This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft File: 5a791677-2f6b-4828-a754-1d16b76a8a68.mft (raw, json) Hash identifier: XFuVFcMtHV74txYdg5L82y3uCzxucl5JuwOsVIyYp+o= Subject key identifier: 13:2E:E9:38:8C:96:67:83:52:FA:47:7E:A1:2A:11:AE:71:9D:4E:63 Authority key identifier: 02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46 Certificate issuer: /CN=5a791677-2f6b-4828-a754-1d16b76a8a68 Certificate serial: 010D0C9F4328584C4011BD50944582055A587480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft Manifest number: 010D0C9F4328584846A025F493C3DE50A84E389A Signing time: Sat 20 Dec 2025 14:02:04 +0000 Manifest this update: Sat 20 Dec 2025 14:02:04 +0000 Manifest next update: Tue 23 Dec 2025 03:00:00 +0000 Files and hashes: 1: 57cbe266-8395-37ce-a58a-a3ee3d4fd90a.roa (hash: TYPrHGDuIgVbCsj2LhZtm0d6xZA+qOmHL01IKiWRyHA=) 2: 5a791677-2f6b-4828-a754-1d16b76a8a68.crl (hash: 26n1WxZLJmbgTgjMrzOEhXbp6W2ccE5jghXw6ZlRHqs=) 3: 9e84ce3e-8c53-369f-a42e-90fce0e4a548.roa (hash: wkvm1HVl6QgunioDsicrQO0VvamIsMlQ6dxPmPkYbEU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:bd:50:94:45:82:05:5a:58:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a791677-2f6b-4828-a754-1d16b76a8a68 Validity Not Before: Dec 20 14:02:04 2025 GMT Not After : Dec 23 03:00:00 2025 GMT Subject: CN=321f27ec-5dda-42b4-bf78-b6a31125ec54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f9:8c:28:bf:64:2f:dc:23:2b:bd:2e:8a:ed: 1a:d1:e8:80:8e:fe:30:bb:90:63:96:7a:6b:57:d3: c4:c2:d1:bb:ee:4c:dd:21:9e:b7:5f:e7:19:8d:55: 61:f9:71:12:b2:ef:48:69:c6:4b:0e:2e:1d:39:64: 8e:db:0c:79:2f:eb:db:72:36:b7:83:c1:06:38:a4: 0f:a6:9d:a2:f6:27:fd:24:3e:9a:15:e8:fd:5e:b3: 61:64:91:98:a3:03:94:88:97:55:72:ac:2d:7b:b6: ca:52:53:0d:d2:b2:4a:d6:95:3f:3a:a4:96:b6:52: a2:dc:46:0a:ff:c0:91:ab:8a:da:2d:10:8e:bd:1b: 57:ae:16:cf:f7:d0:83:a5:6a:ec:23:62:aa:2d:87: 96:c9:56:39:8d:e1:ba:98:1b:57:ab:99:f1:78:e0: d0:aa:66:bf:b1:ae:59:bb:09:89:53:96:06:2b:88: 43:e8:85:dc:d9:8d:e3:92:8b:77:3c:56:b9:c0:4a: 5b:4a:1b:15:54:0d:1f:7e:8c:12:92:87:6d:d8:68: bb:23:6a:a6:b4:25:96:0d:0f:17:f2:83:2a:df:71: a9:17:cd:de:1a:3d:3e:ef:7b:a8:1f:bd:5d:6d:60: 3f:b6:1d:5a:40:d4:d3:0a:bd:d1:ac:5e:e8:1c:c2: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:2E:E9:38:8C:96:67:83:52:FA:47:7E:A1:2A:11:AE:71:9D:4E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl X509v3 Authority Key Identifier: keyid:02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:24:a9:98:0f:f5:52:dd:eb:a3:4f:3f:b2:57:c0:be:0d:6d: e7:39:25:ae:dc:bd:ef:38:09:67:1b:01:25:7f:c8:44:b5:3d: bd:b5:b6:95:b1:86:46:b8:9c:7d:c8:5d:3d:c4:c0:4a:3b:83: 9e:f0:e4:31:73:8e:b7:c4:de:97:8e:98:ac:3c:3d:fa:3e:16: a3:3d:c9:cb:17:9f:0c:60:0c:55:e9:b0:0d:7f:00:d1:f9:cc: 88:1b:15:e4:e0:13:07:1d:4b:d9:c0:03:4b:45:13:13:a9:bb: e1:86:d2:67:47:bb:9c:b4:a1:0a:bb:bc:5b:3b:10:e4:2f:c3: 63:f7:2c:9e:cd:ae:57:20:28:67:c2:aa:8f:92:ee:2e:21:ea: 73:24:7f:55:b1:ab:8a:06:8f:08:18:3f:9a:69:34:fe:6e:e8: 66:05:60:57:a4:22:d7:cc:f6:03:29:58:bb:24:04:29:21:e2: 33:8d:b4:bf:d0:e2:73:05:3b:2a:1a:6a:d4:54:dd:1f:f7:3d: 2a:5a:38:5f:d7:88:2f:ad:25:91:44:d2:51:3d:62:25:29:bf: 26:31:26:84:23:57:d6:a0:be:d9:12:52:31:c9:19:54:87:1e: bb:8f:78:15:33:19:7d:64:d4:e7:7f:d5:23:6a:f0:e1:01:f9: 06:9e:65:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExAEb1QlEWCBVpYdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE3OTE2NzctMmY2Yi00ODI4LWE3NTQtMWQxNmI3NmE4 YTY4MB4XDTI1MTIyMDE0MDIwNFoXDTI1MTIyMzAzMDAwMFowLzEtMCsGA1UEAxMk MzIxZjI3ZWMtNWRkYS00MmI0LWJmNzgtYjZhMzExMjVlYzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvmMKL9kL9wjK70uiu0a0eiAjv4wu5Bjlnpr V9PEwtG77kzdIZ63X+cZjVVh+XESsu9IacZLDi4dOWSO2wx5L+vbcja3g8EGOKQP pp2i9if9JD6aFej9XrNhZJGYowOUiJdVcqwte7bKUlMN0rJK1pU/OqSWtlKi3EYK /8CRq4raLRCOvRtXrhbP99CDpWrsI2KqLYeWyVY5jeG6mBtXq5nxeODQqma/sa5Z uwmJU5YGK4hD6IXc2Y3jkot3PFa5wEpbShsVVA0ffowSkodt2Gi7I2qmtCWWDQ8X 8oMq33GpF83eGj0+73uoH71dbWA/th1aQNTTCr3RrF7oHMK/fQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBMu6TiMlmeDUvpHfqEqEa5xnU5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTc5 MTY3Ny0yZjZiLTQ4MjgtYTc1NC0xZDE2Yjc2YThhNjgvNWE3OTE2NzctMmY2Yi00 ODI4LWE3NTQtMWQxNmI3NmE4YTY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWE3OTE2NzctMmY2Yi00ODI4LWE3 NTQtMWQxNmI3NmE4YTY4LzVhNzkxNjc3LTJmNmItNDgyOC1hNzU0LTFkMTZiNzZh OGE2OC5jcmwwHwYDVR0jBBgwFoAUAtjlyJOk+AK2NNm1H49BVbtqmUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTc5MTY3Ny0yZjZiLTQ4MjgtYTc1NC0xZDE2 Yjc2YThhNjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2JKmYD/VS3eujTz+yV8C+ DW3nOSWu3L3vOAlnGwElf8hEtT29tbaVsYZGuJx9yF09xMBKO4Oe8OQxc463xN6X jpisPD36PhajPcnLF58MYAxV6bANfwDR+cyIGxXk4BMHHUvZwANLRRMTqbvhhtJn R7uctKEKu7xbOxDkL8Nj9yyeza5XIChnwqqPku4uIepzJH9VsauKBo8IGD+aaTT+ buhmBWBXpCLXzPYDKVi7JAQpIeIzjbS/0OJzBTsqGmrUVN0f9z0qWjhf14gvrSWR RNJRPWIlKb8mMSaEI1fWoL7ZElIxyRlUhx67j3gVMxl9ZNTnf9UjavDhAfkGnmUV -----END CERTIFICATE-----Generated at Sat Dec 20 18:41:22 2025 by rpki-client