This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft File: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft (raw, json) Hash identifier: Laqr3/yXJHPxORGKVX7xIj+GuUGDv/Y/xZ3zHlXUtRo= Subject key identifier: 24:B4:46:FA:6D:72:4E:7C:3A:F3:FD:0C:FC:AF:7E:83:CD:E9:A4:6E Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584C497DCC60B480C9A3724192C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft Manifest number: 010D0C9F4328584073A8304831365BDD4E70CAF2 Signing time: Tue 23 Dec 2025 23:02:03 +0000 Manifest this update: Tue 23 Dec 2025 23:02:03 +0000 Manifest next update: Thu 25 Dec 2025 23:00:00 +0000 Files and hashes: 1: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (hash: frWbMRNvd7dlEPEQnIIpC3oVfri4ruP8w8PMg6PC+Rk=) 2: 6d5ee0b0-8051-316d-8cab-edd1a702aaee.roa (hash: Ww2wLsdVdpea2dzghilFDVUdwEEbOp4D9L3nEIn9aKU=) 3: de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl (hash: H5muGeMcrCgsRc30XaIBPm3s0Gas3HJlsshczz8AAyw=) 4: ed656f57-c876-3393-937a-7eabe0e6e42a.roa (hash: +4swVD7diaBWhVqcGsStN4FwVDqfovsRnFopu0ThOjQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:49:7d:cc:60:b4:80:c9:a3:72:41:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Dec 23 23:02:03 2025 GMT Not After : Dec 25 23:00:00 2025 GMT Subject: CN=b8b56d96-0fb2-4132-a0d3-88e409f10def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:97:28:7c:41:fb:b6:5c:62:68:b5:49:75:d1: 38:6c:3d:f9:15:71:1f:eb:f3:e0:ee:b2:3f:fd:c7: 4c:ff:27:47:87:94:2c:86:83:0e:0a:4b:6b:9e:f1: 7d:ff:5d:c4:f3:52:b1:73:ae:94:5b:11:a1:b4:65: 7e:72:c1:c7:79:4a:ce:4c:65:11:c0:22:2b:37:cd: 0c:65:bf:3e:e3:07:55:f9:3f:dc:26:28:44:a7:1b: be:52:df:ef:a4:ae:30:41:7d:9f:90:5f:b2:3f:e5: 18:95:95:f6:2b:0f:30:f7:55:f8:b1:13:26:23:82: 92:3b:17:18:af:3b:aa:ff:36:2a:d9:20:e3:b1:13: 41:5c:15:5d:2b:4b:fc:2d:0a:89:a0:40:7b:7c:7e: cc:30:c0:35:bd:99:49:74:7e:47:a8:00:38:77:ff: 2f:b1:33:5f:27:a3:d2:03:41:9b:4c:53:28:9f:1b: 5c:51:8c:f5:6f:81:40:9a:a7:24:f8:58:5c:13:45: de:c2:97:a4:ce:cc:98:4c:da:d2:4d:ab:df:ea:86: 4e:02:6d:6a:1f:df:34:79:79:c0:3a:e6:3b:32:b3: d3:8a:ce:29:b0:59:9d:e1:2b:e1:7f:29:fc:e9:39: 38:36:05:57:25:70:49:2c:13:d3:6e:58:5e:fe:6c: 1c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B4:46:FA:6D:72:4E:7C:3A:F3:FD:0C:FC:AF:7E:83:CD:E9:A4:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f6:72:99:91:d6:4c:70:f2:d6:85:f6:12:40:cb:ad:8b:05: 6a:54:a3:23:fa:18:36:e0:c2:9f:04:b1:9e:72:0c:b9:fa:a1: 2a:cf:af:e8:95:ab:da:15:56:3a:72:8b:d9:16:a5:9e:0b:57: 87:3b:77:fb:b2:20:d1:3f:11:21:41:09:83:26:62:e2:a3:a7: e4:db:2b:b2:79:a2:72:8d:d3:ac:85:75:c8:fd:e2:bd:47:5e: f8:d8:c3:5f:54:6b:04:6e:fd:6b:94:da:bc:8c:7f:8a:97:73: 4f:8d:eb:e6:3f:9e:99:39:3c:19:33:2d:be:50:6b:a2:a2:9f: e5:96:7a:cc:bb:69:03:4c:23:46:13:bb:0c:f3:37:62:b5:42: 07:89:a9:85:7d:71:9a:57:4a:a3:ca:a4:39:48:59:cf:4d:c7: 00:2d:fa:40:3b:12:a9:34:a8:35:a3:37:e9:06:fe:fe:4c:e9: 63:30:a1:bb:ae:5f:14:84:3c:66:58:5f:28:c9:0a:79:9b:5f: b1:2d:fc:3b:8b:72:55:8b:1c:ba:45:d4:3c:44:c5:26:30:dd: 30:91:f7:17:9f:c1:83:26:94:a5:99:fd:53:ef:48:a7:b0:0e: f2:ff:ba:f0:55:5e:83:73:de:84:6b:01:b9:b4:e5:0a:75:06: 85:10:2a:6d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExJfcxgtIDJo3JBksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MTIyMzIzMDIwM1oXDTI1MTIyNTIzMDAwMFowLzEtMCsGA1UEAxMk YjhiNTZkOTYtMGZiMi00MTMyLWEwZDMtODhlNDA5ZjEwZGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJcofEH7tlxiaLVJddE4bD35FXEf6/Pg7rI/ /cdM/ydHh5QshoMOCktrnvF9/13E81Kxc66UWxGhtGV+csHHeUrOTGURwCIrN80M Zb8+4wdV+T/cJihEpxu+Ut/vpK4wQX2fkF+yP+UYlZX2Kw8w91X4sRMmI4KSOxcY rzuq/zYq2SDjsRNBXBVdK0v8LQqJoEB7fH7MMMA1vZlJdH5HqAA4d/8vsTNfJ6PS A0GbTFMonxtcUYz1b4FAmqck+FhcE0XewpekzsyYTNrSTavf6oZOAm1qH980eXnA OuY7MrPTis4psFmd4Svhfyn86Tk4NgVXJXBJLBPTblhe/mwczwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCS0Rvptck58OvP9DPyvfoPN6aRuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvZGU4OTM5YTYtNmFjYi00 OGU1LWFmOWEtZDFmN2NjYTNiMThlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAq9nKZkdZMcPLWhfYSQMut iwVqVKMj+hg24MKfBLGecgy5+qEqz6/olavaFVY6covZFqWeC1eHO3f7siDRPxEh QQmDJmLio6fk2yuyeaJyjdOshXXI/eK9R1742MNfVGsEbv1rlNq8jH+Kl3NPjevm P56ZOTwZMy2+UGuiop/llnrMu2kDTCNGE7sM8zditUIHiamFfXGaV0qjyqQ5SFnP TccALfpAOxKpNKg1ozfpBv7+TOljMKG7rl8UhDxmWF8oyQp5m1+xLfw7i3JVixy6 RdQ8RMUmMN0wkfcXn8GDJpSlmf1T70insA7y/7rwVV6Dc96EawG5tOUKdQaFECpt -----END CERTIFICATE-----Generated at Wed Dec 24 13:09:40 2025 by rpki-client