This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft File: 68de9da0-8f7e-4231-9340-c37abafc3714.mft (raw, json) Hash identifier: j3sl6vZlxGXbUegqnv93YNYgVktP+mp/CN+3LOhDTBQ= Subject key identifier: 51:9B:6E:7A:32:96:29:36:C1:88:CA:C0:F2:88:18:E8:E3:23:6F:AF Authority key identifier: DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F Certificate issuer: /CN=68de9da0-8f7e-4231-9340-c37abafc3714 Certificate serial: 010D0C9F4328584C3FB7689EE31DF524E4FA7B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft Manifest number: 010D0C9F4328584481A6987F83956D07F8B04057 Signing time: Sat 20 Dec 2025 11:00:03 +0000 Manifest this update: Sat 20 Dec 2025 11:00:03 +0000 Manifest next update: Tue 23 Dec 2025 11:00:00 +0000 Files and hashes: 1: 38cab4fd-bc39-3dd6-ab6d-05fd46e3619c.roa (hash: Vu2of8xwC8FnG/zPEmFWx5d3Ef455kBt0cc7AI1j7zY=) 2: 68de9da0-8f7e-4231-9340-c37abafc3714.crl (hash: 7ZDIS0rzsle/hYnTI9zrp/APOZwyJ4MtHx5whoXRxJg=) 3: 8a0ea394-fc28-3c94-a59e-c8b7102e6f95.roa (hash: RAqb4hauLAaiIWe4+ImQlZ/zf4+W6nvBDJgPe2FDoKY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3f:b7:68:9e:e3:1d:f5:24:e4:fa:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68de9da0-8f7e-4231-9340-c37abafc3714 Validity Not Before: Dec 20 11:00:03 2025 GMT Not After : Dec 23 11:00:00 2025 GMT Subject: CN=5b484eaf-fedf-468a-9832-9b546e75b395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:48:e2:5f:54:7d:ce:ba:eb:9f:ef:bd:e3:0e: b1:80:b8:ac:88:92:88:2e:72:ee:c8:f9:87:fe:35: 2e:72:24:55:88:83:92:b4:98:64:00:30:6a:d5:bd: e6:9b:7a:5d:90:a6:f3:00:bf:a3:d1:3a:ad:d0:37: 58:4f:4f:8a:47:60:d6:8e:9b:cd:83:ac:7a:de:10: 3b:e6:21:24:e4:df:92:83:b8:7b:89:70:ef:f8:fb: 03:2b:b8:21:29:0d:f5:20:c4:42:54:ef:bb:f7:d4: c0:a2:24:3c:b9:b7:f7:9e:a9:05:d2:44:d4:50:6e: 2c:32:87:a2:ad:26:16:65:c4:9f:bf:30:62:7c:f4: 2c:b0:9f:d3:23:40:6c:fc:41:72:80:2e:c2:14:e1: cd:28:00:e1:bc:82:03:0f:75:99:0a:dd:89:c1:2f: 8b:dc:85:3c:ed:fd:6a:28:8f:df:2c:e3:be:27:0f: 4a:c7:4a:f7:05:c1:03:21:29:40:3e:05:1d:93:02: 9b:9a:5c:bb:9c:79:59:cc:02:a3:fe:f1:03:c2:de: 2b:28:4d:29:a2:fc:2c:22:37:3f:95:c8:44:cc:41: d2:43:12:1c:08:b2:24:29:05:b4:3d:63:3e:a8:1e: 83:73:e8:02:fd:1a:14:f0:8b:0b:3f:bf:11:52:f6: ad:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9B:6E:7A:32:96:29:36:C1:88:CA:C0:F2:88:18:E8:E3:23:6F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714/68de9da0-8f7e-4231-9340-c37abafc3714.crl X509v3 Authority Key Identifier: keyid:DC:74:DC:1B:39:F9:01:8C:99:40:40:0E:5B:12:7C:73:3A:CF:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/68de9da0-8f7e-4231-9340-c37abafc3714.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:32:55:93:18:5f:df:1e:0d:dc:54:db:6d:4f:9b:dd:b2:65: 9f:bf:a0:fe:e3:59:e6:04:f2:59:7c:e7:d2:6a:14:9c:a8:2b: ae:c0:f1:db:41:d9:f6:92:b5:89:b9:50:4c:0b:f8:7d:0c:a1: ca:79:f7:fe:04:5d:61:88:68:68:a9:f5:4b:9a:5e:c3:89:fe: d9:e9:41:72:18:b1:d9:fa:7d:c8:51:6c:ed:ac:99:b6:eb:44: 34:38:21:d2:90:39:09:0b:a4:0c:32:85:01:a8:76:20:0a:f4: 07:7b:7e:0e:cc:8b:88:a6:b4:64:52:3d:b1:0f:ee:65:c8:1e: 3a:ca:ca:73:53:e1:0e:b8:3c:31:26:43:4f:ab:76:aa:79:ab: 43:39:cf:0f:22:f1:fe:c0:e1:69:4e:b4:1b:15:44:27:b9:9f: 2e:fe:0e:88:a0:27:82:a8:18:99:13:42:0d:2b:33:a8:38:92: 71:56:35:f3:79:67:fa:d2:e6:b2:16:f6:a1:83:d9:9c:3e:da: 9c:b6:9d:e0:c8:08:1b:14:5e:ce:14:56:32:8e:5a:79:c6:8e: 1c:a3:b3:ef:2d:49:19:1d:e9:e4:62:2f:a4:47:f5:a3:32:27: 26:4b:71:69:3e:be:cf:13:6c:6c:74:b0:b1:c0:6b:bb:62:a9: 17:66:3e:ff -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw/t2ie4x31JOT6e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhkZTlkYTAtOGY3ZS00MjMxLTkzNDAtYzM3YWJhZmMz NzE0MB4XDTI1MTIyMDExMDAwM1oXDTI1MTIyMzExMDAwMFowLzEtMCsGA1UEAxMk NWI0ODRlYWYtZmVkZi00NjhhLTk4MzItOWI1NDZlNzViMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUjiX1R9zrrrn++94w6xgLisiJKILnLuyPmH /jUuciRViIOStJhkADBq1b3mm3pdkKbzAL+j0Tqt0DdYT0+KR2DWjpvNg6x63hA7 5iEk5N+Sg7h7iXDv+PsDK7ghKQ31IMRCVO+799TAoiQ8ubf3nqkF0kTUUG4sMoei rSYWZcSfvzBifPQssJ/TI0Bs/EFygC7CFOHNKADhvIIDD3WZCt2JwS+L3IU87f1q KI/fLOO+Jw9Kx0r3BcEDISlAPgUdkwKbmly7nHlZzAKj/vEDwt4rKE0povwsIjc/ lchEzEHSQxIcCLIkKQW0PWM+qB6Dc+gC/RoU8IsLP78RUvatuwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFGbbnoylik2wYjKwPKIGOjjI2+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRl OWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdhYmFmYzM3MTQvNjhkZTlkYTAtOGY3ZS00 MjMxLTkzNDAtYzM3YWJhZmMzNzE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjhkZTlkYTAtOGY3ZS00MjMxLTkz NDAtYzM3YWJhZmMzNzE0LzY4ZGU5ZGEwLThmN2UtNDIzMS05MzQwLWMzN2FiYWZj MzcxNC5jcmwwHwYDVR0jBBgwFoAU3HTcGzn5AYyZQEAOWxJ8czrP4Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82OGRlOWRhMC04ZjdlLTQyMzEtOTM0MC1jMzdh YmFmYzM3MTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9MlWTGF/fHg3cVNttT5vd smWfv6D+41nmBPJZfOfSahScqCuuwPHbQdn2krWJuVBMC/h9DKHKeff+BF1hiGho qfVLml7Dif7Z6UFyGLHZ+n3IUWztrJm260Q0OCHSkDkJC6QMMoUBqHYgCvQHe34O zIuIprRkUj2xD+5lyB46yspzU+EOuDwxJkNPq3aqeatDOc8PIvH+wOFpTrQbFUQn uZ8u/g6IoCeCqBiZE0INKzOoOJJxVjXzeWf60uayFvahg9mcPtqctp3gyAgbFF7O FFYyjlp5xo4co7PvLUkZHenkYi+kR/WjMicmS3FpPr7PE2xsdLCxwGu7YqkXZj7/ -----END CERTIFICATE-----Generated at Sat Dec 20 17:03:18 2025 by rpki-client