This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft File: a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft (raw, json) Hash identifier: sjAG4UAHQOjywx9HJ4/Owfcaqjyi30b93Jqym6G/Jm8= Subject key identifier: F3:9A:4D:DF:AE:95:D9:EF:2C:B2:D4:0C:73:F1:D9:DC:D6:34:8F:E4 Authority key identifier: EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2 Certificate issuer: /CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac Certificate serial: 010D0C9F4328584C42F94044F4201E6BDC07FEE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft Manifest number: 010D0C9F43285848B4E93025F73C4C0DDA1BB68F Signing time: Sun 21 Dec 2025 15:00:08 +0000 Manifest this update: Sun 21 Dec 2025 15:00:08 +0000 Manifest next update: Wed 24 Dec 2025 15:00:00 +0000 Files and hashes: 1: 3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa (hash: bPkUAzLOtxBWV3HH/RM8I/WhJuuPzBa53vRVFu5FjF4=) 2: a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl (hash: qGAB9J/378Aoq/WtlcTSgyypawtGMTd5XSli1zH1SEg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:f9:40:44:f4:20:1e:6b:dc:07:fe:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac Validity Not Before: Dec 21 15:00:08 2025 GMT Not After : Dec 24 15:00:00 2025 GMT Subject: CN=3f1a20c8-df9d-4875-b05a-86c1ccaf0158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ed:1d:5f:18:cf:a6:fd:9f:3f:ee:2a:df:b3: 73:26:22:93:d0:eb:9d:be:68:59:34:ce:bf:c0:dc: ba:d4:10:dd:7f:8b:4f:a5:f4:13:fa:fc:92:d5:22: a7:aa:01:bd:ca:31:a9:cd:8c:36:73:93:f0:be:da: e6:f0:90:fb:3a:42:97:ba:bf:11:42:b6:b9:9e:1b: 77:49:00:03:99:bf:07:b3:45:38:57:f0:e8:f4:6f: 13:b1:d0:e7:6e:58:a0:6a:1c:43:91:9f:25:f3:6d: 00:26:b8:86:54:76:75:f4:c0:4f:d6:54:8a:8e:6b: d6:03:e0:5e:da:cc:44:6b:42:42:bc:18:2a:88:06: fb:a5:e9:3e:18:bf:14:0c:1e:08:8f:6e:c5:d2:01: 8c:7e:52:b3:60:7e:72:f7:82:22:0d:96:dc:d9:a6: 88:70:ca:f4:aa:74:09:cc:f2:49:5d:69:22:f5:c3: 62:66:52:99:10:c3:3e:fd:42:fa:cf:73:fd:cc:09: 1b:08:78:14:e9:14:00:e7:9b:d9:f5:b5:89:b2:64: 2e:60:96:10:c7:8a:ba:90:93:d9:7e:7f:8b:34:46: cb:28:33:1a:28:bf:41:08:38:39:d7:b8:27:95:19: 69:33:a3:b6:0e:f1:e5:e1:cb:2a:a2:ac:7e:18:fc: 7c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9A:4D:DF:AE:95:D9:EF:2C:B2:D4:0C:73:F1:D9:DC:D6:34:8F:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl X509v3 Authority Key Identifier: keyid:EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f3:c0:7c:15:0d:b7:16:13:cc:c6:b1:c1:c8:26:cc:4b:68: 6d:60:c0:50:72:33:aa:5a:e4:1c:c6:dc:e7:20:8f:f3:74:4a: 17:2f:08:60:f1:b8:74:27:4e:c6:36:6c:d2:7b:79:20:5e:31: 06:47:49:42:e3:fd:0e:21:e5:5d:eb:63:27:68:53:67:b6:f5: a2:83:fe:06:de:aa:61:1d:84:b4:4c:a6:ec:05:5e:ac:0f:cd: 4c:24:ed:4a:2b:5d:c6:80:68:10:4f:3c:c8:76:68:73:a5:8f: fc:27:02:ea:85:47:88:7d:55:c9:25:23:8f:e5:f3:c6:09:e7: 68:91:00:12:79:32:03:bb:ae:29:5f:2e:b9:f9:48:97:d0:f5: 63:26:d4:99:31:5b:27:25:48:62:7f:dc:3d:91:ea:3a:b4:7f: 6c:e7:20:24:35:db:f3:75:2a:d0:37:21:7c:fb:25:32:b8:b0: bd:de:1f:d8:0a:42:78:fc:73:5f:79:55:38:7b:7d:d6:45:0a: 44:2e:46:9d:af:ac:10:2e:41:6a:62:1d:e4:3a:66:27:02:61: a9:e3:81:d0:fd:98:79:83:33:5f:9d:25:0c:13:18:df:a4:05: 2e:b7:b3:76:21:5e:52:79:c1:93:5f:9d:52:e1:6b:df:cf:a5: c0:3b:65:a7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExC+UBE9CAea9wH/uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkYjVjMDktNDU5MC00NGI1LTgwMjMtZmE0YmRkOGQ1 YmFjMB4XDTI1MTIyMTE1MDAwOFoXDTI1MTIyNDE1MDAwMFowLzEtMCsGA1UEAxMk M2YxYTIwYzgtZGY5ZC00ODc1LWIwNWEtODZjMWNjYWYwMTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu0dXxjPpv2fP+4q37NzJiKT0OudvmhZNM6/ wNy61BDdf4tPpfQT+vyS1SKnqgG9yjGpzYw2c5Pwvtrm8JD7OkKXur8RQra5nht3 SQADmb8Hs0U4V/Do9G8TsdDnbligahxDkZ8l820AJriGVHZ19MBP1lSKjmvWA+Be 2sxEa0JCvBgqiAb7pek+GL8UDB4Ij27F0gGMflKzYH5y94IiDZbc2aaIcMr0qnQJ zPJJXWki9cNiZlKZEMM+/UL6z3P9zAkbCHgU6RQA55vZ9bWJsmQuYJYQx4q6kJPZ fn+LNEbLKDMaKL9BCDg517gnlRlpM6O2DvHl4csqoqx+GPx8HwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPOaTd+uldnvLLLUDHPx2dzWNI/kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMWRi NWMwOS00NTkwLTQ0YjUtODAyMy1mYTRiZGQ4ZDViYWMvYTFkYjVjMDktNDU5MC00 NGI1LTgwMjMtZmE0YmRkOGQ1YmFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTFkYjVjMDktNDU5MC00NGI1LTgw MjMtZmE0YmRkOGQ1YmFjL2ExZGI1YzA5LTQ1OTAtNDRiNS04MDIzLWZhNGJkZDhk NWJhYy5jcmwwHwYDVR0jBBgwFoAU7rwCsiNn8mpRWhZ/XnIjvJYNQKIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMWRiNWMwOS00NTkwLTQ0YjUtODAyMy1mYTRi ZGQ4ZDViYWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCV88B8FQ23FhPMxrHByCbM S2htYMBQcjOqWuQcxtznII/zdEoXLwhg8bh0J07GNmzSe3kgXjEGR0lC4/0OIeVd 62MnaFNntvWig/4G3qphHYS0TKbsBV6sD81MJO1KK13GgGgQTzzIdmhzpY/8JwLq hUeIfVXJJSOP5fPGCedokQASeTIDu64pXy65+UiX0PVjJtSZMVsnJUhif9w9keo6 tH9s5yAkNdvzdSrQNyF8+yUyuLC93h/YCkJ4/HNfeVU4e33WRQpELkadr6wQLkFq Yh3kOmYnAmGp44HQ/Zh5gzNfnSUMExjfpAUut7N2IV5SecGTX51S4Wvfz6XAO2Wn -----END CERTIFICATE-----Generated at Sun Dec 21 22:32:50 2025 by rpki-client