This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft File: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft (raw, json) Hash identifier: 8QrG4oE+qjH3rfkl7PZyEeY27Bo2uA3PfzHvCpv5EEU= Subject key identifier: BB:43:81:B7:3A:0C:96:8C:E7:D1:34:AB:0F:BB:98:E7:3C:4D:DE:B7 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584C4193E75041ACD9D4B6A60040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft Manifest number: 010D0C9F43285842F1887AD109A031873F5D58CE Signing time: Sun 21 Dec 2025 03:00:09 +0000 Manifest this update: Sun 21 Dec 2025 03:00:09 +0000 Manifest next update: Wed 24 Dec 2025 03:00:00 +0000 Files and hashes: 1: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (hash: 5TkrB+NVI1RF83tXfMITdG6vN8CqwjWgkDhXjfyoj14=) 2: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl (hash: DzBkvB5/M6jfZQxNpm1lydeMKOiW+1tP4nOK+tN6MxM=) 3: b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa (hash: aOq+Z0omVNdwj6BOp70OmReynDEKtRzieXcATQF7iWY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:93:e7:50:41:ac:d9:d4:b6:a6:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Dec 21 03:00:09 2025 GMT Not After : Dec 24 03:00:00 2025 GMT Subject: CN=f5ab0e45-39ed-44ff-bcd2-3afe05fdff0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:91:24:c0:da:4f:e3:f0:62:46:67:51:df: bb:bc:db:8c:5d:a5:dd:07:45:69:87:f3:01:ca:42: 50:ea:2a:4c:a0:f1:92:fa:ed:6f:80:2b:50:22:14: 73:f3:a2:5d:f5:38:1c:f9:a1:dd:2a:80:18:33:43: 70:5a:a0:9a:bd:65:ed:c4:32:c4:7b:c1:90:cb:36: 1e:07:87:d0:1f:a1:17:8c:18:a2:29:99:42:e8:61: af:c7:d2:07:6d:af:ae:75:0b:bf:92:6d:76:c4:e0: 81:e2:33:13:55:81:55:a0:50:b7:ba:15:2d:06:df: dd:12:9d:34:b8:b9:7b:2c:c3:d4:d0:4d:88:f9:4b: 79:d7:0f:50:40:eb:fb:ae:b8:05:45:01:d5:19:09: d9:12:b9:56:ad:78:c6:dc:b0:67:38:35:0e:23:c5: 9a:19:54:89:24:f2:6f:f0:10:03:a0:4d:57:a4:59: 2c:48:46:b9:c2:0f:58:cf:60:6e:28:75:e3:bc:9c: f4:ce:96:ed:13:6b:e7:26:12:60:8c:6f:9b:7c:fa: c6:7d:5d:70:6c:31:d1:28:07:16:28:5e:15:33:14: 6c:25:b3:f7:b1:27:cb:db:73:a8:a8:37:24:c4:a3: 65:44:e0:d4:61:71:a6:ea:ce:7b:39:79:c3:cd:52: 93:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:43:81:B7:3A:0C:96:8C:E7:D1:34:AB:0F:BB:98:E7:3C:4D:DE:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:3c:fc:6e:cb:46:6d:75:8c:44:e2:60:ed:46:ec:94:dc:ee: 38:26:8c:18:cc:cd:f8:93:f5:b5:7c:88:c2:26:ef:0c:11:88: 81:1d:a8:6a:77:4f:0e:6b:b9:a6:f9:23:9e:c0:c3:61:ec:42: 0b:b7:84:31:4c:c0:27:b9:a6:3d:04:93:a5:4a:12:96:c4:47: 08:85:45:15:56:9e:63:ba:91:86:45:24:be:38:1c:82:a9:94: 92:8c:98:f3:c5:b8:d0:64:dc:9d:82:7b:84:0b:87:3f:4d:9c: 24:de:77:72:fe:c3:60:ec:18:ab:0d:0b:e0:fc:f2:5d:00:48: a9:37:3b:ef:16:00:0e:b8:b9:af:ee:88:63:db:ea:79:95:45: 2e:77:8d:91:85:a4:52:b3:f8:29:74:6d:d4:95:b5:fd:80:cd: c6:78:70:ba:44:8c:b2:68:a4:b6:95:46:5b:b6:85:9c:8f:68: 70:22:50:f7:db:6d:7c:07:de:f4:fa:c7:64:6e:ef:7f:ce:80: d0:74:4d:25:67:7a:dd:f4:7d:40:2a:87:b8:cb:ed:b0:0b:57: d8:5e:a5:83:ba:ae:0e:25:c1:d5:41:4b:bb:cf:c7:da:03:61: b2:f8:72:70:a6:96:fc:2a:6b:4d:1c:d1:74:15:99:f1:df:12: eb:89:54:6a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExBk+dQQazZ1LamAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI1MTIyMTAzMDAwOVoXDTI1MTIyNDAzMDAwMFowLzEtMCsGA1UEAxMk ZjVhYjBlNDUtMzllZC00NGZmLWJjZDItM2FmZTA1ZmRmZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij6RJMDaT+PwYkZnUd+7vNuMXaXdB0Vph/MB ykJQ6ipMoPGS+u1vgCtQIhRz86Jd9Tgc+aHdKoAYM0NwWqCavWXtxDLEe8GQyzYe B4fQH6EXjBiiKZlC6GGvx9IHba+udQu/km12xOCB4jMTVYFVoFC3uhUtBt/dEp00 uLl7LMPU0E2I+Ut51w9QQOv7rrgFRQHVGQnZErlWrXjG3LBnODUOI8WaGVSJJPJv 8BADoE1XpFksSEa5wg9Yz2BuKHXjvJz0zpbtE2vnJhJgjG+bfPrGfV1wbDHRKAcW KF4VMxRsJbP3sSfL23OoqDckxKNlRODUYXGm6s57OXnDzVKTpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLtDgbc6DJaM59E0qw+7mOc8Td63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvYWZkNDRiOWMtMjMxMi00 YWNiLWIyM2UtNDBhYWFhZmUyZGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0PPxuy0ZtdYxE4mDtRuyU 3O44JowYzM34k/W1fIjCJu8MEYiBHahqd08Oa7mm+SOewMNh7EILt4QxTMAnuaY9 BJOlShKWxEcIhUUVVp5jupGGRSS+OByCqZSSjJjzxbjQZNydgnuEC4c/TZwk3ndy /sNg7BirDQvg/PJdAEipNzvvFgAOuLmv7ohj2+p5lUUud42RhaRSs/gpdG3UlbX9 gM3GeHC6RIyyaKS2lUZbtoWcj2hwIlD32218B970+sdkbu9/zoDQdE0lZ3rd9H1A Koe4y+2wC1fYXqWDuq4OJcHVQUu7z8faA2Gy+HJwppb8KmtNHNF0FZnx3xLriVRq -----END CERTIFICATE-----Generated at Mon Dec 22 03:05:10 2025 by rpki-client