This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.mft File: c8252214-88a3-4807-bbe2-b344c3be7f19.mft (raw, json) Hash identifier: /tYRC6uX52Ym33dLyyfrUseWbpLncCJjFhUt6rQQ6LM= Subject key identifier: A3:30:69:DA:D7:0F:9E:4D:D1:9B:F4:D8:43:D3:EF:B1:E2:21:CD:23 Authority key identifier: 62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B Certificate issuer: /CN=c8252214-88a3-4807-bbe2-b344c3be7f19 Certificate serial: 010D0C9F4328584C4A11B3D04691BA9596AFD580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.mft Manifest number: 010D0C9F4328584073A83CB6D585AAD7C3F38BE7 Signing time: Wed 24 Dec 2025 04:00:03 +0000 Manifest this update: Wed 24 Dec 2025 04:00:03 +0000 Manifest next update: Fri 26 Dec 2025 04:00:00 +0000 Files and hashes: 1: a1bc269a-e265-3234-b628-e9d71b3d725d.roa (hash: gr4h7xB34qMCirYQcTrdpEwEJ86g5mRSZT4dg3mIflk=) 2: c8252214-88a3-4807-bbe2-b344c3be7f19.crl (hash: zhFla5yX7BBeJ8fIdCEmpfgkRyLK02EMZAMy5Xn3D9g=) 3: e7a0ad12-5f1a-34d7-8afd-1dd917cce2d2.roa (hash: Do7mxraGhUYTWyCCwBodCn+iXEnJ3eWKhch8SatESQU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4a:11:b3:d0:46:91:ba:95:96:af:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8252214-88a3-4807-bbe2-b344c3be7f19 Validity Not Before: Dec 24 04:00:03 2025 GMT Not After : Dec 26 04:00:00 2025 GMT Subject: CN=cebcc531-2aee-4b93-bb98-07d51714023b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9a:3c:d5:35:f3:3b:01:a3:5f:15:55:63:39: 4e:f1:04:93:b2:d2:bc:f7:f4:98:f9:f0:90:50:e9: 5b:73:97:c2:a5:74:de:3c:66:14:50:15:b0:57:34: 3a:8e:0b:20:28:44:b3:65:87:f1:79:63:52:2a:c6: 85:80:a6:c6:61:da:7e:9f:59:32:6f:4c:46:44:3d: 27:35:a0:fc:5c:06:4e:86:b8:50:6f:05:d1:d8:1f: 97:98:20:93:4d:d3:40:c5:02:3b:c1:f3:95:c6:a7: 96:d0:46:6d:da:28:17:63:ef:d3:f1:e4:5e:dc:09: fa:33:cd:5c:ba:56:58:b0:38:b6:c7:26:93:81:1b: aa:12:26:55:09:19:68:a7:83:36:ff:36:ea:a0:f5: 4f:8a:09:69:0f:cc:71:47:55:52:c8:87:62:c6:a7: d0:7b:28:b0:3e:e4:0d:b7:8a:04:5c:97:48:5c:d3: e6:4c:72:40:5a:be:d3:9c:95:3b:e6:1e:0a:91:56: e1:95:f4:f4:68:52:61:68:33:2b:09:f2:7d:b3:21: 00:fb:e4:66:4f:0a:3e:b1:01:91:2f:c2:3c:90:d3: 91:52:87:91:ac:8d:22:c0:02:f6:27:29:8c:fa:c5: ab:40:ea:ad:54:eb:fd:33:74:8a:b1:c3:9b:04:b3: b1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:30:69:DA:D7:0F:9E:4D:D1:9B:F4:D8:43:D3:EF:B1:E2:21:CD:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl X509v3 Authority Key Identifier: keyid:62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:00:3d:44:78:b6:9b:45:59:24:6f:be:ff:92:4b:df:a2:98: 48:95:ca:c6:57:b1:31:ae:b5:95:e7:6c:c8:2e:04:19:bf:30: 2a:5a:95:c7:3f:fc:49:ae:39:ff:c3:a4:7b:6b:47:3f:57:d6: 3f:9e:45:d6:e1:eb:35:8a:7b:54:18:52:85:5f:a6:0e:7d:ad: 73:cb:46:65:68:47:76:36:90:a8:10:db:86:ce:7e:3f:95:81: 78:0b:7c:fb:ec:42:a1:9a:94:30:a1:41:42:e6:60:dc:fa:2c: 8f:f9:f6:b4:b1:57:c5:4b:81:64:30:f4:f8:16:e9:28:f2:f9: 43:ec:ea:ca:41:33:1d:b3:95:b2:86:21:09:53:62:b1:23:b8: 00:24:54:5a:48:ab:65:ab:29:9d:ce:68:3c:d5:6b:af:18:c3: 43:38:c3:5b:c0:73:99:54:20:c4:ba:1f:62:ce:1c:0c:15:95: 2d:dd:1f:76:69:3a:aa:9a:8f:b6:d5:a0:ec:ca:41:91:43:1e: c8:3b:33:6d:d4:28:bd:9d:72:3a:9f:cd:43:a0:6e:68:41:13: 1b:f2:24:3d:39:af:ca:bc:f4:99:74:b1:8f:3e:e3:7e:f5:0b: d8:5b:a6:9c:3c:c7:74:62:90:9f:1d:80:15:df:18:42:f0:27: a7:e2:78:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExKEbPQRpG6lZav1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzgyNTIyMTQtODhhMy00ODA3LWJiZTItYjM0NGMzYmU3 ZjE5MB4XDTI1MTIyNDA0MDAwM1oXDTI1MTIyNjA0MDAwMFowLzEtMCsGA1UEAxMk Y2ViY2M1MzEtMmFlZS00YjkzLWJiOTgtMDdkNTE3MTQwMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpo81TXzOwGjXxVVYzlO8QSTstK89/SY+fCQ UOlbc5fCpXTePGYUUBWwVzQ6jgsgKESzZYfxeWNSKsaFgKbGYdp+n1kyb0xGRD0n NaD8XAZOhrhQbwXR2B+XmCCTTdNAxQI7wfOVxqeW0EZt2igXY+/T8eRe3An6M81c ulZYsDi2xyaTgRuqEiZVCRlop4M2/zbqoPVPiglpD8xxR1VSyIdixqfQeyiwPuQN t4oEXJdIXNPmTHJAWr7TnJU75h4KkVbhlfT0aFJhaDMrCfJ9syEA++RmTwo+sQGR L8I8kNORUoeRrI0iwAL2JymM+sWrQOqtVOv9M3SKscObBLOxmwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKMwadrXD55N0Zv02EPT77HiIc0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODI1 MjIxNC04OGEzLTQ4MDctYmJlMi1iMzQ0YzNiZTdmMTkvYzgyNTIyMTQtODhhMy00 ODA3LWJiZTItYjM0NGMzYmU3ZjE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzgyNTIyMTQtODhhMy00ODA3LWJi ZTItYjM0NGMzYmU3ZjE5L2M4MjUyMjE0LTg4YTMtNDgwNy1iYmUyLWIzNDRjM2Jl N2YxOS5jcmwwHwYDVR0jBBgwFoAUYlz5NoMoFKjjBEMWFfWE0PzWzxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODI1MjIxNC04OGEzLTQ4MDctYmJlMi1iMzQ0 YzNiZTdmMTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZAD1EeLabRVkkb77/kkvf ophIlcrGV7ExrrWV52zILgQZvzAqWpXHP/xJrjn/w6R7a0c/V9Y/nkXW4es1intU GFKFX6YOfa1zy0ZlaEd2NpCoENuGzn4/lYF4C3z77EKhmpQwoUFC5mDc+iyP+fa0 sVfFS4FkMPT4Fuko8vlD7OrKQTMds5WyhiEJU2KxI7gAJFRaSKtlqymdzmg81Wuv GMNDOMNbwHOZVCDEuh9izhwMFZUt3R92aTqqmo+21aDsykGRQx7IOzNt1Ci9nXI6 n81DoG5oQRMb8iQ9Oa/KvPSZdLGPPuN+9QvYW6acPMd0YpCfHYAV3xhC8Cen4niG -----END CERTIFICATE-----Generated at Wed Dec 24 18:36:21 2025 by rpki-client