This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft
File: 528385d7-74c5-424c-a337-95b993622fcc.mft (raw, json)
Hash identifier: em7xILFWlureQXmX0vcpxAleX1k/loW+9uvGtePkoY0=
Subject key identifier: 22:4E:DC:88:5B:ED:D3:30:42:30:8C:CA:66:4B:55:2B:68:D4:EE:83
Authority key identifier: B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA
Certificate issuer: /CN=528385d7-74c5-424c-a337-95b993622fcc
Certificate serial: 010D0C9F4328584C48E7ED4328C3D76BCBD0C580
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft
Manifest number: 010D0C9F432858416F331E6674A4842C3897018E
Signing time: Tue 23 Dec 2025 18:00:04 +0000
Manifest this update: Tue 23 Dec 2025 18:00:04 +0000
Manifest next update: Thu 25 Dec 2025 18:00:00 +0000
Files and hashes: 1: 37e379c2-123b-325c-ac07-0f1c59aac703.roa (hash: Q7shBo/06WcqmiqMFKq7JALXa5ES6GHbCgXea0cUmYI=)
2: 528385d7-74c5-424c-a337-95b993622fcc.crl (hash: cajMgae/kifRUzd8PpRDdKIsyQoEvrKDdJvWlvy8+s8=)
3: 94b598ca-650b-3b92-89a3-e0848c0cd981.roa (hash: XwRjkCW2tCOXrxq98AxuQTdtRcSntD3N5EX0AzGKFTg=)
4: ff89d9b4-d3a9-3e29-95a9-0916ac66d5ab.roa (hash: hN0MauhX+AOgZ9rNTe5vga4Q98i0AdEDrU3QvjvPVFY=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 25 Dec 2025 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:48:e7:ed:43:28:c3:d7:6b:cb:d0:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528385d7-74c5-424c-a337-95b993622fcc
Validity
Not Before: Dec 23 18:00:04 2025 GMT
Not After : Dec 25 18:00:00 2025 GMT
Subject: CN=6476b933-8d79-4643-8ca1-c20f5fc054ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9b:1e:29:ca:68:7c:bf:ab:da:f5:d1:fe:5f:
6a:80:94:80:de:80:7b:ed:bb:09:8c:ab:2a:17:d1:
fa:09:33:ae:e7:1c:b0:55:7d:b8:34:4d:d2:ec:40:
38:fd:09:0e:0d:68:9b:bd:87:cb:b4:c4:42:0b:d2:
1b:43:28:d7:5f:88:67:1c:10:22:c3:e5:71:24:4a:
bb:33:e0:53:8d:88:24:b3:7f:ee:54:c4:2f:b7:3f:
80:f4:2b:2d:41:63:ac:25:6e:9e:0c:b5:3a:29:16:
5c:90:91:a3:f4:8e:df:f8:a6:53:68:3b:f5:f0:25:
5d:56:1f:70:fc:dc:23:56:bb:56:87:ce:ad:db:91:
94:6e:ce:4d:f1:b1:46:dd:c1:1d:bb:74:d0:2a:9b:
00:ab:e5:7b:52:ae:fd:95:bb:a1:e9:7f:b9:4d:c5:
fd:66:67:e2:2f:88:ea:96:0f:66:8d:45:df:71:78:
0f:d3:e1:aa:2d:17:52:6d:72:c5:c3:cc:a8:d0:54:
ac:12:34:13:6a:17:d6:1d:71:8b:f9:b0:e5:91:4a:
98:81:ba:4a:02:24:c9:ac:dc:24:c4:54:8f:d3:87:
9c:c1:d4:84:06:2a:72:1f:62:f6:d3:de:f7:bc:2c:
39:c0:ec:72:31:99:0a:87:1b:ea:77:d4:50:26:ce:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:4E:DC:88:5B:ED:D3:30:42:30:8C:CA:66:4B:55:2B:68:D4:EE:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc/528385d7-74c5-424c-a337-95b993622fcc.crl
X509v3 Authority Key Identifier:
keyid:B7:65:4B:42:01:41:71:E9:72:CE:6D:28:96:A4:93:25:D5:58:6E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/528385d7-74c5-424c-a337-95b993622fcc.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:10:9e:0f:4e:0b:ba:16:b6:59:d3:00:77:2e:9d:33:a8:08:
ce:01:c8:a7:96:ec:6f:a2:78:9e:fc:94:d3:af:88:04:8d:14:
21:2e:46:e1:d3:e7:51:8c:a9:df:8f:25:c6:2f:ed:c3:ab:dd:
0f:91:4d:c6:43:72:14:7d:8a:33:8c:43:6e:1e:ec:89:2b:d3:
31:27:02:80:e0:72:57:96:33:b2:4e:2c:54:21:27:0b:ae:c0:
cf:f5:c6:7b:21:dd:d1:89:01:20:d1:43:50:4a:37:4b:3d:aa:
2c:6b:c3:ca:b0:51:46:81:5a:8e:ca:0d:a1:57:0c:e9:07:7d:
ea:bc:c9:43:30:55:01:ba:bb:6d:6d:98:39:ff:1e:59:8c:df:
b7:1f:31:14:01:66:ec:f8:4a:39:e6:9b:b4:d4:21:3c:f5:be:
aa:44:21:62:10:a5:d0:eb:fa:d0:a9:04:bf:9e:a3:bc:65:ff:
ae:41:d3:71:6b:89:24:65:83:c6:de:83:48:b1:37:e9:9c:a6:
4a:ba:c2:0d:f3:16:3b:ba:19:ee:a6:a7:21:a3:a0:f0:9e:99:
05:47:10:43:d8:0c:7a:87:47:d4:d9:ab:2f:69:44:5a:45:75:
4d:0a:a0:c5:47:b9:e9:34:e5:9b:b4:0b:4b:46:2c:6a:73:ec:
78:ab:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 18:34:40 2025 by rpki-client