This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft File: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft (raw, json) Hash identifier: FjpAyiDjyM2Y7XQkrDos6JhirR+Fjh2lkOXe6k6vCBo= Subject key identifier: 17:A3:F5:2F:B3:7D:BB:F5:1E:09:1B:8C:26:E1:48:98:89:49:05:6E Authority key identifier: 14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 Certificate issuer: /CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Certificate serial: 010D0C9F4328584C5577FCAEF650DB15688F9000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft Manifest number: 010D0C9F4328584073A8433349A69053F9B88D41 Signing time: Sun 28 Dec 2025 06:00:03 +0000 Manifest this update: Sun 28 Dec 2025 06:00:03 +0000 Manifest next update: Tue 30 Dec 2025 06:00:00 +0000 Files and hashes: 1: a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl (hash: bsb0f/ctqA1HeSgzC18c2ujKJy/aw/mOF+O6wI77474=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:77:fc:ae:f6:50:db:15:68:8f:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae Validity Not Before: Dec 28 06:00:03 2025 GMT Not After : Dec 30 06:00:00 2025 GMT Subject: CN=fd9bfddc-1a67-40f1-8417-8ef70b82fd89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:30:41:40:db:2a:1c:bd:98:d1:71:a2:7c: 54:98:4f:87:74:be:37:33:a3:37:aa:11:44:98:7e: 81:b3:f2:c4:19:14:24:55:c2:1a:39:81:86:ec:9e: 86:f5:a8:28:ee:d3:99:ed:76:4e:6c:a8:0d:63:b8: c4:5d:be:5a:d1:07:76:1e:01:6c:f3:4c:ea:4f:20: 6b:f2:c6:53:fb:ef:d2:f5:e8:eb:04:63:5e:93:93: a4:8b:a4:95:35:ba:2b:95:fd:9a:6a:06:91:43:89: 95:aa:25:70:be:a7:4d:9e:80:ad:3a:cc:2e:2a:45: 20:ec:ee:dc:a6:4b:2b:15:92:1a:72:c1:81:bb:9b: ac:4a:fa:1e:e8:4c:ac:dc:85:77:2d:66:1b:da:4e: 7e:94:2c:a3:a6:1b:3c:36:ba:44:1d:c5:e2:5d:c2: 29:bc:8c:d5:32:60:02:8e:60:20:27:28:1c:cc:c3: dc:5f:a5:91:1d:97:c9:9a:72:54:74:b7:ab:a6:19: 1d:52:b6:2d:09:09:af:6d:05:c6:73:2a:81:6d:9d: 18:c5:5d:43:86:d0:fc:95:d6:3a:7a:86:4a:fb:3c: 6c:b0:c6:17:38:df:7d:21:4e:b3:fa:ba:2a:59:96: 0c:95:27:8b:da:d7:75:40:e5:98:a2:7a:09:05:f7: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A3:F5:2F:B3:7D:BB:F5:1E:09:1B:8C:26:E1:48:98:89:49:05:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.crl X509v3 Authority Key Identifier: keyid:14:71:AC:1E:2B:E8:94:25:09:41:FC:D6:59:07:4C:A3:B5:CF:BB:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2a1cf34-9de6-43b2-8c6e-efb27a9ac5ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:4e:d5:6c:aa:78:3d:75:37:32:e2:b5:cb:a7:1f:73:e6:a7: 04:a9:be:ef:d3:7b:23:96:01:1b:ee:af:f7:9c:1f:30:f3:b6: 67:d7:39:0e:a6:07:e2:9c:8b:27:3e:52:93:08:ca:80:3a:5a: 5b:77:e9:1c:60:56:e7:75:c9:97:2f:72:75:fa:3a:e1:ff:f5: 5e:e1:38:6c:2d:7a:1c:39:3e:45:00:b5:e4:29:1b:1b:09:95: 52:8e:65:2f:f0:7c:95:5b:73:eb:13:1c:93:9b:71:e4:43:8e: 28:af:9a:5e:7b:e9:01:26:31:45:59:4d:08:3e:00:3d:70:d1: 94:3d:72:ce:1d:8f:78:a6:15:3c:e9:62:19:b7:4f:43:4f:08: ac:26:8a:c0:d4:e6:8d:32:4b:82:00:c2:8f:a1:ba:66:36:27: 23:7a:43:bd:81:47:49:0b:7b:12:b3:2c:e0:23:ba:68:20:1f: 41:ea:cb:b8:45:81:fb:0c:a2:ed:c1:24:81:1e:10:e2:df:7f: 6c:1a:bd:cc:50:3f:42:64:ce:ca:95:fc:85:f3:cf:c7:72:75: 9c:c9:b3:0c:a9:94:7a:10:90:7d:c8:ea:fe:35:93:0a:ac:a9: cb:6c:c6:b9:40:4a:1f:76:6f:42:9e:b6:7f:2f:47:62:ee:e4: 73:2f:bf:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExVd/yu9lDbFWiPkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhMWNmMzQtOWRlNi00M2IyLThjNmUtZWZiMjdhOWFj NWFlMB4XDTI1MTIyODA2MDAwM1oXDTI1MTIzMDA2MDAwMFowLzEtMCsGA1UEAxMk ZmQ5YmZkZGMtMWE2Ny00MGYxLTg0MTctOGVmNzBiODJmZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKYwQUDbKhy9mNFxonxUmE+HdL43M6M3qhFE mH6Bs/LEGRQkVcIaOYGG7J6G9ago7tOZ7XZObKgNY7jEXb5a0Qd2HgFs80zqTyBr 8sZT++/S9ejrBGNek5Oki6SVNborlf2aagaRQ4mVqiVwvqdNnoCtOswuKkUg7O7c pksrFZIacsGBu5usSvoe6Eys3IV3LWYb2k5+lCyjphs8NrpEHcXiXcIpvIzVMmAC jmAgJygczMPcX6WRHZfJmnJUdLerphkdUrYtCQmvbQXGcyqBbZ0YxV1DhtD8ldY6 eoZK+zxssMYXON99IU6z+roqWZYMlSeL2td1QOWYonoJBffzuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBej9S+zfbv1HgkbjCbhSJiJSQVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMmEx Y2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIyN2E5YWM1YWUvYTJhMWNmMzQtOWRlNi00 M2IyLThjNmUtZWZiMjdhOWFjNWFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTJhMWNmMzQtOWRlNi00M2IyLThj NmUtZWZiMjdhOWFjNWFlL2EyYTFjZjM0LTlkZTYtNDNiMi04YzZlLWVmYjI3YTlh YzVhZS5jcmwwHwYDVR0jBBgwFoAUFHGsHivolCUJQfzWWQdMo7XPuzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMmExY2YzNC05ZGU2LTQzYjItOGM2ZS1lZmIy N2E5YWM1YWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANTtVsqng9dTcy4rXLpx9z 5qcEqb7v03sjlgEb7q/3nB8w87Zn1zkOpgfinIsnPlKTCMqAOlpbd+kcYFbndcmX L3J1+jrh//Ve4ThsLXocOT5FALXkKRsbCZVSjmUv8HyVW3PrExyTm3HkQ44or5pe e+kBJjFFWU0IPgA9cNGUPXLOHY94phU86WIZt09DTwisJorA1OaNMkuCAMKPobpm NicjekO9gUdJC3sSsyzgI7poIB9B6su4RYH7DKLtwSSBHhDi339sGr3MUD9CZM7K lfyF88/HcnWcybMMqZR6EJB9yOr+NZMKrKnLbMa5QEofdm9CnrZ/L0di7uRzL7+C -----END CERTIFICATE-----Generated at Sun Dec 28 09:43:06 2025 by rpki-client