This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.mft File: add7970c-e8e0-4915-9043-d52c6e3fd9c2.mft (raw, json) Hash identifier: OsksYhv0m3m28U7PGatbm7ohccNPbgBepLV/jSOCuAc= Subject key identifier: 68:70:65:55:A6:80:EF:B4:95:3C:04:BA:1E:96:6D:DA:D6:B5:30:80 Authority key identifier: 1A:2F:71:21:FD:F8:36:E9:20:CB:4F:2F:89:73:72:BF:C8:91:3C:FB Certificate issuer: /CN=add7970c-e8e0-4915-9043-d52c6e3fd9c2 Certificate serial: 010D0C9F4328584C3B87648E82389A12D460DB40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.mft Manifest number: 010D0C9F4328584BD70AB97C8CCD2AA4DE52E2A4 Signing time: Thu 18 Dec 2025 23:00:03 +0000 Manifest this update: Thu 18 Dec 2025 23:00:03 +0000 Manifest next update: Sun 21 Dec 2025 23:00:00 +0000 Files and hashes: 1: 1f19ce16-1871-38aa-abd6-64c297916bd6.roa (hash: d20nE8KWLl1lX0MW0p4opIwsyKkhPWlTdcH40VFc5dM=) 2: add7970c-e8e0-4915-9043-d52c6e3fd9c2.crl (hash: A/+n/Y/CSRRubcgMKlb3RXBkkn6bBQucuk454cvzVC4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:87:64:8e:82:38:9a:12:d4:60:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add7970c-e8e0-4915-9043-d52c6e3fd9c2 Validity Not Before: Dec 18 23:00:03 2025 GMT Not After : Dec 21 23:00:00 2025 GMT Subject: CN=654147cd-b5b3-4e32-8c49-a1fac7212d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:16:3f:33:8d:5e:f4:9a:eb:27:67:37:7c:49: 5a:42:9c:a9:54:f4:aa:55:6c:21:34:a3:55:d2:d5: 95:95:d4:17:b3:24:f7:b0:77:31:60:e1:b6:0e:74: 1e:98:fe:e2:7c:29:06:ff:30:07:cd:e8:2f:c3:d8: da:fa:03:2c:98:d5:fa:0e:84:95:51:ca:e9:8a:e1: 37:7b:1c:e7:35:b1:c7:78:5e:b2:bf:de:e6:a6:12: 31:83:d1:ff:97:2a:48:97:31:dc:ab:4e:96:54:6d: 5a:94:24:b1:81:14:85:a4:f9:86:9b:15:c0:ee:57: 33:2c:9a:f3:7f:9e:c6:f2:eb:f6:1e:63:7e:b4:a1: da:0f:c7:89:9b:b6:87:31:51:42:0d:ee:a5:50:e4: 83:37:0f:b3:81:67:c4:0f:6a:f1:7c:de:6c:06:50: 27:30:7c:1c:63:40:1b:0e:0d:35:2e:29:3b:b0:e6: e2:b4:58:3e:2f:9f:f2:1f:d7:ad:7c:e2:da:e2:fb: 2f:55:12:e7:3e:d0:53:0a:6b:98:af:f0:98:d3:b4: 3a:bb:36:14:53:47:8f:24:b6:be:e2:35:5d:a6:d0: da:d9:4c:60:2e:f1:68:bf:3a:c3:00:0a:62:f4:77: 0c:89:e8:a0:a1:a1:f9:58:7c:6a:bf:7c:a6:89:13: 66:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:70:65:55:A6:80:EF:B4:95:3C:04:BA:1E:96:6D:DA:D6:B5:30:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.crl X509v3 Authority Key Identifier: keyid:1A:2F:71:21:FD:F8:36:E9:20:CB:4F:2F:89:73:72:BF:C8:91:3C:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/add7970c-e8e0-4915-9043-d52c6e3fd9c2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:b0:78:ee:58:26:6f:8e:c4:6d:c8:16:1f:2b:93:39:fa:2d: 9c:90:14:6d:50:7e:a1:7b:58:10:77:77:25:18:37:af:b5:0c: d6:e1:a1:10:6d:9c:2d:e9:04:f4:35:61:28:2b:49:6e:fb:5d: 34:3a:6d:39:0b:12:0c:12:8b:19:ca:13:cf:88:35:a0:b9:3e: e2:10:f4:71:14:63:f2:36:9a:17:fb:16:a0:71:dc:0e:d9:d0: eb:fc:87:a6:52:d8:f2:24:57:dc:53:0a:75:00:bd:4e:73:0c: b0:b1:46:44:a3:4f:d3:3a:2b:f8:24:35:f7:81:7f:22:2b:6e: 33:62:12:1a:86:3f:01:c4:db:95:f9:0d:d8:a3:bd:d0:87:2a: 60:69:2a:0c:32:1a:1b:4a:d1:90:9f:b7:cb:78:95:5a:54:75: 05:0c:f7:a1:c9:80:8e:1e:38:0e:9c:5a:97:4d:11:af:93:d3: 15:41:65:de:a6:0d:d0:3e:fd:16:4f:57:48:15:00:4d:cf:d2: 27:85:21:32:06:b9:b8:c6:55:04:f9:96:57:66:b5:cd:0a:46: d2:a0:46:54:4a:c7:40:68:98:e4:58:f7:8e:de:0b:f6:7a:7e: 06:a0:f1:93:13:f3:19:41:db:e0:eb:d9:c8:42:42:6e:a9:1f: fc:31:d2:52 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw7h2SOgjiaEtRg20AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkNzk3MGMtZThlMC00OTE1LTkwNDMtZDUyYzZlM2Zk OWMyMB4XDTI1MTIxODIzMDAwM1oXDTI1MTIyMTIzMDAwMFowLzEtMCsGA1UEAxMk NjU0MTQ3Y2QtYjViMy00ZTMyLThjNDktYTFmYWM3MjEyZDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xY/M41e9JrrJ2c3fElaQpypVPSqVWwhNKNV 0tWVldQXsyT3sHcxYOG2DnQemP7ifCkG/zAHzegvw9ja+gMsmNX6DoSVUcrpiuE3 exznNbHHeF6yv97mphIxg9H/lypIlzHcq06WVG1alCSxgRSFpPmGmxXA7lczLJrz f57G8uv2HmN+tKHaD8eJm7aHMVFCDe6lUOSDNw+zgWfED2rxfN5sBlAnMHwcY0Ab Dg01Lik7sObitFg+L5/yH9etfOLa4vsvVRLnPtBTCmuYr/CY07Q6uzYUU0ePJLa+ 4jVdptDa2UxgLvFovzrDAApi9HcMieigoaH5WHxqv3ymiRNmsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGhwZVWmgO+0lTwEuh6WbdrWtTCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZGQ3 OTcwYy1lOGUwLTQ5MTUtOTA0My1kNTJjNmUzZmQ5YzIvYWRkNzk3MGMtZThlMC00 OTE1LTkwNDMtZDUyYzZlM2ZkOWMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWRkNzk3MGMtZThlMC00OTE1LTkw NDMtZDUyYzZlM2ZkOWMyL2FkZDc5NzBjLWU4ZTAtNDkxNS05MDQzLWQ1MmM2ZTNm ZDljMi5jcmwwHwYDVR0jBBgwFoAUGi9xIf34Nukgy08viXNyv8iRPPswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZGQ3OTcwYy1lOGUwLTQ5MTUtOTA0My1kNTJj NmUzZmQ5YzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbsHjuWCZvjsRtyBYfK5M5 +i2ckBRtUH6he1gQd3clGDevtQzW4aEQbZwt6QT0NWEoK0lu+100Om05CxIMEosZ yhPPiDWguT7iEPRxFGPyNpoX+xagcdwO2dDr/IemUtjyJFfcUwp1AL1OcwywsUZE o0/TOiv4JDX3gX8iK24zYhIahj8BxNuV+Q3Yo73QhypgaSoMMhobStGQn7fLeJVa VHUFDPehyYCOHjgOnFqXTRGvk9MVQWXepg3QPv0WT1dIFQBNz9InhSEyBrm4xlUE +ZZXZrXNCkbSoEZUSsdAaJjkWPeO3gv2en4GoPGTE/MZQdvg69nIQkJuqR/8MdJS -----END CERTIFICATE-----Generated at Fri Dec 19 22:02:21 2025 by rpki-client