This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft File: d648fae7-947d-4ab0-9d26-c1da38e440ef.mft (raw, json) Hash identifier: BlLZpViYj20mbmCpRGcKnz8sGlU6z9ZKUulRQdKqy2E= Subject key identifier: DF:82:4F:3F:C6:D2:D0:DF:5F:AD:6A:EB:66:E8:87:8B:63:F7:06:B9 Authority key identifier: 80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 Certificate issuer: /CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Certificate serial: 010D0C9F4328584C40C36CBDDE8CB3C9B403E600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft Manifest number: 010D0C9F43285849304E2F67EDAADDD0B217B3E3 Signing time: Sat 20 Dec 2025 20:00:03 +0000 Manifest this update: Sat 20 Dec 2025 20:00:03 +0000 Manifest next update: Mon 22 Dec 2025 20:00:00 +0000 Files and hashes: 1: ce189ea1-0361-3ce1-9dae-5da864cfcd52.roa (hash: SvfOJDE4oihz4s7l4gUAWt/Bqy6PSs8SrxvyToFnZGU=) 2: d648fae7-947d-4ab0-9d26-c1da38e440ef.crl (hash: ApAPmHHlId4g7xNr0mFWrmwDF3Wl20Oh/o8gmMSVoHE=) 3: ff0d513b-a80f-3c68-9a25-c35917b33ec7.roa (hash: Om5hZ3xEax+IezsXj+ukfkt9oN2q8JdwgzcJk/3K9zs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:c3:6c:bd:de:8c:b3:c9:b4:03:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d648fae7-947d-4ab0-9d26-c1da38e440ef Validity Not Before: Dec 20 20:00:03 2025 GMT Not After : Dec 22 20:00:00 2025 GMT Subject: CN=921f77de-5482-4b01-8bf8-3b438366fc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4b:7d:19:22:3c:45:ee:8e:8a:5f:6f:e8:23: 2b:04:96:6f:41:dc:c7:05:c4:03:9e:46:1c:68:0e: 69:2d:d7:c9:4d:34:d9:90:7b:16:e3:b4:26:b1:09: b7:42:60:75:46:30:26:99:df:3e:42:c8:d4:ca:f7: 6a:ba:dd:19:52:3e:35:22:09:50:3f:10:79:f3:2d: dd:5f:9b:db:de:1b:cb:bb:ab:3e:4b:99:d4:76:48: f8:33:ba:f9:6a:bd:87:04:76:cd:13:b6:ef:2b:7f: 81:37:d8:c2:3b:e5:55:a1:20:73:64:2d:d9:d1:19: 05:9f:fa:a2:96:d7:fe:25:d0:03:cf:04:10:0d:71: e0:8c:27:27:8b:b4:c0:dc:a1:14:1b:60:2a:cf:d9: 8b:8e:ca:73:c3:63:7a:36:70:60:2e:25:a1:2e:1c: bc:a2:e7:b7:1a:ee:ed:c8:2d:5b:ed:2d:bf:9c:04: 20:15:7d:79:be:b1:cb:50:8a:72:8d:15:89:7c:7a: 00:ec:3e:4c:09:03:06:62:18:1a:83:be:0b:30:77: 2f:4c:a4:54:84:b6:3b:6b:0d:85:50:f3:71:dd:bb: 35:72:27:48:ef:bf:dc:d0:39:16:3a:84:58:e5:e7: 96:93:4a:05:f6:95:ca:0c:87:0b:80:2c:b9:1c:fe: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:82:4F:3F:C6:D2:D0:DF:5F:AD:6A:EB:66:E8:87:8B:63:F7:06:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef/d648fae7-947d-4ab0-9d26-c1da38e440ef.crl X509v3 Authority Key Identifier: keyid:80:F3:A0:CA:9D:A0:E2:FB:A9:DA:8F:01:3B:CE:DC:E3:7F:C0:C6:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d648fae7-947d-4ab0-9d26-c1da38e440ef.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:61:b2:69:1f:fd:4e:61:47:33:9d:64:f3:e0:a8:01:a4:a2: be:ff:92:6d:65:08:34:cf:69:d0:9e:66:f7:7f:f9:b0:f5:ea: a9:da:c9:82:22:60:fc:1a:ce:e2:9e:fa:13:66:21:2e:f7:30: 13:11:9d:83:60:dd:76:66:49:6c:d8:c4:22:25:eb:1f:56:1d: 82:b6:40:f6:bb:bc:64:46:de:d8:22:c6:fc:07:71:33:9e:2c: 82:ad:6f:16:62:86:0c:b7:a9:3b:5a:52:ac:f7:d8:cc:96:94: 20:fc:e0:52:0e:4e:17:9d:17:5f:b4:f9:99:e2:d4:7a:6c:7f: af:71:8a:7f:1e:59:b0:bd:91:a0:31:ef:a1:07:1a:d6:d2:2a: 66:3c:78:b5:b2:8f:72:3b:a1:d1:70:5f:db:b7:ad:0c:66:df: bf:c7:90:cd:48:2b:5f:83:e7:8a:b0:34:fe:f0:15:1c:e6:f0: d9:d7:cc:ce:bd:f8:00:75:47:c2:38:c9:9b:f3:9f:f0:78:d1: 47:46:86:0d:8b:2f:aa:a0:89:c8:c4:f1:e1:76:77:da:ec:69: d3:a5:01:cf:c1:ee:2c:2f:9d:fd:87:5d:1f:af:72:f3:50:ac: 97:50:07:7b:59:53:a4:5b:3e:3c:95:7b:95:14:e0:70:ac:a7: 83:b4:45:2e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExAw2y93oyzybQD5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY0OGZhZTctOTQ3ZC00YWIwLTlkMjYtYzFkYTM4ZTQ0 MGVmMB4XDTI1MTIyMDIwMDAwM1oXDTI1MTIyMjIwMDAwMFowLzEtMCsGA1UEAxMk OTIxZjc3ZGUtNTQ4Mi00YjAxLThiZjgtM2I0MzgzNjZmYzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEt9GSI8Re6Oil9v6CMrBJZvQdzHBcQDnkYc aA5pLdfJTTTZkHsW47QmsQm3QmB1RjAmmd8+QsjUyvdqut0ZUj41IglQPxB58y3d X5vb3hvLu6s+S5nUdkj4M7r5ar2HBHbNE7bvK3+BN9jCO+VVoSBzZC3Z0RkFn/qi ltf+JdADzwQQDXHgjCcni7TA3KEUG2Aqz9mLjspzw2N6NnBgLiWhLhy8oue3Gu7t yC1b7S2/nAQgFX15vrHLUIpyjRWJfHoA7D5MCQMGYhgag74LMHcvTKRUhLY7aw2F UPNx3bs1cidI77/c0DkWOoRY5eeWk0oF9pXKDIcLgCy5HP4PsQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN+CTz/G0tDfX61q62boh4tj9wa5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4 ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRhMzhlNDQwZWYvZDY0OGZhZTctOTQ3ZC00 YWIwLTlkMjYtYzFkYTM4ZTQ0MGVmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY0OGZhZTctOTQ3ZC00YWIwLTlk MjYtYzFkYTM4ZTQ0MGVmL2Q2NDhmYWU3LTk0N2QtNGFiMC05ZDI2LWMxZGEzOGU0 NDBlZi5jcmwwHwYDVR0jBBgwFoAUgPOgyp2g4vup2o8BO87c43/AxuIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjQ4ZmFlNy05NDdkLTRhYjAtOWQyNi1jMWRh MzhlNDQwZWYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/YbJpH/1OYUcznWTz4KgB pKK+/5JtZQg0z2nQnmb3f/mw9eqp2smCImD8Gs7invoTZiEu9zATEZ2DYN12Zkls 2MQiJesfVh2CtkD2u7xkRt7YIsb8B3EzniyCrW8WYoYMt6k7WlKs99jMlpQg/OBS Dk4XnRdftPmZ4tR6bH+vcYp/HlmwvZGgMe+hBxrW0ipmPHi1so9yO6HRcF/bt60M Zt+/x5DNSCtfg+eKsDT+8BUc5vDZ18zOvfgAdUfCOMmb85/weNFHRoYNiy+qoInI xPHhdnfa7GnTpQHPwe4sL539h10fr3LzUKyXUAd7WVOkWz48lXuVFOBwrKeDtEUu -----END CERTIFICATE-----Generated at Sun Dec 21 02:01:04 2025 by rpki-client