This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft File: cb2539db-3965-4bf1-baef-b7f85ca967bd.mft (raw, json) Hash identifier: bJuMsPTLogu5wCCtIBdMEDFKU449Say/uqjw5FevV6M= Subject key identifier: 5C:A0:23:96:56:89:39:DC:D7:18:ED:51:6D:B9:71:03:4D:76:71:AB Authority key identifier: 35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9 Certificate issuer: /CN=cb2539db-3965-4bf1-baef-b7f85ca967bd Certificate serial: 010D0C9F4328584C3DDAF7FA5C79FC58F9110570 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft Manifest number: 010D0C9F4328584BB51A6421112F6B5DEE5174B4 Signing time: Fri 19 Dec 2025 19:00:03 +0000 Manifest this update: Fri 19 Dec 2025 19:00:03 +0000 Manifest next update: Sun 21 Dec 2025 19:00:00 +0000 Files and hashes: 1: 21d3146c-b803-3260-b98f-e8fae0d54835.roa (hash: twEvlXk/w7UM4xBVA86/CfE4eh3QymypOI87w3Zi6GQ=) 2: 6469f245-f029-3856-8a63-35951fe49b6e.roa (hash: eZqiUVP0N4wAetJpMgYyFyOIMTcN9t+7oWfMPU7ZjyI=) 3: cb2539db-3965-4bf1-baef-b7f85ca967bd.crl (hash: gMVYh/ptv+BUGVSqRjQbqok2CdEiDMXLJjU31ggw3nc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:da:f7:fa:5c:79:fc:58:f9:11:05:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb2539db-3965-4bf1-baef-b7f85ca967bd Validity Not Before: Dec 19 19:00:03 2025 GMT Not After : Dec 21 19:00:00 2025 GMT Subject: CN=3a94c183-3d62-4798-bd01-ac0d028406f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:ea:07:ce:a4:0a:9d:08:9f:0a:a7:64:6a: a0:6f:07:84:8d:1d:3c:fd:78:db:7d:fd:c4:9e:38: 6d:91:a3:7a:17:59:88:8f:cc:d9:4b:7c:16:3d:44: c2:60:8f:62:a3:b1:c9:70:76:c1:c5:35:0f:b6:f4: c1:ee:6a:09:7e:38:dc:10:37:e6:54:2d:2a:34:7f: 9a:c1:d1:08:5b:a4:62:19:14:29:06:6c:44:63:26: c5:2d:71:82:dc:3f:47:22:15:e0:3d:7c:f5:88:49: fd:1a:7c:4a:e2:c3:e7:cf:21:f8:b4:dd:10:e3:76: 43:38:05:7b:32:6e:42:b3:f5:7d:32:67:e8:7b:94: 51:4a:65:35:8f:e9:2c:bf:98:bc:40:86:b4:7e:bb: 84:85:96:55:36:49:f3:92:98:6b:13:d4:fa:67:80: 46:d6:78:bb:24:8d:be:f5:29:a6:f6:9f:3b:ab:d9: 0c:83:56:74:82:93:ed:ea:7a:a2:ee:91:00:86:d5: e9:f4:d4:ab:48:10:87:40:71:3b:c3:60:4d:8a:5e: 8d:93:90:53:9d:19:0b:c0:00:57:2a:11:82:fc:ae: 65:e2:fe:2d:18:6a:6d:a6:90:7b:09:48:8f:e4:8c: a2:fd:d7:41:1e:13:e3:63:e0:8b:9c:39:d2:6e:95: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A0:23:96:56:89:39:DC:D7:18:ED:51:6D:B9:71:03:4D:76:71:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl X509v3 Authority Key Identifier: keyid:35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:4a:43:8a:da:36:6a:68:e0:2b:a8:1c:9a:f1:ff:99:96:4f: 47:dc:c8:15:af:a9:9d:93:99:e7:0b:86:2a:70:d8:d1:36:85: 75:5e:76:33:c1:c6:d2:1e:b9:cc:57:5f:2f:33:f7:6e:a0:e7: f5:25:5b:d8:7b:95:a1:61:6b:31:aa:88:b5:96:42:5c:48:86: 71:f0:1f:0a:0b:cb:70:61:8f:b9:3e:3a:13:85:e8:85:dd:b3: 4e:cc:eb:82:59:b0:78:47:5d:d7:78:17:17:5a:67:b4:36:d7: 70:0f:71:1a:e5:fe:db:c8:55:eb:b4:64:c1:03:e3:e9:c3:82: e7:b0:53:46:66:f8:08:64:6b:b2:1d:4a:1c:08:e2:ac:15:d1: b0:a6:9a:22:be:65:5d:0c:b3:e8:06:8f:65:ef:8f:72:f4:d6: 8b:f5:17:db:1b:00:48:c1:67:34:61:d6:9f:e5:25:61:95:9f: d8:d1:3e:51:a0:28:60:42:89:0c:f3:2a:06:dc:e0:9d:5e:4e: 90:df:34:9e:fe:40:5a:0e:6a:80:04:70:d9:15:3e:7d:58:31: d3:51:79:2f:1d:82:78:94:8c:8e:67:42:f8:66:7a:a4:74:15: 9b:b7:03:5a:06:81:66:85:a4:79:b2:ba:66:be:db:d7:70:b9: bb:f6:f5:31 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw92vf6XHn8WPkRBXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IyNTM5ZGItMzk2NS00YmYxLWJhZWYtYjdmODVjYTk2 N2JkMB4XDTI1MTIxOTE5MDAwM1oXDTI1MTIyMTE5MDAwMFowLzEtMCsGA1UEAxMk M2E5NGMxODMtM2Q2Mi00Nzk4LWJkMDEtYWMwZDAyODQwNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyzqB86kCp0InwqnZGqgbweEjR08/Xjbff3E njhtkaN6F1mIj8zZS3wWPUTCYI9io7HJcHbBxTUPtvTB7moJfjjcEDfmVC0qNH+a wdEIW6RiGRQpBmxEYybFLXGC3D9HIhXgPXz1iEn9GnxK4sPnzyH4tN0Q43ZDOAV7 Mm5Cs/V9Mmfoe5RRSmU1j+ksv5i8QIa0fruEhZZVNknzkphrE9T6Z4BG1ni7JI2+ 9Smm9p87q9kMg1Z0gpPt6nqi7pEAhtXp9NSrSBCHQHE7w2BNil6Nk5BTnRkLwABX KhGC/K5l4v4tGGptppB7CUiP5Iyi/ddBHhPjY+CLnDnSbpWj4QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFygI5ZWiTnc1xjtUW25cQNNdnGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjI1 MzlkYi0zOTY1LTRiZjEtYmFlZi1iN2Y4NWNhOTY3YmQvY2IyNTM5ZGItMzk2NS00 YmYxLWJhZWYtYjdmODVjYTk2N2JkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2IyNTM5ZGItMzk2NS00YmYxLWJh ZWYtYjdmODVjYTk2N2JkL2NiMjUzOWRiLTM5NjUtNGJmMS1iYWVmLWI3Zjg1Y2E5 NjdiZC5jcmwwHwYDVR0jBBgwFoAUNcc8ibVj/8TqsdoJdunv7Ru/JukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjI1MzlkYi0zOTY1LTRiZjEtYmFlZi1iN2Y4 NWNhOTY3YmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOSkOK2jZqaOArqBya8f+Z lk9H3MgVr6mdk5nnC4YqcNjRNoV1XnYzwcbSHrnMV18vM/duoOf1JVvYe5WhYWsx qoi1lkJcSIZx8B8KC8twYY+5PjoTheiF3bNOzOuCWbB4R13XeBcXWme0NtdwD3Ea 5f7byFXrtGTBA+Ppw4LnsFNGZvgIZGuyHUocCOKsFdGwppoivmVdDLPoBo9l749y 9NaL9RfbGwBIwWc0Ydaf5SVhlZ/Y0T5RoChgQokM8yoG3OCdXk6Q3zSe/kBaDmqA BHDZFT59WDHTUXkvHYJ4lIyOZ0L4ZnqkdBWbtwNaBoFmhaR5srpmvtvXcLm79vUx -----END CERTIFICATE-----Generated at Fri Dec 19 20:23:19 2025 by rpki-client