp3Hiavy8v OW82bWKhJ1cIAfBVol+nUgA4Z1rN3/8YkjsaNNsf2awMxPqnu5Aq54evHJYKGugr -----END CERTIFICATE-----Generated at Mon Dec 22 17:29:29 2025 by rpki-client