This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft File: 25b2aa03-de5a-47a9-a381-cc2b27451c28.mft (raw, json) Hash identifier: K2tZGtKUq2h1Ttj2IQnjCgEfuYIV1ul5yvRQDT5Mf5k= Subject key identifier: 72:97:64:A7:FF:32:05:BD:DE:A2:94:D4:C2:76:48:BC:26:22:27:55 Authority key identifier: 5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E Certificate issuer: /CN=25b2aa03-de5a-47a9-a381-cc2b27451c28 Certificate serial: 010D0C9F4328584C431708878EB05CDB504C5600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft Manifest number: 010D0C9F43285843BC01F0103BDDB930A27E1A34 Signing time: Sun 21 Dec 2025 16:00:09 +0000 Manifest this update: Sun 21 Dec 2025 16:00:09 +0000 Manifest next update: Wed 24 Dec 2025 16:00:00 +0000 Files and hashes: 1: 25b2aa03-de5a-47a9-a381-cc2b27451c28.crl (hash: EkLqOdL+cQi9PKfiTnWo0dqA0D+1MGmIA/MLXgODL34=) 2: b08285ee-0972-329c-81d0-7964b995c67b.roa (hash: Gp/xuhFnn94T8jz9k4unHewk6THCy3G9iSacbEGWzmY=) 3: e0a9c51c-a0ed-38fc-8635-4f78345b9832.roa (hash: FwAkriZq38B+cJld0bfU1bji0/ojznL0Toxkr28RwFY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:43:17:08:87:8e:b0:5c:db:50:4c:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25b2aa03-de5a-47a9-a381-cc2b27451c28 Validity Not Before: Dec 21 16:00:09 2025 GMT Not After : Dec 24 16:00:00 2025 GMT Subject: CN=b40ee462-0a0a-448a-9099-4e30a8dbd788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:78:00:5e:e9:ec:84:8b:c8:89:91:ce:86:e3: 86:17:9a:dd:4c:5c:a2:3e:e6:d3:9b:86:86:10:de: 34:50:be:bf:eb:34:54:41:da:26:2b:a1:1c:8a:51: c0:6f:07:95:7e:4f:56:44:53:20:a7:ed:8c:34:6a: 53:e9:0b:f7:8f:68:d4:7a:5f:9d:5c:28:1a:70:ef: b8:3c:29:47:ce:6f:ed:b4:29:b8:b7:dd:94:ac:32: b0:64:df:57:00:11:4b:a8:b6:42:c8:a7:7b:ed:5f: c6:92:ef:7e:7d:96:20:a1:ca:50:75:9f:62:ce:57: 48:a5:4a:55:06:e8:b9:38:ed:21:3c:c9:73:93:df: 4e:5f:1a:b0:35:97:0d:e9:72:32:96:e9:d8:c1:7d: fe:6d:3e:ad:bb:60:1b:17:0b:81:7f:69:13:46:0e: f4:65:42:f8:37:5b:58:8e:ef:48:3d:f5:12:cf:9d: 78:3e:9b:30:07:ac:ca:38:c8:b7:48:ba:59:e6:28: 2b:34:01:6e:0f:f9:d0:60:b8:7a:95:86:db:56:6d: 75:74:0c:ed:40:1c:f1:7b:c7:a0:89:a3:49:2f:2d: 94:f0:20:58:5d:0f:05:76:0b:a8:54:aa:a5:72:89: 5a:de:da:42:8f:6d:6a:54:bc:1a:bb:b1:b9:fe:ed: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:97:64:A7:FF:32:05:BD:DE:A2:94:D4:C2:76:48:BC:26:22:27:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28/25b2aa03-de5a-47a9-a381-cc2b27451c28.crl X509v3 Authority Key Identifier: keyid:5B:0B:DB:7D:FA:63:5C:11:D0:D8:3A:BB:9D:F3:35:9E:BE:A5:2B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/25b2aa03-de5a-47a9-a381-cc2b27451c28.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:cf:4e:fe:a5:0d:e7:11:79:e7:72:72:21:15:66:f3:5d:b8: 26:81:a5:a7:67:0d:f3:93:38:18:13:93:b5:68:93:96:7f:2d: 4a:e5:35:bc:8d:a3:c6:cb:60:e6:96:be:b8:f7:8d:46:af:e0: 01:0f:c0:c1:a7:3e:4f:b3:14:c9:f0:1c:fa:75:14:a6:5c:2a: 8c:70:54:92:0e:9a:68:78:dc:b0:20:44:e5:a4:fe:19:d5:42: 1d:df:9a:19:1b:07:13:14:88:3c:e5:54:01:b8:4a:62:eb:72: 70:d1:a1:32:ee:95:a5:94:25:fe:be:80:c4:dc:4c:2f:86:20: 52:4b:7f:eb:da:ca:e7:ce:4a:65:b1:35:a8:ac:78:15:0a:62: 51:a2:17:5c:de:fa:1c:c6:3f:7c:26:fa:b6:84:15:6f:d4:28: 41:19:9e:13:1e:c3:8e:b9:e9:18:3d:68:05:cc:a3:b9:81:6c: 01:35:9b:ce:c0:ae:f3:f5:f4:27:5d:36:56:3c:28:c2:69:10: 54:4f:b2:48:4e:08:b3:da:51:ba:98:71:54:9d:b9:e5:96:1b: 89:42:99:19:2b:f0:40:fe:78:75:9c:a0:ab:27:fd:7a:ac:6d: 60:ff:a3:3b:01:07:d2:ad:74:e5:5f:b7:24:7e:cc:cb:07:cb: a4:6c:0a:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExDFwiHjrBc21BMVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjViMmFhMDMtZGU1YS00N2E5LWEzODEtY2MyYjI3NDUx YzI4MB4XDTI1MTIyMTE2MDAwOVoXDTI1MTIyNDE2MDAwMFowLzEtMCsGA1UEAxMk YjQwZWU0NjItMGEwYS00NDhhLTkwOTktNGUzMGE4ZGJkNzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzngAXunshIvIiZHOhuOGF5rdTFyiPubTm4aG EN40UL6/6zRUQdomK6EcilHAbweVfk9WRFMgp+2MNGpT6Qv3j2jUel+dXCgacO+4 PClHzm/ttCm4t92UrDKwZN9XABFLqLZCyKd77V/Gku9+fZYgocpQdZ9izldIpUpV Bui5OO0hPMlzk99OXxqwNZcN6XIylunYwX3+bT6tu2AbFwuBf2kTRg70ZUL4N1tY ju9IPfUSz514PpswB6zKOMi3SLpZ5igrNAFuD/nQYLh6lYbbVm11dAztQBzxe8eg iaNJLy2U8CBYXQ8FdguoVKqlcola3tpCj21qVLwau7G5/u0wswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHKXZKf/MgW93qKU1MJ2SLwmIidVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIy YWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJiMjc0NTFjMjgvMjViMmFhMDMtZGU1YS00 N2E5LWEzODEtY2MyYjI3NDUxYzI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjViMmFhMDMtZGU1YS00N2E5LWEz ODEtY2MyYjI3NDUxYzI4LzI1YjJhYTAzLWRlNWEtNDdhOS1hMzgxLWNjMmIyNzQ1 MWMyOC5jcmwwHwYDVR0jBBgwFoAUWwvbffpjXBHQ2Dq7nfM1nr6lKw4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yNWIyYWEwMy1kZTVhLTQ3YTktYTM4MS1jYzJi Mjc0NTFjMjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFz07+pQ3nEXnncnIhFWbz XbgmgaWnZw3zkzgYE5O1aJOWfy1K5TW8jaPGy2Dmlr64941Gr+ABD8DBpz5PsxTJ 8Bz6dRSmXCqMcFSSDppoeNywIETlpP4Z1UId35oZGwcTFIg85VQBuEpi63Jw0aEy 7pWllCX+voDE3EwvhiBSS3/r2srnzkplsTWorHgVCmJRohdc3vocxj98Jvq2hBVv 1ChBGZ4THsOOuekYPWgFzKO5gWwBNZvOwK7z9fQnXTZWPCjCaRBUT7JITgiz2lG6 mHFUnbnllhuJQpkZK/BA/nh1nKCrJ/16rG1g/6M7AQfSrXTlX7ckfszLB8ukbApw -----END CERTIFICATE-----Generated at Mon Dec 22 02:34:46 2025 by rpki-client