This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft File: f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft (raw, json) Hash identifier: nQ1QNW4IXO4Yi1MZdiXhRG3jfPyBTmXTKw2sZjxxbNc= Subject key identifier: 64:77:60:73:87:F1:64:C1:29:FB:6E:B9:1C:86:1B:72:1E:8E:22:D7 Authority key identifier: 34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39 Certificate issuer: /CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d Certificate serial: 010D0C9F4328584C492377620A43D51F73D3A320 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft Manifest number: 010D0C9F4328584431ADE0216CDD70FAED0BEF54 Signing time: Tue 23 Dec 2025 20:00:03 +0000 Manifest this update: Tue 23 Dec 2025 20:00:03 +0000 Manifest next update: Fri 26 Dec 2025 20:00:00 +0000 Files and hashes: 1: 25e84704-60c2-30c2-9812-d48955828bb7.roa (hash: xR+16FJ17C/z5t0cfJmCdHbDLnMWwjS0WOlRyDwew8o=) 2: a94a0422-7a4c-340e-9aee-2cea063bc62b.roa (hash: 1/b8AQl3DGhNNSiKVQFgdLqzNW6N+EQxmRAqvpoWVog=) 3: f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl (hash: qyn63IOI8i+J9ajrACPlajS2YfW7zR2+2pGC+LUgSSA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:49:23:77:62:0a:43:d5:1f:73:d3:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d Validity Not Before: Dec 23 20:00:03 2025 GMT Not After : Dec 26 20:00:00 2025 GMT Subject: CN=0b0dcb0b-75cc-4d41-84ff-293d48d7a619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:09:42:43:06:a5:56:87:9d:1a:b4:e3:47: cc:eb:97:7c:bb:2b:fb:da:f6:bc:10:f3:49:05:a0: a0:0c:a5:d4:67:65:27:b4:ed:0d:dd:68:f3:4b:96: d4:ec:6c:44:92:37:de:67:26:47:24:d6:c7:64:c0: 97:34:66:88:66:6d:92:f0:79:36:5f:b2:9f:eb:e9: 01:9c:0c:25:e6:ac:dd:e9:32:a6:a6:d2:83:41:29: 96:f5:cc:9e:50:d2:38:59:fb:f2:8c:3b:bd:7f:6c: 24:46:31:12:42:e9:8d:38:88:d4:45:17:7c:24:51: 96:9d:47:55:a0:06:6b:04:85:5e:3e:f6:80:07:ed: f6:70:11:14:cd:1e:5e:e6:cb:de:1d:a9:6b:f3:0b: ab:25:ce:9f:86:8f:7b:40:13:b4:20:0e:d5:ec:39: f7:55:7b:ad:90:9a:d2:78:80:00:09:6a:8a:71:2c: 73:30:9c:7c:5e:73:46:4f:a0:f5:bf:f9:55:dd:51: 68:48:91:2d:e0:8b:5f:fc:a5:c6:c0:31:c0:88:a9: 7b:1f:fc:a2:f9:3a:6a:b4:8c:09:62:ae:0b:e5:e3: 7e:e2:d4:a2:ff:84:a6:9f:fd:34:89:9e:4f:c4:ef: 17:e7:84:61:02:bd:aa:5b:26:f1:06:a9:35:77:e0: e4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:77:60:73:87:F1:64:C1:29:FB:6E:B9:1C:86:1B:72:1E:8E:22:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl X509v3 Authority Key Identifier: keyid:34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:d0:6c:d8:e5:e3:09:7b:3c:68:0f:d1:59:4b:1c:6d:7f:23: 4a:97:92:f6:b1:5b:9c:0a:c5:aa:bf:b3:da:cb:aa:b1:9f:08: 34:59:33:1c:44:18:bc:ba:a7:bb:fa:93:f4:d6:e5:dc:3d:18: f7:6c:af:a6:09:b0:14:ff:d1:7e:57:89:47:9a:95:a6:15:a7: 3a:25:b9:4e:d0:bc:f2:f8:68:75:53:98:c3:58:8b:17:4d:3d: d7:e2:5c:69:bc:08:72:f9:1d:f8:22:9f:61:bd:3a:c1:51:18: 6c:1f:9a:4c:3a:a0:44:a4:ac:53:0b:e6:16:05:e3:9b:b2:74: 04:d3:a2:e9:90:99:5b:64:9c:7a:c3:8c:54:3e:a0:ff:f1:a6: 2c:bc:2e:59:df:7a:0c:b7:15:e7:a7:6b:fd:3b:ea:f0:10:35: 85:3e:45:a6:ca:75:47:01:a3:79:10:61:50:6d:df:b6:48:af: 62:a4:63:b2:7f:3b:a7:bb:ca:83:8b:0e:77:0b:24:45:5b:6f: d2:5e:a3:36:04:46:03:e8:67:25:77:68:51:c9:80:a3:9d:05: 72:54:25:46:c9:11:0b:75:91:5b:c3:00:b5:20:3b:ec:f9:3d: 9f:89:47:f0:5c:3c:91:b9:da:06:bc:2d:30:60:96:2b:cd:93: a3:7e:79:92 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExJI3diCkPVH3PToyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQzMWNiYmYtNDQxZS00ZDhkLWI1OGYtNDE2N2QxMzg2 ZjZkMB4XDTI1MTIyMzIwMDAwM1oXDTI1MTIyNjIwMDAwMFowLzEtMCsGA1UEAxMk MGIwZGNiMGItNzVjYy00ZDQxLTg0ZmYtMjkzZDQ4ZDdhNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAploJQkMGpVaHnRq040fM65d8uyv72va8EPNJ BaCgDKXUZ2UntO0N3WjzS5bU7GxEkjfeZyZHJNbHZMCXNGaIZm2S8Hk2X7Kf6+kB nAwl5qzd6TKmptKDQSmW9cyeUNI4WfvyjDu9f2wkRjESQumNOIjURRd8JFGWnUdV oAZrBIVePvaAB+32cBEUzR5e5sveHalr8wurJc6fho97QBO0IA7V7Dn3VXutkJrS eIAACWqKcSxzMJx8XnNGT6D1v/lV3VFoSJEt4Itf/KXGwDHAiKl7H/yi+TpqtIwJ Yq4L5eN+4tSi/4Smn/00iZ5PxO8X54RhAr2qWybxBqk1d+DkSQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGR3YHOH8WTBKftuuRyGG3IejiLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mNDMx Y2JiZi00NDFlLTRkOGQtYjU4Zi00MTY3ZDEzODZmNmQvZjQzMWNiYmYtNDQxZS00 ZDhkLWI1OGYtNDE2N2QxMzg2ZjZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjQzMWNiYmYtNDQxZS00ZDhkLWI1 OGYtNDE2N2QxMzg2ZjZkL2Y0MzFjYmJmLTQ0MWUtNGQ4ZC1iNThmLTQxNjdkMTM4 NmY2ZC5jcmwwHwYDVR0jBBgwFoAUNKAYHeaDHg2G04ycNul41/k14TkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mNDMxY2JiZi00NDFlLTRkOGQtYjU4Zi00MTY3 ZDEzODZmNmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBn0GzY5eMJezxoD9FZSxxt fyNKl5L2sVucCsWqv7Pay6qxnwg0WTMcRBi8uqe7+pP01uXcPRj3bK+mCbAU/9F+ V4lHmpWmFac6JblO0Lzy+Gh1U5jDWIsXTT3X4lxpvAhy+R34Ip9hvTrBURhsH5pM OqBEpKxTC+YWBeObsnQE06LpkJlbZJx6w4xUPqD/8aYsvC5Z33oMtxXnp2v9O+rw EDWFPkWmynVHAaN5EGFQbd+2SK9ipGOyfzunu8qDiw53CyRFW2/SXqM2BEYD6Gcl d2hRyYCjnQVyVCVGyRELdZFbwwC1IDvs+T2fiUfwXDyRudoGvC0wYJYrzZOjfnmS -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:30 2025 by rpki-client