This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft File: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json) Hash identifier: WEdXNoBxaIIf0zyreGoWU6kmaUufrsAGp0+8REE5xEM= Subject key identifier: 29:9A:B2:76:D9:3E:6C:32:2C:D2:36:87:83:0B:DE:55:2A:EE:6F:72 Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584C420AF9252DCA3A97B6CC8200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft Manifest number: 010D0C9F432858496F11AC5DAA98339370060689 Signing time: Sun 21 Dec 2025 07:00:03 +0000 Manifest this update: Sun 21 Dec 2025 07:00:03 +0000 Manifest next update: Tue 23 Dec 2025 07:00:00 +0000 Files and hashes: 1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: b//SeEkQzg5HSb1jSYdlWe9m4LfhlL7sPm/46Bu6lT0=) 2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: TAAI9m6efdkpYv5147fpNO82hbpDXV1vBlhhtgOtKEA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:0a:f9:25:2d:ca:3a:97:b6:cc:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Dec 21 07:00:03 2025 GMT Not After : Dec 23 07:00:00 2025 GMT Subject: CN=9efb376b-cd1b-4cde-8cef-54127606ec46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d2:00:f6:2e:47:30:f4:59:44:ea:51:37:9b: 7a:40:e4:a9:3f:43:81:c9:b0:a5:2a:cb:55:e9:fc: 2d:80:0c:43:18:86:1b:84:7d:d9:dd:87:03:37:40: 88:48:5a:f0:89:a0:8d:03:52:5e:0a:3e:a2:1e:1a: d0:e3:5b:40:26:d3:a8:36:ee:c1:c1:99:57:a6:ca: 5e:7b:02:db:90:a8:83:cc:89:df:26:3c:bd:ca:ef: 4d:63:e5:26:bf:04:75:95:24:02:cd:00:95:3c:c3: 4a:e9:12:0d:0c:02:e7:4c:1d:ad:7f:f7:47:6d:3b: 4d:92:27:36:8e:79:0d:c7:9f:25:9a:b5:f2:75:cd: 2b:1d:38:d9:32:19:cf:81:5c:8a:1a:85:88:ad:25: e6:39:f4:42:61:2c:b8:b6:c2:5b:44:db:b5:db:dc: 9c:4d:33:76:46:9a:7f:2c:89:27:9d:15:07:92:4e: bc:9f:42:65:e4:a2:e2:8d:6c:3c:2d:06:e2:39:13: 43:bb:04:22:61:b3:3d:e5:10:a0:0d:fa:c1:cb:65: 95:61:87:b5:79:60:55:3d:17:ef:cf:b8:53:f3:f8: 4b:2e:2f:aa:a3:6e:e3:92:66:82:00:7a:61:f0:e8: eb:4a:da:f6:26:5e:1c:5e:10:1e:3d:f9:7d:97:21: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9A:B2:76:D9:3E:6C:32:2C:D2:36:87:83:0B:DE:55:2A:EE:6F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ce:43:37:46:65:49:20:e0:c0:2e:37:fc:76:6a:bd:09:1c: 79:e8:bd:f5:b9:db:42:8e:51:e5:f7:16:91:e8:0e:f9:4c:96: 81:bc:9f:b2:00:7c:74:cb:c4:bc:30:f1:1f:95:ee:c3:5a:50: 7d:56:50:a4:56:83:a4:0c:73:6a:47:51:6f:d0:ad:6c:e0:6c: 77:28:d5:20:ce:37:5e:57:c5:2d:98:40:db:0d:28:b9:00:f3: c3:f9:02:9c:9c:42:11:e1:dc:7c:5c:36:74:fe:36:b2:99:7e: f1:ea:89:2f:1b:9f:b5:5d:f1:79:5c:06:79:78:a5:27:6e:24: f3:74:15:34:93:a9:f7:99:0c:3b:6a:03:47:47:83:b0:72:84: 8b:14:33:28:58:56:60:a5:3e:54:e3:03:a7:76:fe:45:e7:5f: e5:4f:b8:09:63:8d:58:c1:d9:94:60:d6:59:4f:01:3a:9d:81: 4b:ca:41:23:8b:07:43:17:3a:c3:8c:bf:5e:59:83:6a:81:38: 55:93:8e:a8:2a:a3:6e:02:9e:23:5d:c8:99:f9:5d:1d:b9:e2: 12:f6:21:04:be:e1:aa:af:80:15:cf:d8:82:50:98:96:a7:25: d1:8a:13:ed:f4:1b:bc:99:cc:8b:e9:f6:c7:35:31:fd:84:67: 0b:48:f3:ec -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExCCvklLco6l7bMggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI1MTIyMTA3MDAwM1oXDTI1MTIyMzA3MDAwMFowLzEtMCsGA1UEAxMk OWVmYjM3NmItY2QxYi00Y2RlLThjZWYtNTQxMjc2MDZlYzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9IA9i5HMPRZROpRN5t6QOSpP0OBybClKstV 6fwtgAxDGIYbhH3Z3YcDN0CISFrwiaCNA1JeCj6iHhrQ41tAJtOoNu7BwZlXpspe ewLbkKiDzInfJjy9yu9NY+UmvwR1lSQCzQCVPMNK6RINDALnTB2tf/dHbTtNkic2 jnkNx58lmrXydc0rHTjZMhnPgVyKGoWIrSXmOfRCYSy4tsJbRNu129ycTTN2Rpp/ LIknnRUHkk68n0Jl5KLijWw8LQbiORNDuwQiYbM95RCgDfrBy2WVYYe1eWBVPRfv z7hT8/hLLi+qo27jkmaCAHph8OjrStr2Jl4cXhAePfl9lyFsswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCmasnbZPmwyLNI2h4ML3lUq7m9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMmJjNjQ4YzItMmY5NS00 OGY1LWFjYjctOWU4YTJmOTEyM2E3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7zkM3RmVJIODALjf8dmq9 CRx56L31udtCjlHl9xaR6A75TJaBvJ+yAHx0y8S8MPEfle7DWlB9VlCkVoOkDHNq R1Fv0K1s4Gx3KNUgzjdeV8UtmEDbDSi5APPD+QKcnEIR4dx8XDZ0/jaymX7x6okv G5+1XfF5XAZ5eKUnbiTzdBU0k6n3mQw7agNHR4OwcoSLFDMoWFZgpT5U4wOndv5F 51/lT7gJY41YwdmUYNZZTwE6nYFLykEjiwdDFzrDjL9eWYNqgThVk46oKqNuAp4j XciZ+V0dueIS9iEEvuGqr4AVz9iCUJiWpyXRihPt9Bu8mcyL6fbHNTH9hGcLSPPs -----END CERTIFICATE-----Generated at Mon Dec 22 01:55:43 2025 by rpki-client