This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft File: d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft (raw, json) Hash identifier: aMYjoa9W0EKze3LxviWG5X+0U1py4U1OLhW7QCfR+ng= Subject key identifier: 2D:FB:04:6D:CF:91:6C:D9:FB:F9:FA:DA:65:1F:0D:1F:EF:82:F8:51 Authority key identifier: 79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A Certificate issuer: /CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea Certificate serial: 010D0C9F4328584C3C759AD5EE8157DF30FF1980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft Manifest number: 010D0C9F4328584C0D030050911FE3D04B60D112 Signing time: Fri 19 Dec 2025 07:00:03 +0000 Manifest this update: Fri 19 Dec 2025 07:00:03 +0000 Manifest next update: Sun 21 Dec 2025 07:00:00 +0000 Files and hashes: 1: 513386d3-3a25-374a-bbaa-20d7c2d1043b.roa (hash: tCBx+nC1zIwNsPyuc2cehHAuY9KiPJbMJ3pTT51fnUM=) 2: c29da368-12a4-3190-8fb2-2391e3134074.roa (hash: fDn4Vh5MQIVnXcJ5JpbFyMvj1DF587Srpt7faTRH6n4=) 3: d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl (hash: lcUm46dkI7otd/otRMB5+9gRgaL1PKlc1aj7YlP816A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3c:75:9a:d5:ee:81:57:df:30:ff:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea Validity Not Before: Dec 19 07:00:03 2025 GMT Not After : Dec 21 07:00:00 2025 GMT Subject: CN=7a17d3ca-73f1-4072-8c60-18d2b9a36e46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:3f:34:db:72:02:ae:92:d8:83:0a:40:fd:59: dd:d6:ba:1f:5e:2d:fc:0e:f7:a9:a8:20:24:64:8d: 3d:d0:b2:5e:d7:97:e6:c6:3e:e6:45:69:3d:e3:ac: 05:0f:83:45:5a:f9:89:f4:54:a2:f3:43:1b:51:40: 1a:a1:02:43:4c:8c:0f:7c:53:88:84:88:96:3b:4a: 87:9c:72:c4:c5:45:73:89:22:04:f1:43:a1:41:99: 32:3f:79:2d:56:0c:dd:be:f6:a1:55:3b:c8:86:28: c8:24:8b:a2:64:54:18:04:19:81:e4:7e:b1:93:6e: a9:6b:a1:8a:4b:3e:5d:58:b6:cb:ac:18:29:13:f0: ce:59:9c:d4:6d:b6:62:68:9f:f5:b7:e7:60:cf:af: 56:40:47:6d:0d:b9:16:c7:1f:e5:5a:ff:ab:15:07: eb:30:0f:79:db:48:48:91:22:95:a5:99:2d:4a:1e: 51:74:7f:92:2c:96:7a:74:d9:f0:23:e4:ca:a4:14: 1c:09:75:a3:56:d4:52:6b:16:a4:30:c1:da:75:ad: 31:df:e6:31:a3:ad:e4:9c:bb:7a:cd:d8:2f:ad:f4: 68:fa:49:dd:f5:03:86:c8:c2:ca:05:2f:dc:29:b9: 1f:66:f6:79:88:d8:b4:2c:4d:2a:ef:ef:96:5c:14: fc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FB:04:6D:CF:91:6C:D9:FB:F9:FA:DA:65:1F:0D:1F:EF:82:F8:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl X509v3 Authority Key Identifier: keyid:79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a3:da:a8:57:7b:3c:bb:df:36:8c:e8:bf:f4:22:aa:78:38: 3a:b5:85:1d:64:97:18:c6:29:76:89:29:29:d3:19:6f:e8:9c: 27:50:bb:ed:21:82:73:27:fa:91:f1:a7:25:21:cb:4c:ec:51: fd:21:b6:8b:39:7d:84:4a:5b:c2:50:74:11:58:0d:64:0f:68: 52:bb:a7:b4:64:a6:a8:eb:94:03:1f:e4:cd:cf:c3:65:4f:46: a3:fb:46:f8:6d:e0:0e:d3:49:40:20:73:f8:49:d6:2f:66:97: 42:35:db:e0:6a:6b:a4:3a:cb:35:38:10:0b:20:7b:56:7c:8d: c5:a2:bc:66:2f:90:66:a6:c0:3a:cf:00:de:e0:00:bc:41:b5: d8:23:bd:4c:f7:5a:a8:c4:b0:c9:f5:a7:73:c1:44:85:f6:26: a7:af:da:ac:9e:15:e9:23:d9:c6:fd:e6:d8:47:3c:21:36:51: 27:e8:b8:8d:30:53:f7:1e:66:17:61:54:32:50:54:3d:0b:de: c1:78:2d:f2:8b:69:a7:c0:3f:b4:57:93:08:c3:81:8a:30:08: ab:a5:c4:a8:6d:ce:59:44:cd:b7:b4:f9:9e:c9:df:a7:10:d9: 85:98:c9:ff:70:ee:34:55:6c:b3:87:0e:2c:02:ed:e9:e9:1f: 99:1f:c7:32 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw8dZrV7oFX3zD/GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRmYTE3MmUtMjc3OS00ODc4LThiZDMtMWI5MmQ3YTE4 Y2VhMB4XDTI1MTIxOTA3MDAwM1oXDTI1MTIyMTA3MDAwMFowLzEtMCsGA1UEAxMk N2ExN2QzY2EtNzNmMS00MDcyLThjNjAtMThkMmI5YTM2ZTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD8023ICrpLYgwpA/Vnd1rofXi38DvepqCAk ZI090LJe15fmxj7mRWk946wFD4NFWvmJ9FSi80MbUUAaoQJDTIwPfFOIhIiWO0qH nHLExUVziSIE8UOhQZkyP3ktVgzdvvahVTvIhijIJIuiZFQYBBmB5H6xk26pa6GK Sz5dWLbLrBgpE/DOWZzUbbZiaJ/1t+dgz69WQEdtDbkWxx/lWv+rFQfrMA9520hI kSKVpZktSh5RdH+SLJZ6dNnwI+TKpBQcCXWjVtRSaxakMMHada0x3+Yxo63knLt6 zdgvrfRo+knd9QOGyMLKBS/cKbkfZvZ5iNi0LE0q7++WXBT8EwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC37BG3PkWzZ+/n62mUfDR/vgvhRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNGZh MTcyZS0yNzc5LTQ4NzgtOGJkMy0xYjkyZDdhMThjZWEvZDRmYTE3MmUtMjc3OS00 ODc4LThiZDMtMWI5MmQ3YTE4Y2VhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDRmYTE3MmUtMjc3OS00ODc4LThi ZDMtMWI5MmQ3YTE4Y2VhL2Q0ZmExNzJlLTI3NzktNDg3OC04YmQzLTFiOTJkN2Ex OGNlYS5jcmwwHwYDVR0jBBgwFoAUec1OoZNMD8fpOu7iM/H7qRM+r3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNGZhMTcyZS0yNzc5LTQ4NzgtOGJkMy0xYjky ZDdhMThjZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGo9qoV3s8u982jOi/9CKq eDg6tYUdZJcYxil2iSkp0xlv6JwnULvtIYJzJ/qR8aclIctM7FH9IbaLOX2ESlvC UHQRWA1kD2hSu6e0ZKao65QDH+TNz8NlT0aj+0b4beAO00lAIHP4SdYvZpdCNdvg amukOss1OBALIHtWfI3ForxmL5BmpsA6zwDe4AC8QbXYI71M91qoxLDJ9adzwUSF 9ianr9qsnhXpI9nG/ebYRzwhNlEn6LiNMFP3HmYXYVQyUFQ9C97BeC3yi2mnwD+0 V5MIw4GKMAirpcSobc5ZRM23tPmeyd+nENmFmMn/cO40VWyzhw4sAu3p6R+ZH8cy -----END CERTIFICATE-----Generated at Fri Dec 19 20:25:02 2025 by rpki-client