This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.mft File: ca8f0bbc-8cc4-4514-874a-407f328f3893.mft (raw, json) Hash identifier: Qj06+/yhE1rv2/KNc2yZs70IL9+hOQl1D8vUoWmcmxc= Subject key identifier: B7:00:08:3A:C8:E8:99:71:DC:E0:3F:D1:94:4C:B1:0A:42:A3:48:D7 Authority key identifier: 4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C Certificate issuer: /CN=ca8f0bbc-8cc4-4514-874a-407f328f3893 Certificate serial: 010D0C9F4328584C4B594425267FAB8D75295A60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.mft Manifest number: 010D0C9F4328584776A82743F65502A69FDBBDC8 Signing time: Wed 24 Dec 2025 15:00:04 +0000 Manifest this update: Wed 24 Dec 2025 15:00:04 +0000 Manifest next update: Fri 26 Dec 2025 15:00:00 +0000 Files and hashes: 1: 31ea5e48-31b1-303a-9005-188379a2a655.roa (hash: GN89eTedesOLGSfP1ZH4VulbNB+ivbUzTQ2cjbo2j54=) 2: c665f46b-83a0-3159-8392-368a8eda0dad.roa (hash: hjZvDLYbCLOeqkOKZUOvGmYWPWdlhQv+kfXS4HG9EvE=) 3: ca8f0bbc-8cc4-4514-874a-407f328f3893.crl (hash: pB7+VHYwF3f71jvxnGJCxDNsHNZlcnDDpJLCABGRG/s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:59:44:25:26:7f:ab:8d:75:29:5a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca8f0bbc-8cc4-4514-874a-407f328f3893 Validity Not Before: Dec 24 15:00:04 2025 GMT Not After : Dec 26 15:00:00 2025 GMT Subject: CN=df96db61-b2fd-408c-b2c9-824f69d595f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:2b:b5:57:a8:a9:cb:5e:e0:29:c9:f3:04:17: 52:ff:eb:ad:c7:c1:9c:04:4f:34:fd:3c:cf:6e:05: 38:23:73:54:73:7d:4a:9c:d9:fa:d3:28:ab:0d:ee: a3:bc:56:7f:e4:86:04:4b:25:81:e5:57:f1:88:e6: 5c:16:1b:b2:71:f6:f7:00:07:ca:0c:4e:c8:7a:a0: 48:89:5e:e3:69:ce:92:50:72:df:60:82:83:0c:76: 11:cf:ec:32:b9:42:bf:25:af:b2:8d:eb:b2:d0:f7: 2c:57:ca:c9:e2:93:15:98:82:28:aa:f5:b9:90:7c: 66:f4:85:d3:e0:55:55:70:e3:de:53:3a:a7:c5:36: 11:46:f6:f3:6e:7d:68:38:37:0b:28:7b:9d:11:49: 59:1c:05:79:63:c4:2d:2b:f4:8e:09:04:22:79:11: 90:f6:1f:b1:62:db:fa:03:0c:9b:e1:bd:18:77:16: 0e:77:e2:f3:06:1e:dc:26:e3:24:4d:eb:95:3b:01: ed:e1:87:9b:ca:43:bb:e9:aa:49:c9:22:0a:32:be: 68:59:e0:51:a2:3d:b6:02:22:cb:be:2b:00:37:52: 19:72:9e:50:e1:92:1b:69:5e:21:e8:25:3e:01:a2: e0:c1:cc:b3:f2:f4:a4:43:aa:4c:e2:fd:78:6f:aa: 0d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:00:08:3A:C8:E8:99:71:DC:E0:3F:D1:94:4C:B1:0A:42:A3:48:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893/ca8f0bbc-8cc4-4514-874a-407f328f3893.crl X509v3 Authority Key Identifier: keyid:4F:36:51:94:5C:EF:74:40:B9:E9:66:B2:64:9B:33:57:70:E7:72:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ca8f0bbc-8cc4-4514-874a-407f328f3893.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f9:9c:f8:89:e6:a0:44:9b:3a:c0:74:1f:7b:11:b9:4a:81: c3:61:7e:39:ee:77:84:10:1c:1b:05:34:b6:c0:d4:2d:a2:50: bc:53:c0:fa:67:24:fc:df:7a:9a:bd:38:ff:be:fc:a7:e7:46: 9f:06:f7:a0:86:bb:94:b0:4a:0d:fa:16:52:34:d5:3c:e9:2a: ee:1c:83:2e:f1:94:85:54:a1:d8:df:9a:16:6d:76:53:26:d6: 94:ad:42:0c:37:8d:14:7b:8f:be:4f:7a:b5:fa:0c:f3:33:bb: 16:74:8d:a4:e4:80:d5:4a:2e:9b:34:b5:1f:00:af:ec:7b:71: f0:27:d1:a3:03:95:b7:e3:b8:e1:5c:a8:16:e6:ae:6d:0e:10: 45:97:8b:ba:38:65:95:be:44:0d:c6:af:22:3c:5f:59:04:a7: 08:d1:1d:68:55:39:25:c5:44:68:9d:4e:83:35:ee:94:cb:70: 09:60:38:dc:81:36:01:4d:c5:e9:23:74:47:8c:35:18:86:27: 5a:d9:b5:82:c5:90:97:80:6a:ce:d9:e3:1f:28:84:e4:20:ca: 75:6f:35:20:d8:8b:28:4a:03:e1:4c:3c:1f:9f:60:22:ee:8b: 21:c3:d6:a6:5c:f2:15:c4:31:4b:84:1f:87:d5:68:fe:1e:05: 32:e8:ab:85 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExLWUQlJn+rjXUpWmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2E4ZjBiYmMtOGNjNC00NTE0LTg3NGEtNDA3ZjMyOGYz ODkzMB4XDTI1MTIyNDE1MDAwNFoXDTI1MTIyNjE1MDAwMFowLzEtMCsGA1UEAxMk ZGY5NmRiNjEtYjJmZC00MDhjLWIyYzktODI0ZjY5ZDU5NWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Cu1V6ipy17gKcnzBBdS/+utx8GcBE80/TzP bgU4I3NUc31KnNn60yirDe6jvFZ/5IYESyWB5VfxiOZcFhuycfb3AAfKDE7IeqBI iV7jac6SUHLfYIKDDHYRz+wyuUK/Ja+yjeuy0PcsV8rJ4pMVmIIoqvW5kHxm9IXT 4FVVcOPeUzqnxTYRRvbzbn1oODcLKHudEUlZHAV5Y8QtK/SOCQQieRGQ9h+xYtv6 Awyb4b0YdxYOd+LzBh7cJuMkTeuVOwHt4YebykO76apJySIKMr5oWeBRoj22AiLL visAN1IZcp5Q4ZIbaV4h6CU+AaLgwcyz8vSkQ6pM4v14b6oNNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLcACDrI6Jlx3OA/0ZRMsQpCo0jXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jYThm MGJiYy04Y2M0LTQ1MTQtODc0YS00MDdmMzI4ZjM4OTMvY2E4ZjBiYmMtOGNjNC00 NTE0LTg3NGEtNDA3ZjMyOGYzODkzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2E4ZjBiYmMtOGNjNC00NTE0LTg3 NGEtNDA3ZjMyOGYzODkzL2NhOGYwYmJjLThjYzQtNDUxNC04NzRhLTQwN2YzMjhm Mzg5My5jcmwwHwYDVR0jBBgwFoAUTzZRlFzvdEC56WayZJszV3DncgwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jYThmMGJiYy04Y2M0LTQ1MTQtODc0YS00MDdm MzI4ZjM4OTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD+Zz4ieagRJs6wHQfexG5 SoHDYX457neEEBwbBTS2wNQtolC8U8D6ZyT833qavTj/vvyn50afBveghruUsEoN +hZSNNU86SruHIMu8ZSFVKHY35oWbXZTJtaUrUIMN40Ue4++T3q1+gzzM7sWdI2k 5IDVSi6bNLUfAK/se3HwJ9GjA5W347jhXKgW5q5tDhBFl4u6OGWVvkQNxq8iPF9Z BKcI0R1oVTklxURonU6DNe6Uy3AJYDjcgTYBTcXpI3RHjDUYhida2bWCxZCXgGrO 2eMfKITkIMp1bzUg2IsoSgPhTDwfn2Ai7oshw9amXPIVxDFLhB+H1Wj+HgUy6KuF -----END CERTIFICATE-----Generated at Thu Dec 25 14:53:20 2025 by rpki-client