This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: Gx73pwXvq5ceSJjk7vEo7RV8UCGEIlBZ9cEpMmt/4Wk= Subject key identifier: 2C:8C:D1:40:6D:88:9B:98:A6:E8:19:25:F6:F7:68:52:68:FA:72:BB Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584C5A963CAD9C500E1EF7D55F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A33379FF Signing time: Tue 30 Dec 2025 02:00:04 +0000 Manifest this update: Tue 30 Dec 2025 02:00:04 +0000 Manifest next update: Thu 01 Jan 2026 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: BcRfUpTNq6KH9KAxQNOSnlnGBW/8CGcglESb5ovGH1A=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: mPmt3X7DCGNbowRRdJbfxQC/OhSdajMEfW1uRhwV1vE=) 3: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: 4xYVN3sUgpfqnUhNCG5dGjmSnuBygoqA/P+ePL4ryto=) 4: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: ofhqYb/finzm4Gx2B+dQzWWyFr5UGefuTkLJGHZd1Q8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:3c:ad:9c:50:0e:1e:f7:d5:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Dec 30 02:00:04 2025 GMT Not After : Jan 1 02:00:00 2026 GMT Subject: CN=9b36c5b0-d164-46cb-a4aa-554941d2b373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:03:b4:64:42:7a:f9:55:fd:e6:cd:18:e0:39: e6:17:8a:74:99:2d:4e:eb:a8:ff:79:b1:f9:f0:e8: 63:fa:17:a3:44:b4:47:1a:75:25:62:19:36:b5:56: b3:34:2b:06:25:46:00:d1:d5:73:7d:c5:e5:dc:a2: 05:69:24:7c:d6:14:f4:dc:00:2f:85:78:69:bd:32: c9:f5:5f:81:3d:47:f7:04:21:ec:cf:7f:86:55:b1: c0:db:27:0a:9e:d7:00:f4:99:30:9f:a4:b0:d5:b7: 70:fe:25:c8:7e:0a:48:97:5b:84:b7:98:16:41:c4: 00:fa:48:5b:ac:a9:45:d9:87:ad:35:d5:a2:c0:0b: 06:2b:58:a5:9e:1c:8d:1a:4e:f3:18:96:ae:fd:c2: 06:13:7f:fe:0c:0c:7c:42:dd:6d:1f:b6:03:c9:73: 25:91:0b:a9:c4:3a:cc:b5:c3:12:0c:b8:50:02:6b: 26:80:18:6a:d9:c5:7a:ca:1c:b8:78:5f:6d:18:48: 81:cc:30:e2:eb:19:ec:77:28:2d:44:b8:5f:ac:02: ce:c4:ed:31:5e:d8:6d:50:b6:f0:de:e0:e0:8c:c5: 78:85:bf:5b:45:27:3f:b8:a5:c1:d7:85:d5:db:70: 87:d5:14:85:0d:ff:b3:2a:a7:12:ed:79:bc:f8:f2: 4a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8C:D1:40:6D:88:9B:98:A6:E8:19:25:F6:F7:68:52:68:FA:72:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:43:dc:cb:ad:9e:37:52:66:8c:c3:d8:ba:39:fe:d2:a2:90: 80:73:56:74:88:5d:5f:e9:6f:6f:bb:86:dd:ed:71:62:d5:64: b6:56:03:c7:15:0c:f2:a7:c7:83:f4:d6:63:13:14:d2:92:4e: f0:1b:84:74:57:a1:43:6c:73:1d:e3:a6:88:17:0d:b0:2a:c1: 62:ca:0c:99:34:67:33:4b:7c:1c:aa:bc:7b:f6:41:7b:8d:3c: c0:8e:a7:34:25:de:15:c2:3c:ec:20:28:81:f6:6f:84:e1:9f: 01:bd:e1:97:2e:5a:b0:74:de:c3:3b:8b:c8:5d:a5:f7:21:eb: b5:04:53:f6:d5:7b:59:3f:28:43:99:58:64:e0:34:54:ab:80: be:2e:15:c2:0c:05:53:5a:df:3f:45:fe:9b:b7:40:b7:c0:63: 8d:8e:a1:d0:4e:dc:c1:e0:51:6c:e2:c0:6e:c8:0d:a7:2b:f0: 64:4d:48:44:74:8a:9e:e7:ba:4a:15:13:5e:64:0f:9f:9b:64: 39:66:d6:7c:ac:4d:68:5a:ff:03:3b:6d:f8:bd:bc:d9:7a:f6: 50:b5:21:11:60:6a:b7:a9:06:6f:02:cb:c3:a1:d9:4c:f0:f0: 79:eb:ce:c5:a7:e2:48:62:8d:5b:ba:73:3b:ea:f9:41:20:c4: 3e:5d:6c:b6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExaljytnFAOHvfVXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MTIzMDAyMDAwNFoXDTI2MDEwMTAyMDAwMFowLzEtMCsGA1UEAxMk OWIzNmM1YjAtZDE2NC00NmNiLWE0YWEtNTU0OTQxZDJiMzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygO0ZEJ6+VX95s0Y4DnmF4p0mS1O66j/ebH5 8Ohj+hejRLRHGnUlYhk2tVazNCsGJUYA0dVzfcXl3KIFaSR81hT03AAvhXhpvTLJ 9V+BPUf3BCHsz3+GVbHA2ycKntcA9Jkwn6Sw1bdw/iXIfgpIl1uEt5gWQcQA+khb rKlF2YetNdWiwAsGK1ilnhyNGk7zGJau/cIGE3/+DAx8Qt1tH7YDyXMlkQupxDrM tcMSDLhQAmsmgBhq2cV6yhy4eF9tGEiBzDDi6xnsdygtRLhfrALOxO0xXthtULbw 3uDgjMV4hb9bRSc/uKXB14XV23CH1RSFDf+zKqcS7Xm8+PJK4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCyM0UBtiJuYpugZJfb3aFJo+nK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsQ9zLrZ43UmaMw9i6Of7S opCAc1Z0iF1f6W9vu4bd7XFi1WS2VgPHFQzyp8eD9NZjExTSkk7wG4R0V6FDbHMd 46aIFw2wKsFiygyZNGczS3wcqrx79kF7jTzAjqc0Jd4VwjzsICiB9m+E4Z8BveGX LlqwdN7DO4vIXaX3Ieu1BFP21XtZPyhDmVhk4DRUq4C+LhXCDAVTWt8/Rf6bt0C3 wGONjqHQTtzB4FFs4sBuyA2nK/BkTUhEdIqe57pKFRNeZA+fm2Q5ZtZ8rE1oWv8D O234vbzZevZQtSERYGq3qQZvAsvDodlM8PB5687Fp+JIYo1bunM76vlBIMQ+XWy2 -----END CERTIFICATE-----Generated at Tue Dec 30 04:35:40 2025 by rpki-client