This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft File: 0ec17157-66de-4aab-85e7-28af4de430e2.mft (raw, json) Hash identifier: wS8zXswBOfg9rWxXJ4TrT+v5r6wwLmHNg1ZiMDpqqBA= Subject key identifier: 43:A6:64:3B:5E:D3:F6:91:EF:AA:3D:30:B4:07:DC:18:0D:77:10:6B Authority key identifier: CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 Certificate issuer: /CN=0ec17157-66de-4aab-85e7-28af4de430e2 Certificate serial: 010D0C9F4328584C3DBD2B4089EDDE063AD21600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft Manifest number: 010D0C9F43285843A8B9A7EBB23BFBB59BA71626 Signing time: Fri 19 Dec 2025 18:00:03 +0000 Manifest this update: Fri 19 Dec 2025 18:00:03 +0000 Manifest next update: Sun 21 Dec 2025 18:00:00 +0000 Files and hashes: 1: 0ec17157-66de-4aab-85e7-28af4de430e2.crl (hash: kX3EpG/8nKL47wI11Pjtxiu5OM6XiKv8Q25nu0HpH8w=) 2: d90d8aba2a75827c4f13baf86f8b33b972e41e3934d97bc89a.cer (hash: Hn3prJrqHNDvNCFR4gMuVawpaxQFzcCtOIK4vGwbc0U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:bd:2b:40:89:ed:de:06:3a:d2:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec17157-66de-4aab-85e7-28af4de430e2 Validity Not Before: Dec 19 18:00:03 2025 GMT Not After : Dec 21 18:00:00 2025 GMT Subject: CN=08af1b22-6651-4ad5-934c-1cdaa9e8ee94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d7:55:dc:80:83:3b:88:4f:44:02:83:5f:e2: ac:5d:49:94:c3:c9:28:8a:74:7a:d7:fd:ea:1d:88: 0c:1d:95:78:b2:0d:47:10:bd:21:1f:a5:bb:66:61: 5a:d7:1d:6c:6d:36:b6:b0:8a:69:a5:d5:da:74:32: b4:77:ce:f3:64:f8:7c:99:8f:77:2b:2f:cf:ac:af: 73:8d:86:c4:59:62:08:d7:ad:ed:74:ae:9c:f9:cf: 54:af:bc:91:bc:c0:0c:61:70:cd:55:ec:fa:24:d0: fd:84:0f:ec:cc:08:97:ed:9e:eb:64:ea:5b:d2:8b: 63:cf:da:3e:8f:3b:7b:1c:1a:29:67:ad:4a:db:e2: bf:61:af:45:c4:c6:0e:00:83:13:4b:61:73:64:af: 37:b1:0f:66:81:b8:8d:9e:50:34:e6:64:d8:d2:78: d5:80:a3:1a:fb:13:76:83:23:26:80:8e:d0:89:cd: c0:02:a6:44:d6:bf:07:d0:bc:af:ed:06:6a:24:c5: 16:84:d7:c4:b5:72:1d:21:94:b3:2c:ca:6c:84:41: fe:6c:4d:dd:c3:c8:2f:6a:54:02:3f:53:bf:8f:49: 0f:0b:e0:83:f3:cc:8b:4f:8d:da:50:ff:b4:7a:1e: d9:58:81:04:dc:6c:2e:0d:ad:00:d4:80:cc:34:00: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A6:64:3B:5E:D3:F6:91:EF:AA:3D:30:B4:07:DC:18:0D:77:10:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl X509v3 Authority Key Identifier: keyid:CB:54:7D:BF:24:87:A5:71:B2:B0:C7:88:96:99:E7:39:20:3F:72:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b9:51:4f:84:73:5c:e9:65:9c:8d:ea:2f:4c:62:00:ae:1b: ea:74:67:31:4c:a9:16:2b:87:1c:d9:0c:ca:95:23:ba:18:91: 98:23:bf:be:e1:d1:5b:0b:a4:a2:4e:73:2e:02:6d:35:8f:e4: 56:7d:87:ac:f9:f9:29:bc:aa:ea:7c:8c:7d:32:76:cb:5c:b0: 52:20:54:ef:db:95:45:b4:01:e9:50:ed:9b:1b:55:fb:42:35: d2:72:d6:4d:30:69:e4:6a:ef:e1:b4:56:b1:e2:44:e2:4e:c4: f7:93:e7:ee:bc:a5:09:47:2b:da:a7:d2:56:46:01:6d:fb:2d: a6:f5:d1:7d:8f:0e:6a:c5:1a:8b:70:03:24:46:24:db:89:0b: c1:b6:63:ac:4c:8f:b6:60:49:de:3b:82:8f:9f:98:82:eb:d0: 20:33:4d:13:fa:13:cb:5a:34:2f:ef:e4:3f:82:38:3a:f6:31: 9b:a5:8d:13:c0:f9:56:8b:73:08:c0:28:1a:c1:3e:00:d6:bd: c2:37:96:26:c5:97:aa:df:c1:d9:17:47:d5:34:93:2b:b4:d7: fc:7f:19:67:27:ad:83:3e:36:fd:b3:9e:f7:b8:1a:d4:25:2b: ca:65:5a:50:2c:68:fd:20:79:2f:82:91:3a:12:56:d8:87:32: 1b:e2:ae:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw9vStAie3eBjrSFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVjMTcxNTctNjZkZS00YWFiLTg1ZTctMjhhZjRkZTQz MGUyMB4XDTI1MTIxOTE4MDAwM1oXDTI1MTIyMTE4MDAwMFowLzEtMCsGA1UEAxMk MDhhZjFiMjItNjY1MS00YWQ1LTkzNGMtMWNkYWE5ZThlZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNdV3ICDO4hPRAKDX+KsXUmUw8koinR61/3q HYgMHZV4sg1HEL0hH6W7ZmFa1x1sbTa2sIpppdXadDK0d87zZPh8mY93Ky/PrK9z jYbEWWII163tdK6c+c9Ur7yRvMAMYXDNVez6JND9hA/szAiX7Z7rZOpb0otjz9o+ jzt7HBopZ61K2+K/Ya9FxMYOAIMTS2FzZK83sQ9mgbiNnlA05mTY0njVgKMa+xN2 gyMmgI7Qic3AAqZE1r8H0Lyv7QZqJMUWhNfEtXIdIZSzLMpshEH+bE3dw8gvalQC P1O/j0kPC+CD88yLT43aUP+0eh7ZWIEE3GwuDa0A1IDMNACbXwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEOmZDte0/aR76o9MLQH3BgNdxBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMx NzE1Ny02NmRlLTRhYWItODVlNy0yOGFmNGRlNDMwZTIvMGVjMTcxNTctNjZkZS00 YWFiLTg1ZTctMjhhZjRkZTQzMGUyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGVjMTcxNTctNjZkZS00YWFiLTg1 ZTctMjhhZjRkZTQzMGUyLzBlYzE3MTU3LTY2ZGUtNGFhYi04NWU3LTI4YWY0ZGU0 MzBlMi5jcmwwHwYDVR0jBBgwFoAUy1R9vySHpXGysMeIlpnnOSA/cmMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZWMxNzE1Ny02NmRlLTRhYWItODVlNy0yOGFm NGRlNDMwZTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkuVFPhHNc6WWcjeovTGIA rhvqdGcxTKkWK4cc2QzKlSO6GJGYI7++4dFbC6SiTnMuAm01j+RWfYes+fkpvKrq fIx9MnbLXLBSIFTv25VFtAHpUO2bG1X7QjXSctZNMGnkau/htFax4kTiTsT3k+fu vKUJRyvap9JWRgFt+y2m9dF9jw5qxRqLcAMkRiTbiQvBtmOsTI+2YEneO4KPn5iC 69AgM00T+hPLWjQv7+Q/gjg69jGbpY0TwPlWi3MIwCgawT4A1r3CN5YmxZeq38HZ F0fVNJMrtNf8fxlnJ62DPjb9s573uBrUJSvKZVpQLGj9IHkvgpE6ElbYhzIb4q6L -----END CERTIFICATE-----Generated at Sat Dec 20 08:21:31 2025 by rpki-client