This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft File: 21428d3a-0040-4c60-9202-cd68b2fd51de.mft (raw, json) Hash identifier: olgpsoyzi7Ow1UF6my6fS1wn4QH7xvpsjZ63VC7GOZY= Subject key identifier: 2A:1E:68:0A:48:DD:0F:A7:8E:5F:95:0E:54:BC:D0:4D:AE:64:1C:89 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F4328584C40E13C0AEA3253FD6146D900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft Manifest number: 010D0C9F43285849095C568CC434510E452459AF Signing time: Sat 20 Dec 2025 21:00:08 +0000 Manifest this update: Sat 20 Dec 2025 21:00:08 +0000 Manifest next update: Mon 22 Dec 2025 21:00:00 +0000 Files and hashes: 1: 21428d3a-0040-4c60-9202-cd68b2fd51de.crl (hash: VPhZAHLJBIv3atAy73b8tBfGBqFk+hK2ZTb/gCdVfbU=) 2: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (hash: B/fXTfeSP5nz69mBHCwEAufkZo7mpP3WJm5k2llEAb0=) 3: d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa (hash: h6mq6cZpHjkpdt87yB3WzDormW30hScxXCrXxzVhipM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:e1:3c:0a:ea:32:53:fd:61:46:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Dec 20 21:00:08 2025 GMT Not After : Dec 22 21:00:00 2025 GMT Subject: CN=44e3ccdb-d27e-4257-ba77-88d77a9f58a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:08:16:ef:4d:5a:1a:85:7c:0e:65:d8:b2: 76:2e:74:a1:33:2a:16:cf:fe:87:da:a8:48:23:2a: 71:89:d7:0e:9e:2f:4c:ae:29:1f:4b:d9:88:54:c4: d2:8f:f2:8b:d1:9e:fc:65:cd:15:62:52:89:30:20: 81:d5:0b:27:ca:2b:ab:8e:bd:9e:e9:cf:52:2f:92: b8:41:16:8d:5d:36:49:c3:29:e6:14:ba:d4:1c:dc: a3:a0:53:74:92:15:24:01:eb:5f:c1:44:0b:81:7b: 7f:b9:dc:48:f5:a0:66:e1:f6:56:1f:9b:e7:cb:72: e2:84:ec:ae:94:ef:a9:bf:00:9d:22:b9:24:d6:cc: a3:6c:29:ab:c8:79:35:8f:96:99:89:6e:65:25:e9: a8:22:12:a9:6c:14:8f:74:39:2f:47:66:06:5d:34: 40:22:da:d5:88:04:5a:56:48:42:76:15:96:f8:3b: dc:92:e8:32:ef:c5:49:ec:c8:fa:71:67:45:01:e7: 72:03:1e:54:46:51:53:e7:29:b2:b2:c1:68:13:0c: 03:79:42:13:0a:dc:a5:48:89:42:d0:9b:65:dc:9a: 35:cd:dd:01:f3:8e:63:15:ee:90:2f:c1:54:c8:c2: ab:f4:42:99:eb:c6:74:0a:fc:54:fd:1f:5c:2b:d1: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1E:68:0A:48:DD:0F:A7:8E:5F:95:0E:54:BC:D0:4D:AE:64:1C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:97:94:71:c6:a2:4f:71:94:1b:22:96:05:f2:90:ed:f0:31: 1a:b5:52:07:d4:d3:0f:c5:aa:8d:1a:63:c1:dd:eb:90:c6:8d: b7:58:04:86:05:77:a8:72:5f:71:85:2a:a3:cf:51:cd:2d:ee: 23:79:2d:97:86:63:5a:d8:7e:d9:e5:df:70:0d:d7:8e:e8:e9: 49:8b:74:dd:a4:20:44:85:00:2a:d2:9b:b0:18:92:0e:6a:f8: 5c:d4:68:c4:da:5f:76:53:9d:3d:c4:76:fe:5a:fe:04:2b:ea: 3d:93:a5:5f:41:a2:34:26:27:e0:18:8e:95:80:c5:5b:67:1c: 47:95:a3:cc:70:a7:22:a3:4b:e6:e3:4f:50:da:b0:f3:0a:a1: ec:98:74:0a:f4:f9:d4:24:d6:4f:71:a9:73:f3:55:24:94:d4: da:68:a1:2d:60:36:3a:78:99:9c:04:6f:c4:4a:a0:a9:d9:2b: 0a:2f:7c:30:53:10:0c:c3:a5:65:1e:d4:50:bb:7a:06:1f:ea: c2:52:62:4b:e8:6f:cf:7e:9c:a4:a3:3e:58:cd:31:3f:b9:63: 38:b3:67:ba:d7:a0:b5:0a:99:d7:7f:60:fd:d6:94:1e:36:3b: 73:81:c3:ff:70:14:ad:05:2d:b3:d0:24:7c:e2:05:52:df:47: ab:da:05:c3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExA4TwK6jJT/WFG2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI1MTIyMDIxMDAwOFoXDTI1MTIyMjIxMDAwMFowLzEtMCsGA1UEAxMk NDRlM2NjZGItZDI3ZS00MjU3LWJhNzctODhkNzdhOWY1OGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieQIFu9NWhqFfA5l2LJ2LnShMyoWz/6H2qhI IypxidcOni9MrikfS9mIVMTSj/KL0Z78Zc0VYlKJMCCB1Qsnyiurjr2e6c9SL5K4 QRaNXTZJwynmFLrUHNyjoFN0khUkAetfwUQLgXt/udxI9aBm4fZWH5vny3LihOyu lO+pvwCdIrkk1syjbCmryHk1j5aZiW5lJemoIhKpbBSPdDkvR2YGXTRAItrViARa VkhCdhWW+Dvckugy78VJ7Mj6cWdFAedyAx5URlFT5ymyssFoEwwDeUITCtylSIlC 0Jtl3Jo1zd0B845jFe6QL8FUyMKr9EKZ68Z0CvxU/R9cK9FBNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCoeaApI3Q+njl+VDlS80E2uZByJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvMjE0MjhkM2EtMDA0MC00 YzYwLTkyMDItY2Q2OGIyZmQ1MWRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPl5RxxqJPcZQbIpYF8pDt 8DEatVIH1NMPxaqNGmPB3euQxo23WASGBXeocl9xhSqjz1HNLe4jeS2XhmNa2H7Z 5d9wDdeO6OlJi3TdpCBEhQAq0puwGJIOavhc1GjE2l92U509xHb+Wv4EK+o9k6Vf QaI0JifgGI6VgMVbZxxHlaPMcKcio0vm409Q2rDzCqHsmHQK9PnUJNZPcalz81Uk lNTaaKEtYDY6eJmcBG/ESqCp2SsKL3wwUxAMw6VlHtRQu3oGH+rCUmJL6G/Pfpyk oz5YzTE/uWM4s2e616C1CpnXf2D91pQeNjtzgcP/cBStBS2z0CR84gVS30er2gXD -----END CERTIFICATE-----Generated at Sun Dec 21 04:57:41 2025 by rpki-client