This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft File: d1f3fb34-9d61-4476-8110-8ca2876e7928.mft (raw, json) Hash identifier: 3xxbWQNeKDydh7mW3pZ43FOqsMAu7pgaeCjstF8QkiM= Subject key identifier: A0:5B:EB:9D:74:5E:93:D4:FB:BF:96:3E:76:7F:D3:0C:61:77:02:29 Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 Certificate issuer: /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Certificate serial: 010D0C9F4328584C43E77C74D62F5A1246004F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft Manifest number: 010D0C9F4328584073A82E04AB961FE2F39B5315 Signing time: Sun 21 Dec 2025 23:00:08 +0000 Manifest this update: Sun 21 Dec 2025 23:00:08 +0000 Manifest next update: Tue 23 Dec 2025 23:00:00 +0000 Files and hashes: 1: 2026f06e-1431-31e6-8460-5ff177b4b260.roa (hash: MeHR6UMA4t/ApBSRras3Gw+vtx7UBuhZ1kREn1lYVmE=) 2: 8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa (hash: 3VKkzxMLHTUG7Ra9jUe9e/c0ZZhTzLoxqr++yrwLYzg=) 3: d1f3fb34-9d61-4476-8110-8ca2876e7928.crl (hash: OufVTdz683gDP6XcSB+gx+IkWVh8ulEGldJlG0egxG0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:43:e7:7c:74:d6:2f:5a:12:46:00:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928 Validity Not Before: Dec 21 23:00:08 2025 GMT Not After : Dec 23 23:00:00 2025 GMT Subject: CN=330def1b-e394-4fe7-9ba4-2b42e006e812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b9:96:6e:7e:41:87:e1:55:8d:86:7e:ab:fc: 3f:7a:68:b6:e5:f2:0b:5d:44:c1:9f:29:42:55:4a: 31:ac:f5:31:cd:ce:e2:bd:e1:79:9e:95:82:4d:4f: 87:e4:e3:a4:85:f8:30:ba:17:56:49:c0:7d:a9:18: 7d:2b:a3:81:99:0c:81:b0:b1:be:90:48:4f:c3:ac: 46:04:34:c9:60:3f:f7:d0:81:c9:34:00:69:1b:c0: f5:e8:a7:fb:c8:d7:52:81:99:bc:ac:e3:93:85:cd: 68:ee:cf:94:f0:08:a5:e8:7f:82:b0:9b:2d:99:9a: 5a:df:b6:a8:96:0c:a3:30:4f:51:41:22:11:68:90: 53:e3:48:05:53:0d:8f:3d:cd:ad:d5:08:47:4c:b7: ce:67:6e:34:2f:ef:2e:f7:e9:d9:9c:0c:ed:f4:d6: 78:14:90:07:eb:12:be:67:7f:a6:a2:f8:13:27:6b: a2:7d:90:27:5d:aa:9f:48:f0:dd:f3:9a:b8:29:41: 3d:bd:a1:58:da:ab:c6:fe:c8:35:58:57:31:ee:85: cf:08:b2:b9:0a:80:18:14:4f:1b:a3:b6:7e:7a:1d: 13:ca:db:7f:3e:f1:84:db:70:44:2b:6f:61:30:06: 9c:ed:9d:c5:32:de:c3:84:74:24:ac:76:16:e7:59: 4f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5B:EB:9D:74:5E:93:D4:FB:BF:96:3E:76:7F:D3:0C:61:77:02:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl X509v3 Authority Key Identifier: keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:0b:ad:ce:64:fc:23:76:80:c8:8f:d7:ae:f1:58:7c:01:9d: 00:3a:b0:56:e4:30:e9:eb:d8:20:67:fa:35:d3:31:94:81:07: c5:46:db:3c:23:12:a6:9f:c2:c6:b3:70:ed:5a:48:cf:27:4d: 85:15:de:f9:6d:c6:64:d2:c8:ad:e7:eb:23:f8:fe:2a:ac:ac: 21:43:c3:9e:5b:77:ee:4f:4b:11:63:ad:da:70:69:7e:50:88: 79:85:e1:ac:01:0d:a9:b5:d1:54:e1:5c:ad:05:b2:fa:d1:e0: 3e:b2:55:9a:ec:ea:b0:8f:15:b7:b0:56:75:49:31:66:40:04: b9:6f:b7:53:c0:75:b6:b3:a3:bb:fb:8a:39:a8:51:2e:d0:c8: 3a:44:28:20:a5:9e:db:15:4a:18:ae:a7:a0:42:7f:a4:da:fe: 1d:a8:0f:44:05:0f:09:ec:99:6f:83:00:77:45:32:07:0c:40: 43:47:59:98:51:2c:a3:06:74:72:51:50:7d:00:47:56:79:02: e6:fa:f2:31:f2:71:b2:27:84:fc:b8:fc:58:f4:09:6f:a8:84: 5b:a5:fd:bb:80:48:8e:08:49:4c:f6:e8:f1:65:ce:70:7d:a2: 31:5f:8d:ab:cc:0e:ff:b5:f3:57:3b:5a:9e:ce:70:cb:23:3f: f9:d0:dd:25 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExD53x01i9aEkYAT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFmM2ZiMzQtOWQ2MS00NDc2LTgxMTAtOGNhMjg3NmU3 OTI4MB4XDTI1MTIyMTIzMDAwOFoXDTI1MTIyMzIzMDAwMFowLzEtMCsGA1UEAxMk MzMwZGVmMWItZTM5NC00ZmU3LTliYTQtMmI0MmUwMDZlODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibmWbn5Bh+FVjYZ+q/w/emi25fILXUTBnylC VUoxrPUxzc7iveF5npWCTU+H5OOkhfgwuhdWScB9qRh9K6OBmQyBsLG+kEhPw6xG BDTJYD/30IHJNABpG8D16Kf7yNdSgZm8rOOThc1o7s+U8Ail6H+CsJstmZpa37ao lgyjME9RQSIRaJBT40gFUw2PPc2t1QhHTLfOZ240L+8u9+nZnAzt9NZ4FJAH6xK+ Z3+movgTJ2uifZAnXaqfSPDd85q4KUE9vaFY2qvG/sg1WFcx7oXPCLK5CoAYFE8b o7Z+eh0Tytt/PvGE23BEK29hMAac7Z3FMt7DhHQkrHYW51lPrQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKBb6510XpPU+7+WPnZ/0wxhdwIpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYz ZmIzNC05ZDYxLTQ0NzYtODExMC04Y2EyODc2ZTc5MjgvZDFmM2ZiMzQtOWQ2MS00 NDc2LTgxMTAtOGNhMjg3NmU3OTI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDFmM2ZiMzQtOWQ2MS00NDc2LTgx MTAtOGNhMjg3NmU3OTI4L2QxZjNmYjM0LTlkNjEtNDQ3Ni04MTEwLThjYTI4NzZl NzkyOC5jcmwwHwYDVR0jBBgwFoAUHVxtl3sO0IsXB0lOny3PFM65iiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMWYzZmIzNC05ZDYxLTQ0NzYtODExMC04Y2Ey ODc2ZTc5MjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCyC63OZPwjdoDIj9eu8Vh8 AZ0AOrBW5DDp69ggZ/o10zGUgQfFRts8IxKmn8LGs3DtWkjPJ02FFd75bcZk0sit 5+sj+P4qrKwhQ8OeW3fuT0sRY63acGl+UIh5heGsAQ2ptdFU4VytBbL60eA+slWa 7OqwjxW3sFZ1STFmQAS5b7dTwHW2s6O7+4o5qFEu0Mg6RCggpZ7bFUoYrqegQn+k 2v4dqA9EBQ8J7JlvgwB3RTIHDEBDR1mYUSyjBnRyUVB9AEdWeQLm+vIx8nGyJ4T8 uPxY9AlvqIRbpf27gEiOCElM9ujxZc5wfaIxX42rzA7/tfNXO1qeznDLIz/50N0l -----END CERTIFICATE-----Generated at Mon Dec 22 01:42:07 2025 by rpki-client