This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft File: 33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft (raw, json) Hash identifier: wAv/dxdPKGgVAydoHNrvE5q9/KWAKQ/jZem1zr4Yxds= Subject key identifier: B7:49:BA:D0:BA:13:24:8B:38:3E:4E:7D:F5:EB:EB:0C:78:D3:76:91 Authority key identifier: 47:14:D6:A4:1C:CF:54:F6:EB:CF:A0:02:FA:B6:B1:60:4B:9E:56:96 Certificate issuer: /CN=33fbd85d-bc65-42a6-8c78-c3f05da9901b Certificate serial: 010D0C9F4328584C3C213C9692F1D38F5CCA8940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft Manifest number: 010D0C9F4328584C3C213C9A5D08B64975492DC1 Signing time: Fri 19 Dec 2025 04:10:03 +0000 Manifest this update: Fri 19 Dec 2025 04:10:03 +0000 Manifest next update: Mon 22 Dec 2025 04:00:00 +0000 Files and hashes: 1: 33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl (hash: xhjZXCVko1ojy7N0udt1p2WBS3slGJ5zB5nuvX2JX+0=) 2: 44834947-85c6-3a2c-8ae4-8bcd7bf971cd.roa (hash: +mo3q+0GxK/wrulFhVT77tAubOmGLvD4i1Vg4z0+No0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3c:21:3c:96:92:f1:d3:8f:5c:ca:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33fbd85d-bc65-42a6-8c78-c3f05da9901b Validity Not Before: Dec 19 04:10:03 2025 GMT Not After : Dec 22 04:00:00 2025 GMT Subject: CN=a1904b0a-ba8c-4ece-8ed9-8a9adbe96607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:24:62:25:2b:77:3e:49:d0:4b:a0:11:4e:04: ae:c3:f7:f6:eb:49:d7:eb:ec:92:8d:c8:e2:fa:cc: 73:ed:9b:8a:9e:12:0e:f6:9b:29:5f:6f:51:4a:f5: db:41:38:12:47:f7:ad:f4:8c:4e:a4:1b:22:c4:b4: 07:c9:32:73:99:42:51:da:8d:5f:39:e5:30:e2:1c: 6e:78:38:cf:a1:44:a6:f1:87:bc:64:d1:6f:27:34: 20:b9:3f:0c:71:59:b5:be:89:5c:ca:85:34:58:b0: 5d:9c:4e:53:8b:7f:0d:e7:b4:1b:53:a5:21:63:3d: ee:27:92:66:5d:ff:d0:a8:2b:dd:bb:68:ff:1f:6a: ba:20:ef:6d:c6:05:a5:31:5e:3f:a2:32:fb:2f:0b: 0d:9c:53:1b:cf:0d:6c:9a:3d:93:56:a7:bb:01:3c: 26:39:d0:c7:34:1d:2c:94:ce:1f:85:48:a2:ca:ea: 58:59:e6:6b:7d:1b:3b:15:9f:e6:c3:aa:b2:b8:56: 21:bd:42:4b:ca:02:16:f4:0a:1e:63:74:3e:fb:17: 77:33:9a:0b:f1:56:e5:5f:c8:56:bc:7d:9c:dc:ae: c4:75:07:b6:62:85:72:11:a0:15:e7:2c:1c:b1:4b: ec:65:85:ac:7d:f9:72:77:bc:5f:48:df:bc:75:c5: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:49:BA:D0:BA:13:24:8B:38:3E:4E:7D:F5:EB:EB:0C:78:D3:76:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl X509v3 Authority Key Identifier: keyid:47:14:D6:A4:1C:CF:54:F6:EB:CF:A0:02:FA:B6:B1:60:4B:9E:56:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5d:31:f5:10:51:6f:ae:c4:ad:1b:b6:95:fc:3a:4f:65:1e: e9:65:c1:da:87:d5:bb:fa:57:14:8f:27:87:bc:f4:ea:24:a6: 84:b9:28:75:43:e8:9a:04:59:bd:bd:1e:18:ad:20:78:48:3f: 85:cb:1d:29:35:20:b2:a1:88:db:c5:20:99:cd:8b:65:97:2f: 75:b0:77:c5:f7:fb:fe:af:43:bb:32:ab:96:63:c3:4f:08:2d: 91:60:b5:47:7b:d3:cb:81:40:f5:12:b4:ad:ba:28:da:a8:81: 4e:4a:c8:d9:ee:b5:12:fa:5d:c6:44:f7:f8:40:7f:0c:35:2b: 2a:32:07:38:60:4b:ea:9d:02:79:26:66:9f:d4:27:48:94:44: ac:6d:e2:b8:3c:12:d8:61:b1:89:b4:f8:f8:f6:63:ed:42:f1: 0b:73:14:ca:f2:0f:1d:f6:f6:df:af:fb:58:d3:aa:71:58:1b: 0c:46:84:94:6f:28:a4:f6:ca:ed:29:65:58:aa:28:44:0c:32: a9:2c:74:5f:fa:96:da:36:44:07:90:9e:8b:77:0d:0d:85:4d: 3d:d7:56:fc:56:33:c9:9c:3d:6b:d4:96:3b:e4:d1:41:44:7a: 7c:bf:18:5f:9d:dc:5c:97:14:66:54:e3:22:e3:96:34:df:78: fa:bb:3c:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw8ITyWkvHTj1zKiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNmYmQ4NWQtYmM2NS00MmE2LThjNzgtYzNmMDVkYTk5 MDFiMB4XDTI1MTIxOTA0MTAwM1oXDTI1MTIyMjA0MDAwMFowLzEtMCsGA1UEAxMk YTE5MDRiMGEtYmE4Yy00ZWNlLThlZDktOGE5YWRiZTk2NjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCRiJSt3PknQS6ARTgSuw/f260nX6+ySjcji +sxz7ZuKnhIO9pspX29RSvXbQTgSR/et9IxOpBsixLQHyTJzmUJR2o1fOeUw4hxu eDjPoUSm8Ye8ZNFvJzQguT8McVm1volcyoU0WLBdnE5Ti38N57QbU6UhYz3uJ5Jm Xf/QqCvdu2j/H2q6IO9txgWlMV4/ojL7LwsNnFMbzw1smj2TVqe7ATwmOdDHNB0s lM4fhUiiyupYWeZrfRs7FZ/mw6qyuFYhvUJLygIW9AoeY3Q++xd3M5oL8VblX8hW vH2c3K7EdQe2YoVyEaAV5ywcsUvsZYWsfflyd7xfSN+8dcXoMQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLdJutC6EySLOD5OffXr6wx403aRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zM2Zi ZDg1ZC1iYzY1LTQyYTYtOGM3OC1jM2YwNWRhOTkwMWIvMzNmYmQ4NWQtYmM2NS00 MmE2LThjNzgtYzNmMDVkYTk5MDFiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzNmYmQ4NWQtYmM2NS00MmE2LThj NzgtYzNmMDVkYTk5MDFiLzMzZmJkODVkLWJjNjUtNDJhNi04Yzc4LWMzZjA1ZGE5 OTAxYi5jcmwwHwYDVR0jBBgwFoAURxTWpBzPVPbrz6AC+raxYEueVpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zM2ZiZDg1ZC1iYzY1LTQyYTYtOGM3OC1jM2Yw NWRhOTkwMWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB1XTH1EFFvrsStG7aV/DpP ZR7pZcHah9W7+lcUjyeHvPTqJKaEuSh1Q+iaBFm9vR4YrSB4SD+Fyx0pNSCyoYjb xSCZzYtlly91sHfF9/v+r0O7MquWY8NPCC2RYLVHe9PLgUD1ErStuijaqIFOSsjZ 7rUS+l3GRPf4QH8MNSsqMgc4YEvqnQJ5Jmaf1CdIlESsbeK4PBLYYbGJtPj49mPt QvELcxTK8g8d9vbfr/tY06pxWBsMRoSUbyik9srtKWVYqihEDDKpLHRf+pbaNkQH kJ6Ldw0NhU0911b8VjPJnD1r1JY75NFBRHp8vxhfndxclxRmVOMi45Y033j6uzzL -----END CERTIFICATE-----Generated at Sat Dec 20 02:46:36 2025 by rpki-client