This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft File: 41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft (raw, json) Hash identifier: Sf3n0K4U1N0T7MNy4F9Vy1k/qIalR316ZBisZ6Ra9KU= Subject key identifier: D8:E4:85:EC:60:5E:2C:F4:76:CA:83:3B:A1:58:DE:FE:63:4F:0F:E3 Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Certificate serial: 010D0C9F4328584C41771312B5187A050B37E440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft Manifest number: 010D0C9F43285846F97A84043EAD2BBBC382CB4F Signing time: Sun 21 Dec 2025 02:02:03 +0000 Manifest this update: Sun 21 Dec 2025 02:02:03 +0000 Manifest next update: Tue 23 Dec 2025 19:00:00 +0000 Files and hashes: 1: 14a619d0-4751-3dd0-8357-da775049c7ff.roa (hash: AEdlBto9Yolv9lxVwPkZ0QC6PNfGTOKROjHiXo8acNc=) 2: 41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl (hash: shsImuT+W7Ne8xdqDAlgnYlsH71ODjliitSNZhczcJQ=) 3: 4a2880a2-399c-391a-b0ff-17a565b54dce.roa (hash: rvJi7XQ1sP3oCLeQeuCune9CxGSH9u2kJqjhx6SMjBg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:77:13:12:b5:18:7a:05:0b:37:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Validity Not Before: Dec 21 02:02:03 2025 GMT Not After : Dec 23 19:00:00 2025 GMT Subject: CN=0cff25dd-ee2d-42d2-9ccc-a7e82acf21dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:05:3c:56:77:27:81:d4:7e:09:0a:63:03:e6: 89:73:01:01:09:d1:1c:42:88:e7:7f:34:57:c7:fd: ac:45:81:43:94:a4:fc:9d:07:da:e4:8e:3b:b9:58: e2:a6:21:a4:d2:b6:6d:57:51:31:3b:17:d0:f5:dc: f6:55:85:20:0b:3c:df:0b:4d:15:a7:04:14:ca:50: 64:e3:5a:17:31:a7:05:12:71:c5:da:a2:a5:26:80: 49:ff:fe:2a:78:0a:72:59:56:7a:2b:ae:fe:41:e4: 19:c1:a0:c3:56:cb:b6:1e:44:57:a5:8b:f4:79:5e: 67:6e:61:21:d8:9c:56:66:1e:30:b7:e1:8b:90:b0: eb:ef:48:c6:66:de:d9:7d:86:ef:9a:db:cd:83:79: 9f:ca:ea:1a:3e:9a:4e:d3:a8:4a:26:f6:25:5b:0d: 59:39:55:5e:2f:35:23:30:43:30:fd:fa:f5:48:7c: 62:b6:15:bb:36:a6:2f:67:1c:e1:f0:ff:89:20:1a: e3:7c:d7:d4:3d:42:ee:c9:81:ee:df:01:10:9c:65: 2a:bc:8a:55:ca:bb:6b:1b:ef:7c:d4:74:4a:b9:18: 32:5a:0b:66:e2:d1:f5:df:e3:ea:22:d1:22:29:3a: fe:b5:5c:77:69:dd:1c:9c:95:2b:e8:9b:fa:ca:98: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E4:85:EC:60:5E:2C:F4:76:CA:83:3B:A1:58:DE:FE:63:4F:0F:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl X509v3 Authority Key Identifier: keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d9:91:c7:f2:24:7b:48:d1:a4:a3:ae:06:49:be:83:6b:31: 10:86:67:45:62:df:c0:6d:96:0e:c2:b3:4a:7c:cb:d3:85:be: a5:ef:e4:cf:2a:54:2b:55:e2:e9:a1:c3:55:f8:8b:64:18:40: 0c:ce:c1:29:05:df:bc:75:2d:46:46:76:36:a3:ad:f3:46:e7: d2:00:9a:22:f7:ec:de:a4:0a:ad:f3:46:e3:19:20:e7:3c:40: a6:08:a6:92:8a:40:99:ca:73:ae:51:3c:6d:4f:e7:35:36:a5: 9e:c6:65:20:f2:a0:71:70:9b:7f:b8:b8:b2:c0:26:84:5c:5e: 1c:43:68:67:82:92:80:38:d9:96:14:be:db:73:a0:1d:16:b9: 79:08:bd:67:e0:a9:1f:b9:ea:ed:97:cf:10:f0:64:75:c5:52: f8:5c:53:76:c0:3f:aa:e2:78:36:15:4f:88:72:d4:ca:96:d6: c6:6a:f5:77:3e:f6:4f:ad:1b:9b:b8:b3:60:ea:9c:47:80:c4: b3:65:88:b1:f0:d7:52:55:7b:0b:ed:00:b2:66:1d:63:ec:d2: e5:ee:36:1a:5d:d4:e0:1b:83:62:ba:30:5d:38:82:90:36:63: f3:6a:df:2d:45:b3:c0:81:af:4d:16:78:03:21:37:74:92:2e: 34:5b:3d:ad -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExBdxMStRh6BQs35EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMy ZDI0MB4XDTI1MTIyMTAyMDIwM1oXDTI1MTIyMzE5MDAwMFowLzEtMCsGA1UEAxMk MGNmZjI1ZGQtZWUyZC00MmQyLTljY2MtYTdlODJhY2YyMWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gU8VncngdR+CQpjA+aJcwEBCdEcQojnfzRX x/2sRYFDlKT8nQfa5I47uVjipiGk0rZtV1ExOxfQ9dz2VYUgCzzfC00VpwQUylBk 41oXMacFEnHF2qKlJoBJ//4qeApyWVZ6K67+QeQZwaDDVsu2HkRXpYv0eV5nbmEh 2JxWZh4wt+GLkLDr70jGZt7ZfYbvmtvNg3mfyuoaPppO06hKJvYlWw1ZOVVeLzUj MEMw/fr1SHxithW7NqYvZxzh8P+JIBrjfNfUPULuyYHu3wEQnGUqvIpVyrtrG+98 1HRKuRgyWgtm4tH13+PqItEiKTr+tVx3ad0cnJUr6Jv6ypi3swIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNjkhexgXiz0dsqDO6FY3v5jTw/jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MWUz OGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvNDFlMzhkYTUtZGU0Zi00 MDBkLTgzYWItNjVlZTJlMmMyZDI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDFlMzhkYTUtZGU0Zi00MDBkLTgz YWItNjVlZTJlMmMyZDI0LzQxZTM4ZGE1LWRlNGYtNDAwZC04M2FiLTY1ZWUyZTJj MmQyNC5jcmwwHwYDVR0jBBgwFoAUv3kWvrePafv9Y6a/iRl9nqjyyrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVl MmUyYzJkMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAp2ZHH8iR7SNGko64GSb6D azEQhmdFYt/AbZYOwrNKfMvThb6l7+TPKlQrVeLpocNV+ItkGEAMzsEpBd+8dS1G RnY2o63zRufSAJoi9+zepAqt80bjGSDnPECmCKaSikCZynOuUTxtT+c1NqWexmUg 8qBxcJt/uLiywCaEXF4cQ2hngpKAONmWFL7bc6AdFrl5CL1n4Kkfuertl88Q8GR1 xVL4XFN2wD+q4ng2FU+IctTKltbGavV3PvZPrRubuLNg6pxHgMSzZYix8NdSVXsL 7QCyZh1j7NLl7jYaXdTgG4NiujBdOIKQNmPzat8tRbPAga9NFngDITd0ki40Wz2t -----END CERTIFICATE-----Generated at Sun Dec 21 10:34:02 2025 by rpki-client