This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft File: a9b32a2c-3e49-43f1-a969-2604ded458fe.mft (raw, json) Hash identifier: mNkM/tUyr6Z8T6A7JTCqFWv+WDjBoyQM6V8Xtw4SMuQ= Subject key identifier: D2:A5:A1:0E:92:F6:DE:B6:9B:15:A4:B1:4A:EB:55:28:72:B5:AB:83 Authority key identifier: 4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 Certificate issuer: /CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Certificate serial: 010D0C9F4328584C3D63D7157EF0237DBE033900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft Manifest number: 010D0C9F4328584436B54D2ACE298200FB697F72 Signing time: Fri 19 Dec 2025 15:00:04 +0000 Manifest this update: Fri 19 Dec 2025 15:00:04 +0000 Manifest next update: Mon 22 Dec 2025 15:00:00 +0000 Files and hashes: 1: a9b32a2c-3e49-43f1-a969-2604ded458fe.crl (hash: hJwzeujj60T3g5yifo1OSPf2lAA1WopyrMOSU0yr0Ns=) 2: f2fcc349-624c-38b7-88a5-9fee47bc052d.roa (hash: xslehT/8v4AlNfjUBvpb/lVQOVhz5hQtTAuIdTxlQUI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:63:d7:15:7e:f0:23:7d:be:03:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9b32a2c-3e49-43f1-a969-2604ded458fe Validity Not Before: Dec 19 15:00:04 2025 GMT Not After : Dec 22 15:00:00 2025 GMT Subject: CN=23709caa-b8ed-480a-90c5-e5b063a152f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5f:64:0e:45:60:40:23:4c:bf:16:97:a6:f1: ac:1b:f2:af:5d:ab:6a:71:a6:d7:2d:aa:c5:71:85: 41:24:2b:c2:c6:25:e5:87:82:ab:c0:a5:b5:fe:9e: 70:f4:53:43:b6:38:ef:0c:73:dd:51:fa:8b:4c:38: fa:64:87:41:5a:9e:76:95:2d:06:95:f7:78:fc:f0: 6f:78:f9:5f:49:f7:0d:8c:d0:64:40:9b:dd:d9:cc: 77:86:a8:50:08:1f:0d:1a:df:55:8c:cd:5e:84:be: a9:cc:f4:19:9a:a5:82:af:cf:e1:75:f5:59:99:9f: 6a:dd:d5:b1:a6:6d:a7:af:3a:0e:d0:b0:be:9f:28: 2b:c3:93:14:4b:da:94:36:f1:2f:2a:53:53:b9:09: ab:0d:79:83:98:d5:bc:ea:e3:4d:bc:b4:a4:5d:c0: 71:b6:3f:f4:bb:cb:89:bf:78:1e:b7:a4:6d:ef:92: 29:27:9b:25:b9:64:75:31:f1:91:6d:5f:e4:cc:56: da:25:75:e2:42:63:fe:f2:e6:58:49:3e:fd:fa:d1: b9:8d:c3:df:c8:bc:e7:f4:1f:8e:77:df:a2:2d:9d: 07:22:eb:45:3d:7c:a0:ab:59:5a:be:10:61:d6:08: d3:ad:89:ef:bc:aa:e1:3c:9b:ec:5a:90:88:80:01: a5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A5:A1:0E:92:F6:DE:B6:9B:15:A4:B1:4A:EB:55:28:72:B5:AB:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe/a9b32a2c-3e49-43f1-a969-2604ded458fe.crl X509v3 Authority Key Identifier: keyid:4F:F0:52:06:21:55:28:99:71:59:FF:7F:BA:C9:4A:C3:65:15:7C:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a9b32a2c-3e49-43f1-a969-2604ded458fe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0d:cf:ca:4c:da:22:53:ef:4a:9e:84:e2:82:83:0a:c5:7f: 01:0b:ef:01:24:10:6f:99:53:d3:70:fa:e3:15:ac:f2:db:25: 9b:3f:b6:0c:bf:82:21:3d:3c:f9:2d:2b:30:ae:72:d8:42:bd: 22:9e:02:ab:ba:76:7b:a9:46:dc:79:20:93:9f:4c:5c:5f:a0: ff:db:14:b5:52:16:f1:d9:29:63:a4:e8:00:53:17:5b:2d:65: c5:26:db:de:c3:44:63:8a:82:85:d9:3e:34:63:3b:d6:2b:30: 32:91:3d:8a:7e:df:5d:37:cb:43:75:6b:6f:4a:ef:55:60:0e: 71:ea:52:ed:55:e5:d4:7b:c4:3b:29:93:03:40:b7:b2:a6:21: df:bd:c9:93:3f:96:da:9e:60:be:ba:7c:c6:d0:3b:9b:cf:5e: 28:22:a1:40:52:13:44:f9:38:26:6b:6b:43:0f:52:60:fa:d2: 9a:78:5a:00:d6:b4:c8:18:29:c1:8d:6c:10:5a:c7:45:47:a0: 7d:3a:5e:e3:2c:98:19:50:a7:49:b3:a0:d4:39:3c:79:8a:4c: ef:6e:43:f3:98:21:c3:2b:56:67:54:6b:62:40:37:ba:20:59: 36:7f:6a:ab:a1:c7:ed:2f:64:c9:29:46:3e:18:1a:b1:57:c1: 48:04:3a:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw9Y9cVfvAjfb4DOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTliMzJhMmMtM2U0OS00M2YxLWE5NjktMjYwNGRlZDQ1 OGZlMB4XDTI1MTIxOTE1MDAwNFoXDTI1MTIyMjE1MDAwMFowLzEtMCsGA1UEAxMk MjM3MDljYWEtYjhlZC00ODBhLTkwYzUtZTViMDYzYTE1MmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkV9kDkVgQCNMvxaXpvGsG/KvXatqcabXLarF cYVBJCvCxiXlh4KrwKW1/p5w9FNDtjjvDHPdUfqLTDj6ZIdBWp52lS0Glfd4/PBv ePlfSfcNjNBkQJvd2cx3hqhQCB8NGt9VjM1ehL6pzPQZmqWCr8/hdfVZmZ9q3dWx pm2nrzoO0LC+nygrw5MUS9qUNvEvKlNTuQmrDXmDmNW86uNNvLSkXcBxtj/0u8uJ v3get6Rt75IpJ5sluWR1MfGRbV/kzFbaJXXiQmP+8uZYST79+tG5jcPfyLzn9B+O d9+iLZ0HIutFPXygq1lavhBh1gjTrYnvvKrhPJvsWpCIgAGlLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNKloQ6S9t62mxWksUrrVShytauDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIz MmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0ZGVkNDU4ZmUvYTliMzJhMmMtM2U0OS00 M2YxLWE5NjktMjYwNGRlZDQ1OGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTliMzJhMmMtM2U0OS00M2YxLWE5 NjktMjYwNGRlZDQ1OGZlL2E5YjMyYTJjLTNlNDktNDNmMS1hOTY5LTI2MDRkZWQ0 NThmZS5jcmwwHwYDVR0jBBgwFoAUT/BSBiFVKJlxWf9/uslKw2UVfCIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hOWIzMmEyYy0zZTQ5LTQzZjEtYTk2OS0yNjA0 ZGVkNDU4ZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApDc/KTNoiU+9KnoTigoMK xX8BC+8BJBBvmVPTcPrjFazy2yWbP7YMv4IhPTz5LSswrnLYQr0ingKrunZ7qUbc eSCTn0xcX6D/2xS1Uhbx2SljpOgAUxdbLWXFJtvew0RjioKF2T40YzvWKzAykT2K ft9dN8tDdWtvSu9VYA5x6lLtVeXUe8Q7KZMDQLeypiHfvcmTP5banmC+unzG0Dub z14oIqFAUhNE+Tgma2tDD1Jg+tKaeFoA1rTIGCnBjWwQWsdFR6B9Ol7jLJgZUKdJ s6DUOTx5ikzvbkPzmCHDK1ZnVGtiQDe6IFk2f2qrocftL2TJKUY+GBqxV8FIBDoN -----END CERTIFICATE-----Generated at Sat Dec 20 14:07:54 2025 by rpki-client