This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: j0EkOBuFrZuAy41vjSoBtnWdPfRqlAIOi6q9pnqVimM= Subject key identifier: E9:01:42:99:8D:1C:FB:9B:EE:84:D6:15:68:56:27:A2:42:78:E5:D1 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584C43170BC099393533BA102460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E346 Signing time: Sun 21 Dec 2025 16:00:09 +0000 Manifest this update: Sun 21 Dec 2025 16:00:09 +0000 Manifest next update: Wed 24 Dec 2025 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: OIZ0T6Ol/O6TGE1E+fkEMVRqQowD0D/Lz2hXlrWX4xk=) 2: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: ZYwfSi9xVZj3T2KGb5Dm3el9eeZgXsvgCBm4zUYhH4A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:43:17:0b:c0:99:39:35:33:ba:10:24:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Dec 21 16:00:09 2025 GMT Not After : Dec 24 16:00:00 2025 GMT Subject: CN=7f489044-e5b5-4899-87a3-062f1a5692ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ef:e6:42:31:53:60:82:e9:6a:09:07:9f:19: d5:ad:91:41:67:7b:5e:33:24:25:99:a7:76:d1:9b: 4b:5d:b1:fe:49:d5:88:aa:e8:3c:31:8c:07:ec:16: 7c:2d:b6:ae:29:b8:ac:c1:12:be:49:48:ef:f7:44: 56:07:de:ef:3c:2a:ef:d8:6e:6a:dc:ab:21:e4:1f: d7:4c:33:16:0e:a2:6e:ab:7f:bf:66:eb:ea:42:ce: ed:78:b2:12:e4:57:9e:14:d1:90:ce:3e:8a:03:18: 9c:89:f9:6f:75:bc:6d:50:09:2f:04:5e:d7:1c:8b: 1b:51:fe:5b:58:ad:5b:34:b7:2c:87:f1:1b:37:f1: 44:ee:db:85:6c:dc:3e:c5:1b:d8:f8:e2:c8:fb:98: f3:0d:32:98:e6:26:eb:78:66:45:ca:89:f9:48:45: 6b:3f:46:4e:d9:fc:18:56:d8:0f:35:94:f6:40:47: e9:f3:8b:4e:a6:b5:05:11:fb:67:24:a2:e7:54:af: e1:65:03:f7:db:49:22:c3:9a:63:a9:2c:d8:10:f1: cd:f9:1b:cf:28:98:5a:c0:4f:fb:0f:66:6b:99:58: 98:38:40:fa:6b:4e:6c:04:77:fb:47:c8:09:4c:68: d9:43:7e:87:c7:5b:ce:02:d6:23:01:c8:9c:7a:5b: 80:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:01:42:99:8D:1C:FB:9B:EE:84:D6:15:68:56:27:A2:42:78:E5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6b:24:40:26:82:f7:e9:1d:56:3b:ec:56:8a:81:31:d2:f3: 24:3d:c5:a6:67:1e:8e:8a:d8:10:5c:94:b1:39:8a:83:ae:10: ef:91:6d:a0:b7:51:37:81:d3:35:d8:9b:60:01:21:77:1f:1f: 06:5b:ba:01:fd:7b:55:4e:b2:87:ff:2e:72:f2:65:dc:52:17: f2:51:27:a1:b3:6b:af:3d:92:5f:c1:cc:8b:40:0f:c1:74:eb: 13:80:95:18:b0:53:dd:3a:f9:9f:05:1e:03:d0:c8:76:08:f1: 74:12:47:e7:ac:a6:c1:f5:df:3a:9b:40:22:cb:50:42:fa:bd: 1a:96:4a:a5:95:81:ed:69:8e:9e:8f:da:42:fc:f0:ec:e7:46: 7e:aa:a0:4e:bc:fd:e3:97:f9:cd:b3:a7:05:13:2a:fd:62:f9: 08:1a:9f:78:5d:67:cc:89:c6:75:66:9d:e3:bd:eb:63:88:fe: d0:5c:95:c8:00:c3:91:75:ce:b4:c7:f5:c8:fa:59:e6:d5:4b: 48:df:e1:91:05:d3:2d:2a:5e:ca:65:e0:de:f0:47:18:53:c3: df:62:9e:b1:f5:b9:2d:c1:26:e1:53:ac:2a:97:7d:bb:09:30: fc:f1:a4:40:79:ef:5b:32:75:aa:a2:c8:16:6d:98:a0:1b:88: 37:a4:d1:35 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExDFwvAmTk1M7oQJGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MTIyMTE2MDAwOVoXDTI1MTIyNDE2MDAwMFowLzEtMCsGA1UEAxMk N2Y0ODkwNDQtZTViNS00ODk5LTg3YTMtMDYyZjFhNTY5MmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO/mQjFTYILpagkHnxnVrZFBZ3teMyQlmad2 0ZtLXbH+SdWIqug8MYwH7BZ8LbauKbiswRK+SUjv90RWB97vPCrv2G5q3Ksh5B/X TDMWDqJuq3+/ZuvqQs7teLIS5FeeFNGQzj6KAxiciflvdbxtUAkvBF7XHIsbUf5b WK1bNLcsh/EbN/FE7tuFbNw+xRvY+OLI+5jzDTKY5ibreGZFyon5SEVrP0ZO2fwY VtgPNZT2QEfp84tOprUFEftnJKLnVK/hZQP320kiw5pjqSzYEPHN+RvPKJhawE/7 D2ZrmViYOED6a05sBHf7R8gJTGjZQ36Hx1vOAtYjAciceluAbQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOkBQpmNHPub7oTWFWhWJ6JCeOXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgayRAJoL36R1WO+xWioEx 0vMkPcWmZx6OitgQXJSxOYqDrhDvkW2gt1E3gdM12JtgASF3Hx8GW7oB/XtVTrKH /y5y8mXcUhfyUSehs2uvPZJfwcyLQA/BdOsTgJUYsFPdOvmfBR4D0Mh2CPF0Ekfn rKbB9d86m0Aiy1BC+r0alkqllYHtaY6ej9pC/PDs50Z+qqBOvP3jl/nNs6cFEyr9 YvkIGp94XWfMicZ1Zp3jvetjiP7QXJXIAMORdc60x/XI+lnm1UtI3+GRBdMtKl7K ZeDe8EcYU8PfYp6x9bktwSbhU6wql327CTD88aRAee9bMnWqosgWbZigG4g3pNE1 -----END CERTIFICATE-----Generated at Mon Dec 22 00:21:04 2025 by rpki-client