This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.mft (raw, json) Hash identifier: ZiiCuAL7YxVTR5TluiftnzT0sZT0oFiTjrfvlCQqo88= Subject key identifier: 7E:A2:63:65:5F:C8:E7:DA:21:3F:93:72:A7:FB:69:81:45:C1:F0:10 Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584C3E3449227E6AB6E258261A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft Manifest number: 010D0C9F4328584200D9C72B5C6113CC8D160882 Signing time: Fri 19 Dec 2025 22:00:03 +0000 Manifest this update: Fri 19 Dec 2025 22:00:03 +0000 Manifest next update: Sun 21 Dec 2025 22:00:00 +0000 Files and hashes: 1: 0af21de0-2cae-45f7-b42c-9598c4271ef0.crl (hash: oA0Wu1eHmoQA7RppfMMUgZrmovl0Xuxjxg+IC33VSZQ=) 2: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (hash: i5f+PQMcneKVzCLqj+o9qGquF3BnF9iknTY4YXBoBSE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:34:49:22:7e:6a:b6:e2:58:26:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Dec 19 22:00:03 2025 GMT Not After : Dec 21 22:00:00 2025 GMT Subject: CN=3779282d-6990-46ec-b2c6-ffdaac88d590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ab:a7:c5:55:5a:7d:04:25:06:85:12:e0:29: 61:43:bd:0e:0d:f5:dc:6d:39:d8:14:9b:3f:ce:74: 06:d6:e6:f0:29:a6:74:8a:3c:df:4b:9e:8c:a8:ef: d8:27:6e:6f:ac:33:a6:97:89:00:6c:15:ef:21:ce: b4:b6:0f:1b:e7:69:59:df:1c:fa:95:d8:5e:87:29: 5a:0f:73:4f:a7:a0:3a:6e:d8:35:10:bd:3a:59:33: d9:e0:26:dc:54:e7:51:3e:a0:a3:01:e8:8f:b2:ac: 18:86:f1:22:69:cf:2e:f0:a6:5a:a2:bc:2f:50:76: e9:5f:8a:c7:c2:69:43:72:cf:1c:43:83:34:27:35: dc:56:79:f2:b7:60:15:68:f6:e5:84:eb:ca:35:45: 33:28:70:41:37:87:61:21:53:e8:89:7e:5d:47:aa: 7c:89:cc:5b:dc:67:36:6c:30:b0:bb:23:e9:a8:7d: 7d:16:6b:6b:17:36:15:7d:b2:93:0e:49:25:75:e5: 10:82:74:29:e2:18:16:69:48:9c:ee:7d:ad:d2:f5: 1b:6f:d3:ca:d1:23:c8:43:f1:37:f6:ec:34:e1:1e: 31:b6:33:a5:8e:a4:c9:4f:f1:e7:18:fd:d8:35:47: 07:f7:01:c5:21:f9:11:6f:05:41:96:06:cb:75:f6: 5f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A2:63:65:5F:C8:E7:DA:21:3F:93:72:A7:FB:69:81:45:C1:F0:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c8:9c:7f:58:d4:82:97:02:49:39:7b:c5:9d:33:1f:f6:c3: 49:77:19:ff:0b:5e:cb:0a:ec:fa:de:be:c2:fe:48:0f:de:8c: 16:2f:d4:8f:09:b5:bf:19:81:f0:70:c7:d6:52:3f:21:a5:8c: c2:cb:c3:40:22:48:b1:59:84:f3:a7:c6:9b:47:49:6c:cf:22: 44:2f:2d:44:39:db:41:f7:98:fb:89:ce:fd:9c:b2:fa:d0:7f: 72:01:a5:28:18:fa:dc:a0:2b:8a:f7:e9:f6:87:82:c5:2d:c9: 82:5e:20:e4:c5:c3:99:b5:11:0c:e7:7d:ff:d2:02:0b:61:b8: ad:86:d3:a5:30:ac:b3:d0:78:30:f5:1c:6d:0c:16:02:bd:ca: a8:90:5b:77:b3:b2:61:d4:ad:27:c7:8d:58:af:c6:4c:1a:04: 90:68:ed:52:dd:33:76:a9:d1:99:13:9f:4a:f1:36:a2:49:ef: c5:f0:91:e1:7e:d7:f7:61:57:df:29:b5:f8:f7:85:05:59:a6: b0:a5:17:ef:b3:d8:da:36:a7:6e:3f:44:04:70:9a:34:c8:d2: 2e:8a:9a:d5:8d:54:fe:16:30:a6:c4:bb:84:bf:c7:26:09:a4: 56:43:31:0b:18:22:43:7a:00:03:e0:92:30:a9:c3:a1:82:a4: 2f:90:08:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw+NEkifmq24lgmGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI1MTIxOTIyMDAwM1oXDTI1MTIyMTIyMDAwMFowLzEtMCsGA1UEAxMk Mzc3OTI4MmQtNjk5MC00NmVjLWIyYzYtZmZkYWFjODhkNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96unxVVafQQlBoUS4ClhQ70ODfXcbTnYFJs/ znQG1ubwKaZ0ijzfS56MqO/YJ25vrDOml4kAbBXvIc60tg8b52lZ3xz6ldhehyla D3NPp6A6btg1EL06WTPZ4CbcVOdRPqCjAeiPsqwYhvEiac8u8KZaorwvUHbpX4rH wmlDcs8cQ4M0JzXcVnnyt2AVaPblhOvKNUUzKHBBN4dhIVPoiX5dR6p8icxb3Gc2 bDCwuyPpqH19FmtrFzYVfbKTDkkldeUQgnQp4hgWaUic7n2t0vUbb9PK0SPIQ/E3 9uw04R4xtjOljqTJT/HnGP3YNUcH9wHFIfkRbwVBlgbLdfZfOQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFH6iY2VfyOfaIT+Tcqf7aYFFwfAQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMGFmMjFkZTAtMmNhZS00 NWY3LWI0MmMtOTU5OGM0MjcxZWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCayJx/WNSClwJJOXvFnTMf 9sNJdxn/C17LCuz63r7C/kgP3owWL9SPCbW/GYHwcMfWUj8hpYzCy8NAIkixWYTz p8abR0lszyJELy1EOdtB95j7ic79nLL60H9yAaUoGPrcoCuK9+n2h4LFLcmCXiDk xcOZtREM533/0gILYbithtOlMKyz0Hgw9RxtDBYCvcqokFt3s7Jh1K0nx41Yr8ZM GgSQaO1S3TN2qdGZE59K8TaiSe/F8JHhftf3YVffKbX494UFWaawpRfvs9jaNqdu P0QEcJo0yNIuiprVjVT+FjCmxLuEv8cmCaRWQzELGCJDegAD4JIwqcOhgqQvkAi1 -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:40 2025 by rpki-client