This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft File: 2da4b7dc-6e43-4290-86d6-84e81139f164.mft (raw, json) Hash identifier: 5JpF/vqkQetDi8DWr/CDBQznyYYdMKilS5Pvv+YAa0o= Subject key identifier: E2:CC:F8:8A:82:EA:9F:43:57:D6:D0:2E:DD:0D:13:C6:ED:1F:18:DE Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F4328584C4011BD72341EA371167BCC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft Manifest number: 010D0C9F432858483B39DBB01CC833623E52E2BD Signing time: Sat 20 Dec 2025 14:02:04 +0000 Manifest this update: Sat 20 Dec 2025 14:02:04 +0000 Manifest next update: Tue 23 Dec 2025 01:00:00 +0000 Files and hashes: 1: 1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa (hash: 14qXIuOWVFq9bOQ3fky1jOUcBX+0kSq6ETn71mtLWXU=) 2: 2da4b7dc-6e43-4290-86d6-84e81139f164.crl (hash: Wji+C6J+avxVVVlcgxeRlXlcfdGrK5jpYS6NqsD6Y1k=) 3: 40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa (hash: tEcBC5UwvoH9t2m6FhzXejsK3RwdCH3VfRbPlSlCLtM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:bd:72:34:1e:a3:71:16:7b:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Dec 20 14:02:04 2025 GMT Not After : Dec 23 01:00:00 2025 GMT Subject: CN=5d0ef029-1530-4b31-b064-12eab92716a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:38:84:bf:cf:3f:ad:fe:18:ab:0e:db:3d:41: ba:21:29:7f:98:a0:10:ca:6b:1f:9e:26:9c:a2:c1: 3e:5a:73:2a:25:e2:b7:c5:93:2b:99:4f:63:8d:24: 41:c2:6c:42:6c:ba:8d:7e:52:c3:b5:39:02:77:59: 84:f6:91:50:8e:84:5f:02:80:b5:e8:bb:ae:83:10: 12:bf:01:3c:fe:7e:bc:c2:cb:f2:23:07:d7:c2:f8: ee:5b:c2:13:0d:68:a8:dc:ed:75:e7:b7:d9:56:7b: e9:53:de:0a:39:21:94:66:17:24:95:69:d9:14:81: 2e:d6:c4:4d:7b:0a:28:3b:7a:f8:79:88:30:a5:10: 8f:ba:2f:5b:d3:98:b7:6e:81:bb:1f:33:ba:5b:40: ed:2c:1d:7a:b5:52:fd:e3:20:86:22:b3:fd:b7:82: 67:26:d3:49:fe:36:82:64:e2:e3:6f:d8:fa:36:0e: af:54:2f:22:a2:98:22:9e:bb:50:e2:f9:73:ed:1a: 1a:e7:74:9c:ac:d9:8c:20:81:5e:ad:89:6d:72:32: 15:8f:7b:5a:8e:52:e8:01:df:e6:7b:a2:7c:03:4d: ac:d6:cf:ed:94:8c:9b:af:df:c3:69:e7:3d:6b:99: f6:08:0e:34:f5:13:29:11:42:31:45:84:84:ce:21: 1f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:CC:F8:8A:82:EA:9F:43:57:D6:D0:2E:DD:0D:13:C6:ED:1F:18:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:80:33:70:3d:3b:dd:c6:2c:4f:2f:23:b0:c1:86:e6:a6:f0: e2:2c:87:e1:6b:dc:2a:83:9b:f6:94:0a:d6:99:8c:db:83:5f: b0:37:83:ab:cf:0a:f1:24:34:d1:66:0e:47:06:fa:7d:f5:bd: e3:4d:12:4f:2c:a0:2c:6c:3c:89:57:c8:a9:e6:d0:20:6a:1f: 56:7d:8b:8c:0c:53:53:25:5e:3b:17:50:08:ca:da:86:50:94: 86:40:8e:ac:3a:9c:47:b6:4c:83:27:59:cc:ae:a7:ab:4d:66: 4a:4c:b3:1a:9b:e1:b0:57:61:fd:a1:e8:47:06:95:13:1a:47: 18:3d:4b:42:39:8c:a8:0e:fd:ff:ab:db:23:fd:73:99:e3:75: c1:46:83:c9:f1:e6:27:e1:34:cb:3b:c0:db:a8:ea:85:f1:09: a0:ef:b4:c5:35:14:98:4e:2f:c7:aa:3a:73:58:a8:2b:5a:f4: bc:2a:5a:e2:4f:c1:b5:21:c1:82:9f:2a:1d:18:73:0c:4f:4e: 67:f7:95:e2:fa:b0:bd:b3:cd:1b:cd:cb:0a:76:1f:2d:b0:12: a2:6f:0b:af:7a:83:c5:64:46:45:e1:d8:50:90:b4:0d:c3:88: 0a:68:78:34:dc:08:ad:76:77:99:56:dd:8f:95:e2:67:6b:55: 45:41:3a:fa -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExAEb1yNB6jcRZ7zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI1MTIyMDE0MDIwNFoXDTI1MTIyMzAxMDAwMFowLzEtMCsGA1UEAxMk NWQwZWYwMjktMTUzMC00YjMxLWIwNjQtMTJlYWI5MjcxNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArziEv88/rf4Yqw7bPUG6ISl/mKAQymsfniac osE+WnMqJeK3xZMrmU9jjSRBwmxCbLqNflLDtTkCd1mE9pFQjoRfAoC16LuugxAS vwE8/n68wsvyIwfXwvjuW8ITDWio3O1157fZVnvpU94KOSGUZhcklWnZFIEu1sRN ewooO3r4eYgwpRCPui9b05i3boG7HzO6W0DtLB16tVL94yCGIrP9t4JnJtNJ/jaC ZOLjb9j6Ng6vVC8iopginrtQ4vlz7Roa53ScrNmMIIFerYltcjIVj3tajlLoAd/m e6J8A02s1s/tlIybr9/Daec9a5n2CA409RMpEUIxRYSEziEfnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOLM+IqC6p9DV9bQLt0NE8btHxjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvMmRhNGI3ZGMtNmU0My00 MjkwLTg2ZDYtODRlODExMzlmMTY0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABgDNwPTvdxixPLyOwwYbm pvDiLIfha9wqg5v2lArWmYzbg1+wN4OrzwrxJDTRZg5HBvp99b3jTRJPLKAsbDyJ V8ip5tAgah9WfYuMDFNTJV47F1AIytqGUJSGQI6sOpxHtkyDJ1nMrqerTWZKTLMa m+GwV2H9oehHBpUTGkcYPUtCOYyoDv3/q9sj/XOZ43XBRoPJ8eYn4TTLO8DbqOqF 8Qmg77TFNRSYTi/HqjpzWKgrWvS8KlriT8G1IcGCnyodGHMMT05n95Xi+rC9s80b zcsKdh8tsBKibwuveoPFZEZF4dhQkLQNw4gKaHg03AitdneZVt2PleJna1VFQTr6 -----END CERTIFICATE-----Generated at Sat Dec 20 22:47:23 2025 by rpki-client