This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.mft File: cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.mft (raw, json) Hash identifier: KzgrZ4vDAZzGAcCDLZbtl+lhfZVqk61vi85mqFyjpBQ= Subject key identifier: 9B:19:B2:18:8B:8B:3D:CF:41:4D:97:C6:ED:A0:99:23:13:E6:75:BA Authority key identifier: FA:1D:36:6E:77:B0:25:F2:A0:4B:F9:D2:4A:6D:85:A0:39:DA:CF:AA Certificate issuer: /CN=cfdb56e6-0b8f-487f-b55e-b0d93b59cc98 Certificate serial: 010D0C9F4328584C3EE7038703B56E6C301E7480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.mft Manifest number: 010D0C9F4328584464DE678281133436A7FE5664 Signing time: Sat 20 Dec 2025 04:00:09 +0000 Manifest this update: Sat 20 Dec 2025 04:00:09 +0000 Manifest next update: Tue 23 Dec 2025 04:00:00 +0000 Files and hashes: 1: 3817060c-6112-3923-9dee-5f7712775463.roa (hash: +uH8MqfbOIbFBazNNIeDqhxd1iBLiaZuXJ04DUFeZwQ=) 2: 9081feaa-3b93-3730-95ef-242d05940198.roa (hash: Ut/HnY4weE8wIqP7FSh4yba6YZqE5eN/S5q/jMb9Rzw=) 3: cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.crl (hash: wsBu/E9Q/ZCxbZmbgBOytUGH+iMIfXCXuoGq0t1lzOA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:e7:03:87:03:b5:6e:6c:30:1e:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdb56e6-0b8f-487f-b55e-b0d93b59cc98 Validity Not Before: Dec 20 04:00:09 2025 GMT Not After : Dec 23 04:00:00 2025 GMT Subject: CN=d956b1f2-d931-4f83-ac5d-4b2d11329bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:c8:9e:4a:b9:9d:06:13:c8:b6:39:e1:09: d7:4c:aa:62:0e:e0:ab:30:b5:a0:c3:4d:bc:ad:56: 65:78:0b:d7:4d:82:e9:71:1f:49:b2:d7:bf:3d:bc: f5:7f:da:b8:55:19:03:b3:6d:68:2c:31:35:55:c5: b6:4f:b2:af:6a:3c:f0:2a:bb:2a:35:e3:3b:04:02: 69:86:a1:d2:75:07:9c:f4:06:f0:80:73:33:95:9c: ff:ef:0c:33:33:d3:6d:68:75:16:91:9d:c4:e0:88: a9:b3:7f:43:59:4c:2e:9e:f0:9b:95:86:0a:ed:c3: 68:74:c4:73:64:e1:2b:f5:69:3c:70:8e:3f:1b:1f: 93:71:4a:52:6f:b8:36:30:73:a6:b8:aa:67:67:44: 0d:2d:3b:f8:8b:b5:a8:d8:39:7d:4f:b8:1e:b8:99: 1f:c1:2d:89:ec:d6:7e:c9:a9:09:2c:29:93:27:53: 1e:ed:b3:04:28:c8:bc:4e:ef:8c:c8:7c:40:7f:71: 83:78:8c:54:d2:d7:fa:a4:d8:78:cf:3c:48:5c:a2: 8a:a7:17:27:3e:b1:b1:7e:40:38:a2:06:be:52:70: 96:7c:78:86:fb:e3:92:86:04:93:80:26:9a:5b:0e: 9b:5e:47:aa:c6:31:50:17:f6:55:1b:b5:4f:e5:4e: 93:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:19:B2:18:8B:8B:3D:CF:41:4D:97:C6:ED:A0:99:23:13:E6:75:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.crl X509v3 Authority Key Identifier: keyid:FA:1D:36:6E:77:B0:25:F2:A0:4B:F9:D2:4A:6D:85:A0:39:DA:CF:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cfdb56e6-0b8f-487f-b55e-b0d93b59cc98.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:7d:35:fa:ef:e4:04:0e:42:1e:b6:7b:94:fb:a2:86:06:1a: 69:cc:6a:cb:6c:80:54:91:65:61:9e:b0:a3:7e:f6:a5:f8:e5: 93:97:29:9f:7c:32:9a:8d:f9:15:9f:ed:ca:06:af:b7:4e:04: 3c:93:a2:e5:f6:95:ed:92:02:b2:f6:ef:26:e4:22:2f:95:e2: 06:45:6d:79:19:4f:8a:01:60:02:fc:3f:1e:11:3c:bb:e6:1a: 4f:7f:83:fc:fd:f0:90:30:3c:9f:f8:3d:08:1a:7e:e4:a3:10: f0:c2:ea:89:d7:9d:d9:d2:d2:f4:55:63:21:d2:cb:fc:0b:7d: 13:f7:7f:6e:a1:33:85:6d:fe:e3:ce:7a:76:71:3e:20:15:b3: 85:6b:72:0b:7d:c8:10:d5:87:00:61:65:59:d1:1e:ac:71:68: f3:95:37:91:9b:51:ca:81:38:5d:a9:fc:54:8b:3e:00:3d:53: 58:95:c6:2c:7e:33:43:cb:c1:45:0a:e8:74:ac:aa:fa:31:17: c5:1a:9a:32:94:1c:85:12:4e:20:e4:2f:6a:af:e9:a5:89:49: c3:70:9c:44:8f:ee:98:52:f0:61:ca:c9:88:5d:d1:d2:ae:e5: 28:04:8b:5d:1b:9a:5a:d4:75:28:fe:dc:53:b7:31:63:97:bd: 70:71:20:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw+5wOHA7VubDAedIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZkYjU2ZTYtMGI4Zi00ODdmLWI1NWUtYjBkOTNiNTlj Yzk4MB4XDTI1MTIyMDA0MDAwOVoXDTI1MTIyMzA0MDAwMFowLzEtMCsGA1UEAxMk ZDk1NmIxZjItZDkzMS00ZjgzLWFjNWQtNGIyZDExMzI5YmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gXInkq5nQYTyLY54QnXTKpiDuCrMLWgw028 rVZleAvXTYLpcR9Jste/Pbz1f9q4VRkDs21oLDE1VcW2T7KvajzwKrsqNeM7BAJp hqHSdQec9AbwgHMzlZz/7wwzM9NtaHUWkZ3E4Iips39DWUwunvCblYYK7cNodMRz ZOEr9Wk8cI4/Gx+TcUpSb7g2MHOmuKpnZ0QNLTv4i7Wo2Dl9T7geuJkfwS2J7NZ+ yakJLCmTJ1Me7bMEKMi8Tu+MyHxAf3GDeIxU0tf6pNh4zzxIXKKKpxcnPrGxfkA4 oga+UnCWfHiG++OShgSTgCaaWw6bXkeqxjFQF/ZVG7VP5U6TQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFJsZshiLiz3PQU2Xxu2gmSMT5nW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZmRi NTZlNi0wYjhmLTQ4N2YtYjU1ZS1iMGQ5M2I1OWNjOTgvY2ZkYjU2ZTYtMGI4Zi00 ODdmLWI1NWUtYjBkOTNiNTljYzk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2ZkYjU2ZTYtMGI4Zi00ODdmLWI1 NWUtYjBkOTNiNTljYzk4L2NmZGI1NmU2LTBiOGYtNDg3Zi1iNTVlLWIwZDkzYjU5 Y2M5OC5jcmwwHwYDVR0jBBgwFoAU+h02bnewJfKgS/nSSm2FoDnaz6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZmRiNTZlNi0wYjhmLTQ4N2YtYjU1ZS1iMGQ5 M2I1OWNjOTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEfTX67+QEDkIetnuU+6KG BhppzGrLbIBUkWVhnrCjfval+OWTlymffDKajfkVn+3KBq+3TgQ8k6Ll9pXtkgKy 9u8m5CIvleIGRW15GU+KAWAC/D8eETy75hpPf4P8/fCQMDyf+D0IGn7koxDwwuqJ 153Z0tL0VWMh0sv8C30T939uoTOFbf7jznp2cT4gFbOFa3ILfcgQ1YcAYWVZ0R6s cWjzlTeRm1HKgThdqfxUiz4APVNYlcYsfjNDy8FFCuh0rKr6MRfFGpoylByFEk4g 5C9qr+mliUnDcJxEj+6YUvBhysmIXdHSruUoBItdG5pa1HUo/txTtzFjl71wcSCn -----END CERTIFICATE-----Generated at Sat Dec 20 14:37:41 2025 by rpki-client