This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: hNJT0NZDDsLzxzEQvWeWqB+5N/HGJXvu3LOpu0xcu7Y= Subject key identifier: 78:54:4A:D0:FE:0F:4D:9E:39:90:77:42:22:DD:0D:AB:E3:35:43:FD Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584C50B31D2A89B3BB304C6FDE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11C19 Signing time: Fri 26 Dec 2025 13:00:09 +0000 Manifest this update: Fri 26 Dec 2025 13:00:09 +0000 Manifest next update: Sun 28 Dec 2025 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: tgMdEvw3hihtfknRLFdH7kxkAJ/beP+5DxnJwEX+yUo=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: 6cuqrC15RiPrUfQaYRuS8Jp0sFLTOJDemMXtPLLIh34=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: nh+kWIbdKhZOMAE1+gOCXS/38s7VP5r/HUozmAcdeVA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:b3:1d:2a:89:b3:bb:30:4c:6f:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Dec 26 13:00:09 2025 GMT Not After : Dec 28 13:00:00 2025 GMT Subject: CN=cfe028f0-980d-4818-8791-3d4b96b8e05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4b:05:58:ce:1b:b4:e9:fa:4b:d2:1f:97:19: f1:ad:f8:f2:ed:25:51:37:a3:60:95:f1:9b:3c:d2: a0:b8:03:c9:fc:09:cd:30:db:86:53:45:2a:4d:54: 67:a9:1c:33:06:d4:87:a0:b4:84:a2:9a:bc:ba:97: 76:39:1c:2d:21:7a:ea:32:56:f1:96:5c:74:cd:37: 07:5b:60:80:18:45:92:61:31:4a:80:71:7a:65:fe: de:29:1d:6c:bc:2e:fe:a7:06:5d:35:9b:ee:d5:a7: 20:91:c2:48:52:b4:0f:64:6a:b8:39:f8:a6:70:98: 8e:70:7c:26:7e:c6:17:df:46:3e:60:d9:98:14:82: a5:81:54:66:74:0d:5e:54:09:e9:bb:27:d2:74:9e: 8b:41:c3:84:25:3b:20:b0:bd:fc:68:dd:67:8f:37: ee:70:a1:95:d0:a1:af:22:86:0c:8e:a1:39:7d:99: a9:a0:75:c9:0f:21:01:24:e4:b8:bd:d5:0c:9e:24: 6f:43:04:38:e4:5f:f4:74:59:7a:d7:db:c3:97:ab: 58:64:8b:29:11:cd:48:01:76:fc:e3:63:f0:51:d6: d0:c8:a8:e5:8e:24:6c:60:e6:ab:c1:17:83:6e:64: 54:40:61:81:f5:db:ff:33:62:21:94:04:c2:4d:12: 28:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:54:4A:D0:FE:0F:4D:9E:39:90:77:42:22:DD:0D:AB:E3:35:43:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:ef:33:c7:de:1f:1a:f1:45:46:2a:25:38:ad:5c:9c:39:1b: cd:a0:0c:7a:3e:23:2a:dd:de:7c:63:dc:19:14:54:06:a4:c3: d8:5b:0b:22:52:02:b5:d8:2a:10:f6:71:80:be:ac:d0:68:7b: e7:21:3a:93:ec:f6:5e:20:12:68:fa:12:ba:d5:5c:96:c1:8d: d2:4d:a6:18:3f:08:b7:89:e2:01:f5:e6:09:cf:17:1a:9d:83: e9:9e:56:6b:01:f0:8e:c2:fd:77:ca:ad:9e:87:d8:aa:02:dc: 76:7a:0d:8f:ec:9c:18:1e:1e:a4:1d:f9:bf:ab:6e:04:d1:0e: 6a:64:9d:6b:59:d2:b2:1c:5e:aa:5f:9a:2c:c9:e1:bd:11:10: bc:00:65:0a:4c:84:cf:82:d8:00:ba:b4:a9:3a:3a:ef:1d:50: ad:79:bd:45:eb:63:7a:10:c1:13:b5:80:33:fd:bf:a6:13:71: 30:a0:7d:06:43:1f:76:41:ab:c3:ab:f0:55:e8:cf:0a:f4:0b: a6:ab:31:88:d2:f9:f8:78:1e:a9:2a:cd:ae:cd:fb:37:e8:ce: 71:97:8a:dc:ba:4b:b8:8d:d3:7a:df:62:7c:a5:4e:a2:3c:51: fc:f3:96:53:9d:ea:b3:7c:a0:44:58:00:05:d7:88:c2:12:8d: 1c:8e:ef:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExQsx0qibO7MExv3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI1MTIyNjEzMDAwOVoXDTI1MTIyODEzMDAwMFowLzEtMCsGA1UEAxMk Y2ZlMDI4ZjAtOTgwZC00ODE4LTg3OTEtM2Q0Yjk2YjhlMDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUsFWM4btOn6S9Iflxnxrfjy7SVRN6NglfGb PNKguAPJ/AnNMNuGU0UqTVRnqRwzBtSHoLSEopq8upd2ORwtIXrqMlbxllx0zTcH W2CAGEWSYTFKgHF6Zf7eKR1svC7+pwZdNZvu1acgkcJIUrQPZGq4OfimcJiOcHwm fsYX30Y+YNmYFIKlgVRmdA1eVAnpuyfSdJ6LQcOEJTsgsL38aN1njzfucKGV0KGv IoYMjqE5fZmpoHXJDyEBJOS4vdUMniRvQwQ45F/0dFl619vDl6tYZIspEc1IAXb8 42PwUdbQyKjljiRsYOarwReDbmRUQGGB9dv/M2IhlATCTRIoMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHhUStD+D02eOZB3QiLdDavjNUP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAo7zPH3h8a8UVGKiU4rVyc ORvNoAx6PiMq3d58Y9wZFFQGpMPYWwsiUgK12CoQ9nGAvqzQaHvnITqT7PZeIBJo +hK61VyWwY3STaYYPwi3ieIB9eYJzxcanYPpnlZrAfCOwv13yq2eh9iqAtx2eg2P 7JwYHh6kHfm/q24E0Q5qZJ1rWdKyHF6qX5osyeG9ERC8AGUKTITPgtgAurSpOjrv HVCteb1F62N6EMETtYAz/b+mE3EwoH0GQx92QavDq/BV6M8K9AumqzGI0vn4eB6p Ks2uzfs36M5xl4rcuku4jdN632J8pU6iPFH885ZTneqzfKBEWAAF14jCEo0cju/+ -----END CERTIFICATE-----Generated at Sat Dec 27 07:03:47 2025 by rpki-client