This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft File: 21873e5a-a16d-4890-8dfe-c281bf6e020e.mft (raw, json) Hash identifier: Bf4RUw9KSAyJ9lquzdTMVeBzB28AL8bRo9iTs0wo6WA= Subject key identifier: 84:F3:CC:5F:4E:DC:8B:2D:6C:85:20:26:11:02:7E:58:86:26:6A:9A Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584C3D0A801DDBB16B3C2CD2FE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft Manifest number: 010D0C9F4328584125F19CB051F83E2E5E6C6448 Signing time: Fri 19 Dec 2025 12:00:03 +0000 Manifest this update: Fri 19 Dec 2025 12:00:03 +0000 Manifest next update: Sun 21 Dec 2025 12:00:00 +0000 Files and hashes: 1: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (hash: NQGa/mxiZUYrPjMEtpKGdvAsKtew1Nn1QH7vPdfpTVU=) 2: 21873e5a-a16d-4890-8dfe-c281bf6e020e.crl (hash: GhD/xJqZIfbgjhI5GYscfGykf+4PYB4bjDe1UjSA3Ac=) 3: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (hash: Fj+nFM0srdsiq8Kn6OSBXJ0xYxoMTThhB1YwWHtBWZg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:0a:80:1d:db:b1:6b:3c:2c:d2:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Dec 19 12:00:03 2025 GMT Not After : Dec 21 12:00:00 2025 GMT Subject: CN=842601e7-3b3a-437b-a31a-5a10954cee89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9c:24:cf:e2:3a:2c:a5:1c:e2:1a:3b:b4:1c: 4a:08:f9:5d:60:b7:ed:58:74:94:47:0a:65:a2:ac: 60:9c:98:0a:c2:98:15:01:5a:6b:8e:76:e5:2d:90: 09:c3:46:e9:09:54:a0:e0:c6:f7:81:db:8d:ad:41: 66:69:ba:82:a9:75:0d:30:28:f9:3c:df:98:33:c6: c5:ad:0a:45:4e:b0:9d:f6:41:a2:30:c1:3e:af:07: 06:75:b8:9a:78:96:a5:23:5d:73:84:24:3e:1f:f2: f7:06:b9:f2:6e:23:ed:2f:c9:b2:eb:81:66:35:5a: 58:fe:9f:0d:c8:bc:4b:34:4e:71:6b:7e:70:a7:87: 5f:97:89:6b:d4:7a:b2:4b:a2:59:65:a1:a3:f7:f4: 18:a4:e2:7a:82:22:5c:1f:51:fc:1c:63:ef:ac:72: 36:bd:ec:19:84:86:58:04:2d:70:34:d4:5f:e7:64: 3b:ea:23:15:ad:1d:e6:df:6e:4b:f1:90:ea:90:a6: a5:3a:ec:35:8d:71:78:d5:9b:b8:f6:08:c8:ba:21: 64:c4:73:81:38:3b:d1:9e:63:3c:e9:4e:72:4b:15: ae:8c:58:d8:fe:84:4e:9a:d1:5e:cf:ed:52:ef:39: b8:4b:e4:e3:90:8e:48:af:fe:25:c2:1f:84:cc:bf: f6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:F3:CC:5F:4E:DC:8B:2D:6C:85:20:26:11:02:7E:58:86:26:6A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:58:c4:09:2c:9a:0e:cd:ca:30:c8:72:93:f6:1e:4c:aa:f3: d9:b2:76:eb:c1:05:95:0f:f5:a6:e3:12:ec:34:a0:af:9f:68: 1b:5a:d4:f0:47:1b:a9:58:d6:c2:d9:11:84:ed:e1:c2:4b:33: 64:d5:8a:b5:a3:0f:ea:c4:49:4c:cc:e6:55:ad:ff:d1:c2:c7: 48:8a:e8:5c:9a:43:16:1c:87:1a:53:64:3d:aa:44:c3:69:dc: fe:1b:2f:1a:27:83:40:6d:93:ff:3c:41:0c:3a:4a:a7:dd:76: 75:b1:e5:4f:b2:e4:fa:70:3c:55:80:42:96:61:8a:59:19:08: f1:72:38:68:8a:f5:2b:c1:53:03:d9:b9:3b:63:cb:bd:11:af: fc:b9:f4:0b:99:f5:a7:05:72:b3:69:6b:32:d1:a9:7f:13:89: 0d:38:47:bc:33:d3:ac:c6:54:47:a2:c1:db:85:76:b7:99:9f: 65:31:c7:54:76:7b:b9:55:fd:b0:cf:ae:61:f3:88:fc:8c:1c: 0a:ff:64:69:ed:e2:24:90:4b:d6:a9:d4:3a:e0:01:42:9d:78: c0:4d:c7:ee:ca:54:6d:6a:fe:1c:3d:29:f8:00:73:8d:92:17: 1c:d8:a1:65:e3:1c:ed:e9:52:31:04:66:3e:62:ba:14:42:78: 15:33:13:97 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw9CoAd27FrPCzS/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI1MTIxOTEyMDAwM1oXDTI1MTIyMTEyMDAwMFowLzEtMCsGA1UEAxMk ODQyNjAxZTctM2IzYS00MzdiLWEzMWEtNWExMDk1NGNlZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5wkz+I6LKUc4ho7tBxKCPldYLftWHSURwpl oqxgnJgKwpgVAVprjnblLZAJw0bpCVSg4Mb3gduNrUFmabqCqXUNMCj5PN+YM8bF rQpFTrCd9kGiMME+rwcGdbiaeJalI11zhCQ+H/L3BrnybiPtL8my64FmNVpY/p8N yLxLNE5xa35wp4dfl4lr1HqyS6JZZaGj9/QYpOJ6giJcH1H8HGPvrHI2vewZhIZY BC1wNNRf52Q76iMVrR3m325L8ZDqkKalOuw1jXF41Zu49gjIuiFkxHOBODvRnmM8 6U5ySxWujFjY/oROmtFez+1S7zm4S+TjkI5Ir/4lwh+EzL/2BwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFITzzF9O3IstbIUgJhECfliGJmqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMjE4NzNlNWEtYTE2ZC00 ODkwLThkZmUtYzI4MWJmNmUwMjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRWMQJLJoOzcowyHKT9h5M qvPZsnbrwQWVD/Wm4xLsNKCvn2gbWtTwRxupWNbC2RGE7eHCSzNk1Yq1ow/qxElM zOZVrf/RwsdIiuhcmkMWHIcaU2Q9qkTDadz+Gy8aJ4NAbZP/PEEMOkqn3XZ1seVP suT6cDxVgEKWYYpZGQjxcjhoivUrwVMD2bk7Y8u9Ea/8ufQLmfWnBXKzaWsy0al/ E4kNOEe8M9OsxlRHosHbhXa3mZ9lMcdUdnu5Vf2wz65h84j8jBwK/2Rp7eIkkEvW qdQ64AFCnXjATcfuylRtav4cPSn4AHONkhcc2KFl4xzt6VIxBGY+YroUQngVMxOX -----END CERTIFICATE-----Generated at Sat Dec 20 07:31:09 2025 by rpki-client