This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft File: cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft (raw, json) Hash identifier: pKzBvlR6p3Za+b5aJf4u1XpY94RvNB+5MRTWdLziaN0= Subject key identifier: 33:8E:85:12:13:EF:DE:CE:5E:2A:9D:D7:04:93:17:92:3D:5A:37:D8 Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 Certificate issuer: /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Certificate serial: 010D0C9F4328584C4087EA8615E85367BDF20300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft Manifest number: 010D0C9F4328584073A82089A2176C2624B9BB9C Signing time: Sat 20 Dec 2025 18:00:08 +0000 Manifest this update: Sat 20 Dec 2025 18:00:08 +0000 Manifest next update: Tue 23 Dec 2025 18:00:00 +0000 Files and hashes: 1: 9682d34a-d558-35ce-b94a-c06ff912b18e.roa (hash: Ltb0OkA/3DNcOVROn0IOhLCXDnP6BADIg0sTN921q5U=) 2: cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl (hash: 7FLC2g5GyUsvXffIIuylV7EveLhn6MSDJw38GC44r+4=) 3: d44b739e-4693-3efd-8c82-67f73703b4ec.roa (hash: 7lnQJ3GNaxDyFOVPdoWdKLgcG8OdgaML8CTpayVlJcw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:87:ea:86:15:e8:53:67:bd:f2:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Validity Not Before: Dec 20 18:00:08 2025 GMT Not After : Dec 23 18:00:00 2025 GMT Subject: CN=c5eaa43e-eb26-4dbe-873e-6bf9636edfc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:2a:90:33:79:20:47:4b:98:ce:e2:bc:4e: c6:cf:fd:1a:ac:ce:2f:4e:8a:59:e6:2e:c4:32:4c: fb:78:92:7a:44:da:8c:9f:09:d3:d1:85:95:d2:b9: 8e:ec:32:0a:8a:31:f2:b7:ae:c5:d4:4b:37:c0:73: 62:14:5d:fa:ec:4f:30:9c:a2:3d:56:57:bf:13:ca: c6:28:08:1e:72:9a:32:64:03:b1:eb:03:92:7b:f8: df:1c:ba:d4:76:96:9e:14:0e:04:47:6a:cd:38:70: e6:dd:e8:6a:55:96:54:10:48:23:fb:6d:70:ad:3a: cf:67:1a:20:0e:8d:08:e0:d2:d5:2c:89:e1:50:7c: 94:c6:b0:b7:56:1c:fd:66:0a:f5:2d:47:d6:d7:f9: af:ea:f1:37:90:0e:09:aa:7a:66:3e:cc:53:46:bb: 7e:df:1b:56:6b:96:81:93:dc:cf:9e:bc:29:cf:79: 98:57:0c:f0:11:c9:df:22:92:0c:85:3d:ad:2b:2e: 8c:7b:cc:34:87:f2:25:78:0e:2c:51:71:f3:e9:5d: 56:ca:67:09:b9:a4:4e:fe:44:d5:79:a1:20:03:a4: ae:bf:74:c0:f5:d3:f7:0d:da:74:64:6b:cc:fd:2f: 7f:37:7d:0d:25:c9:e0:3a:79:63:c8:5e:7d:17:52: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8E:85:12:13:EF:DE:CE:5E:2A:9D:D7:04:93:17:92:3D:5A:37:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl X509v3 Authority Key Identifier: keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:72:da:f3:44:64:f0:ef:8d:72:b6:e5:92:c6:20:75:32:83: 40:1c:70:b1:38:07:5e:e4:aa:09:85:fb:69:38:16:e9:16:3e: e5:c9:9f:5f:80:7f:9f:38:aa:b4:31:8e:fd:46:49:c3:fd:dd: d0:d8:d8:11:85:dd:ff:2c:39:23:f9:96:97:c8:bf:82:23:0c: aa:e4:bf:2a:9f:97:29:0a:57:f7:f8:51:8f:3c:fa:c5:5e:e3: 25:b8:b9:d6:7f:12:02:11:07:37:8a:7d:47:42:57:71:b6:7a: 6e:5a:54:20:3e:1e:d6:bf:cb:57:7e:22:b9:13:d6:d0:be:97: c5:2e:e5:75:83:e6:27:a3:02:ff:dd:22:c4:8b:e2:fd:12:47: e1:cc:e4:55:9a:8c:5a:bb:b1:a2:0b:74:6c:53:0f:33:8b:95: 1f:fe:ce:34:fa:ef:6c:55:55:1f:37:dd:d5:50:d7:36:ac:e8: 0f:0d:4a:24:95:90:80:9c:29:a6:0c:43:2a:ab:c2:98:a8:4e: 94:22:84:2a:c6:53:4f:f6:c4:b4:4b:64:90:33:74:74:6b:25: 6f:4b:c5:d1:b6:16:ca:e6:03:d9:46:72:f1:5e:b7:2a:75:28: 28:7d:7f:65:3c:85:ff:81:bd:66:7f:dd:52:48:ce:2c:ef:20: c5:6a:d1:4d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExAh+qGFehTZ73yAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RlMzlkM2UtMzgzNy00MzQxLWE4YmQtODZjNzRjMDZh NmU0MB4XDTI1MTIyMDE4MDAwOFoXDTI1MTIyMzE4MDAwMFowLzEtMCsGA1UEAxMk YzVlYWE0M2UtZWIyNi00ZGJlLTg3M2UtNmJmOTYzNmVkZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV8qkDN5IEdLmM7ivE7Gz/0arM4vTopZ5i7E Mkz7eJJ6RNqMnwnT0YWV0rmO7DIKijHyt67F1Es3wHNiFF367E8wnKI9Vle/E8rG KAgecpoyZAOx6wOSe/jfHLrUdpaeFA4ER2rNOHDm3ehqVZZUEEgj+21wrTrPZxog Do0I4NLVLInhUHyUxrC3Vhz9Zgr1LUfW1/mv6vE3kA4JqnpmPsxTRrt+3xtWa5aB k9zPnrwpz3mYVwzwEcnfIpIMhT2tKy6Me8w0h/IleA4sUXHz6V1WymcJuaRO/kTV eaEgA6Suv3TA9dP3Ddp0ZGvM/S9/N30NJcngOnljyF59F1KL6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDOOhRIT797OXiqd1wSTF5I9WjfYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUz OWQzZS0zODM3LTQzNDEtYThiZC04NmM3NGMwNmE2ZTQvY2RlMzlkM2UtMzgzNy00 MzQxLWE4YmQtODZjNzRjMDZhNmU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RlMzlkM2UtMzgzNy00MzQxLWE4 YmQtODZjNzRjMDZhNmU0L2NkZTM5ZDNlLTM4MzctNDM0MS1hOGJkLTg2Yzc0YzA2 YTZlNC5jcmwwHwYDVR0jBBgwFoAUvuGpWNaK7St+8q41TTvs7MIvWykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUzOWQzZS0zODM3LTQzNDEtYThiZC04NmM3 NGMwNmE2ZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQctrzRGTw741ytuWSxiB1 MoNAHHCxOAde5KoJhftpOBbpFj7lyZ9fgH+fOKq0MY79RknD/d3Q2NgRhd3/LDkj +ZaXyL+CIwyq5L8qn5cpClf3+FGPPPrFXuMluLnWfxICEQc3in1HQldxtnpuWlQg Ph7Wv8tXfiK5E9bQvpfFLuV1g+YnowL/3SLEi+L9EkfhzORVmoxau7GiC3RsUw8z i5Uf/s40+u9sVVUfN93VUNc2rOgPDUoklZCAnCmmDEMqq8KYqE6UIoQqxlNP9sS0 S2SQM3R0ayVvS8XRthbK5gPZRnLxXrcqdSgofX9lPIX/gb1mf91SSM4s7yDFatFN -----END CERTIFICATE-----Generated at Sun Dec 21 18:32:56 2025 by rpki-client