This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft File: db131796-a27d-48da-80e5-76b8e7c0cbd3.mft (raw, json) Hash identifier: PJus3lGvRN/LDTHnXYVKLukgnMY7bUiEk28jz42uTko= Subject key identifier: 24:6C:96:EB:F3:99:A0:B7:A8:06:42:63:DA:E3:2A:56:AF:CA:3B:C3 Authority key identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95 Certificate issuer: /CN=db131796-a27d-48da-80e5-76b8e7c0cbd3 Certificate serial: 010D0C9F4328584C36FE125632A1D0B9E64D0280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft Manifest number: 010D0C9F4328584073A848D9A5E552FE846C58D2 Signing time: Wed 17 Dec 2025 08:00:09 +0000 Manifest this update: Wed 17 Dec 2025 08:00:09 +0000 Manifest next update: Sat 20 Dec 2025 08:00:00 +0000 Files and hashes: 1: 8d9eaa3c-4cf4-367d-971b-177e4bf750e5.roa (hash: zQWBVlNjOKtRQNR7Nf5a3+guz3NGw9K43K39bSQVZu0=) 2: 95720ecd-8c17-3cb1-b286-44ec240fca8c.roa (hash: 4VRcJtnt2HU7Mp4SA4C5xEOJ+1jCM9gXErzgbl2vMXY=) 3: db131796-a27d-48da-80e5-76b8e7c0cbd3.crl (hash: DXMVVC9bpeqXP19Mc62kztGnYoTusEcIPbDJRXfW0S4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:36:fe:12:56:32:a1:d0:b9:e6:4d:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db131796-a27d-48da-80e5-76b8e7c0cbd3 Validity Not Before: Dec 17 08:00:09 2025 GMT Not After : Dec 20 08:00:00 2025 GMT Subject: CN=8c003220-5320-46ee-82c0-bd29b8552f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:19:f3:7c:c9:4c:33:35:16:cf:77:29:80:d2: 61:dc:67:69:1f:1e:9c:1f:13:18:ae:90:ac:5e:50: 92:92:20:fa:67:c2:36:ee:ab:7b:9e:44:d9:c3:33: 1d:4b:7d:44:bb:ad:18:cc:10:29:d9:94:f6:46:bc: 63:f1:fa:ab:e0:15:2b:6e:0d:56:02:38:b6:6a:33: af:50:73:f0:62:05:6c:31:24:a6:a5:26:d0:a8:1b: 73:c9:83:62:02:5a:30:14:df:3d:cb:1f:b7:79:35: ff:e1:71:29:7b:5b:d3:44:1e:cf:de:be:96:38:17: 0b:c2:27:10:ef:cf:e3:8f:7c:cb:58:57:46:01:30: 68:67:aa:80:76:58:1e:52:32:36:87:30:15:94:89: 58:a2:a3:b3:b4:79:8b:b5:d2:2f:1f:71:63:ed:92: 10:60:6f:8a:16:cc:06:b3:02:e6:39:f2:f9:66:79: d7:84:81:fe:51:fc:4d:9e:41:69:4e:5b:11:86:b1: 71:a3:ae:be:8e:8b:b6:d6:8b:2c:d5:37:03:5f:2c: 36:c3:f6:c6:ad:a7:11:08:b9:76:90:ee:e5:23:a6: 91:f4:c2:21:6e:6c:8e:04:f4:3f:55:5c:7f:6e:20: 26:b2:07:44:bf:c8:d5:5e:bb:81:c2:b7:57:68:dd: 91:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6C:96:EB:F3:99:A0:B7:A8:06:42:63:DA:E3:2A:56:AF:CA:3B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.crl X509v3 Authority Key Identifier: keyid:B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3c:34:c6:b0:6b:cc:67:5c:e7:b8:e6:63:dc:c8:6e:c1:2a: e6:26:1e:a2:ba:4b:90:27:8b:f4:a9:eb:c6:50:db:e4:48:b5: 0e:5e:ec:50:2f:23:cc:70:93:d2:3b:19:97:8d:3d:cb:69:57: 66:ba:5c:33:d7:10:f1:71:65:6d:67:5c:ec:b0:f9:3a:ea:bb: 00:d4:2f:31:a7:c3:3a:da:cf:97:87:74:c8:78:25:e3:79:c9: 07:24:02:ff:92:88:77:f5:93:4d:ed:1a:0d:92:1e:14:f0:e4: dc:35:70:bd:1c:94:d7:bd:50:ff:cf:78:49:10:da:ff:b6:d6: ca:99:55:81:69:eb:14:d3:9b:ac:49:ca:41:cf:6b:61:3b:95: ab:62:a2:8f:88:92:a3:9d:89:c7:18:c1:6e:96:46:35:ad:e7: 01:2f:88:04:cc:84:9a:03:ac:e0:f1:21:75:fc:cd:1b:b7:fd: 64:e7:f8:27:a5:b4:12:52:4b:8e:86:80:93:30:26:be:df:23: a2:78:05:ac:a7:de:e8:c9:39:1c:f7:96:8b:01:c2:b9:fd:d0: 38:85:af:60:b0:61:2e:65:0e:e5:ae:c9:6c:53:42:86:b0:40: 3e:25:8b:48:91:e3:c5:d2:2d:b5:9f:a9:69:8e:ea:9a:14:f1: f3:b5:c0:da -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw2/hJWMqHQueZNAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGIxMzE3OTYtYTI3ZC00OGRhLTgwZTUtNzZiOGU3YzBj YmQzMB4XDTI1MTIxNzA4MDAwOVoXDTI1MTIyMDA4MDAwMFowLzEtMCsGA1UEAxMk OGMwMDMyMjAtNTMyMC00NmVlLTgyYzAtYmQyOWI4NTUyZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hnzfMlMMzUWz3cpgNJh3GdpHx6cHxMYrpCs XlCSkiD6Z8I27qt7nkTZwzMdS31Eu60YzBAp2ZT2Rrxj8fqr4BUrbg1WAji2ajOv UHPwYgVsMSSmpSbQqBtzyYNiAlowFN89yx+3eTX/4XEpe1vTRB7P3r6WOBcLwicQ 78/jj3zLWFdGATBoZ6qAdlgeUjI2hzAVlIlYoqOztHmLtdIvH3Fj7ZIQYG+KFswG swLmOfL5ZnnXhIH+UfxNnkFpTlsRhrFxo66+jou21oss1TcDXyw2w/bGracRCLl2 kO7lI6aR9MIhbmyOBPQ/VVx/biAmsgdEv8jVXruBwrdXaN2R/QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCRsluvzmaC3qAZCY9rjKlavyjvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjEz MTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4ZTdjMGNiZDMvZGIxMzE3OTYtYTI3ZC00 OGRhLTgwZTUtNzZiOGU3YzBjYmQzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGIxMzE3OTYtYTI3ZC00OGRhLTgw ZTUtNzZiOGU3YzBjYmQzL2RiMTMxNzk2LWEyN2QtNDhkYS04MGU1LTc2YjhlN2Mw Y2JkMy5jcmwwHwYDVR0jBBgwFoAUue3K3qkHUolV9qvgFYie93MR9pUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYjEzMTc5Ni1hMjdkLTQ4ZGEtODBlNS03NmI4 ZTdjMGNiZDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTPDTGsGvMZ1znuOZj3Mhu wSrmJh6iukuQJ4v0qevGUNvkSLUOXuxQLyPMcJPSOxmXjT3LaVdmulwz1xDxcWVt Z1zssPk66rsA1C8xp8M62s+Xh3TIeCXjeckHJAL/koh39ZNN7RoNkh4U8OTcNXC9 HJTXvVD/z3hJENr/ttbKmVWBaesU05usScpBz2thO5WrYqKPiJKjnYnHGMFulkY1 recBL4gEzISaA6zg8SF1/M0bt/1k5/gnpbQSUkuOhoCTMCa+3yOieAWsp97oyTkc 95aLAcK5/dA4ha9gsGEuZQ7lrslsU0KGsEA+JYtIkePF0i21n6lpjuqaFPHztcDa -----END CERTIFICATE-----Generated at Wed Dec 17 15:08:43 2025 by rpki-client