This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft File: a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft (raw, json) Hash identifier: v4aOWfASKm2lKJ/SMrNT0Q1cMmaismA/Ek7Kvqe2pww= Subject key identifier: 1B:8D:35:AA:C4:13:DA:5B:55:FD:EC:23:C6:89:44:01:C1:14:C3:7A Authority key identifier: 68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A Certificate issuer: /CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Certificate serial: 010D0C9F4328584C3E168EF22FD5A0F582682568 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft Manifest number: 010D0C9F43285844428AC3B86B4E57E2FE15F25E Signing time: Fri 19 Dec 2025 21:00:08 +0000 Manifest this update: Fri 19 Dec 2025 21:00:08 +0000 Manifest next update: Mon 22 Dec 2025 21:00:00 +0000 Files and hashes: 1: 9a56588a-a022-38cf-a593-5622658a6eae.roa (hash: yoWcoAp5xQMcp7yl+ESZYZtNvrQR/z8Z2C0DdQOhKKs=) 2: a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl (hash: mdBTgdmtiMg8jo0+8JVVn+MEFC5Pajz+7q+/XNF+86o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:16:8e:f2:2f:d5:a0:f5:82:68:25:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52f3b42-2c19-4141-8d8a-fa84b3d6a49e Validity Not Before: Dec 19 21:00:08 2025 GMT Not After : Dec 22 21:00:00 2025 GMT Subject: CN=739cdac1-282e-4154-bcf5-f673652ffd51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:82:48:00:1b:13:b4:dc:e0:01:f7:f1:b0:8e: 28:f2:f7:51:3d:9e:b1:9c:0c:46:08:8c:0b:60:78: a9:d5:91:5c:c6:85:69:98:47:46:a5:e5:b3:42:5b: 88:69:9c:37:73:95:66:95:36:27:ed:20:0b:f2:c4: ad:27:50:14:37:01:d3:38:a9:5d:fa:ba:5a:bd:72: b3:a3:61:c3:db:1b:38:8e:d3:96:8f:c7:8a:a2:d7: 13:7c:59:23:87:3c:92:ed:ea:63:49:11:36:e7:68: 43:1b:30:5d:bc:e5:a7:05:8c:53:53:b7:9a:e4:79: 3f:08:64:a5:a6:e1:da:27:6c:0d:20:b4:e6:4d:01: 74:bd:9a:d9:c2:cc:d6:45:25:4a:ae:33:77:ec:d3: d9:d1:49:18:7a:d8:56:d6:64:26:14:ce:68:f7:81: 00:c3:45:c3:cc:7d:86:2c:9f:ab:75:f8:7c:8a:ac: fb:49:d8:9b:24:d7:60:12:24:05:ff:cd:81:ac:a6: ba:2f:50:59:ea:31:aa:a0:4e:4b:37:e6:d3:3f:7d: 18:8e:59:f4:39:83:67:39:de:a4:09:ba:b6:74:a9: 6d:64:78:56:22:49:bc:5d:22:0c:3d:33:2a:c6:b5: 93:82:26:85:5f:b4:4e:c5:60:2d:12:21:67:0a:b2: dd:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8D:35:AA:C4:13:DA:5B:55:FD:EC:23:C6:89:44:01:C1:14:C3:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.crl X509v3 Authority Key Identifier: keyid:68:52:4C:59:0A:31:A3:42:1D:AB:7F:F6:7F:17:0D:9F:64:BE:41:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a52f3b42-2c19-4141-8d8a-fa84b3d6a49e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:bf:df:58:e1:b4:13:75:58:18:3b:87:cf:e0:0b:d0:7c:52: 48:cb:d5:08:9d:86:f2:59:07:94:29:e3:97:94:0e:1a:37:9f: c4:c7:75:4e:a8:10:f5:7b:e2:11:5a:1a:02:93:82:23:28:21: 4d:0c:f8:ee:40:69:37:42:c6:14:fa:b9:dc:d8:88:ce:d7:d8: b2:82:a9:56:03:ed:10:c6:2c:1a:5c:3b:09:21:43:ca:d8:c2: 69:d1:6c:75:72:a3:ef:25:30:5b:17:8c:d0:40:fa:16:75:30: 76:37:37:4e:12:61:32:9b:d8:79:a5:01:17:3e:a4:3c:00:06: 49:cf:57:19:37:37:9c:15:aa:23:d0:2c:c6:a3:be:7f:9a:58: b1:af:26:49:95:72:76:97:4a:84:42:10:a8:28:36:c7:1b:0d: 6c:12:2e:69:3b:62:c7:ee:46:b3:9c:a7:46:db:b6:13:27:06: 8c:ed:97:9a:0c:32:d3:58:d5:5b:19:5a:cb:9b:0a:c1:a8:5e: 5f:cf:bb:80:27:e2:4d:b2:41:3a:63:89:7a:ef:31:07:14:72: ac:2d:a1:ff:9e:4a:15:a7:8a:d8:8b:a9:57:69:45:a1:b2:e7: 4b:f3:39:d3:8a:e4:3b:dc:37:b5:89:05:9a:f5:d0:f5:69:c7: 17:2d:bf:a3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw+Fo7yL9Wg9YJoJWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUyZjNiNDItMmMxOS00MTQxLThkOGEtZmE4NGIzZDZh NDllMB4XDTI1MTIxOTIxMDAwOFoXDTI1MTIyMjIxMDAwMFowLzEtMCsGA1UEAxMk NzM5Y2RhYzEtMjgyZS00MTU0LWJjZjUtZjY3MzY1MmZmZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoJIABsTtNzgAffxsI4o8vdRPZ6xnAxGCIwL YHip1ZFcxoVpmEdGpeWzQluIaZw3c5VmlTYn7SAL8sStJ1AUNwHTOKld+rpavXKz o2HD2xs4jtOWj8eKotcTfFkjhzyS7epjSRE252hDGzBdvOWnBYxTU7ea5Hk/CGSl puHaJ2wNILTmTQF0vZrZwszWRSVKrjN37NPZ0UkYethW1mQmFM5o94EAw0XDzH2G LJ+rdfh8iqz7SdibJNdgEiQF/82BrKa6L1BZ6jGqoE5LN+bTP30Yjln0OYNnOd6k Cbq2dKltZHhWIkm8XSIMPTMqxrWTgiaFX7ROxWAtEiFnCrLdvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBuNNarEE9pbVf3sI8aJRAHBFMN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJm M2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0YjNkNmE0OWUvYTUyZjNiNDItMmMxOS00 MTQxLThkOGEtZmE4NGIzZDZhNDllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUyZjNiNDItMmMxOS00MTQxLThk OGEtZmE4NGIzZDZhNDllL2E1MmYzYjQyLTJjMTktNDE0MS04ZDhhLWZhODRiM2Q2 YTQ5ZS5jcmwwHwYDVR0jBBgwFoAUaFJMWQoxo0Idq3/2fxcNn2S+QUowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTJmM2I0Mi0yYzE5LTQxNDEtOGQ4YS1mYTg0 YjNkNmE0OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOv99Y4bQTdVgYO4fP4AvQ fFJIy9UInYbyWQeUKeOXlA4aN5/Ex3VOqBD1e+IRWhoCk4IjKCFNDPjuQGk3QsYU +rnc2IjO19iygqlWA+0QxiwaXDsJIUPK2MJp0Wx1cqPvJTBbF4zQQPoWdTB2NzdO EmEym9h5pQEXPqQ8AAZJz1cZNzecFaoj0CzGo75/mlixryZJlXJ2l0qEQhCoKDbH Gw1sEi5pO2LH7kaznKdG27YTJwaM7ZeaDDLTWNVbGVrLmwrBqF5fz7uAJ+JNskE6 Y4l67zEHFHKsLaH/nkoVp4rYi6lXaUWhsudL8znTiuQ73De1iQWa9dD1accXLb+j -----END CERTIFICATE-----Generated at Sat Dec 20 04:44:59 2025 by rpki-client