This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft File: 40392fe9-312c-47a6-8066-48fda2f4c80b.mft (raw, json) Hash identifier: jlZ7XHyFo4Ec1TBCEvdl8OAoqNnLb5nfTpVrw4NcHG4= Subject key identifier: FD:E2:5A:24:75:C2:22:31:EE:9D:EB:D4:76:2D:42:2C:63:9F:AF:40 Authority key identifier: DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 Certificate issuer: /CN=40392fe9-312c-47a6-8066-48fda2f4c80b Certificate serial: 010D0C9F4328584C4AC46B1639873DD7A1E2D6F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft Manifest number: 010D0C9F4328584073A84E58EA4BACB47C0E2AC2 Signing time: Wed 24 Dec 2025 10:00:09 +0000 Manifest this update: Wed 24 Dec 2025 10:00:09 +0000 Manifest next update: Fri 26 Dec 2025 10:00:00 +0000 Files and hashes: 1: 40392fe9-312c-47a6-8066-48fda2f4c80b.crl (hash: Rb/6tSpmO/LtvfcQLCnRHTOrfPwb7On/gb5XvJZ+jOw=) 2: b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa (hash: 0RSHYPyyCmACMJ6PEkWDcZDjTiDvD6gQKIDtSL3YVp8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4a:c4:6b:16:39:87:3d:d7:a1:e2:d6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40392fe9-312c-47a6-8066-48fda2f4c80b Validity Not Before: Dec 24 10:00:09 2025 GMT Not After : Dec 26 10:00:00 2025 GMT Subject: CN=a729f176-1d06-4fe4-9a59-7fa76f1ffe90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d2:20:a6:93:72:c3:8b:03:2a:48:22:67:62: ce:c7:f1:b0:c0:c5:1b:9e:61:52:0c:63:0a:63:49: f9:66:a0:73:27:9b:75:61:18:4d:3b:a4:ff:43:31: fc:83:05:f7:32:61:65:b7:75:fa:13:a2:93:e5:da: 61:8e:15:c3:24:a2:97:e2:80:5d:da:b4:87:82:ad: c3:f1:be:ea:d0:ca:24:0d:d3:61:0c:07:6a:30:da: 7c:0b:82:b3:f5:eb:88:85:21:91:a6:4b:fc:17:c4: ae:4d:de:c2:13:8f:81:9a:a4:9a:99:7c:9d:b6:6b: 33:b1:46:41:97:31:a5:17:9f:05:33:29:26:12:81: 5a:57:86:b4:65:21:b0:b6:14:92:0d:73:3f:8d:5c: d8:22:31:a2:28:8c:67:c9:e4:ff:cd:1e:85:91:ae: 51:f2:7d:b5:a0:e8:f8:25:07:42:2a:1e:be:6e:9d: 30:76:08:f2:0b:47:37:be:d4:d7:52:64:16:db:fa: 26:17:31:59:71:cf:a4:61:ce:eb:50:b1:7b:b1:02: 9e:3e:de:70:30:51:cd:78:2e:0f:73:be:52:7e:80: b6:b3:4b:74:94:3a:17:ca:21:62:9c:37:59:f4:b3: a8:3a:bd:cf:b9:a7:bf:58:18:11:06:a6:27:48:5e: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E2:5A:24:75:C2:22:31:EE:9D:EB:D4:76:2D:42:2C:63:9F:AF:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl X509v3 Authority Key Identifier: keyid:DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:99:01:96:ca:96:aa:44:17:04:39:08:15:eb:35:24:94:11: b1:5f:35:94:9a:f3:56:e8:51:4f:ea:11:6a:05:fb:d1:ed:48: 31:f3:42:98:b8:94:79:c9:ef:3c:68:fc:36:ea:9b:45:3a:11: 80:81:f4:58:27:d0:a3:e5:95:03:0f:0a:78:bc:df:ef:0a:00: 4d:47:c8:a0:b6:f3:95:b6:9c:43:78:3a:89:30:65:79:0b:ad: d0:99:8d:17:bc:c0:4a:b4:53:f4:6c:2e:62:78:c3:f1:8f:fa: af:d9:ba:ad:52:68:e3:5e:20:15:11:a1:23:dc:e2:c2:9a:51: ae:4a:f8:80:53:46:75:a2:07:13:95:df:08:85:ed:8d:14:6c: a0:59:e2:3d:6f:9a:d4:c8:a9:56:b1:af:15:c9:2d:fe:83:73: bf:c7:62:ff:d8:b9:05:40:8f:f7:41:b9:ba:47:52:c3:ad:05: 81:ce:fa:0c:6e:58:c0:d4:ea:d4:2a:b2:84:f0:cb:a8:23:ad: b6:70:ba:74:68:1d:dd:bc:f6:af:4d:a0:b6:eb:4a:f3:08:38: c5:97:50:4f:98:85:63:33:f2:a7:f3:de:62:e6:8e:7a:17:33: 77:a8:34:6b:23:19:e2:78:8f:da:07:9f:c5:7a:8d:cd:9e:cd: 3d:5e:fd:66 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExKxGsWOYc916Hi1vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzOTJmZTktMzEyYy00N2E2LTgwNjYtNDhmZGEyZjRj ODBiMB4XDTI1MTIyNDEwMDAwOVoXDTI1MTIyNjEwMDAwMFowLzEtMCsGA1UEAxMk YTcyOWYxNzYtMWQwNi00ZmU0LTlhNTktN2ZhNzZmMWZmZTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdIgppNyw4sDKkgiZ2LOx/GwwMUbnmFSDGMK Y0n5ZqBzJ5t1YRhNO6T/QzH8gwX3MmFlt3X6E6KT5dphjhXDJKKX4oBd2rSHgq3D 8b7q0MokDdNhDAdqMNp8C4Kz9euIhSGRpkv8F8SuTd7CE4+BmqSamXydtmszsUZB lzGlF58FMykmEoFaV4a0ZSGwthSSDXM/jVzYIjGiKIxnyeT/zR6Fka5R8n21oOj4 JQdCKh6+bp0wdgjyC0c3vtTXUmQW2/omFzFZcc+kYc7rULF7sQKePt5wMFHNeC4P c75SfoC2s0t0lDoXyiFinDdZ9LOoOr3Puae/WBgRBqYnSF71ywIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP3iWiR1wiIx7p3r1HYtQixjn69AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5 MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZkYTJmNGM4MGIvNDAzOTJmZTktMzEyYy00 N2E2LTgwNjYtNDhmZGEyZjRjODBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDAzOTJmZTktMzEyYy00N2E2LTgw NjYtNDhmZGEyZjRjODBiLzQwMzkyZmU5LTMxMmMtNDdhNi04MDY2LTQ4ZmRhMmY0 YzgwYi5jcmwwHwYDVR0jBBgwFoAU2h72atkxtsYeskDAgp5dBkW4L6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZk YTJmNGM4MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDNmQGWypaqRBcEOQgV6zUk lBGxXzWUmvNW6FFP6hFqBfvR7Ugx80KYuJR5ye88aPw26ptFOhGAgfRYJ9Cj5ZUD Dwp4vN/vCgBNR8igtvOVtpxDeDqJMGV5C63QmY0XvMBKtFP0bC5ieMPxj/qv2bqt UmjjXiAVEaEj3OLCmlGuSviAU0Z1ogcTld8Ihe2NFGygWeI9b5rUyKlWsa8VyS3+ g3O/x2L/2LkFQI/3Qbm6R1LDrQWBzvoMbljA1OrUKrKE8MuoI622cLp0aB3dvPav TaC260rzCDjFl1BPmIVjM/Kn895i5o56FzN3qDRrIxnieI/aB5/Feo3Nns09Xv1m -----END CERTIFICATE-----Generated at Wed Dec 24 15:05:36 2025 by rpki-client