This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft File: 3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft (raw, json) Hash identifier: n6dv4b+7A2Ve6Fr8xwo9D+8ZoVNCrH4qK7iMeQtKLxw= Subject key identifier: DA:DC:AE:1F:55:02:2F:D1:7F:44:79:07:40:BD:21:0E:EA:59:A8:BC Authority key identifier: E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 Certificate issuer: /CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Certificate serial: 010D0C9F4328584C40FF060EDD96A261A11E4180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft Manifest number: 010D0C9F4328584630D8890B985FF4B277D4B309 Signing time: Sat 20 Dec 2025 22:00:08 +0000 Manifest this update: Sat 20 Dec 2025 22:00:08 +0000 Manifest next update: Tue 23 Dec 2025 22:00:00 +0000 Files and hashes: 1: 3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl (hash: oicCtFcKI3pO4kcifyyoLEmAb8y8u5pXYo5tQWCA4fk=) 2: d56026a1-cfac-3474-a6ad-48aea0c9a396.roa (hash: ijF0cxifP9HjoWdH6V68sIyY5EADNbJMwf7jaNxKpjY=) 3: d9b5c80e-ec2a-3a44-a56f-fc659565fd8f.roa (hash: qxVNKOGJWYiYqBGwcBq+9t4eyP7AngyXXUkcJC1/CD0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:ff:06:0e:dd:96:a2:61:a1:1e:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c70845f-7a59-44ea-8f3a-c3d10affa9e5 Validity Not Before: Dec 20 22:00:08 2025 GMT Not After : Dec 23 22:00:00 2025 GMT Subject: CN=9164815e-4a72-4cc0-a837-5d7f891b9d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:80:c3:3b:e4:7e:45:3f:3b:29:9d:ee:24:20: 48:24:3c:9b:f1:0a:95:14:9d:90:60:e8:cb:16:d3: d9:0b:89:b1:6c:73:cd:44:9f:de:f2:f1:42:00:1a: 17:29:60:7f:8b:e8:78:e9:d0:b4:fa:37:80:45:76: 9b:98:54:43:cb:ea:b6:13:25:63:7d:35:84:08:bc: 56:d0:fb:80:7b:8f:eb:45:9a:4d:13:a4:e7:f7:8f: 93:07:7e:48:e0:4b:16:e5:5f:75:fb:85:5c:fc:72: b2:41:d8:f7:e6:39:c2:cd:3f:fd:15:f7:81:15:06: 96:84:e1:b5:7a:79:ec:c2:46:a4:0e:aa:e8:41:5e: 68:78:60:54:6c:34:3d:4d:c3:2a:df:b2:b2:57:88: 6d:a0:73:4a:a6:5f:18:fa:cd:32:e2:0f:38:bf:9a: 55:d4:d6:9b:eb:d3:36:5f:0e:1c:c9:2b:43:83:4e: 0f:35:d1:f8:56:a4:e4:9c:51:3e:11:41:49:3e:69: 20:ee:82:8d:99:b3:5a:43:cc:12:d7:4d:ac:73:c0: c7:af:26:c5:80:fc:70:3b:8d:27:35:3a:c0:9d:ac: 01:78:9d:be:e3:a9:0a:60:db:7b:bd:de:2c:1b:1c: 28:25:6a:4b:86:1a:3a:3b:f4:66:b9:62:34:0e:ad: 27:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:DC:AE:1F:55:02:2F:D1:7F:44:79:07:40:BD:21:0E:EA:59:A8:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.crl X509v3 Authority Key Identifier: keyid:E1:A8:6C:BE:0B:A2:D5:01:82:26:EE:FA:C5:22:58:3D:FF:F8:C9:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3c70845f-7a59-44ea-8f3a-c3d10affa9e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:31:23:ee:2d:ee:61:31:f1:52:dc:77:f0:20:c5:d8:02:83: 73:cf:04:40:61:27:9b:2e:82:27:eb:7a:a1:6c:22:a4:f1:d8: 20:00:90:bf:d4:34:3e:2f:f3:f1:8d:27:74:a6:1a:da:82:ce: fe:c8:44:b4:f5:ed:5a:5c:5c:06:c9:02:a2:d0:e5:d2:22:32: ce:8e:2d:9e:a9:78:6b:61:06:e4:dc:72:c4:1e:15:79:c3:68: 7d:32:63:ff:5a:9e:7d:6e:b5:07:1b:d0:d0:20:af:cf:5f:68: b9:47:0d:7f:53:ab:cd:ff:c5:95:cf:6a:51:a3:5f:58:2d:10: dd:79:82:e1:0a:97:92:93:8f:98:f1:c0:8d:19:08:99:b2:f0: c2:13:6d:a6:2e:d7:80:a9:6f:91:11:d8:ba:b3:3a:b4:62:27: 2d:60:05:af:0c:25:b6:2b:0d:70:05:76:00:e0:0c:77:32:a6: c3:ed:38:59:28:52:33:55:40:10:d5:8f:a7:41:c5:d0:76:f3: 51:0d:53:89:30:04:5c:b6:d7:36:e8:73:23:fa:4a:56:f0:bf: 45:2b:d1:d8:0b:b3:37:2a:8f:52:c4:2a:b4:05:c3:43:21:72: f4:ee:e3:bf:0a:ea:fc:da:5a:3b:ef:76:53:4a:e6:c4:44:64: 94:a6:48:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExA/wYO3ZaiYaEeQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3MDg0NWYtN2E1OS00NGVhLThmM2EtYzNkMTBhZmZh OWU1MB4XDTI1MTIyMDIyMDAwOFoXDTI1MTIyMzIyMDAwMFowLzEtMCsGA1UEAxMk OTE2NDgxNWUtNGE3Mi00Y2MwLWE4MzctNWQ3Zjg5MWI5ZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIDDO+R+RT87KZ3uJCBIJDyb8QqVFJ2QYOjL FtPZC4mxbHPNRJ/e8vFCABoXKWB/i+h46dC0+jeARXabmFRDy+q2EyVjfTWECLxW 0PuAe4/rRZpNE6Tn94+TB35I4EsW5V91+4Vc/HKyQdj35jnCzT/9FfeBFQaWhOG1 ennswkakDqroQV5oeGBUbDQ9TcMq37KyV4htoHNKpl8Y+s0y4g84v5pV1Nab69M2 Xw4cyStDg04PNdH4VqTknFE+EUFJPmkg7oKNmbNaQ8wS102sc8DHrybFgPxwO40n NTrAnawBeJ2+46kKYNt7vd4sGxwoJWpLhho6O/RmuWI0Dq0n2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNrcrh9VAi/Rf0R5B0C9IQ7qWai8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcw ODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2QxMGFmZmE5ZTUvM2M3MDg0NWYtN2E1OS00 NGVhLThmM2EtYzNkMTBhZmZhOWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2M3MDg0NWYtN2E1OS00NGVhLThm M2EtYzNkMTBhZmZhOWU1LzNjNzA4NDVmLTdhNTktNDRlYS04ZjNhLWMzZDEwYWZm YTllNS5jcmwwHwYDVR0jBBgwFoAU4ahsvgui1QGCJu76xSJYPf/4yTkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zYzcwODQ1Zi03YTU5LTQ0ZWEtOGYzYS1jM2Qx MGFmZmE5ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9MSPuLe5hMfFS3HfwIMXY AoNzzwRAYSebLoIn63qhbCKk8dggAJC/1DQ+L/PxjSd0phrags7+yES09e1aXFwG yQKi0OXSIjLOji2eqXhrYQbk3HLEHhV5w2h9MmP/Wp59brUHG9DQIK/PX2i5Rw1/ U6vN/8WVz2pRo19YLRDdeYLhCpeSk4+Y8cCNGQiZsvDCE22mLteAqW+REdi6szq0 YictYAWvDCW2Kw1wBXYA4Ax3MqbD7ThZKFIzVUAQ1Y+nQcXQdvNRDVOJMARcttc2 6HMj+kpW8L9FK9HYC7M3Ko9SxCq0BcNDIXL07uO/Cur82lo773ZTSubERGSUpkgX -----END CERTIFICATE-----Generated at Sun Dec 21 19:03:56 2025 by rpki-client