This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft File: 4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft (raw, json) Hash identifier: WmvJjJ7dLbN7Bzhjh1ahoDd/Iedvp01v4bAynRBGIms= Subject key identifier: F9:11:6C:A0:7F:57:35:03:E2:1C:4A:E6:A9:15:25:AE:86:88:F9:9E Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Certificate serial: 010D0C9F4328584C3E521399F98CF826D5980600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft Manifest number: 010D0C9F4328584073A83051F4D825D02C88E3EB Signing time: Fri 19 Dec 2025 23:00:03 +0000 Manifest this update: Fri 19 Dec 2025 23:00:03 +0000 Manifest next update: Sun 21 Dec 2025 23:00:00 +0000 Files and hashes: 1: 4443ea3e-5515-393f-9b6c-71ed5816326b.roa (hash: K/QGZ9Fdj3BIPxxWlXyDTPd2MKX3D80Sd7sZcKVH78c=) 2: 4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl (hash: S6vbAhXcCqOykxO512Damf8bbAnNX/aWEqjiYO9ZlLg=) 3: a0319291-6260-33b7-94e3-177209ea6dc7.roa (hash: 0+nXy7mWDoxEPbN7S7PZltaUkZtq0l/Lx+lxfjUr55g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:52:13:99:f9:8c:f8:26:d5:98:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Validity Not Before: Dec 19 23:00:03 2025 GMT Not After : Dec 21 23:00:00 2025 GMT Subject: CN=c0386a3a-2992-424d-927f-fea80085b143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:00:c8:81:6d:db:53:c8:68:90:4b:65:c1:2c: 0e:bc:1c:5e:0b:57:98:a8:5d:63:55:cb:d3:4c:96: ac:c9:93:43:f0:fc:b9:fb:2f:72:a9:91:1e:01:a0: 8f:90:64:2a:4c:20:57:36:0c:5a:e3:87:ca:07:1a: 39:bb:66:73:c1:b5:79:fc:73:5d:94:ca:6f:ab:23: a7:d6:eb:6f:18:1c:0a:90:97:10:2a:7c:10:dc:f9: 47:4c:14:fa:95:e8:0f:32:77:0d:62:b8:25:26:6f: 86:4f:fb:7b:fb:32:70:e1:de:0d:bc:f7:9f:a2:1d: a6:4d:c7:dd:95:cb:2b:30:00:c6:bf:13:b8:11:d8: b7:c1:d0:0e:f6:ad:e1:ef:02:6c:1d:13:44:d1:ce: 68:65:5f:d5:6c:81:a7:9e:03:8c:c5:6c:e2:62:23: de:a6:a0:0c:ef:f3:b8:fe:ee:0d:a0:8e:5b:b3:f9: 38:40:8c:11:7e:d2:35:36:ee:b1:6f:69:5b:2d:4f: fa:07:12:d3:c2:d8:e5:c6:a0:a9:4d:42:f9:4f:58: d4:0b:6a:e8:8d:7f:91:87:6f:b8:0e:58:77:49:28: 53:37:3e:07:2e:4d:af:89:e8:62:8a:6e:fc:85:36: 67:71:b6:6d:84:34:8d:26:00:f4:05:fa:bc:a8:a4: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:11:6C:A0:7F:57:35:03:E2:1C:4A:E6:A9:15:25:AE:86:88:F9:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl X509v3 Authority Key Identifier: keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ee:20:68:df:ad:7c:a8:47:d7:09:96:e4:76:a1:a3:79:a5: 30:0b:3e:07:39:99:56:f7:e7:f7:f4:bc:e6:67:e6:25:7a:8e: aa:bd:3e:a7:11:76:2d:fb:71:8b:f7:4c:48:9c:7d:24:9d:e2: b4:80:e8:3b:9d:49:2e:f5:d7:72:03:f6:02:28:44:9c:e1:66: f6:8a:ff:a1:e3:d6:f3:96:b3:b2:d4:30:90:0a:92:09:8e:3d: 03:05:2e:49:3b:d8:4a:3d:b1:57:0d:7e:18:29:f4:aa:4e:8c: 92:db:b8:8d:e5:40:03:27:c2:f9:c6:80:d7:56:7d:f7:01:3d: 0e:2f:e3:2e:69:58:b9:69:ed:f0:aa:1c:9c:3c:31:53:17:0a: 24:b5:be:12:f3:24:9d:d8:ec:ed:fc:05:bb:7f:8a:53:b2:23: ef:89:6d:83:f8:21:1c:eb:e3:75:81:93:3c:72:06:e4:37:ce: 25:49:2b:9a:4a:2e:eb:5c:29:70:01:50:02:a0:4f:c7:c9:72: 45:de:ff:bc:45:a9:ee:65:03:53:18:79:b1:a3:e4:92:d5:8e: d4:14:7e:0e:3f:af:5d:8a:f7:39:59:15:04:ac:4f:1b:92:8b: 72:6b:f9:e6:9c:d0:fd:f8:f6:f8:a8:cc:75:15:bb:4f:3c:0b: d8:06:fd:61 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw+UhOZ+Yz4JtWYBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx OTc5MB4XDTI1MTIxOTIzMDAwM1oXDTI1MTIyMTIzMDAwMFowLzEtMCsGA1UEAxMk YzAzODZhM2EtMjk5Mi00MjRkLTkyN2YtZmVhODAwODViMTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwDIgW3bU8hokEtlwSwOvBxeC1eYqF1jVcvT TJasyZND8Py5+y9yqZEeAaCPkGQqTCBXNgxa44fKBxo5u2ZzwbV5/HNdlMpvqyOn 1utvGBwKkJcQKnwQ3PlHTBT6legPMncNYrglJm+GT/t7+zJw4d4NvPefoh2mTcfd lcsrMADGvxO4Edi3wdAO9q3h7wJsHRNE0c5oZV/VbIGnngOMxWziYiPepqAM7/O4 /u4NoI5bs/k4QIwRftI1Nu6xb2lbLU/6BxLTwtjlxqCpTUL5T1jUC2rojX+Rh2+4 Dlh3SShTNz4HLk2viehiim78hTZncbZthDSNJgD0Bfq8qKS+TwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPkRbKB/VzUD4hxK5qkVJa6GiPmeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3 ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvNGU4N2Q4M2YtYjUwYy00 YTY1LTlkOWEtYzI4NDU4ZmMxOTc5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0 NThmYzE5NzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCT7iBo3618qEfXCZbkdqGj eaUwCz4HOZlW9+f39LzmZ+Yleo6qvT6nEXYt+3GL90xInH0kneK0gOg7nUku9ddy A/YCKESc4Wb2iv+h49bzlrOy1DCQCpIJjj0DBS5JO9hKPbFXDX4YKfSqToyS27iN 5UADJ8L5xoDXVn33AT0OL+MuaVi5ae3wqhycPDFTFwoktb4S8ySd2Ozt/AW7f4pT siPviW2D+CEc6+N1gZM8cgbkN84lSSuaSi7rXClwAVACoE/HyXJF3v+8RanuZQNT GHmxo+SS1Y7UFH4OP69divc5WRUErE8bkotya/nmnND9+Pb4qMx1FbtPPAvYBv1h -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:10 2025 by rpki-client