This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.mft File: 86b44355-f605-46d2-8fa6-d9cab0efb4c2.mft (raw, json) Hash identifier: ec2QcDKI/IxZf6yKV/pHHVptq3RNfKiAnuOA0mib13o= Subject key identifier: 31:1C:C2:35:30:7A:3E:5A:E5:77:B9:DD:F9:B8:2B:C8:70:DD:7A:09 Authority key identifier: 7B:E8:AB:DC:B6:51:BF:52:A2:04:9E:75:C1:48:B4:44:13:0D:9A:0B Certificate issuer: /CN=86b44355-f605-46d2-8fa6-d9cab0efb4c2 Certificate serial: 010D0C9F4328584C40FF0303E4DC195B1EE39B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.mft Manifest number: 010D0C9F43285848B2E20320F3F22286F4602FD6 Signing time: Sat 20 Dec 2025 22:00:08 +0000 Manifest this update: Sat 20 Dec 2025 22:00:08 +0000 Manifest next update: Tue 23 Dec 2025 22:00:00 +0000 Files and hashes: 1: 78c69d26-5ab1-316e-9a91-295c01a41edb.roa (hash: 21pBYQlZJh+LLJvZzrrh04Y+CBNCJYNLRF/vzHGPlyU=) 2: 86b44355-f605-46d2-8fa6-d9cab0efb4c2.crl (hash: YsMmWzM/kpFaZmqaztHqKuZ23J+Zts0GL2USUGs0vfA=) 3: ceff734c-bba1-3dfd-9781-8d001c957177.roa (hash: /A+G7GHj5aeKd/3GIj6JhTIB3IJGcAs9MIQdZLkXZuM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:ff:03:03:e4:dc:19:5b:1e:e3:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b44355-f605-46d2-8fa6-d9cab0efb4c2 Validity Not Before: Dec 20 22:00:08 2025 GMT Not After : Dec 23 22:00:00 2025 GMT Subject: CN=c1fc49c2-1d6b-4d54-a866-5c0ab25de726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:93:0a:cc:6d:81:a8:ac:d8:52:c7:d6:82:e8: 55:90:1d:8c:27:17:f7:3d:79:f0:ca:41:df:be:83: 14:e9:77:dc:0b:a8:fe:f7:7a:a5:8d:b9:9e:d0:64: 92:75:8d:7f:af:0d:43:fd:2c:61:33:e5:cc:35:fc: 13:d7:e8:88:a2:3a:14:d4:72:cb:82:87:57:de:04: f2:e3:f4:50:ae:93:11:7e:1c:79:39:34:d9:36:8c: 8c:f2:c0:4c:fc:cd:b9:65:ff:4d:48:bf:b9:54:18: 7b:fa:3f:13:97:a6:5a:7f:9a:0c:c7:0e:18:b1:30: ef:42:8c:8d:81:2f:87:af:cd:a8:fb:37:57:48:8c: 68:e7:06:12:75:34:67:7c:09:8c:05:0b:b6:cd:bb: 4c:7a:37:9b:cc:1e:88:cc:c1:49:a3:8b:dd:a6:93: df:1d:a5:76:e6:17:06:0c:75:33:75:ef:12:fa:a2: 5a:e8:8c:ee:38:66:a2:b0:e9:85:30:1a:9a:7b:ca: 70:4a:7f:06:00:fc:38:30:d1:19:77:05:b5:ba:6f: 05:26:ec:11:07:d9:fb:a3:68:55:fc:34:82:78:3d: 36:20:25:80:c0:6d:4d:dd:e0:95:63:c0:93:70:a3: 8c:e6:0b:b5:bd:10:1f:6e:c3:cb:4a:ac:c6:8e:e6: 3e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1C:C2:35:30:7A:3E:5A:E5:77:B9:DD:F9:B8:2B:C8:70:DD:7A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.crl X509v3 Authority Key Identifier: keyid:7B:E8:AB:DC:B6:51:BF:52:A2:04:9E:75:C1:48:B4:44:13:0D:9A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f2:f1:97:a1:64:fb:28:b5:38:ec:35:a1:66:6d:6a:c5:6f: 3b:5f:3e:72:5f:2a:e4:30:e2:17:12:7c:e5:6c:fe:8b:07:30: 86:9f:a7:60:15:d3:2f:63:c1:bf:af:56:51:8f:b6:c8:1b:9d: 8a:08:cc:fa:d4:22:67:90:01:14:cb:0c:29:ff:b1:be:84:59: b9:83:42:34:65:fb:19:e0:5e:02:5e:a9:bc:8c:61:a0:00:37: c1:26:00:59:07:0b:b0:80:69:17:9a:59:75:31:69:72:6a:0f: 96:4c:c8:41:93:7b:5d:35:ed:97:87:8b:f6:95:8c:ea:dc:3b: b7:0f:46:e3:4d:5e:6b:2d:d0:8c:85:3e:03:8f:31:48:c0:cb: db:05:ff:e9:cb:03:47:33:d2:3c:b6:b8:dd:07:cf:f2:bd:0b: 44:30:68:6f:2e:51:e4:8b:97:1a:04:d8:4a:25:a5:23:80:87: ec:fa:5f:19:ce:b4:27:ed:34:46:fd:4b:da:94:69:f7:4b:b8: 96:a4:e0:51:a8:3a:e3:50:90:fc:da:8f:ba:ab:0e:8a:b1:cd: a9:7c:0e:8c:85:2a:a4:c2:ad:fa:cd:d5:8b:78:16:40:1b:74: 21:7b:ab:e8:a4:b3:e4:5f:ea:8e:4a:af:92:fa:75:17:4d:7d: fc:5b:95:6f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExA/wMD5NwZWx7jmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiNDQzNTUtZjYwNS00NmQyLThmYTYtZDljYWIwZWZi NGMyMB4XDTI1MTIyMDIyMDAwOFoXDTI1MTIyMzIyMDAwMFowLzEtMCsGA1UEAxMk YzFmYzQ5YzItMWQ2Yi00ZDU0LWE4NjYtNWMwYWIyNWRlNzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJMKzG2BqKzYUsfWguhVkB2MJxf3PXnwykHf voMU6XfcC6j+93qljbme0GSSdY1/rw1D/SxhM+XMNfwT1+iIojoU1HLLgodX3gTy 4/RQrpMRfhx5OTTZNoyM8sBM/M25Zf9NSL+5VBh7+j8Tl6Zaf5oMxw4YsTDvQoyN gS+Hr82o+zdXSIxo5wYSdTRnfAmMBQu2zbtMejebzB6IzMFJo4vdppPfHaV25hcG DHUzde8S+qJa6IzuOGaisOmFMBqae8pwSn8GAPw4MNEZdwW1um8FJuwRB9n7o2hV /DSCeD02ICWAwG1N3eCVY8CTcKOM5gu1vRAfbsPLSqzGjuY+nQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDEcwjUwej5a5Xe53fm4K8hw3XoJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmI0 NDM1NS1mNjA1LTQ2ZDItOGZhNi1kOWNhYjBlZmI0YzIvODZiNDQzNTUtZjYwNS00 NmQyLThmYTYtZDljYWIwZWZiNGMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZiNDQzNTUtZjYwNS00NmQyLThm YTYtZDljYWIwZWZiNGMyLzg2YjQ0MzU1LWY2MDUtNDZkMi04ZmE2LWQ5Y2FiMGVm YjRjMi5jcmwwHwYDVR0jBBgwFoAUe+ir3LZRv1KiBJ51wUi0RBMNmgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmI0NDM1NS1mNjA1LTQ2ZDItOGZhNi1kOWNh YjBlZmI0YzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA38vGXoWT7KLU47DWhZm1q xW87Xz5yXyrkMOIXEnzlbP6LBzCGn6dgFdMvY8G/r1ZRj7bIG52KCMz61CJnkAEU ywwp/7G+hFm5g0I0ZfsZ4F4CXqm8jGGgADfBJgBZBwuwgGkXmll1MWlyag+WTMhB k3tdNe2Xh4v2lYzq3Du3D0bjTV5rLdCMhT4DjzFIwMvbBf/pywNHM9I8trjdB8/y vQtEMGhvLlHki5caBNhKJaUjgIfs+l8ZzrQn7TRG/UvalGn3S7iWpOBRqDrjUJD8 2o+6qw6Ksc2pfA6MhSqkwq36zdWLeBZAG3Qhe6vopLPkX+qOSq+S+nUXTX38W5Vv -----END CERTIFICATE-----Generated at Sun Dec 21 21:14:44 2025 by rpki-client