This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.mft File: 493eba72-b4a5-4f31-af0f-801a0fb3b83c.mft (raw, json) Hash identifier: 0lVR0w+8wym0PQ/KauhZHrGoA1R8XcAFCIIZy7iQOBk= Subject key identifier: 3D:36:6A:0B:0C:E8:5A:8D:A1:9D:DE:0E:E3:0B:E9:3D:C4:20:34:A6 Authority key identifier: 18:4B:E7:CE:02:33:D5:13:05:32:19:43:E1:1F:0E:EF:28:FB:EB:B5 Certificate issuer: /CN=493eba72-b4a5-4f31-af0f-801a0fb3b83c Certificate serial: 010D0C9F4328584C503BF66929A753747D1D7300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.mft Manifest number: 010D0C9F4328584073A84A31529938C57B001BB1 Signing time: Fri 26 Dec 2025 09:00:03 +0000 Manifest this update: Fri 26 Dec 2025 09:00:03 +0000 Manifest next update: Sun 28 Dec 2025 09:00:00 +0000 Files and hashes: 1: 1b0ffaba-9563-309d-8325-7e01713b27c7.roa (hash: 6IMS1NsUpFJBy6JwO2IJ41jwiWRMtEoc25pNzcK/Zsg=) 2: 493eba72-b4a5-4f31-af0f-801a0fb3b83c.crl (hash: 2LL0eEuA+5Ct+Du39ceQjIQlXQ0cJoM4C0Cxa/ZcfyQ=) 3: 52b496b8-c2f9-3805-8a27-4e5e21e338d2.roa (hash: NTsr4c83fmRe7CvTuYIh1xzsj5OB7uHsNRiNHEnSC6c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:50:3b:f6:69:29:a7:53:74:7d:1d:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=493eba72-b4a5-4f31-af0f-801a0fb3b83c Validity Not Before: Dec 26 09:00:03 2025 GMT Not After : Dec 28 09:00:00 2025 GMT Subject: CN=71bbf401-eef8-4b24-9dd1-2a38f42def50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:22:94:36:54:98:cf:85:b3:e1:a4:45:32: 05:db:5f:06:60:9e:cb:96:7c:33:41:c7:11:7a:cf: f6:bb:be:10:be:30:1f:6f:98:cd:eb:3f:f9:d9:59: 6c:20:fe:30:4b:1d:56:b4:9d:e6:71:9a:f7:07:09: 7d:dc:fc:71:91:3b:02:5e:3e:93:cb:57:5a:70:35: 5a:69:66:49:77:18:f5:b3:b0:cb:15:b5:8d:5b:0a: eb:46:b1:0f:9b:a5:c4:8c:31:dc:4f:a3:f6:eb:48: 8c:db:b3:ed:d1:8f:69:ef:fd:1c:3f:97:9f:4f:f5: 45:8b:65:b8:71:f8:39:2c:b5:10:cd:5f:a4:ad:5f: f1:2b:cf:5f:ee:4a:44:9f:29:66:13:3e:00:f4:51: e0:ce:99:15:8b:3f:a1:07:30:79:ee:ab:f6:8b:a0: 9c:02:96:8f:ca:35:1b:dd:7a:24:5f:09:33:bd:5a: 72:74:4c:2d:2e:a0:ed:e5:dc:4b:b1:80:11:24:4b: 24:64:c0:96:c5:44:84:27:4f:0d:0e:83:2f:4a:22: ee:fe:21:06:c3:6f:f2:45:67:47:22:34:76:08:95: 4f:ed:e4:d8:cc:c0:11:35:b5:ae:75:ae:9b:19:60: d8:b4:a1:72:2c:44:60:3e:b2:45:a9:e5:b8:40:b2: 6d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:36:6A:0B:0C:E8:5A:8D:A1:9D:DE:0E:E3:0B:E9:3D:C4:20:34:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c/493eba72-b4a5-4f31-af0f-801a0fb3b83c.crl X509v3 Authority Key Identifier: keyid:18:4B:E7:CE:02:33:D5:13:05:32:19:43:E1:1F:0E:EF:28:FB:EB:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/493eba72-b4a5-4f31-af0f-801a0fb3b83c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:80:80:51:83:3f:c7:12:51:44:60:72:bd:3e:86:e0:7d:70: 07:7e:9f:d6:97:dd:ff:55:df:cf:87:09:f6:83:72:f4:85:42: d8:0a:32:0c:20:0d:4b:8d:b9:c0:0f:dc:4e:dc:50:d3:78:16: 71:29:93:e3:4c:94:b8:7d:18:d8:1d:d4:6c:46:2a:bd:a3:75: 48:e8:f8:13:62:0e:af:c4:83:47:c8:d1:20:c8:00:81:fa:95: a0:91:0a:61:d3:ae:f2:5a:5e:20:8c:0e:b3:bf:01:5d:5c:13: d9:61:67:03:e2:ec:9e:74:b4:ce:f4:a3:9a:a9:18:02:94:ae: 60:c4:4d:ac:d6:cd:ce:b0:9f:7f:88:0a:47:d8:7f:bb:d2:52: bb:3b:9d:35:2b:d8:3a:83:09:13:8c:a3:75:2f:67:7b:d5:77: 8f:3c:0a:9d:46:c6:35:4f:0a:6c:d7:ee:88:3b:f6:64:7d:16: 5f:c4:75:39:14:aa:76:18:30:7b:f6:a7:fa:34:29:06:45:88: 5b:d3:23:01:64:fb:08:e5:73:f5:e4:81:dd:a3:e2:9d:59:3b: 36:64:9a:6c:5d:5b:77:dc:d2:a3:71:04:e7:85:7e:cd:9c:c3: 54:13:c7:84:a1:fe:6d:34:8e:1e:95:b7:4b:2d:f1:86:23:d7: dc:4a:e2:aa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExQO/ZpKadTdH0dcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkzZWJhNzItYjRhNS00ZjMxLWFmMGYtODAxYTBmYjNi ODNjMB4XDTI1MTIyNjA5MDAwM1oXDTI1MTIyODA5MDAwMFowLzEtMCsGA1UEAxMk NzFiYmY0MDEtZWVmOC00YjI0LTlkZDEtMmEzOGY0MmRlZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszgilDZUmM+Fs+GkRTIF218GYJ7LlnwzQccR es/2u74QvjAfb5jN6z/52VlsIP4wSx1WtJ3mcZr3Bwl93PxxkTsCXj6Ty1dacDVa aWZJdxj1s7DLFbWNWwrrRrEPm6XEjDHcT6P260iM27Pt0Y9p7/0cP5efT/VFi2W4 cfg5LLUQzV+krV/xK89f7kpEnylmEz4A9FHgzpkViz+hBzB57qv2i6CcApaPyjUb 3XokXwkzvVpydEwtLqDt5dxLsYARJEskZMCWxUSEJ08NDoMvSiLu/iEGw2/yRWdH IjR2CJVP7eTYzMARNbWuda6bGWDYtKFyLERgPrJFqeW4QLJtwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD02agsM6FqNoZ3eDuML6T3EIDSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OTNl YmE3Mi1iNGE1LTRmMzEtYWYwZi04MDFhMGZiM2I4M2MvNDkzZWJhNzItYjRhNS00 ZjMxLWFmMGYtODAxYTBmYjNiODNjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDkzZWJhNzItYjRhNS00ZjMxLWFm MGYtODAxYTBmYjNiODNjLzQ5M2ViYTcyLWI0YTUtNGYzMS1hZjBmLTgwMWEwZmIz YjgzYy5jcmwwHwYDVR0jBBgwFoAUGEvnzgIz1RMFMhlD4R8O7yj767UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80OTNlYmE3Mi1iNGE1LTRmMzEtYWYwZi04MDFh MGZiM2I4M2MuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFgIBRgz/HElFEYHK9Pobg fXAHfp/Wl93/Vd/Phwn2g3L0hULYCjIMIA1LjbnAD9xO3FDTeBZxKZPjTJS4fRjY HdRsRiq9o3VI6PgTYg6vxINHyNEgyACB+pWgkQph067yWl4gjA6zvwFdXBPZYWcD 4uyedLTO9KOaqRgClK5gxE2s1s3OsJ9/iApH2H+70lK7O501K9g6gwkTjKN1L2d7 1XePPAqdRsY1Twps1+6IO/ZkfRZfxHU5FKp2GDB79qf6NCkGRYhb0yMBZPsI5XP1 5IHdo+KdWTs2ZJpsXVt33NKjcQTnhX7NnMNUE8eEof5tNI4elbdLLfGGI9fcSuKq -----END CERTIFICATE-----Generated at Fri Dec 26 11:00:24 2025 by rpki-client