This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft File: db9c5868-bb9c-4fd1-9aca-05762a850994.mft (raw, json) Hash identifier: cAfIKknP5X6Xwq+9i+tbMcZwKEJQiiv3bVXlhA31J68= Subject key identifier: 82:B4:49:81:7D:52:D5:89:BC:9C:7B:2E:A1:B8:51:07:A8:F2:E8:76 Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 Certificate issuer: /CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Certificate serial: 010D0C9F4328584C404C59E80085FB684BB96300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft Manifest number: 010D0C9F43285847C7B6D1C8D34D54006F558926 Signing time: Sat 20 Dec 2025 16:00:09 +0000 Manifest this update: Sat 20 Dec 2025 16:00:09 +0000 Manifest next update: Tue 23 Dec 2025 16:00:00 +0000 Files and hashes: 1: 100036a5-3ecc-3953-ad52-6114836271e0.roa (hash: 8EexqMkL4Tza5mwkiQNa1RGT3i4oNnL7+rrVttIip+4=) 2: 546853d9-414a-3e2e-85ae-b99c281ac2b0.roa (hash: Zg9RSSTPegk6/5d/qr/WCKceCSWxLfE4+xifCAcZKSM=) 3: db9c5868-bb9c-4fd1-9aca-05762a850994.crl (hash: fUhtpJvO9vtK67XESW//SQBLLoX00Y+Fh2RoajAdRgg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:4c:59:e8:00:85:fb:68:4b:b9:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994 Validity Not Before: Dec 20 16:00:09 2025 GMT Not After : Dec 23 16:00:00 2025 GMT Subject: CN=a1cb7a4e-8545-45bb-a06b-c811b3f36cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:b4:f5:d6:db:8b:4b:1c:52:06:12:08:e9:35: 91:73:a3:59:0b:6a:8f:c7:ca:2b:af:ae:bb:da:15: 0c:56:ae:58:8d:97:94:37:b0:6a:96:9b:75:ae:38: 5c:73:5a:e8:7c:f7:30:fd:9d:3c:01:c0:7e:4f:b0: 6b:91:f6:72:da:80:d6:85:a4:3d:78:f0:8c:a6:96: d9:f5:3d:aa:d1:72:00:40:09:72:cf:df:c6:90:f0: 50:ec:b3:c1:08:ca:b6:b9:e6:9c:f9:31:47:31:f5: 5c:70:d6:af:2b:99:bd:91:a1:6b:9d:38:8d:c8:1c: ca:3d:54:21:8c:ec:59:71:18:cd:07:37:39:b8:a0: 6d:4d:94:23:15:4f:0d:83:97:cf:2b:4d:95:05:1e: 0d:6f:15:ce:9a:1b:1d:3e:63:9c:54:6b:e2:97:b7: 45:26:6c:32:2c:68:d1:c9:20:99:64:12:c3:50:da: d7:55:9a:3a:47:a5:e0:01:7c:df:68:9b:4f:77:a9: ed:fb:d7:99:98:95:b3:7c:86:9d:2d:06:33:50:a4: 1d:8e:7a:90:3d:6e:3a:1f:db:8d:90:80:42:30:49: 41:5a:8a:60:8f:28:b2:4f:98:17:c5:0f:6a:1a:b0: b7:eb:b1:2b:6b:2c:73:9b:e5:53:5a:9a:a6:79:16: e0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B4:49:81:7D:52:D5:89:BC:9C:7B:2E:A1:B8:51:07:A8:F2:E8:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl X509v3 Authority Key Identifier: keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:83:8f:a2:9b:f0:65:ac:e0:cc:3e:8e:25:97:e8:e2:46:8b: e0:40:25:7b:f0:f2:b2:be:18:e8:6c:37:1d:08:64:e7:80:83: d6:c4:d8:94:e3:2f:57:c5:ca:77:f0:f1:de:83:7c:3e:7a:4d: 68:be:46:77:6f:ec:37:45:7a:0d:ba:70:c7:66:67:de:f4:08: 62:3a:57:9d:2b:fd:2c:f8:1a:6d:c4:e1:b2:1e:cc:ed:da:f6: 21:25:0e:16:bd:75:ed:02:d1:c5:9b:ff:63:23:02:cc:5f:9c: 28:d9:3d:13:e9:fb:52:08:32:79:57:c0:ef:bb:d6:61:57:38: e5:3f:51:99:9c:91:be:a7:c2:cc:26:4f:ea:d6:99:f2:ae:95: cc:7b:47:db:e5:a6:d1:12:e8:cf:53:a5:e0:c9:a0:1d:67:33: 8d:f8:37:65:05:af:69:f5:1a:c0:34:69:26:9f:63:4c:ab:dd: 4c:74:83:8f:30:03:f2:a7:31:aa:93:87:51:8d:5e:ab:05:a1: 9c:75:c8:43:86:85:44:f4:39:06:19:93:49:68:0c:60:c6:4b: 4d:83:03:7e:2a:aa:44:06:30:be:d2:82:8d:08:7c:6f:6e:1f: f8:93:d6:df:5e:ae:9e:15:57:8a:ff:8f:6d:56:36:4e:70:16: 3d:99:05:91 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExATFnoAIX7aEu5YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI5YzU4NjgtYmI5Yy00ZmQxLTlhY2EtMDU3NjJhODUw OTk0MB4XDTI1MTIyMDE2MDAwOVoXDTI1MTIyMzE2MDAwMFowLzEtMCsGA1UEAxMk YTFjYjdhNGUtODU0NS00NWJiLWEwNmItYzgxMWIzZjM2Y2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrT11tuLSxxSBhII6TWRc6NZC2qPx8orr667 2hUMVq5YjZeUN7Bqlpt1rjhcc1rofPcw/Z08AcB+T7BrkfZy2oDWhaQ9ePCMppbZ 9T2q0XIAQAlyz9/GkPBQ7LPBCMq2ueac+TFHMfVccNavK5m9kaFrnTiNyBzKPVQh jOxZcRjNBzc5uKBtTZQjFU8Ng5fPK02VBR4NbxXOmhsdPmOcVGvil7dFJmwyLGjR ySCZZBLDUNrXVZo6R6XgAXzfaJtPd6nt+9eZmJWzfIadLQYzUKQdjnqQPW46H9uN kIBCMElBWopgjyiyT5gXxQ9qGrC367Erayxzm+VTWpqmeRbgewIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIK0SYF9UtWJvJx7LqG4UQeo8uh2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjlj NTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2MmE4NTA5OTQvZGI5YzU4NjgtYmI5Yy00 ZmQxLTlhY2EtMDU3NjJhODUwOTk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGI5YzU4NjgtYmI5Yy00ZmQxLTlh Y2EtMDU3NjJhODUwOTk0L2RiOWM1ODY4LWJiOWMtNGZkMS05YWNhLTA1NzYyYTg1 MDk5NC5jcmwwHwYDVR0jBBgwFoAUwuKfSSn3ynvZHRMd3xye8zm7PxkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjljNTg2OC1iYjljLTRmZDEtOWFjYS0wNTc2 MmE4NTA5OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCCg4+im/BlrODMPo4ll+ji RovgQCV78PKyvhjobDcdCGTngIPWxNiU4y9Xxcp38PHeg3w+ek1ovkZ3b+w3RXoN unDHZmfe9AhiOledK/0s+BptxOGyHszt2vYhJQ4WvXXtAtHFm/9jIwLMX5wo2T0T 6ftSCDJ5V8Dvu9ZhVzjlP1GZnJG+p8LMJk/q1pnyrpXMe0fb5abREujPU6XgyaAd ZzON+DdlBa9p9RrANGkmn2NMq91MdIOPMAPypzGqk4dRjV6rBaGcdchDhoVE9DkG GZNJaAxgxktNgwN+KqpEBjC+0oKNCHxvbh/4k9bfXq6eFVeK/49tVjZOcBY9mQWR -----END CERTIFICATE-----Generated at Sun Dec 21 02:07:19 2025 by rpki-client