This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft File: abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft (raw, json) Hash identifier: vcJtl2Vpj+J4/uuxXvEJl9vc3JWbUjQ2MhNijpYJlmE= Subject key identifier: 9A:A4:95:6F:57:27:1C:6D:21:C3:1C:A9:17:98:6B:B3:BC:5B:16:09 Authority key identifier: 5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1 Certificate issuer: /CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7 Certificate serial: 010D0C9F4328584C46769D3793BD344BC0EE1C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft Manifest number: 010D0C9F4328584073A829CDE56B30EAB3982462 Signing time: Mon 22 Dec 2025 21:00:08 +0000 Manifest this update: Mon 22 Dec 2025 21:00:08 +0000 Manifest next update: Thu 25 Dec 2025 21:00:00 +0000 Files and hashes: 1: 4001cb3a-e206-32d5-9c9a-bd86ac3a6365.roa (hash: 8vNZFnafyQqfOvljXmdjuDFcNfaGW5TDvniwO8wNTec=) 2: abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl (hash: FLH/cwbhHc0iECodLcjhv5xRQS0/EZ0Z2MAHDu8yG3Q=) 3: cad9ec0c-e2f9-3b01-bff2-9ea510f87158.roa (hash: MeW8xz9/X3E4UO6HwNfSoJbRzwS1I8p0UDsoXGD72j8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:46:76:9d:37:93:bd:34:4b:c0:ee:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc30cda-3b3f-4e8e-a687-b20d5448a4e7 Validity Not Before: Dec 22 21:00:08 2025 GMT Not After : Dec 25 21:00:00 2025 GMT Subject: CN=7479e99b-05fd-4b45-8e1a-2b682041eac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:99:4a:a4:34:2b:3b:ff:b0:7d:e9:eb:96: 35:0f:cb:fb:f3:83:15:ef:9b:d6:0a:de:88:d2:ff: b4:e6:0a:43:83:8e:be:8f:98:e4:ea:d2:07:52:c8: 4f:a7:b3:0b:38:6e:00:dc:0b:bd:e1:8f:ef:75:59: cf:03:29:9e:6c:fe:fa:c1:fc:b2:2f:66:b5:9a:77: 97:1c:2e:3b:f9:d0:b5:c9:0a:b7:f5:6e:db:39:1c: 12:6f:9d:1a:67:96:02:b7:43:87:9a:7e:a0:e1:09: b2:54:25:01:d2:2d:99:d8:e4:0c:23:5c:e1:ca:d2: cf:55:3d:fb:39:b5:4a:8b:cd:7c:81:7f:14:cf:5c: 91:66:25:8a:7e:e8:53:94:27:7c:5e:45:c0:6b:35: a3:9d:d7:f0:7b:82:42:59:1e:4f:6b:1d:ef:ea:e1: 60:a9:ca:54:35:be:13:7e:76:2b:bb:96:ff:c2:c4: e4:64:a6:1e:b6:1a:de:02:7e:95:7f:2d:ae:6e:b0: a4:d8:f1:44:84:e1:a8:61:78:9d:fc:41:d7:46:7c: ae:e5:cc:ca:de:f1:0a:3a:88:d1:a6:cb:33:23:0f: a4:af:a2:56:5d:38:9c:c7:30:12:23:83:62:fe:23: d5:f6:80:bc:67:98:22:f1:31:42:77:c6:ae:9a:60: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A4:95:6F:57:27:1C:6D:21:C3:1C:A9:17:98:6B:B3:BC:5B:16:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.crl X509v3 Authority Key Identifier: keyid:5A:33:54:71:2D:81:E3:FF:01:05:04:F9:2C:0E:5F:E3:90:36:BC:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/abc30cda-3b3f-4e8e-a687-b20d5448a4e7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:59:26:07:91:e7:0f:e0:9a:03:f9:8c:3c:fd:de:6f:6a:f7: d0:81:4f:71:f7:23:49:17:c7:89:0c:8a:84:3b:e1:9c:70:01: 82:8b:19:f4:d2:35:db:02:a1:07:2f:07:a1:3e:5f:bc:d6:16: af:f9:f2:4f:04:a9:f0:61:06:0f:8e:29:2d:65:92:bd:09:9c: e3:db:8e:69:47:e1:52:7e:e8:cc:c4:f5:c4:14:dd:14:b2:3b: 9e:f7:8e:ac:ae:af:92:d1:71:3e:30:12:63:50:a2:bc:89:53: 60:ee:21:1a:4f:05:bd:54:ec:20:35:b4:4f:32:8d:9f:3a:ea: 8c:4f:57:7f:97:d7:e6:09:3d:55:c2:51:5e:b4:97:9f:73:cf: 40:db:78:e8:c9:88:79:ae:70:72:91:e6:ae:0c:ca:b1:e3:3d: 67:24:bf:e9:ee:a6:02:ca:4b:fa:c0:ce:35:d2:08:27:00:2f: 22:24:63:c4:05:a2:94:f1:1a:33:26:bf:2f:31:f3:49:7c:45: f0:4b:19:20:4e:ad:b5:ed:3d:a8:4f:0e:de:ed:5e:2c:b7:dc: 6e:98:41:0d:a3:e4:cd:da:ec:d1:f7:37:1d:73:24:7d:ef:72: 38:74:24:28:94:81:db:73:e6:3e:96:70:93:f0:8e:ef:9f:ae: 53:f9:c1:e9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExGdp03k700S8DuHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJjMzBjZGEtM2IzZi00ZThlLWE2ODctYjIwZDU0NDhh NGU3MB4XDTI1MTIyMjIxMDAwOFoXDTI1MTIyNTIxMDAwMFowLzEtMCsGA1UEAxMk NzQ3OWU5OWItMDVmZC00YjQ1LThlMWEtMmI2ODIwNDFlYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscCZSqQ0Kzv/sH3p65Y1D8v784MV75vWCt6I 0v+05gpDg46+j5jk6tIHUshPp7MLOG4A3Au94Y/vdVnPAymebP76wfyyL2a1mneX HC47+dC1yQq39W7bORwSb50aZ5YCt0OHmn6g4QmyVCUB0i2Z2OQMI1zhytLPVT37 ObVKi818gX8Uz1yRZiWKfuhTlCd8XkXAazWjndfwe4JCWR5Pax3v6uFgqcpUNb4T fnYru5b/wsTkZKYethreAn6Vfy2ubrCk2PFEhOGoYXid/EHXRnyu5czK3vEKOojR psszIw+kr6JWXTicxzASI4Ni/iPV9oC8Z5gi8TFCd8aummDTRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJqklW9XJxxtIcMcqReYa7O8WxYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hYmMz MGNkYS0zYjNmLTRlOGUtYTY4Ny1iMjBkNTQ0OGE0ZTcvYWJjMzBjZGEtM2IzZi00 ZThlLWE2ODctYjIwZDU0NDhhNGU3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWJjMzBjZGEtM2IzZi00ZThlLWE2 ODctYjIwZDU0NDhhNGU3L2FiYzMwY2RhLTNiM2YtNGU4ZS1hNjg3LWIyMGQ1NDQ4 YTRlNy5jcmwwHwYDVR0jBBgwFoAUWjNUcS2B4/8BBQT5LA5f45A2vMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hYmMzMGNkYS0zYjNmLTRlOGUtYTY4Ny1iMjBk NTQ0OGE0ZTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApWSYHkecP4JoD+Yw8/d5v avfQgU9x9yNJF8eJDIqEO+GccAGCixn00jXbAqEHLwehPl+81hav+fJPBKnwYQYP jiktZZK9CZzj245pR+FSfujMxPXEFN0Usjue946srq+S0XE+MBJjUKK8iVNg7iEa TwW9VOwgNbRPMo2fOuqMT1d/l9fmCT1VwlFetJefc89A23joyYh5rnBykeauDMqx 4z1nJL/p7qYCykv6wM410ggnAC8iJGPEBaKU8RozJr8vMfNJfEXwSxkgTq217T2o Tw7e7V4st9xumEENo+TN2uzR9zcdcyR973I4dCQolIHbc+Y+lnCT8I7vn65T+cHp -----END CERTIFICATE-----Generated at Tue Dec 23 10:47:58 2025 by rpki-client