This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft File: 3e511aed-c666-436d-b4a4-947790e6c9e5.mft (raw, json) Hash identifier: L5ercStoKHs2ApE3ObbpW+YbK8cZV4BcxjiT7uDjayI= Subject key identifier: A8:DC:C8:FF:B5:E7:48:B4:CD:D9:21:E4:60:3B:B8:43:CA:E7:E3:C5 Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F4328584C4193E82DF61F75328AD84760 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft Manifest number: 010D0C9F432858442FB69E4685B850D03895F5F7 Signing time: Sun 21 Dec 2025 03:00:09 +0000 Manifest this update: Sun 21 Dec 2025 03:00:09 +0000 Manifest next update: Wed 24 Dec 2025 03:00:00 +0000 Files and hashes: 1: 2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (hash: RWYhTQAzbUWDVxGkVcCvxWZvkvfGM9+TUXuWbY1nQ7M=) 2: 3e511aed-c666-436d-b4a4-947790e6c9e5.crl (hash: cdcHpoA/pJc/fBMhSB6s9mwIJ+2Fmb0k9zbWHejH8z8=) 3: 938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (hash: abXImAg+Q4JTRrOlOmP00xtTyX6xiM74fyxjPz3bloo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:93:e8:2d:f6:1f:75:32:8a:d8:47:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Dec 21 03:00:09 2025 GMT Not After : Dec 24 03:00:00 2025 GMT Subject: CN=5dbec6ab-69aa-49a7-aa81-791c83bfc0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7c:85:47:e1:c0:02:d8:2d:a0:22:d9:68:52: 39:6b:40:16:83:a9:20:ab:18:4a:d2:80:81:c8:72: fd:76:1b:d4:65:47:e8:13:df:7e:c5:19:06:b7:9c: ea:96:75:d9:00:3a:39:15:ca:96:05:25:c4:61:f2: f0:60:1f:13:b3:06:0f:8f:7f:ad:9a:e3:31:13:69: 85:82:94:8d:0b:90:ad:fa:9d:fd:d9:db:38:06:74: e5:ac:02:69:53:4c:53:87:47:7f:ae:0f:25:1c:06: 43:7a:26:ac:4b:ec:b6:d5:cc:e4:49:2e:c0:73:1d: af:4e:ab:3a:1f:3a:be:86:41:72:6b:f3:75:f2:fb: 9e:64:88:81:fd:ac:40:55:e3:e8:13:e9:28:45:1e: 22:b8:d3:ee:03:45:74:04:ba:39:92:9c:d4:f2:5c: b3:b7:8b:17:8e:73:a9:ab:36:93:27:89:f3:a8:21: 29:a4:78:02:66:b5:e4:b5:c4:b1:f5:d8:55:ce:15: 83:16:3f:69:93:27:a4:9e:8a:f1:ab:cd:9d:81:58: 61:bd:65:7d:ab:3f:7f:da:3b:97:63:32:b4:ab:35: 02:7d:4c:05:24:28:72:05:32:d5:05:63:a8:9b:b1: 56:ae:1c:1b:1a:e7:a8:07:54:a3:d9:12:7a:0a:2a: bd:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DC:C8:FF:B5:E7:48:B4:CD:D9:21:E4:60:3B:B8:43:CA:E7:E3:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:74:8c:9f:5a:d9:28:fa:e6:bb:2f:61:9c:c0:a5:8d:74:50: 21:00:73:3e:01:09:6b:a8:32:23:b8:cc:1a:78:b6:1a:a6:78: 5e:b0:a4:92:72:08:3c:c9:ab:52:74:c4:60:cc:31:1e:65:c4: f9:ad:18:13:da:f9:18:c5:b1:e5:53:2e:d9:95:d6:86:c7:1e: 0d:7f:64:c0:03:d4:ba:12:bf:56:97:ae:49:8a:82:06:3a:af: 53:70:2e:9e:16:a4:92:35:7e:32:21:df:33:b5:8f:1b:42:06: 67:0d:a5:1e:a9:0e:20:d5:2e:4a:6d:87:01:6a:57:e2:09:c1: 9c:0d:8b:9d:dc:ff:29:0c:de:d7:81:9c:7d:2b:52:60:ca:30: db:9a:ce:22:e6:be:4e:ba:99:ff:c4:c3:b6:63:7b:d2:b2:ff: d7:b8:9d:dd:9d:b0:23:75:eb:2c:28:f3:b8:07:c3:a7:49:61: be:20:cf:b8:90:80:00:15:ea:6a:81:ce:48:bd:a0:8d:51:ec: cc:c1:f9:8f:ed:16:6d:44:5a:f5:3e:81:8e:66:1f:58:e0:d5: cf:4d:03:41:8b:20:0b:0a:ca:d2:11:2f:69:57:02:13:06:33: 9d:15:72:0a:ae:6d:3f:8a:33:af:7f:5f:e2:8b:74:87:af:88: d8:1c:cc:af -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExBk+gt9h91MorYR2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI1MTIyMTAzMDAwOVoXDTI1MTIyNDAzMDAwMFowLzEtMCsGA1UEAxMk NWRiZWM2YWItNjlhYS00OWE3LWFhODEtNzkxYzgzYmZjMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3yFR+HAAtgtoCLZaFI5a0AWg6kgqxhK0oCB yHL9dhvUZUfoE99+xRkGt5zqlnXZADo5FcqWBSXEYfLwYB8TswYPj3+tmuMxE2mF gpSNC5Ct+p392ds4BnTlrAJpU0xTh0d/rg8lHAZDeiasS+y21czkSS7Acx2vTqs6 Hzq+hkFya/N18vueZIiB/axAVePoE+koRR4iuNPuA0V0BLo5kpzU8lyzt4sXjnOp qzaTJ4nzqCEppHgCZrXktcSx9dhVzhWDFj9pkyeknorxq82dgVhhvWV9qz9/2juX YzK0qzUCfUwFJChyBTLVBWOom7FWrhwbGueoB1Sj2RJ6Ciq96wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKjcyP+150i0zdkh5GA7uEPK5+PFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvM2U1MTFhZWQtYzY2Ni00 MzZkLWI0YTQtOTQ3NzkwZTZjOWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCadIyfWtko+ua7L2GcwKWN dFAhAHM+AQlrqDIjuMwaeLYapnhesKSScgg8yatSdMRgzDEeZcT5rRgT2vkYxbHl Uy7ZldaGxx4Nf2TAA9S6Er9Wl65JioIGOq9TcC6eFqSSNX4yId8ztY8bQgZnDaUe qQ4g1S5KbYcBalfiCcGcDYud3P8pDN7XgZx9K1JgyjDbms4i5r5Oupn/xMO2Y3vS sv/XuJ3dnbAjdessKPO4B8OnSWG+IM+4kIAAFepqgc5IvaCNUezMwfmP7RZtRFr1 PoGOZh9Y4NXPTQNBiyALCsrSES9pVwITBjOdFXIKrm0/ijOvf1/ii3SHr4jYHMyv -----END CERTIFICATE-----Generated at Mon Dec 22 02:34:45 2025 by rpki-client