This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft File: afb3511b-f1b6-44ad-9c36-f6576a5400df.mft (raw, json) Hash identifier: d0z2lhlKL2wj8/I4ESz6VrGiEwHdsX641Jb+AMQpGVc= Subject key identifier: 5D:8F:1F:C5:BD:F6:3F:26:FA:0F:13:90:19:38:2A:07:34:5B:A5:AA Authority key identifier: 9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 Certificate issuer: /CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Certificate serial: 010D0C9F4328584C461D493B2D65E9EDD89EF220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft Manifest number: 010D0C9F43285847D8BF5EF10E9318A0E5C72503 Signing time: Mon 22 Dec 2025 18:00:08 +0000 Manifest this update: Mon 22 Dec 2025 18:00:08 +0000 Manifest next update: Thu 25 Dec 2025 18:00:00 +0000 Files and hashes: 1: 0ea62e7e-054c-31d5-bb8d-1005bcac50b2.roa (hash: qSZ+TZtrSPmNcE/6p0k+6iNey+4r6VDwI4YRqXQvZo4=) 2: afb3511b-f1b6-44ad-9c36-f6576a5400df.crl (hash: lRUhifstAaWd7pZ67WihB1TSGxKxh4QwNAeaMZrQZYw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:46:1d:49:3b:2d:65:e9:ed:d8:9e:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afb3511b-f1b6-44ad-9c36-f6576a5400df Validity Not Before: Dec 22 18:00:08 2025 GMT Not After : Dec 25 18:00:00 2025 GMT Subject: CN=a41af08d-4b95-4beb-bac5-9dc3a3adb855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:4b:ba:de:d3:00:9c:da:f1:8b:a8:e6:52: 7a:bf:9b:1a:12:00:25:47:6c:4b:43:87:c0:1b:53: 45:46:e5:12:25:23:3e:12:09:ee:ef:d2:ac:4b:79: 11:09:62:8f:73:f2:be:a8:dc:02:12:b5:f8:b0:6a: 07:df:38:04:d9:7e:db:02:5d:39:bc:75:4a:9d:1b: 59:5f:be:00:64:6e:25:b8:cb:06:17:e6:42:18:b6: e5:8d:de:96:9f:85:7b:5d:7e:6e:2e:33:4c:e8:17: e2:38:1d:85:a1:f5:60:91:cf:4f:fd:0a:68:1d:32: 9f:6c:38:8b:ee:ad:a5:0d:c2:1b:e0:cf:4a:63:13: c1:8b:c8:83:f8:f2:1f:70:4b:ac:f9:e2:1a:16:12: 09:d3:df:86:d9:bc:ed:d8:36:24:04:d1:84:a1:11: 1b:f1:d7:dd:3d:a5:c8:2b:d2:78:0f:2f:aa:ca:a9: 12:a3:fc:68:a7:5b:9d:81:3e:90:75:11:f1:0c:0d: c5:3f:a8:fd:9e:f2:cf:5b:50:af:cb:87:ec:ca:47: 6b:4a:31:22:95:fe:68:c9:d5:c1:7b:3d:ef:c9:e6: 72:9d:f5:db:45:72:99:89:79:3e:5a:89:8a:28:b7: 3d:0b:0d:52:ba:98:57:ce:6e:ff:d9:3e:39:45:ec: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8F:1F:C5:BD:F6:3F:26:FA:0F:13:90:19:38:2A:07:34:5B:A5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df/afb3511b-f1b6-44ad-9c36-f6576a5400df.crl X509v3 Authority Key Identifier: keyid:9E:6E:F4:05:1C:0B:C6:DB:08:47:57:A8:A3:7A:7D:59:29:AE:D0:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afb3511b-f1b6-44ad-9c36-f6576a5400df.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a3:3d:83:e8:75:08:73:df:c5:0e:4b:b6:ad:63:20:f0:22: b8:1b:19:08:ce:77:3a:77:e4:11:20:bc:8d:ef:72:d2:4a:86: 45:55:63:ae:1e:8b:64:a4:7c:f3:15:5a:c1:90:ef:89:b0:09: 83:7e:b2:37:d4:3a:55:fd:a6:fd:ed:a9:8f:53:13:eb:97:1f: 21:7b:e2:c4:6e:98:26:19:e7:06:35:fc:9f:78:a9:fc:f8:2f: 2b:f8:bd:8b:d3:91:87:0d:0e:f2:5e:55:07:85:9e:b8:18:f8: a3:74:23:65:fa:3b:39:8f:ba:db:d5:6d:43:65:93:f7:70:4d: ee:ce:80:6f:fd:58:cf:ce:80:00:be:3d:45:b9:f3:89:b3:10: a2:7e:bb:86:e2:1b:58:96:a4:ba:1d:50:40:54:8b:d3:4f:a5: fa:33:4f:df:be:c8:ab:ab:62:88:7a:33:b5:38:58:71:b8:18: 5e:bc:e1:cc:35:56:bc:74:46:7a:2a:5a:ec:9b:32:8f:3a:e4: f4:62:11:34:2f:98:26:2c:4e:41:a4:82:36:21:96:fc:b4:17: eb:1f:da:05:05:57:cc:55:45:51:9f:a6:d8:29:1d:94:44:42: c8:70:22:36:32:f9:77:2b:d0:2c:7f:b2:2e:ef:80:0e:f6:e7: 69:a2:83:e7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExGHUk7LWXp7die8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZiMzUxMWItZjFiNi00NGFkLTljMzYtZjY1NzZhNTQw MGRmMB4XDTI1MTIyMjE4MDAwOFoXDTI1MTIyNTE4MDAwMFowLzEtMCsGA1UEAxMk YTQxYWYwOGQtNGI5NS00YmViLWJhYzUtOWRjM2EzYWRiODU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VBLut7TAJza8Yuo5lJ6v5saEgAlR2xLQ4fA G1NFRuUSJSM+Egnu79KsS3kRCWKPc/K+qNwCErX4sGoH3zgE2X7bAl05vHVKnRtZ X74AZG4luMsGF+ZCGLbljd6Wn4V7XX5uLjNM6BfiOB2FofVgkc9P/QpoHTKfbDiL 7q2lDcIb4M9KYxPBi8iD+PIfcEus+eIaFhIJ09+G2bzt2DYkBNGEoREb8dfdPaXI K9J4Dy+qyqkSo/xop1udgT6QdRHxDA3FP6j9nvLPW1Cvy4fsykdrSjEilf5oydXB ez3vyeZynfXbRXKZiXk+WomKKLc9Cw1SuphXzm7/2T45RewX4wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF2PH8W99j8m+g8TkBk4Kgc0W6WqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIz NTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3NmE1NDAwZGYvYWZiMzUxMWItZjFiNi00 NGFkLTljMzYtZjY1NzZhNTQwMGRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWZiMzUxMWItZjFiNi00NGFkLTlj MzYtZjY1NzZhNTQwMGRmL2FmYjM1MTFiLWYxYjYtNDRhZC05YzM2LWY2NTc2YTU0 MDBkZi5jcmwwHwYDVR0jBBgwFoAUnm70BRwLxtsIR1eoo3p9WSmu0DMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZmIzNTExYi1mMWI2LTQ0YWQtOWMzNi1mNjU3 NmE1NDAwZGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAoz2D6HUIc9/FDku2rWMg 8CK4GxkIznc6d+QRILyN73LSSoZFVWOuHotkpHzzFVrBkO+JsAmDfrI31DpV/ab9 7amPUxPrlx8he+LEbpgmGecGNfyfeKn8+C8r+L2L05GHDQ7yXlUHhZ64GPijdCNl +js5j7rb1W1DZZP3cE3uzoBv/VjPzoAAvj1FufOJsxCifruG4htYlqS6HVBAVIvT T6X6M0/fvsirq2KIejO1OFhxuBhevOHMNVa8dEZ6KlrsmzKPOuT0YhE0L5gmLE5B pII2IZb8tBfrH9oFBVfMVUVRn6bYKR2URELIcCI2Mvl3K9Asf7Iu74AO9udpooPn -----END CERTIFICATE-----Generated at Tue Dec 23 15:24:06 2025 by rpki-client