This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft File: 57da1f4a-da7b-44cf-8427-a74615d9a53e.mft (raw, json) Hash identifier: YeHbRsTwH0VMwp+g/kuG5FYpgZwOxYnVDAtHNN1PoiM= Subject key identifier: 12:C1:9D:AC:0E:11:C6:EF:EC:80:8F:6A:3D:EE:E2:67:DA:9F:93:81 Authority key identifier: DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 Certificate issuer: /CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Certificate serial: 010D0C9F4328584C4B1DB54658A9829E78116300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft Manifest number: 010D0C9F4328584394910AAE776369E15CAEBAB2 Signing time: Wed 24 Dec 2025 13:00:03 +0000 Manifest this update: Wed 24 Dec 2025 13:00:03 +0000 Manifest next update: Fri 26 Dec 2025 13:00:00 +0000 Files and hashes: 1: 57da1f4a-da7b-44cf-8427-a74615d9a53e.crl (hash: YEHMxzxUfnmK/fwjR5D3qtZ9TtZh37O42HWQRe9BVwg=) 2: 85ad93df-d449-3700-80f8-7bf056787ba3.roa (hash: +8VLzaa8bhwmOPhmSm8aeu09Xc86xSGvfuhX6woazMo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:1d:b5:46:58:a9:82:9e:78:11:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57da1f4a-da7b-44cf-8427-a74615d9a53e Validity Not Before: Dec 24 13:00:03 2025 GMT Not After : Dec 26 13:00:00 2025 GMT Subject: CN=1cdee969-7ea9-4423-bb6c-ab93a045176c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a5:4b:52:01:f7:42:d3:37:4a:fa:a5:3a:58: c0:4d:ee:a8:0f:2a:3f:a7:6a:5e:05:00:43:16:90: 82:14:63:94:24:14:25:ef:39:5c:92:24:f3:47:81: 21:ca:a2:95:64:82:e4:12:ee:0e:aa:6e:3d:c1:fc: 5e:b3:87:26:7e:d8:94:ca:d2:b2:89:6e:1d:f6:6b: 19:d6:24:fe:d9:53:ae:0d:bf:95:1d:d2:5e:14:b3: 5f:33:6d:af:6a:93:68:a0:22:c9:60:c0:6b:13:d4: 72:00:d4:67:51:42:73:1e:c7:27:c1:2f:6f:ee:33: 10:af:e9:7d:a8:d4:d8:0c:5d:f2:72:c7:d2:7f:74: 95:97:64:fe:5e:e6:37:7e:be:15:26:71:4a:0f:f8: f7:a5:11:ff:73:aa:d3:81:a7:5d:dc:ef:aa:c3:57: 7f:1e:f6:54:96:0a:b4:06:0c:a2:14:2f:36:26:0a: f3:9f:c7:67:1e:d6:c3:e7:5d:f2:25:3a:53:f1:2f: 8a:41:e3:a4:b3:50:17:39:8f:9b:01:16:43:6b:de: cd:0e:38:13:3a:7a:6e:64:a1:4f:8c:e0:a0:85:f7: 15:d0:20:fb:ef:f2:71:71:ae:1b:98:45:03:e3:1d: 20:b7:07:48:f3:46:28:80:fc:47:7d:3f:74:48:9f: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C1:9D:AC:0E:11:C6:EF:EC:80:8F:6A:3D:EE:E2:67:DA:9F:93:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl X509v3 Authority Key Identifier: keyid:DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:23:9e:43:7c:58:85:1e:ab:34:0e:5b:02:00:29:73:07:33: 07:56:6c:a6:48:da:8b:0b:cf:4b:56:bc:cf:2b:a5:1b:4d:57: 53:84:98:fd:d4:a1:69:e3:2d:1a:76:80:fa:6a:78:e4:c7:ee: 17:19:ac:68:29:80:a8:dd:38:c8:56:e6:a5:cb:71:98:12:d4: b0:ee:2e:8d:d6:08:21:6e:eb:5f:32:71:09:c1:57:d7:a1:73: 4c:d5:a5:e0:88:8d:8a:f1:bb:8d:96:98:ff:61:7b:bc:0f:cd: 7c:9e:a0:83:81:04:6f:55:86:1f:32:7e:32:81:99:fe:0a:ec: 24:2d:8f:cd:88:98:da:23:9c:a6:fa:aa:3b:48:a7:3c:f4:d4: a1:b0:35:cb:8d:d9:82:a4:a8:e9:6e:22:b2:ae:bf:c0:0d:6f: 5c:68:23:db:d4:b5:75:a3:9f:bc:b3:b4:f1:8e:ab:c2:58:01: 7b:0a:5c:08:34:8e:b7:9c:96:9f:be:b2:c4:2f:06:d6:9f:15: 3f:6e:48:76:45:34:c4:9f:e8:54:04:f9:87:eb:ad:93:69:cb: bb:9d:78:0c:60:26:8a:dc:b3:91:78:20:46:ce:41:f9:dc:a6: 78:e6:dd:e7:39:ed:69:67:5a:95:cc:83:38:40:b1:03:33:b9: 7b:4b:31:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExLHbVGWKmCnngRYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdkYTFmNGEtZGE3Yi00NGNmLTg0MjctYTc0NjE1ZDlh NTNlMB4XDTI1MTIyNDEzMDAwM1oXDTI1MTIyNjEzMDAwMFowLzEtMCsGA1UEAxMk MWNkZWU5NjktN2VhOS00NDIzLWJiNmMtYWI5M2EwNDUxNzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKVLUgH3QtM3SvqlOljATe6oDyo/p2peBQBD FpCCFGOUJBQl7zlckiTzR4EhyqKVZILkEu4Oqm49wfxes4cmftiUytKyiW4d9msZ 1iT+2VOuDb+VHdJeFLNfM22vapNooCLJYMBrE9RyANRnUUJzHscnwS9v7jMQr+l9 qNTYDF3ycsfSf3SVl2T+XuY3fr4VJnFKD/j3pRH/c6rTgadd3O+qw1d/HvZUlgq0 BgyiFC82Jgrzn8dnHtbD513yJTpT8S+KQeOks1AXOY+bARZDa97NDjgTOnpuZKFP jOCghfcV0CD77/Jxca4bmEUD4x0gtwdI80YogPxHfT90SJ+dTQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBLBnawOEcbv7ICPaj3u4mfan5OBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81N2Rh MWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2MTVkOWE1M2UvNTdkYTFmNGEtZGE3Yi00 NGNmLTg0MjctYTc0NjE1ZDlhNTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTdkYTFmNGEtZGE3Yi00NGNmLTg0 MjctYTc0NjE1ZDlhNTNlLzU3ZGExZjRhLWRhN2ItNDRjZi04NDI3LWE3NDYxNWQ5 YTUzZS5jcmwwHwYDVR0jBBgwFoAU3FkuqnL/ai5aXRbcKWR980gMKgcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81N2RhMWY0YS1kYTdiLTQ0Y2YtODQyNy1hNzQ2 MTVkOWE1M2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBoI55DfFiFHqs0DlsCAClz BzMHVmymSNqLC89LVrzPK6UbTVdThJj91KFp4y0adoD6anjkx+4XGaxoKYCo3TjI Vualy3GYEtSw7i6N1gghbutfMnEJwVfXoXNM1aXgiI2K8buNlpj/YXu8D818nqCD gQRvVYYfMn4ygZn+CuwkLY/NiJjaI5ym+qo7SKc89NShsDXLjdmCpKjpbiKyrr/A DW9caCPb1LV1o5+8s7TxjqvCWAF7ClwINI63nJafvrLELwbWnxU/bkh2RTTEn+hU BPmH662Tacu7nXgMYCaK3LOReCBGzkH53KZ45t3nOe1pZ1qVzIM4QLEDM7l7SzEF -----END CERTIFICATE-----Generated at Thu Dec 25 00:56:46 2025 by rpki-client