This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft File: a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft (raw, json) Hash identifier: CFb8nDMlceUti52h+uIQuBXLOuWAiWjZBmNESCAnm1Q= Subject key identifier: 28:C2:9A:CF:9D:00:A1:9A:75:BF:05:D2:6B:9B:49:A4:ED:FB:06:40 Authority key identifier: B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8 Certificate issuer: /CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b Certificate serial: 010D0C9F4328584C4870D86FBDD5F7D79F50DC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft Manifest number: 010D0C9F4328584073A858ACC317BAD36CAA37E4 Signing time: Tue 23 Dec 2025 14:00:09 +0000 Manifest this update: Tue 23 Dec 2025 14:00:09 +0000 Manifest next update: Fri 26 Dec 2025 14:00:00 +0000 Files and hashes: 1: 1bbc7e25-e72b-3efc-9332-cb2ce1d50309.roa (hash: JMtSRoMi0cKKV7jDDNMLHxW2aV9ueGnFD4HLLnI5DXs=) 2: a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl (hash: GKuB7tmadDEXTpZa//dxdBDxSnHCY1NJZkpCIFakFFI=) 3: d1162b5c-5f5e-36e6-8d9d-416bbf3ff8f3.roa (hash: lHLBj4jBS4vRtiBqyAFQ6dota9A6qKCceIIamkZ/Xss=) 4: ef189ea0-e8cd-3c0b-adc8-1c5bbdf0c5bd.roa (hash: Wgv84G4aXQ5rP7P4tmRg3ExOo1HTCsf1+IKyqT9hy5I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:70:d8:6f:bd:d5:f7:d7:9f:50:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3e75940-8ff7-4128-ac13-6fa2836a9b2b Validity Not Before: Dec 23 14:00:09 2025 GMT Not After : Dec 26 14:00:00 2025 GMT Subject: CN=5f421d8e-0f98-43f4-beed-1af334322f85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:21:ee:3e:b8:70:26:44:80:e4:bb:c4:35: f4:3e:dd:f5:80:b9:d2:f2:17:d1:11:9d:98:e8:5d: c3:71:4f:6b:6e:0c:8c:df:32:c0:7b:5c:c8:95:51: 70:41:ae:7c:82:c2:4d:49:0c:02:84:68:d9:b1:36: 61:bd:55:72:56:4d:4b:3a:13:39:0e:4b:d5:c6:e0: d3:4a:11:bf:88:5a:a7:0a:0f:12:96:c1:70:2c:ee: 36:f3:31:55:a1:7d:6f:92:f4:eb:24:c3:61:7e:56: 23:cb:0f:89:66:e7:22:a8:1c:53:09:7c:71:a5:32: 03:4b:8a:36:a6:2f:08:97:1c:5f:3f:0a:fb:de:ab: 78:86:30:76:16:f1:be:cc:a7:49:6f:45:ef:b0:de: a1:2a:11:df:69:3d:e4:07:39:bd:4d:1f:af:68:33: 0e:69:05:a0:c6:61:ae:fc:46:c3:1b:ca:01:36:ba: 4c:ed:a4:1a:c8:a7:02:ba:67:21:a4:4f:36:ba:90: c1:f9:a9:4e:96:f8:da:6b:e2:8c:ba:54:a4:0e:ff: 9e:ce:d2:d5:f7:10:eb:e5:38:ef:46:5d:35:49:dc: 8b:6f:87:6a:f3:ca:ab:35:e6:6d:a4:ec:11:d6:63: bc:ad:29:26:ca:10:1a:5e:4c:78:90:b6:bf:92:e9: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C2:9A:CF:9D:00:A1:9A:75:BF:05:D2:6B:9B:49:A4:ED:FB:06:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.crl X509v3 Authority Key Identifier: keyid:B6:77:D7:4B:52:36:09:D5:81:C5:95:07:00:B9:B2:2A:CA:27:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3e75940-8ff7-4128-ac13-6fa2836a9b2b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:5a:1b:1c:65:f4:6b:8b:e8:3e:5d:30:67:92:07:0b:01:f4: 7b:25:ee:5d:fb:2a:ae:80:72:19:c3:30:86:65:97:da:dc:e7: 2c:68:7c:fb:c7:64:f5:aa:85:d4:bc:14:d8:63:36:d5:f2:a3: 7e:6e:df:3f:b1:e2:be:fe:6c:3c:04:be:15:f9:5f:dc:f8:02: 05:3c:86:83:be:14:36:e4:72:71:b7:78:be:84:43:4e:84:4c: 02:85:1e:8f:d3:ed:41:ac:bb:d6:92:49:51:a1:47:f8:f5:bd: 71:04:93:c7:aa:0b:5f:df:26:5b:6a:3b:5a:85:fd:0b:a9:f9: 38:d9:0b:38:ea:47:1a:7c:4a:b6:e5:07:ce:f1:1f:cc:ab:7e: 98:fb:77:9c:87:ba:ab:cf:d8:1c:00:6b:57:f4:45:b9:e5:04: e4:92:39:18:ff:8e:ad:64:62:85:b2:a3:ad:60:eb:77:2d:5f: 1c:7a:74:33:db:bf:eb:af:93:5f:de:be:93:3a:3c:36:26:6e: ba:1a:3b:ad:a7:18:b3:a0:dd:9a:4a:fb:2e:5c:9e:27:ea:ef: 22:9c:10:36:63:e4:1f:b8:2f:52:35:d2:7c:a8:fb:f9:09:a2: 2e:df:0b:6a:ea:47:2e:3d:16:f3:f6:ab:07:66:fc:2a:31:2d: cf:38:f1:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExIcNhvvdX3159Q3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNlNzU5NDAtOGZmNy00MTI4LWFjMTMtNmZhMjgzNmE5 YjJiMB4XDTI1MTIyMzE0MDAwOVoXDTI1MTIyNjE0MDAwMFowLzEtMCsGA1UEAxMk NWY0MjFkOGUtMGY5OC00M2Y0LWJlZWQtMWFmMzM0MzIyZjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNkh7j64cCZEgOS7xDX0Pt31gLnS8hfREZ2Y 6F3DcU9rbgyM3zLAe1zIlVFwQa58gsJNSQwChGjZsTZhvVVyVk1LOhM5DkvVxuDT ShG/iFqnCg8SlsFwLO428zFVoX1vkvTrJMNhflYjyw+JZuciqBxTCXxxpTIDS4o2 pi8IlxxfPwr73qt4hjB2FvG+zKdJb0XvsN6hKhHfaT3kBzm9TR+vaDMOaQWgxmGu /EbDG8oBNrpM7aQayKcCumchpE82upDB+alOlvjaa+KMulSkDv+eztLV9xDr5Tjv Rl01SdyLb4dq88qrNeZtpOwR1mO8rSkmyhAaXkx4kLa/kum5HwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCjCms+dAKGadb8F0mubSaTt+wZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3 NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEyODM2YTliMmIvYTNlNzU5NDAtOGZmNy00 MTI4LWFjMTMtNmZhMjgzNmE5YjJiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTNlNzU5NDAtOGZmNy00MTI4LWFj MTMtNmZhMjgzNmE5YjJiL2EzZTc1OTQwLThmZjctNDEyOC1hYzEzLTZmYTI4MzZh OWIyYi5jcmwwHwYDVR0jBBgwFoAUtnfXS1I2CdWBxZUHALmyKsonuvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hM2U3NTk0MC04ZmY3LTQxMjgtYWMxMy02ZmEy ODM2YTliMmIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhWhscZfRri+g+XTBnkgcL AfR7Je5d+yqugHIZwzCGZZfa3OcsaHz7x2T1qoXUvBTYYzbV8qN+bt8/seK+/mw8 BL4V+V/c+AIFPIaDvhQ25HJxt3i+hENOhEwChR6P0+1BrLvWkklRoUf49b1xBJPH qgtf3yZbajtahf0Lqfk42Qs46kcafEq25QfO8R/Mq36Y+3ech7qrz9gcAGtX9EW5 5QTkkjkY/46tZGKFsqOtYOt3LV8cenQz27/rr5Nf3r6TOjw2Jm66GjutpxizoN2a SvsuXJ4n6u8inBA2Y+QfuC9SNdJ8qPv5CaIu3wtq6kcuPRbz9qsHZvwqMS3POPE3 -----END CERTIFICATE-----Generated at Wed Dec 24 03:38:56 2025 by rpki-client