This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft File: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft (raw, json) Hash identifier: NRkhcVX++oAjjkL/zlkvOmPxsruUcuOTwx+3DsGt44U= Subject key identifier: FB:CB:CF:A2:DF:A4:57:AA:97:EB:C2:72:93:A7:B8:AA:B4:65:E5:96 Authority key identifier: 11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 Certificate issuer: /CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Certificate serial: 010D0C9F4328584C4087E4C410908B858F895CCC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft Manifest number: 010D0C9F432858493B4550F98B85D16859A8BF5C Signing time: Sat 20 Dec 2025 18:00:08 +0000 Manifest this update: Sat 20 Dec 2025 18:00:08 +0000 Manifest next update: Mon 22 Dec 2025 18:00:00 +0000 Files and hashes: 1: 3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl (hash: +ApKedKTtCl6Y2yQU6++hQ/NfJSIrps/gt5M33nZfcE=) 2: c322bcb2-1ed8-3132-999a-b219e9f6f9a7.roa (hash: ZesMiu02dPAu6hTno0oIHi+KVGqLmYbzYiwUaNMtwBY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:87:e4:c4:10:90:8b:85:8f:89:5c:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3278e708-d128-4790-a8e3-1e0f4a1a6f4a Validity Not Before: Dec 20 18:00:08 2025 GMT Not After : Dec 22 18:00:00 2025 GMT Subject: CN=4e04d0a3-25c4-4a78-93ce-4f4fd83c94f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:14:46:41:21:70:42:4f:64:0e:09:0b:09:25: 66:09:c1:51:23:2d:c3:46:b4:4f:85:a5:87:78:8e: b8:b3:d7:4f:07:a9:eb:26:13:c7:85:6c:0f:7c:a0: db:3a:d3:ec:0d:91:1e:39:48:b9:e0:8a:17:ce:ed: 32:30:29:5c:22:3a:3c:c7:5c:fe:fd:ee:4a:5f:13: 41:c9:6a:d7:83:e7:4d:3d:c6:f2:6f:80:15:0c:2d: 5d:26:33:f4:85:15:dd:7e:e7:23:c9:b5:21:86:2f: 59:4d:8c:15:4a:77:8d:b5:3e:07:fe:ea:ab:e0:38: da:4a:93:c6:f0:5d:48:8e:61:01:41:04:1a:66:fb: 97:f2:48:af:0c:b6:ed:b2:22:52:be:50:6a:8f:0a: 46:62:f1:0a:c4:1b:be:24:05:f1:d7:7c:68:b0:69: e2:7b:a2:e5:4a:07:7e:df:a9:da:8d:fa:fd:d1:33: ee:41:86:84:ae:c1:40:a2:4f:67:b4:c0:8a:5c:fe: bc:46:a8:94:2f:18:e8:fe:c8:f0:d5:be:8d:fe:77: 79:70:95:c7:20:c2:2b:1e:ba:41:74:2a:17:fd:81: 5b:83:3c:51:67:84:be:5c:44:0f:8e:1b:8c:10:2c: 5a:a2:e2:fa:07:77:74:29:ca:4e:73:1b:dd:e5:2a: 0c:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:CB:CF:A2:DF:A4:57:AA:97:EB:C2:72:93:A7:B8:AA:B4:65:E5:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.crl X509v3 Authority Key Identifier: keyid:11:84:F2:33:1D:BB:25:29:F5:31:3A:68:B9:8F:19:FF:02:0A:EF:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3278e708-d128-4790-a8e3-1e0f4a1a6f4a.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d9:c5:5b:73:96:4a:e8:7e:0a:af:61:19:e7:94:d0:24:8d: 47:92:96:ee:5d:e6:df:45:da:f9:4b:48:c7:cc:c2:26:62:8b: 54:66:0f:d6:c5:71:d9:ef:3c:f8:d4:e6:09:de:51:0a:bd:ba: a2:9e:b8:06:3b:1b:eb:49:8f:67:3d:a0:a6:53:58:6f:5c:9c: 62:c1:7c:1d:7f:ab:e7:20:37:5c:e5:ca:4f:90:7f:66:26:07: 6c:6d:ef:57:b6:b1:e0:57:df:ef:2f:d2:75:06:a9:08:8e:2b: f4:28:65:af:ed:1f:06:e7:a1:e7:a3:b8:ce:1d:ec:64:1f:67: b3:f7:f2:1b:b8:68:b2:9a:6d:40:4b:db:74:b7:3d:f1:e8:a3: 71:09:56:0d:7d:9a:15:45:f6:44:50:a5:d0:36:a1:50:8e:c3: 54:a0:bc:f7:28:2e:e7:93:93:3c:ec:68:a7:b5:f5:72:01:50: 2d:11:99:3f:2b:63:75:0f:4f:e8:69:a8:7c:7c:3d:67:4f:5f: 05:bc:32:c9:f3:11:07:e4:76:5a:f3:90:01:b4:53:dc:10:4b: d7:e0:9c:27:ff:2c:b7:82:0e:23:b3:38:f4:99:02:3f:50:68: 73:6d:85:92:bf:ef:2f:f1:d5:82:d7:f3:f3:00:68:e4:81:76: 91:42:0c:fe -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExAh+TEEJCLhY+JXMwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI3OGU3MDgtZDEyOC00NzkwLWE4ZTMtMWUwZjRhMWE2 ZjRhMB4XDTI1MTIyMDE4MDAwOFoXDTI1MTIyMjE4MDAwMFowLzEtMCsGA1UEAxMk NGUwNGQwYTMtMjVjNC00YTc4LTkzY2UtNGY0ZmQ4M2M5NGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRRGQSFwQk9kDgkLCSVmCcFRIy3DRrRPhaWH eI64s9dPB6nrJhPHhWwPfKDbOtPsDZEeOUi54IoXzu0yMClcIjo8x1z+/e5KXxNB yWrXg+dNPcbyb4AVDC1dJjP0hRXdfucjybUhhi9ZTYwVSneNtT4H/uqr4DjaSpPG 8F1IjmEBQQQaZvuX8kivDLbtsiJSvlBqjwpGYvEKxBu+JAXx13xosGnie6LlSgd+ 36najfr90TPuQYaErsFAok9ntMCKXP68RqiULxjo/sjw1b6N/nd5cJXHIMIrHrpB dCoX/YFbgzxRZ4S+XEQPjhuMECxaouL6B3d0KcpOcxvd5SoMNwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPvLz6LfpFeql+vCcpOnuKq0ZeWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4 ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBmNGExYTZmNGEvMzI3OGU3MDgtZDEyOC00 NzkwLWE4ZTMtMWUwZjRhMWE2ZjRhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzI3OGU3MDgtZDEyOC00NzkwLWE4 ZTMtMWUwZjRhMWE2ZjRhLzMyNzhlNzA4LWQxMjgtNDc5MC1hOGUzLTFlMGY0YTFh NmY0YS5jcmwwHwYDVR0jBBgwFoAUEYTyMx27JSn1MTpouY8Z/wIK71YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMjc4ZTcwOC1kMTI4LTQ3OTAtYThlMy0xZTBm NGExYTZmNGEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAq2cVbc5ZK6H4Kr2EZ55TQ JI1HkpbuXebfRdr5S0jHzMImYotUZg/WxXHZ7zz41OYJ3lEKvbqinrgGOxvrSY9n PaCmU1hvXJxiwXwdf6vnIDdc5cpPkH9mJgdsbe9XtrHgV9/vL9J1BqkIjiv0KGWv 7R8G56Hno7jOHexkH2ez9/IbuGiymm1AS9t0tz3x6KNxCVYNfZoVRfZEUKXQNqFQ jsNUoLz3KC7nk5M87GintfVyAVAtEZk/K2N1D0/oaah8fD1nT18FvDLJ8xEH5HZa 85ABtFPcEEvX4Jwn/yy3gg4jszj0mQI/UGhzbYWSv+8v8dWC1/PzAGjkgXaRQgz+ -----END CERTIFICATE-----Generated at Sun Dec 21 06:03:43 2025 by rpki-client