This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft File: 9b502c27-b722-427c-af11-f9048a06a1a5.mft (raw, json) Hash identifier: w7C5bLUrnv/TuT1cR0QXuNTg/LSe2jttL2qdZ6Vzstw= Subject key identifier: 6E:57:02:3A:48:53:F7:C4:4D:77:AE:DF:F7:1E:44:D3:7E:C1:36:4A Authority key identifier: 96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 Certificate issuer: /CN=9b502c27-b722-427c-af11-f9048a06a1a5 Certificate serial: 010D0C9F4328584C4087EC0F111FD1A2321A4290 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft Manifest number: 010D0C9F432858447CB9F8DE747F005B745092EA Signing time: Sat 20 Dec 2025 18:00:08 +0000 Manifest this update: Sat 20 Dec 2025 18:00:08 +0000 Manifest next update: Tue 23 Dec 2025 18:00:00 +0000 Files and hashes: 1: 36413b25-1d6c-34fc-a218-245b7e7991ae.roa (hash: 0De+DiHaI86UjMjeuGb+FH010PU+caW3C3ds1WOTEJ0=) 2: 9b502c27-b722-427c-af11-f9048a06a1a5.crl (hash: yRl30XzRS6G7b8wqWoza7D5tkVd0zAcDOROhcQwxD2w=) 3: 9d6428ca-458c-35b1-b04a-f4c37e354a5a.roa (hash: 3opUABWZzwRpxvwQXR6bbi7nQ9jr96znraEWB0rUW9s=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:87:ec:0f:11:1f:d1:a2:32:1a:42:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b502c27-b722-427c-af11-f9048a06a1a5 Validity Not Before: Dec 20 18:00:08 2025 GMT Not After : Dec 23 18:00:00 2025 GMT Subject: CN=7ef3343d-57d4-438a-92a8-7394b1d18a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4a:89:55:f6:6c:df:89:cb:8d:21:49:0f:7b: b1:df:36:df:9f:03:7b:e1:b0:e0:61:5d:e1:a7:6a: d4:ff:d7:0d:ad:18:a9:c1:20:cc:a8:2e:ff:75:6b: c3:2d:2f:62:05:ae:51:d2:1b:df:28:16:e2:45:4a: cf:14:42:1f:d7:e4:e1:86:f3:a8:8c:58:a7:db:f4: c2:7b:03:69:3f:f0:56:2b:c6:5d:60:bf:cf:7c:ed: 49:0d:0f:d9:49:01:98:38:42:a0:a2:c1:14:35:38: 60:0e:03:44:22:20:04:95:37:ab:1b:cd:9f:58:e8: a1:6c:94:ef:cc:33:3e:88:ef:40:1e:18:c7:d0:48: f0:0a:2c:3f:27:fe:27:16:84:c1:fb:32:41:71:f8: 4c:cb:af:e8:5c:08:9f:ad:b6:93:04:ab:fe:af:0a: 25:6b:4e:59:5b:cc:50:57:95:e1:b0:25:dc:3f:d0: 58:81:de:9b:21:82:20:77:0f:5b:ee:34:d6:a2:92: ee:54:6c:c7:e1:66:57:50:49:98:7f:f2:42:db:73: 05:39:e2:46:f5:0b:1b:48:f8:80:eb:13:b3:79:3b: ac:23:60:57:97:76:f7:18:0d:28:df:dd:35:72:25: 37:d5:60:80:a0:83:c8:05:1d:73:4d:15:a9:da:78: a0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:57:02:3A:48:53:F7:C4:4D:77:AE:DF:F7:1E:44:D3:7E:C1:36:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5/9b502c27-b722-427c-af11-f9048a06a1a5.crl X509v3 Authority Key Identifier: keyid:96:08:82:21:79:62:80:AC:80:02:9B:E4:86:F6:AB:C9:64:1A:F2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9b502c27-b722-427c-af11-f9048a06a1a5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:81:1d:37:7a:eb:28:31:cb:4c:c6:ed:cf:44:1b:dd:2a:1d: a4:ec:5e:fb:c9:2b:0b:bf:c3:35:63:e6:56:be:0a:d6:a7:63: f1:db:58:a3:1f:36:3c:90:34:03:09:d6:92:33:7c:52:88:b0: 08:22:78:17:fb:ba:fd:6c:9b:b1:1f:ec:43:6a:12:88:8d:7c: 57:43:b0:05:ef:80:e5:e1:89:48:72:73:ee:eb:d5:c4:88:ba: 04:c3:93:80:6b:2c:c7:ff:29:89:59:c4:18:2e:09:56:87:fc: d5:48:06:39:65:df:14:8a:e1:50:ac:68:56:b8:40:7a:46:63: 94:ea:40:60:7b:9e:26:6a:11:5a:c7:6e:18:28:98:45:3f:de: 74:20:d3:72:c3:6d:47:d0:45:76:68:3b:77:70:96:3e:af:87: ff:77:77:bd:d9:27:de:48:eb:a5:0b:df:79:48:63:d2:b8:b0: 37:40:a6:c3:ff:66:ed:8e:09:2b:ed:f4:24:59:44:97:21:de: 31:0e:da:38:91:ac:7f:fd:c8:c2:83:9f:a3:f9:a9:f5:1e:db: 07:52:ed:d2:97:91:a9:f9:0b:f0:e2:db:76:18:ca:e0:53:c2: 71:d0:db:44:ba:0c:19:00:38:ef:93:45:3b:53:8b:26:13:e5: 2f:b7:5e:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExAh+wPER/RojIaQpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWI1MDJjMjctYjcyMi00MjdjLWFmMTEtZjkwNDhhMDZh MWE1MB4XDTI1MTIyMDE4MDAwOFoXDTI1MTIyMzE4MDAwMFowLzEtMCsGA1UEAxMk N2VmMzM0M2QtNTdkNC00MzhhLTkyYTgtNzM5NGIxZDE4YTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEqJVfZs34nLjSFJD3ux3zbfnwN74bDgYV3h p2rU/9cNrRipwSDMqC7/dWvDLS9iBa5R0hvfKBbiRUrPFEIf1+ThhvOojFin2/TC ewNpP/BWK8ZdYL/PfO1JDQ/ZSQGYOEKgosEUNThgDgNEIiAElTerG82fWOihbJTv zDM+iO9AHhjH0EjwCiw/J/4nFoTB+zJBcfhMy6/oXAifrbaTBKv+rwola05ZW8xQ V5XhsCXcP9BYgd6bIYIgdw9b7jTWopLuVGzH4WZXUEmYf/JC23MFOeJG9QsbSPiA 6xOzeTusI2BXl3b3GA0o3901ciU31WCAoIPIBR1zTRWp2nigUQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG5XAjpIU/fETXeu3/ceRNN+wTZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUw MmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0OGEwNmExYTUvOWI1MDJjMjctYjcyMi00 MjdjLWFmMTEtZjkwNDhhMDZhMWE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWI1MDJjMjctYjcyMi00MjdjLWFm MTEtZjkwNDhhMDZhMWE1LzliNTAyYzI3LWI3MjItNDI3Yy1hZjExLWY5MDQ4YTA2 YTFhNS5jcmwwHwYDVR0jBBgwFoAUlgiCIXligKyAApvkhvaryWQa8lIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85YjUwMmMyNy1iNzIyLTQyN2MtYWYxMS1mOTA0 OGEwNmExYTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAugR03eusoMctMxu3PRBvd Kh2k7F77ySsLv8M1Y+ZWvgrWp2Px21ijHzY8kDQDCdaSM3xSiLAIIngX+7r9bJux H+xDahKIjXxXQ7AF74Dl4YlIcnPu69XEiLoEw5OAayzH/ymJWcQYLglWh/zVSAY5 Zd8UiuFQrGhWuEB6RmOU6kBge54mahFax24YKJhFP950INNyw21H0EV2aDt3cJY+ r4f/d3e92SfeSOulC995SGPSuLA3QKbD/2btjgkr7fQkWUSXId4xDto4kax//cjC g5+j+an1HtsHUu3Sl5Gp+Qvw4tt2GMrgU8Jx0NtEugwZADjvk0U7U4smE+Uvt15T -----END CERTIFICATE-----Generated at Sun Dec 21 11:05:17 2025 by rpki-client