This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.mft File: cb8bbc7d-40a8-45a5-8a9a-95c05453c635.mft (raw, json) Hash identifier: IaGPDJBpgRqlI4odGikIQ8nH/YFy/8HR6Oeb2W2BLqc= Subject key identifier: 5A:32:EA:CB:74:DF:36:92:F9:9D:D0:A5:8E:C5:1E:E0:C8:FD:DC:12 Authority key identifier: D9:1E:B3:B5:38:2F:DD:6F:7E:EF:22:B6:0A:9C:15:26:FA:8C:A4:5F Certificate issuer: /CN=cb8bbc7d-40a8-45a5-8a9a-95c05453c635 Certificate serial: 010D0C9F4328584C3DF8C68197DB415A44879A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.mft Manifest number: 010D0C9F4328584BACCE26CA9EA838538CF24336 Signing time: Fri 19 Dec 2025 20:00:08 +0000 Manifest this update: Fri 19 Dec 2025 20:00:08 +0000 Manifest next update: Mon 22 Dec 2025 20:00:00 +0000 Files and hashes: 1: 118cd5ee-d96f-3b88-8b0c-6850ba08709b.roa (hash: 1jBZNELVcAnnlWHMipNdi67lmpm1nlpneRV5TU+FFF8=) 2: cb8bbc7d-40a8-45a5-8a9a-95c05453c635.crl (hash: BymcqdcSZfAb4+ene0Tiay5dNvbQAO5zY1CPjo5nHMg=) 3: f68f5a1a-81da-3371-99d7-e4f38db07770.roa (hash: hBrKWiLyqHobIdvPme1s+GVgH00UDksODYHGNDqQe/c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:f8:c6:81:97:db:41:5a:44:87:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb8bbc7d-40a8-45a5-8a9a-95c05453c635 Validity Not Before: Dec 19 20:00:08 2025 GMT Not After : Dec 22 20:00:00 2025 GMT Subject: CN=c304435c-e40e-446a-94ad-c7290ce3c644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2a:5c:f2:e9:76:ae:ae:06:ab:33:d3:9e:09: cc:78:01:39:66:9b:c1:82:76:3c:13:80:9a:50:70: 11:72:79:d8:db:36:fb:75:6c:37:44:63:37:4f:9a: 86:14:8d:cd:cd:71:b8:6c:26:04:46:c1:7c:cc:a5: c9:91:5b:92:17:36:52:97:ee:3b:ce:b0:bc:c8:9d: a5:0b:40:b0:2f:a3:ca:52:6c:3c:72:bc:a7:62:21: 4c:04:70:44:c5:d9:f9:6f:2a:c3:92:89:50:46:03: 16:5c:a9:b3:fb:9c:eb:0c:0b:28:33:2a:40:4f:bf: b9:2d:e6:c8:05:f5:3f:b2:22:06:41:bc:30:ea:7c: 95:d3:0f:a1:3f:82:75:7f:34:6c:99:ff:3d:6b:7d: 7a:20:de:9e:b7:28:bf:05:16:a4:7f:0e:d9:f3:ac: 1b:66:80:3f:1d:f5:6a:72:65:40:cb:4a:dd:f1:0c: 40:6e:c8:51:4e:c7:c1:1c:54:51:5b:58:88:6a:d5: 3c:35:4e:70:30:70:57:ba:80:0d:5a:30:51:c4:b4: f1:3f:a1:f5:22:02:ea:f2:39:19:21:2c:f9:b5:3e: c4:1e:4d:38:7a:84:8e:dc:84:c3:ed:9f:72:13:79: 69:cd:4d:bd:83:f9:de:d7:1d:5a:a8:d1:d2:44:42: 05:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:32:EA:CB:74:DF:36:92:F9:9D:D0:A5:8E:C5:1E:E0:C8:FD:DC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.crl X509v3 Authority Key Identifier: keyid:D9:1E:B3:B5:38:2F:DD:6F:7E:EF:22:B6:0A:9C:15:26:FA:8C:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:56:19:05:c6:9b:6b:73:c1:e5:81:8a:47:e2:86:44:20:6c: 80:4f:03:01:0f:0c:b5:69:7b:c3:68:86:2b:d6:7f:1a:7d:4e: 33:d7:b2:e3:65:a9:a1:c0:ff:af:5c:6a:aa:ee:53:4b:35:00: 7b:ab:f8:c4:bf:e5:11:6f:c6:0e:29:f6:e6:f0:06:ec:9b:ab: dc:c4:43:03:ee:73:54:5b:eb:90:7e:87:7f:97:8e:65:65:c8: 7e:05:bc:b0:8c:86:0d:e3:c4:78:4d:c9:44:64:34:bb:0f:4e: e9:0e:e3:4f:5a:62:58:5f:d4:1a:14:cd:ad:63:f6:1a:2a:7e: 4e:5f:e4:4a:25:5f:a5:92:2f:91:28:dc:91:1f:14:81:ca:ee: 43:c1:11:bc:36:9a:6d:6a:e6:56:47:17:13:36:da:63:9b:c7: 49:1c:4c:68:65:e4:22:22:c5:5f:ec:db:d6:75:67:97:48:d6: 21:32:23:fc:72:2c:da:5e:0b:6a:63:96:cb:30:0d:45:a4:7a: 06:59:d3:b6:de:55:75:3e:d9:e1:94:18:f6:2b:c6:50:6f:c0: 33:55:01:dc:b1:b8:2a:0a:df:98:dd:0f:d7:1a:01:d3:06:66: a8:00:d4:d6:8f:7a:cc:32:22:fb:3a:e2:c5:96:6e:b8:71:96: 9e:d6:4f:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw9+MaBl9tBWkSHmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I4YmJjN2QtNDBhOC00NWE1LThhOWEtOTVjMDU0NTNj NjM1MB4XDTI1MTIxOTIwMDAwOFoXDTI1MTIyMjIwMDAwMFowLzEtMCsGA1UEAxMk YzMwNDQzNWMtZTQwZS00NDZhLTk0YWQtYzcyOTBjZTNjNjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmipc8ul2rq4GqzPTngnMeAE5ZpvBgnY8E4Ca UHARcnnY2zb7dWw3RGM3T5qGFI3NzXG4bCYERsF8zKXJkVuSFzZSl+47zrC8yJ2l C0CwL6PKUmw8crynYiFMBHBExdn5byrDkolQRgMWXKmz+5zrDAsoMypAT7+5LebI BfU/siIGQbww6nyV0w+hP4J1fzRsmf89a316IN6etyi/BRakfw7Z86wbZoA/HfVq cmVAy0rd8QxAbshRTsfBHFRRW1iIatU8NU5wMHBXuoANWjBRxLTxP6H1IgLq8jkZ ISz5tT7EHk04eoSO3ITD7Z9yE3lpzU29g/ne1x1aqNHSREIFFQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFoy6st03zaS+Z3QpY7FHuDI/dwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjhi YmM3ZC00MGE4LTQ1YTUtOGE5YS05NWMwNTQ1M2M2MzUvY2I4YmJjN2QtNDBhOC00 NWE1LThhOWEtOTVjMDU0NTNjNjM1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2I4YmJjN2QtNDBhOC00NWE1LThh OWEtOTVjMDU0NTNjNjM1L2NiOGJiYzdkLTQwYTgtNDVhNS04YTlhLTk1YzA1NDUz YzYzNS5jcmwwHwYDVR0jBBgwFoAU2R6ztTgv3W9+7yK2CpwVJvqMpF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjhiYmM3ZC00MGE4LTQ1YTUtOGE5YS05NWMw NTQ1M2M2MzUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPVhkFxptrc8HlgYpH4oZE IGyATwMBDwy1aXvDaIYr1n8afU4z17LjZamhwP+vXGqq7lNLNQB7q/jEv+URb8YO Kfbm8Absm6vcxEMD7nNUW+uQfod/l45lZch+BbywjIYN48R4TclEZDS7D07pDuNP WmJYX9QaFM2tY/YaKn5OX+RKJV+lki+RKNyRHxSByu5DwRG8NpptauZWRxcTNtpj m8dJHExoZeQiIsVf7NvWdWeXSNYhMiP8cizaXgtqY5bLMA1FpHoGWdO23lV1Ptnh lBj2K8ZQb8AzVQHcsbgqCt+Y3Q/XGgHTBmaoANTWj3rMMiL7OuLFlm64cZae1k+k -----END CERTIFICATE-----Generated at Sat Dec 20 04:35:53 2025 by rpki-client