This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft File: c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft (raw, json) Hash identifier: BeXqufckbAz8zn38S54EfB9GS9nGe2QuztcybjMP+jY= Subject key identifier: 14:F0:22:54:FC:7F:D8:4B:F2:96:84:4A:19:2E:7F:77:2A:AE:2F:2A Authority key identifier: CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF Certificate issuer: /CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153 Certificate serial: 010D0C9F4328584C49D6249DF2B2425511A79000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft Manifest number: 010D0C9F4328584073A835EF08C1B3F2527035EF Signing time: Wed 24 Dec 2025 02:00:03 +0000 Manifest this update: Wed 24 Dec 2025 02:00:03 +0000 Manifest next update: Fri 26 Dec 2025 02:00:00 +0000 Files and hashes: 1: 3c43b276-fc41-37ea-b4d5-c88fba282149.roa (hash: fiQsR/UbJw4dGxeccvtJ273glblms3wl0cSPp1GFQZ4=) 2: c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl (hash: 5Wg15CCQiY09pLcS8tiGmshbZxTarHR+NZ4mFTXcXkw=) 3: e713b0c7-ac64-3c9e-8a7c-1289e6550c40.roa (hash: T9ru+BlwKNSqjWTbV7mYl38fVD83NtUitl5yc5LTvaw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:49:d6:24:9d:f2:b2:42:55:11:a7:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9fc1d52-c008-4fdc-acd1-73ab6c71b153 Validity Not Before: Dec 24 02:00:03 2025 GMT Not After : Dec 26 02:00:00 2025 GMT Subject: CN=928f14c3-2cd1-400d-beef-97418e11f417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:5d:d2:ad:69:64:95:fc:0b:5c:89:40:b7: 27:61:02:28:68:83:1c:48:96:74:4f:01:0d:ea:64: 92:5b:16:bd:a4:83:18:21:3d:1d:66:0c:ae:10:e7: cf:1e:de:d9:e3:04:4e:9c:8d:d6:40:4a:58:9b:af: a9:15:18:a5:e6:55:3b:66:44:26:1e:a3:c1:f3:18: 23:85:37:52:4d:85:77:64:29:d2:cc:a1:8c:d7:f7: 40:f3:e4:56:62:ae:3f:c8:85:68:ba:a6:74:82:17: 67:55:6b:24:b8:21:58:a2:a4:bc:3b:b4:86:53:04: 5c:8d:e2:1d:cf:84:4a:33:04:06:7b:17:12:e7:6c: 55:43:22:23:a7:49:60:1a:29:85:20:8f:fa:c7:fc: ba:41:69:3c:ed:07:4f:03:7b:27:14:9d:64:97:ca: 7b:eb:5c:a8:25:18:e5:4c:01:0f:06:e9:d4:7e:1a: ba:9b:8f:1e:4e:3d:e7:32:e6:4e:c4:33:70:97:0e: 14:6f:a1:f3:39:fe:e5:ff:c1:66:70:5c:4b:ee:95: 76:5d:ea:bc:a3:6d:8d:5e:0b:21:a4:ba:57:e1:b3: ad:e5:b2:08:96:cf:3f:68:62:dd:24:02:ff:ae:37: 9b:a2:b2:51:e1:98:2f:a6:a5:1d:3c:2c:11:c8:a2: c0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:22:54:FC:7F:D8:4B:F2:96:84:4A:19:2E:7F:77:2A:AE:2F:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.crl X509v3 Authority Key Identifier: keyid:CF:1B:30:11:70:75:38:4F:72:3E:E9:B0:CD:09:2A:B7:5A:08:C6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c9fc1d52-c008-4fdc-acd1-73ab6c71b153.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a7:82:e2:e6:e8:11:47:b3:2b:95:52:0b:a4:8d:33:3a:81: ea:03:1f:ae:cc:52:71:d1:4d:40:9a:a3:e2:7d:e1:3a:5b:6b: a5:11:28:04:72:02:94:27:30:f3:9b:f1:dc:b4:d0:a8:d5:f2: d8:7c:0d:99:01:69:7d:84:9e:f8:80:e0:b7:d8:97:cb:bc:6d: 99:f4:e3:e5:6c:7c:bb:96:97:ba:45:b6:54:5e:4d:fd:ba:62: 73:7b:8f:7c:93:ee:86:0f:4e:bb:c0:54:e6:ee:ba:b8:60:d5: e8:d8:b3:8e:6e:3c:b9:60:6a:ca:0e:85:4c:44:32:71:28:d2: ef:8d:2f:b8:12:3e:5b:09:5a:9b:8b:bf:33:c7:48:c4:75:c6: aa:bc:85:7a:42:e2:ad:d9:ce:aa:a1:7d:75:f9:b3:61:11:22: aa:f1:ac:12:ef:81:e0:cd:26:35:cb:75:44:5c:43:bd:b9:e0: b2:80:1a:15:11:94:13:fb:f8:94:3e:47:3e:34:bc:80:29:35: 65:37:04:6b:5d:23:c4:94:b6:c3:cb:a7:52:7f:26:0e:dc:1f: e9:92:39:72:fd:24:10:ff:80:e4:6c:ca:1b:e6:99:17:26:2c: d7:b0:c0:84:e2:82:5f:f5:9d:6f:a4:5a:2f:2e:9c:3a:f9:99: 8d:87:4d:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExJ1iSd8rJCVRGnkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlmYzFkNTItYzAwOC00ZmRjLWFjZDEtNzNhYjZjNzFi MTUzMB4XDTI1MTIyNDAyMDAwM1oXDTI1MTIyNjAyMDAwMFowLzEtMCsGA1UEAxMk OTI4ZjE0YzMtMmNkMS00MDBkLWJlZWYtOTc0MThlMTFmNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrtd0q1pZJX8C1yJQLcnYQIoaIMcSJZ0TwEN 6mSSWxa9pIMYIT0dZgyuEOfPHt7Z4wROnI3WQEpYm6+pFRil5lU7ZkQmHqPB8xgj hTdSTYV3ZCnSzKGM1/dA8+RWYq4/yIVouqZ0ghdnVWskuCFYoqS8O7SGUwRcjeId z4RKMwQGexcS52xVQyIjp0lgGimFII/6x/y6QWk87QdPA3snFJ1kl8p761yoJRjl TAEPBunUfhq6m48eTj3nMuZOxDNwlw4Ub6HzOf7l/8FmcFxL7pV2Xeq8o22NXgsh pLpX4bOt5bIIls8/aGLdJAL/rjeborJR4ZgvpqUdPCwRyKLAFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBTwIlT8f9hL8paEShkuf3cqri8qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9jOWZj MWQ1Mi1jMDA4LTRmZGMtYWNkMS03M2FiNmM3MWIxNTMvYzlmYzFkNTItYzAwOC00 ZmRjLWFjZDEtNzNhYjZjNzFiMTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYzlmYzFkNTItYzAwOC00ZmRjLWFj ZDEtNzNhYjZjNzFiMTUzL2M5ZmMxZDUyLWMwMDgtNGZkYy1hY2QxLTczYWI2Yzcx YjE1My5jcmwwHwYDVR0jBBgwFoAUzxswEXB1OE9yPumwzQkqt1oIxu8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9jOWZjMWQ1Mi1jMDA4LTRmZGMtYWNkMS03M2Fi NmM3MWIxNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABp4Li5ugRR7MrlVILpI0z OoHqAx+uzFJx0U1AmqPifeE6W2ulESgEcgKUJzDzm/HctNCo1fLYfA2ZAWl9hJ74 gOC32JfLvG2Z9OPlbHy7lpe6RbZUXk39umJze498k+6GD067wFTm7rq4YNXo2LOO bjy5YGrKDoVMRDJxKNLvjS+4Ej5bCVqbi78zx0jEdcaqvIV6QuKt2c6qoX11+bNh ESKq8awS74HgzSY1y3VEXEO9ueCygBoVEZQT+/iUPkc+NLyAKTVlNwRrXSPElLbD y6dSfyYO3B/pkjly/SQQ/4DkbMob5pkXJizXsMCE4oJf9Z1vpFovLpw6+ZmNh031 -----END CERTIFICATE-----Generated at Wed Dec 24 09:19:42 2025 by rpki-client