This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft File: 68b39235-773a-4108-9528-465304a966b3.mft (raw, json) Hash identifier: dOd302YV8Z/FQbPq9HVUbLkCjNil/MYjL9Uhh1u5Jgk= Subject key identifier: 02:E7:2D:E0:F9:33:18:FD:AB:3D:6A:3B:6F:AB:97:B7:E2:67:12:AC Authority key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01 Certificate issuer: /CN=68b39235-773a-4108-9528-465304a966b3 Certificate serial: 010D0C9F4328584C7592DA686CB70008D0B33EC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft Manifest number: 010D0C9F43285840CA72D656213292B3B8FE2CDA Signing time: Thu 08 Jan 2026 18:00:03 +0000 Manifest this update: Thu 08 Jan 2026 18:00:03 +0000 Manifest next update: Sun 11 Jan 2026 18:00:00 +0000 Files and hashes: 1: 68b39235-773a-4108-9528-465304a966b3.crl (hash: F90ZuenGMSYSVKEVNKRN6bQBxo8Q+9ov3ucwZ1S3fnE=) 2: 7b7a9900-18bb-32ef-b8b2-1d6831729c39.roa (hash: unDnFkhGEd/i0hc2GqJ37pgkuUWmaQQV09hWHSXPqBo=) 3: c062b811-5af4-3d93-883f-cd801dbdc422.roa (hash: SfoTt/PHhM0AdG8MBondgWPA9Fx6bgSfIdW0XsXDkq4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:92:da:68:6c:b7:00:08:d0:b3:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b39235-773a-4108-9528-465304a966b3 Validity Not Before: Jan 8 18:00:03 2026 GMT Not After : Jan 11 18:00:00 2026 GMT Subject: CN=1a46bf47-686c-42c1-8302-abdcc0e22745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8c:51:e6:47:e7:af:13:f6:95:e7:4e:e9:7e: 21:5d:a7:2a:1d:4e:ce:d0:38:9a:51:b1:fc:fc:67: fa:c4:a2:11:3f:9a:6e:45:02:47:f8:ef:82:2a:88: 34:10:4f:62:02:10:7f:2c:32:e3:c7:37:35:b6:fe: 7a:e8:0f:ff:53:78:f4:dd:db:de:49:29:c6:02:11: d5:63:eb:20:a6:c8:43:78:63:69:26:67:d8:51:6d: 8f:2f:ac:cb:3a:e5:82:fd:33:f9:3f:5f:4f:08:21: 51:ae:5b:1d:65:06:82:6e:60:16:09:8e:79:29:3d: 1d:1a:1e:d9:aa:25:1a:b3:ae:ea:7d:7a:0b:a3:3d: da:f1:5a:31:47:49:66:3d:86:d4:8e:f8:ba:a9:6b: 0e:aa:51:ee:81:fd:6b:b6:ed:06:47:0b:2e:fd:e3: 1b:e5:6f:b9:dd:78:97:00:8c:be:2b:7d:c6:87:94: 2a:00:e8:14:e1:6d:eb:d3:a4:c4:69:39:c1:ba:df: 11:a3:36:63:7f:22:1d:03:33:77:09:74:a9:1c:1b: e5:73:b4:d1:71:37:3b:70:17:c5:da:5c:d5:60:91: 4e:8e:b4:40:d5:15:2f:8a:0d:f2:e2:93:b1:21:bf: 70:f5:4c:6b:1b:99:03:71:0b:ae:b5:d3:cd:d6:79: a9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E7:2D:E0:F9:33:18:FD:AB:3D:6A:3B:6F:AB:97:B7:E2:67:12:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl X509v3 Authority Key Identifier: keyid:BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:33:a8:04:ac:e6:7d:fc:9e:1b:c5:35:f5:7b:46:70:c0:16: 43:c2:df:d5:64:81:3b:92:80:c0:4d:38:f4:1c:b1:37:24:2a: 20:d5:fe:04:b3:f1:57:83:2e:ae:ad:1f:ff:5f:22:45:f5:50: d5:77:b1:da:e8:8b:6d:58:b1:3f:06:cd:39:65:7b:bd:7f:1c: 18:ed:45:94:04:63:4d:00:73:7d:45:d7:69:55:82:ee:1b:3d: be:ca:24:cb:a9:95:46:30:44:52:e1:55:17:8c:c1:13:c8:38: ea:f2:98:60:af:b7:98:8d:eb:88:dc:ba:fc:d7:b3:80:4b:de: ce:92:12:9d:b5:67:f2:d6:9a:27:f4:9a:3c:94:95:a4:01:2a: 27:3b:08:a8:c6:c3:a7:9c:9c:ef:02:b6:4a:05:80:03:8b:b9: 20:fb:d5:b3:fe:50:1a:54:99:d0:1e:fc:c6:4b:84:7a:d0:ab: 87:83:47:9c:13:53:eb:d1:cc:f5:88:a7:0b:34:07:54:36:48: 31:4d:14:9c:c9:32:61:18:6b:59:cd:24:26:50:b3:0d:0f:a8: a6:d2:85:c0:60:95:8e:4a:9e:ff:0b:b4:2e:6e:bf:ab:03:dd: c7:a1:61:b5:24:41:dd:db:a4:44:0d:62:1f:10:c5:a8:01:a5: 90:fc:f8:90 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx1ktpobLcACNCzPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMzkyMzUtNzczYS00MTA4LTk1MjgtNDY1MzA0YTk2 NmIzMB4XDTI2MDEwODE4MDAwM1oXDTI2MDExMTE4MDAwMFowLzEtMCsGA1UEAxMk MWE0NmJmNDctNjg2Yy00MmMxLTgzMDItYWJkY2MwZTIyNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IxR5kfnrxP2ledO6X4hXacqHU7O0DiaUbH8 /Gf6xKIRP5puRQJH+O+CKog0EE9iAhB/LDLjxzc1tv566A//U3j03dveSSnGAhHV Y+sgpshDeGNpJmfYUW2PL6zLOuWC/TP5P19PCCFRrlsdZQaCbmAWCY55KT0dGh7Z qiUas67qfXoLoz3a8VoxR0lmPYbUjvi6qWsOqlHugf1rtu0GRwsu/eMb5W+53XiX AIy+K33Gh5QqAOgU4W3r06TEaTnBut8RozZjfyIdAzN3CXSpHBvlc7TRcTc7cBfF 2lzVYJFOjrRA1RUvig3y4pOxIb9w9UxrG5kDcQuutdPN1nmpVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFALnLeD5Mxj9qz1qO2+rl7fiZxKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OGIz OTIzNS03NzNhLTQxMDgtOTUyOC00NjUzMDRhOTY2YjMvNjhiMzkyMzUtNzczYS00 MTA4LTk1MjgtNDY1MzA0YTk2NmIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjhiMzkyMzUtNzczYS00MTA4LTk1 MjgtNDY1MzA0YTk2NmIzLzY4YjM5MjM1LTc3M2EtNDEwOC05NTI4LTQ2NTMwNGE5 NjZiMy5jcmwwHwYDVR0jBBgwFoAUvreOD+NlP1rJBXpiTNx7ca7+RQEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OGIzOTIzNS03NzNhLTQxMDgtOTUyOC00NjUz MDRhOTY2YjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjM6gErOZ9/J4bxTX1e0Zw wBZDwt/VZIE7koDATTj0HLE3JCog1f4Es/FXgy6urR//XyJF9VDVd7Ha6IttWLE/ Bs05ZXu9fxwY7UWUBGNNAHN9RddpVYLuGz2+yiTLqZVGMERS4VUXjMETyDjq8phg r7eYjeuI3Lr817OAS97OkhKdtWfy1pon9Jo8lJWkASonOwioxsOnnJzvArZKBYAD i7kg+9Wz/lAaVJnQHvzGS4R60KuHg0ecE1Pr0cz1iKcLNAdUNkgxTRScyTJhGGtZ zSQmULMND6im0oXAYJWOSp7/C7Qubr+rA93HoWG1JEHd26REDWIfEMWoAaWQ/PiQ -----END CERTIFICATE-----Generated at Thu Jan 8 23:57:58 2026 by rpki-client