This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft File: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft (raw, json) Hash identifier: n7WvRC8UVkvWumxRhsgwQUtS/DAedNW9zNOqtkkNg1Y= Subject key identifier: DD:FF:DC:9C:58:08:61:E0:98:6A:D0:27:5C:0A:85:AE:B8:9D:48:A1 Authority key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Certificate issuer: /CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Certificate serial: 010D0C9F4328584C4D35B67F2CEB81C6F425F280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft Manifest number: 010D0C9F4328584073A845B1E7CF882A25356498 Signing time: Thu 25 Dec 2025 07:00:03 +0000 Manifest this update: Thu 25 Dec 2025 07:00:03 +0000 Manifest next update: Sun 28 Dec 2025 07:00:00 +0000 Files and hashes: 1: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl (hash: rA2znTOis5Mj0zMST/6i2Ehtf+awuJYzqYZ8mPD3yrw=) 2: 44e6412a-ad9a-3379-a2fe-2eda7500f614.roa (hash: ww+E2//TcQhbrtAPxlqyfAP8oKFYpGeUR3jVnG1BoYU=) 3: d73a5915-ee1f-33f2-8b70-f050ef95069f.roa (hash: 8ySd6lSRHwO2zZnLC3OKz2eQGlDvNdEuAU+bpGzev0Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4d:35:b6:7f:2c:eb:81:c6:f4:25:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Validity Not Before: Dec 25 07:00:03 2025 GMT Not After : Dec 28 07:00:00 2025 GMT Subject: CN=aad9435f-3f2e-4abc-afcb-a932c3b087bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:1b:d6:47:f8:e3:43:9d:29:ba:99:0e:af: 90:b9:34:95:e4:e5:22:a4:91:80:12:9e:f7:85:33: 6b:ca:ac:85:66:a5:11:35:68:cb:3c:43:28:fe:ba: 10:be:da:0e:f7:91:78:f9:fc:39:69:5c:be:4f:f9: 30:9a:a3:25:e6:84:0c:e2:7d:7e:ba:5f:63:62:6a: 22:2e:63:ea:f2:0f:29:8b:88:45:82:58:5e:44:44: f6:31:ac:26:ee:93:57:59:cd:cd:5e:85:17:aa:8d: 4f:04:8e:80:18:f4:61:f6:6e:2a:fa:d8:75:50:03: 5f:67:4f:5e:a4:03:8f:29:b1:c1:25:ca:55:28:af: 1f:1b:d9:f1:59:1e:61:20:08:86:df:1f:5c:f0:79: ff:b0:31:db:fd:60:7f:e6:80:d9:45:c8:ae:bb:77: e5:3c:39:fe:44:c8:23:e9:ce:3f:53:d5:2d:1b:83: 6f:4e:29:96:e8:ca:48:54:8f:f3:e4:60:be:35:63: 50:0a:ba:e0:ae:2d:b6:71:5e:b8:10:db:25:41:38: 6f:d2:d3:f2:db:36:5a:00:f5:61:78:48:a6:b8:75: ce:03:d3:6b:ff:f3:dc:f0:f0:c3:18:22:74:b9:fd: eb:1b:3c:c6:dc:02:93:66:f7:50:78:7c:c8:0b:b1: e5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FF:DC:9C:58:08:61:E0:98:6A:D0:27:5C:0A:85:AE:B8:9D:48:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl X509v3 Authority Key Identifier: keyid:C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:06:ff:35:92:7c:01:41:77:cc:04:8c:3c:03:86:70:dd:49: 02:5f:d4:d3:44:00:6f:39:1c:91:06:c6:62:98:17:8c:94:23: dc:4b:7a:06:34:a7:6d:67:6f:d5:ea:74:c6:e6:5d:81:7a:6d: 09:f3:7a:e8:69:71:a5:24:a2:34:29:98:5b:e7:2e:de:0a:6e: 34:dc:50:e6:36:4d:30:d5:9c:96:51:43:9e:4e:d0:4b:34:6a: 66:47:b8:e7:43:5c:a3:2e:38:93:48:7e:53:a0:5d:ff:c5:1c: 7f:b3:67:3f:4d:f5:5f:3f:50:b7:53:1a:b1:dd:50:26:75:2d: 4d:75:bb:fd:0b:cd:ab:87:b1:84:8b:62:7f:69:87:b5:c1:7b: 18:11:e3:3e:a7:e1:c8:37:a6:f7:86:da:46:c9:a5:80:db:09: 36:41:d5:c4:ce:f8:cd:6b:4a:4d:f7:98:36:dc:08:9e:48:b6: 3e:e0:70:b1:49:38:80:b1:61:c7:7f:50:3e:8b:03:33:33:ef: d6:9d:aa:24:6d:78:a8:ec:f8:5e:3a:a8:36:a1:9e:a4:72:c8: da:35:88:3d:33:f7:69:2b:2f:84:2c:3f:54:86:9f:bc:ae:c9: 37:18:ac:36:2c:0e:2f:01:7a:45:7f:39:0c:b0:39:cc:58:91: df:c3:dd:f1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExNNbZ/LOuBxvQl8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyOGI2MmMtN2M1MC00Y2NmLWJhYzUtYTZjZWQ5YzUx MGFlMB4XDTI1MTIyNTA3MDAwM1oXDTI1MTIyODA3MDAwMFowLzEtMCsGA1UEAxMk YWFkOTQzNWYtM2YyZS00YWJjLWFmY2ItYTkzMmMzYjA4N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMYb1kf440OdKbqZDq+QuTSV5OUipJGAEp73 hTNryqyFZqURNWjLPEMo/roQvtoO95F4+fw5aVy+T/kwmqMl5oQM4n1+ul9jYmoi LmPq8g8pi4hFglheRET2Mawm7pNXWc3NXoUXqo1PBI6AGPRh9m4q+th1UANfZ09e pAOPKbHBJcpVKK8fG9nxWR5hIAiG3x9c8Hn/sDHb/WB/5oDZRciuu3flPDn+RMgj 6c4/U9UtG4NvTimW6MpIVI/z5GC+NWNQCrrgri22cV64ENslQThv0tPy2zZaAPVh eEimuHXOA9Nr//Pc8PDDGCJ0uf3rGzzG3AKTZvdQeHzIC7HlgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN3/3JxYCGHgmGrQJ1wKha64nUihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4 YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDljNTEwYWUvM2YyOGI2MmMtN2M1MC00 Y2NmLWJhYzUtYTZjZWQ5YzUxMGFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2YyOGI2MmMtN2M1MC00Y2NmLWJh YzUtYTZjZWQ5YzUxMGFlLzNmMjhiNjJjLTdjNTAtNGNjZi1iYWM1LWE2Y2VkOWM1 MTBhZS5jcmwwHwYDVR0jBBgwFoAUx41gkQp7ujkifr5s5i8FjtJm/YYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNl ZDljNTEwYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCmBv81knwBQXfMBIw8A4Zw 3UkCX9TTRABvORyRBsZimBeMlCPcS3oGNKdtZ2/V6nTG5l2Bem0J83roaXGlJKI0 KZhb5y7eCm403FDmNk0w1ZyWUUOeTtBLNGpmR7jnQ1yjLjiTSH5ToF3/xRx/s2c/ TfVfP1C3Uxqx3VAmdS1Ndbv9C82rh7GEi2J/aYe1wXsYEeM+p+HIN6b3htpGyaWA 2wk2QdXEzvjNa0pN95g23AieSLY+4HCxSTiAsWHHf1A+iwMzM+/WnaokbXio7Phe Oqg2oZ6kcsjaNYg9M/dpKy+ELD9Uhp+8rsk3GKw2LA4vAXpFfzkMsDnMWJHfw93x -----END CERTIFICATE-----Generated at Thu Dec 25 09:16:20 2025 by rpki-client