This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft File: af8fc859-9134-44b2-9e4c-267a8d2386da.mft (raw, json) Hash identifier: XVpwTmAgbde0vSVYKlilrPZZ60FijIkUxdIRi/GagSg= Subject key identifier: D2:B8:DB:30:B6:D3:0E:73:75:69:40:73:80:6D:60:F2:57:33:CE:BE Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 Certificate issuer: /CN=af8fc859-9134-44b2-9e4c-267a8d2386da Certificate serial: 010D0C9F4328584C48AD5BC9BDB7CB946508AF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft Manifest number: 010D0C9F43285841A12CF5D49033CD73DC699CEB Signing time: Tue 23 Dec 2025 16:02:04 +0000 Manifest this update: Tue 23 Dec 2025 16:02:04 +0000 Manifest next update: Thu 25 Dec 2025 16:00:00 +0000 Files and hashes: 1: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (hash: EqwNzd2x/eaGcVC7l7FVBF3G192vibOhy89lHmE4toA=) 2: af8fc859-9134-44b2-9e4c-267a8d2386da.crl (hash: ljrr415sgonfKQXSVXcdCHEbbMON/BIqOIWR21+WaWk=) 3: dede31bf-e82b-3380-8794-1fc710158b40.roa (hash: lwAnmFmUvIAVOHU+aIELb83NafWdf7mJvwPbjfJE4Bo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:ad:5b:c9:bd:b7:cb:94:65:08:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da Validity Not Before: Dec 23 16:02:04 2025 GMT Not After : Dec 25 16:00:00 2025 GMT Subject: CN=40b64d30-d8bf-409d-8b3f-f259644fb81b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fb:27:c9:7d:c2:62:95:a8:34:d1:9a:a0:b0: 7e:b0:f4:95:43:05:96:04:53:69:f4:86:02:bc:e2: 14:5c:07:43:a4:98:66:9c:36:78:fe:1b:b0:b5:e9: 2c:41:97:95:78:d1:97:37:d3:f2:e5:72:57:94:3c: 4e:2d:09:0c:b1:00:d7:f6:77:fa:eb:3f:40:df:49: 4a:01:01:77:13:ac:07:5d:ca:41:c4:06:12:5c:6f: 56:99:8f:92:b4:52:84:41:52:48:41:b5:27:3e:54: 0d:99:92:ab:60:3e:02:5c:fc:f2:d9:63:63:16:47: 8f:32:2d:4a:f8:03:c0:82:9d:07:d0:32:d8:26:67: 30:de:81:cf:31:52:6e:3f:7e:dc:97:40:c1:f6:33: 29:cb:a6:b0:c1:a8:d2:dd:f9:ae:e6:ce:f7:aa:b8: 80:ea:ff:51:2d:99:84:d0:5a:9d:a0:bb:e2:96:a8: 7d:f1:e1:4e:6e:af:40:0b:28:ca:1e:e1:bd:af:ef: 45:f3:83:0e:df:4a:95:e5:de:f1:74:3a:67:0d:13: b5:af:3e:ba:4d:98:97:f2:a2:5d:fb:54:b8:2a:41: 93:67:9a:53:58:94:8f:7c:9f:86:95:e2:55:76:c9: 85:f4:79:1a:61:c6:90:cc:7d:84:42:20:e6:ba:6b: 9d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B8:DB:30:B6:D3:0E:73:75:69:40:73:80:6D:60:F2:57:33:CE:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl X509v3 Authority Key Identifier: keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:16:21:b1:cd:be:6e:5b:5f:54:4a:91:3a:c6:02:e5:e4:5f: 96:fb:4b:07:e4:aa:34:8f:1b:03:86:5f:0f:93:18:15:d6:7b: 73:f1:cc:53:78:10:23:f5:d5:82:28:42:e4:e4:7a:7e:c7:c5: 13:1f:13:67:43:f7:a6:be:15:62:7a:3b:dd:aa:fb:43:59:63: 11:05:6e:1d:44:ea:5b:61:15:39:eb:3a:9f:84:a1:d7:2f:e9: 48:db:27:90:91:37:fb:ef:06:e8:49:3e:bb:fa:ae:22:02:7a: 76:fd:d8:76:9f:c6:5b:aa:b0:05:af:90:d5:4d:c4:3c:a7:99: 23:05:98:7d:d8:1e:f6:c2:11:e7:9e:5e:92:b9:15:8e:0c:bc: cf:d2:c9:cb:3c:9c:0e:4c:a1:a9:51:b4:4d:72:58:e8:3c:a9: e1:57:83:41:42:be:a0:cb:45:3b:2a:b2:79:5b:1f:28:b6:3d: 3c:75:20:c5:82:0d:b5:28:47:c4:88:43:d5:8d:a4:58:6f:dd: b7:1a:1b:36:ca:bc:31:ae:98:cc:47:8f:b3:ad:01:c0:59:a5: fa:71:e6:d6:60:d9:09:34:1a:df:84:91:f0:12:60:3e:a9:fe: 1b:49:c4:fd:5d:16:45:82:b5:ea:04:f1:8d:f3:ff:39:4d:88: a8:a5:eb:3b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExIrVvJvbfLlGUIr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWY4ZmM4NTktOTEzNC00NGIyLTllNGMtMjY3YThkMjM4 NmRhMB4XDTI1MTIyMzE2MDIwNFoXDTI1MTIyNTE2MDAwMFowLzEtMCsGA1UEAxMk NDBiNjRkMzAtZDhiZi00MDlkLThiM2YtZjI1OTY0NGZiODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fsnyX3CYpWoNNGaoLB+sPSVQwWWBFNp9IYC vOIUXAdDpJhmnDZ4/huwteksQZeVeNGXN9Py5XJXlDxOLQkMsQDX9nf66z9A30lK AQF3E6wHXcpBxAYSXG9WmY+StFKEQVJIQbUnPlQNmZKrYD4CXPzy2WNjFkePMi1K +APAgp0H0DLYJmcw3oHPMVJuP37cl0DB9jMpy6awwajS3fmu5s73qriA6v9RLZmE 0FqdoLvilqh98eFObq9ACyjKHuG9r+9F84MO30qV5d7xdDpnDRO1rz66TZiX8qJd +1S4KkGTZ5pTWJSPfJ+GleJVdsmF9HkaYcaQzH2EQiDmumudiwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNK42zC20w5zdWlAc4BtYPJXM86+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZjhm Yzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdhOGQyMzg2ZGEvYWY4ZmM4NTktOTEzNC00 NGIyLTllNGMtMjY3YThkMjM4NmRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWY4ZmM4NTktOTEzNC00NGIyLTll NGMtMjY3YThkMjM4NmRhL2FmOGZjODU5LTkxMzQtNDRiMi05ZTRjLTI2N2E4ZDIz ODZkYS5jcmwwHwYDVR0jBBgwFoAU5bpWqY0HiITS6GUxi1a3vPiL62AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZjhmYzg1OS05MTM0LTQ0YjItOWU0Yy0yNjdh OGQyMzg2ZGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfFiGxzb5uW19USpE6xgLl 5F+W+0sH5Ko0jxsDhl8PkxgV1ntz8cxTeBAj9dWCKELk5Hp+x8UTHxNnQ/emvhVi ejvdqvtDWWMRBW4dROpbYRU56zqfhKHXL+lI2yeQkTf77wboST67+q4iAnp2/dh2 n8ZbqrAFr5DVTcQ8p5kjBZh92B72whHnnl6SuRWODLzP0snLPJwOTKGpUbRNcljo PKnhV4NBQr6gy0U7KrJ5Wx8otj08dSDFgg21KEfEiEPVjaRYb923Ghs2yrwxrpjM R4+zrQHAWaX6cebWYNkJNBrfhJHwEmA+qf4bScT9XRZFgrXqBPGN8/85TYiopes7 -----END CERTIFICATE-----Generated at Wed Dec 24 13:09:40 2025 by rpki-client