This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft File: cd1efaa6-01e7-4528-8278-46b312a6e020.mft (raw, json) Hash identifier: Piki2SF2/cOmOqGDE+PLobw1N7bRyL5k5ROk5WNMQoc= Subject key identifier: 08:02:42:B1:8B:90:70:3A:3C:58:3D:2F:16:84:9E:25:75:12:70:7D Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584C49D623382A76285E1A0CDB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft Manifest number: 010D0C9F4328584073A83840A2BEE7D9A33379F9 Signing time: Wed 24 Dec 2025 02:00:03 +0000 Manifest this update: Wed 24 Dec 2025 02:00:03 +0000 Manifest next update: Fri 26 Dec 2025 02:00:00 +0000 Files and hashes: 1: 15971b5a-708e-36a4-9675-d45099021eac.roa (hash: BcRfUpTNq6KH9KAxQNOSnlnGBW/8CGcglESb5ovGH1A=) 2: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (hash: mPmt3X7DCGNbowRRdJbfxQC/OhSdajMEfW1uRhwV1vE=) 3: cd1efaa6-01e7-4528-8278-46b312a6e020.crl (hash: oIwioge15JBISgGUVpWeV/kHZk/Pli3EpDrDAbGiMGM=) 4: faeaa35a-3d03-3c73-9bea-a6e8990aeb38.roa (hash: ofhqYb/finzm4Gx2B+dQzWWyFr5UGefuTkLJGHZd1Q8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:49:d6:23:38:2a:76:28:5e:1a:0c:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: Dec 24 02:00:03 2025 GMT Not After : Dec 26 02:00:00 2025 GMT Subject: CN=3de376e9-473b-4b3f-885a-2d92a36982ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:89:e2:ee:59:d6:47:a1:c0:e5:cf:32:58:2a: 12:64:1c:5c:a4:a5:99:b2:55:f7:f2:67:04:1f:c1: 2e:c3:f9:76:06:78:e2:33:12:a2:6b:d5:68:05:60: b9:6f:09:fa:e5:d2:4e:b2:30:89:88:1c:57:fb:98: 57:e7:9f:77:91:ac:76:a2:66:b5:e3:00:58:56:7c: 76:51:4d:13:c2:ac:d9:95:f0:4d:a3:2f:55:d3:8b: 6f:5f:09:f5:83:34:11:dd:56:a0:4f:23:08:c0:98: 49:9c:f8:13:e3:91:08:1f:0e:57:61:a6:d7:5a:95: 71:a7:11:e6:62:81:7e:10:57:a4:e4:b3:36:49:fa: 6c:56:08:3e:50:f0:24:ed:fd:c4:65:c5:26:eb:e6: 3c:75:ea:b1:92:d5:2d:6e:c2:3d:f1:99:78:79:7b: 33:a4:4b:7e:e7:37:22:32:92:6a:e1:67:e2:c2:8c: fd:84:82:1c:11:82:e1:09:fd:ba:4e:70:a4:a5:74: d7:7b:6d:67:97:80:89:bf:c7:26:75:58:e5:98:4f: f6:1b:14:0d:c1:0f:6e:ea:44:75:e9:1c:20:1c:f2: 5b:96:00:87:8c:80:65:fa:79:a9:b8:b7:3f:3a:e4: 3a:f2:20:7c:81:8e:fa:a8:f6:9a:1c:28:74:eb:cd: d8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:02:42:B1:8B:90:70:3A:3C:58:3D:2F:16:84:9E:25:75:12:70:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f0:fb:fc:0c:80:ca:ad:ad:6e:1b:84:2b:36:13:25:08:a6: a5:d0:ad:aa:c6:c3:f4:53:cd:9e:bb:49:1c:19:5d:a6:13:b8: 7e:bf:1d:43:4e:82:10:00:71:bf:8b:af:8d:bd:a4:97:cb:d3: 73:cd:0e:99:d3:3a:7f:ec:4a:eb:e9:f2:a4:17:72:c6:39:f1: d8:a1:44:be:6f:07:c1:05:99:8d:33:95:95:4b:89:0d:c6:d4: 38:2e:31:7e:0b:71:4a:2d:da:48:ce:53:c1:31:1f:ec:fb:94: 11:1a:81:39:48:89:b6:2b:81:31:36:17:e7:1f:06:ad:4d:25: 62:e1:c0:17:d3:a3:c5:bb:24:ae:30:bd:fe:01:b4:1a:10:db: 0c:ac:4e:0b:79:28:f7:c3:eb:b9:4d:6d:27:df:b7:de:db:78: 6e:23:7b:f8:85:bf:5e:3b:4e:d3:2d:c0:d8:42:ae:dd:23:08: 51:79:92:2d:13:4b:a3:c2:15:e7:c9:9f:36:e3:49:7e:f2:9b: f7:50:e3:cf:29:b0:16:6f:de:41:d6:b5:2e:e2:f5:a4:80:36: bf:91:f2:52:69:73:60:b1:1a:cf:f6:62:73:51:c1:91:03:a7: b9:e0:e9:c5:90:c3:be:11:b6:7a:12:27:14:26:25:2a:45:39: 2e:9d:e0:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExJ1iM4KnYoXhoM2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI1MTIyNDAyMDAwM1oXDTI1MTIyNjAyMDAwMFowLzEtMCsGA1UEAxMk M2RlMzc2ZTktNDczYi00YjNmLTg4NWEtMmQ5MmEzNjk4MmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4ni7lnWR6HA5c8yWCoSZBxcpKWZslX38mcE H8Euw/l2BnjiMxKia9VoBWC5bwn65dJOsjCJiBxX+5hX5593kax2oma14wBYVnx2 UU0TwqzZlfBNoy9V04tvXwn1gzQR3VagTyMIwJhJnPgT45EIHw5XYabXWpVxpxHm YoF+EFek5LM2SfpsVgg+UPAk7f3EZcUm6+Y8deqxktUtbsI98Zl4eXszpEt+5zci MpJq4Wfiwoz9hIIcEYLhCf26TnCkpXTXe21nl4CJv8cmdVjlmE/2GxQNwQ9u6kR1 6RwgHPJblgCHjIBl+nmpuLc/OuQ68iB8gY76qPaaHCh0683Y3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAgCQrGLkHA6PFg9LxaEniV1EnB9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvY2QxZWZhYTYtMDFlNy00 NTI4LTgyNzgtNDZiMzEyYTZlMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCo8Pv8DIDKra1uG4QrNhMl CKal0K2qxsP0U82eu0kcGV2mE7h+vx1DToIQAHG/i6+NvaSXy9NzzQ6Z0zp/7Err 6fKkF3LGOfHYoUS+bwfBBZmNM5WVS4kNxtQ4LjF+C3FKLdpIzlPBMR/s+5QRGoE5 SIm2K4ExNhfnHwatTSVi4cAX06PFuySuML3+AbQaENsMrE4LeSj3w+u5TW0n37fe 23huI3v4hb9eO07TLcDYQq7dIwhReZItE0ujwhXnyZ8240l+8pv3UOPPKbAWb95B 1rUu4vWkgDa/kfJSaXNgsRrP9mJzUcGRA6e54OnFkMO+EbZ6EicUJiUqRTkuneBS -----END CERTIFICATE-----Generated at Wed Dec 24 21:35:35 2025 by rpki-client