This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft File: df28494f-1d3f-4a45-8a74-bde41c2502a2.mft (raw, json) Hash identifier: 93QBm9t99L9fYjPV7eQPd/B8LGIPrw1ejms05KVuNtU= Subject key identifier: 00:7A:09:A5:7E:8F:B2:94:AC:E8:BC:85:D5:81:96:9D:BB:F8:C7:A6 Authority key identifier: A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A Certificate issuer: /CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Certificate serial: 010D0C9F4328584C413A86701F43E2596A56C880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft Manifest number: 010D0C9F4328584073A83206E308BDBACFE9056A Signing time: Sun 21 Dec 2025 00:00:03 +0000 Manifest this update: Sun 21 Dec 2025 00:00:03 +0000 Manifest next update: Wed 24 Dec 2025 00:00:00 +0000 Files and hashes: 1: 155f4b9b-4ca3-3b31-bf72-238f854d820f.roa (hash: tImT8gFXgEMPtQEBflFaWQmKxhyrrxHDv2x2UFQtZFQ=) 2: 3bd23a67-6b4a-3d68-8253-fd485c9f6f0c.roa (hash: DvUMJ0zP4TkzUZjc0vq3flmzj/0eN6CE1vYAntwA/cY=) 3: df28494f-1d3f-4a45-8a74-bde41c2502a2.crl (hash: VYdZC8TC5/L9AvThWx56qg4MZ7oemmtHpOt+cX4OtVM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:3a:86:70:1f:43:e2:59:6a:56:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df28494f-1d3f-4a45-8a74-bde41c2502a2 Validity Not Before: Dec 21 00:00:03 2025 GMT Not After : Dec 24 00:00:00 2025 GMT Subject: CN=5d171646-66c8-4b65-9c54-fc0f4f899b59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:aa:bc:4c:6d:91:bc:64:92:f8:be:ad:10:78: 0f:59:63:de:06:cb:a7:a1:4b:49:f8:35:f0:ee:68: 9a:1a:53:16:1c:2c:a3:48:52:f2:85:da:0a:e9:91: b9:69:30:0f:71:25:52:8a:1d:aa:fd:5d:50:60:fc: e0:ab:b8:6f:3a:2e:66:0c:04:84:50:ec:d5:b2:fc: 5c:9d:93:4b:b9:c8:b3:3a:31:84:df:5c:4c:0d:9c: ab:e8:95:8d:56:4c:a6:22:15:b0:a3:3e:16:02:16: 0b:d9:57:f5:d2:07:87:b1:50:d8:7e:f4:80:20:80: 23:6a:90:8f:48:aa:20:46:72:da:ae:c7:33:ab:f7: 4a:3a:4b:73:2f:3e:0e:31:94:da:bc:40:02:db:d6: ea:ef:d4:01:61:61:46:eb:7e:2e:0a:6e:fc:8f:ae: 75:02:a1:de:db:22:66:ec:0c:e2:f5:c4:2e:ae:5e: 90:df:c6:79:72:ae:e5:47:2a:58:3c:3c:cd:f1:51: 28:a9:d2:97:28:28:bc:01:37:c5:a0:b7:16:17:78: 67:63:74:84:bd:fe:8f:9b:37:91:ed:4f:12:6e:29: 73:7d:cd:20:35:95:f0:74:90:3c:00:e0:a2:6e:81: 2e:87:1e:0d:b3:1e:fa:64:23:6f:dd:05:8d:92:65: 94:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7A:09:A5:7E:8F:B2:94:AC:E8:BC:85:D5:81:96:9D:BB:F8:C7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2/df28494f-1d3f-4a45-8a74-bde41c2502a2.crl X509v3 Authority Key Identifier: keyid:A8:A0:65:8D:B0:AF:37:3A:DF:76:BB:50:BD:A0:CC:24:B1:15:4B:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/df28494f-1d3f-4a45-8a74-bde41c2502a2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d4:0a:0f:f1:49:6a:1f:6a:ec:58:eb:ff:e2:d5:25:31:af: e6:6c:d5:20:dd:34:c9:3b:44:36:c7:91:4d:5f:9e:52:82:14: 4f:98:97:a9:22:46:16:b0:4a:c9:ab:c0:a0:97:f0:be:e7:6b: 67:5d:1d:0d:00:7a:e1:55:dc:96:7e:3d:a7:b8:7b:eb:96:5d: fd:7f:57:3e:0e:c6:53:b1:c9:99:fb:12:20:f7:b5:29:75:c0: 15:12:dc:6a:06:d9:d5:a7:c2:67:32:32:10:31:f6:95:21:07: 38:b2:63:cc:0d:b8:78:ec:e5:8d:a6:27:1e:a4:bd:e4:67:1c: e7:d4:c1:8a:4a:df:af:d3:90:96:5c:7f:f8:45:bb:db:ba:18: 16:7e:e2:3a:b5:22:12:1a:37:da:c6:b9:85:9c:ce:5a:d0:2d: 5e:fa:81:6a:41:ca:e3:d5:f9:cb:26:a8:2f:8f:ef:83:c0:10: 9f:d5:a5:5d:e8:71:cc:3c:08:22:02:8d:fe:28:e7:a2:37:ab: d2:99:04:d7:ad:6f:12:2d:47:a2:fd:9b:8f:86:01:67:cf:be: 32:d9:22:53:05:2e:12:4e:32:23:62:5c:f8:57:09:70:4f:b9: 30:d8:4b:2c:11:f9:eb:8d:76:28:4c:8c:cd:ba:a8:ba:b3:21: eb:d8:61:de -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExBOoZwH0PiWWpWyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYyODQ5NGYtMWQzZi00YTQ1LThhNzQtYmRlNDFjMjUw MmEyMB4XDTI1MTIyMTAwMDAwM1oXDTI1MTIyNDAwMDAwMFowLzEtMCsGA1UEAxMk NWQxNzE2NDYtNjZjOC00YjY1LTljNTQtZmMwZjRmODk5YjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6q8TG2RvGSS+L6tEHgPWWPeBsunoUtJ+DXw 7miaGlMWHCyjSFLyhdoK6ZG5aTAPcSVSih2q/V1QYPzgq7hvOi5mDASEUOzVsvxc nZNLucizOjGE31xMDZyr6JWNVkymIhWwoz4WAhYL2Vf10geHsVDYfvSAIIAjapCP SKogRnLarsczq/dKOktzLz4OMZTavEAC29bq79QBYWFG634uCm78j651AqHe2yJm 7Azi9cQurl6Q38Z5cq7lRypYPDzN8VEoqdKXKCi8ATfFoLcWF3hnY3SEvf6PmzeR 7U8Sbilzfc0gNZXwdJA8AOCiboEuhx4Nsx76ZCNv3QWNkmWUBQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAB6CaV+j7KUrOi8hdWBlp27+MemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4 NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0MWMyNTAyYTIvZGYyODQ5NGYtMWQzZi00 YTQ1LThhNzQtYmRlNDFjMjUwMmEyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGYyODQ5NGYtMWQzZi00YTQ1LThh NzQtYmRlNDFjMjUwMmEyL2RmMjg0OTRmLTFkM2YtNGE0NS04YTc0LWJkZTQxYzI1 MDJhMi5jcmwwHwYDVR0jBBgwFoAUqKBljbCvNzrfdrtQvaDMJLEVS5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kZjI4NDk0Zi0xZDNmLTRhNDUtOGE3NC1iZGU0 MWMyNTAyYTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCD1AoP8UlqH2rsWOv/4tUl Ma/mbNUg3TTJO0Q2x5FNX55SghRPmJepIkYWsErJq8Cgl/C+52tnXR0NAHrhVdyW fj2nuHvrll39f1c+DsZTscmZ+xIg97UpdcAVEtxqBtnVp8JnMjIQMfaVIQc4smPM Dbh47OWNpicepL3kZxzn1MGKSt+v05CWXH/4RbvbuhgWfuI6tSISGjfaxrmFnM5a 0C1e+oFqQcrj1fnLJqgvj++DwBCf1aVd6HHMPAgiAo3+KOeiN6vSmQTXrW8SLUei /ZuPhgFnz74y2SJTBS4STjIjYlz4VwlwT7kw2EssEfnrjXYoTIzNuqi6syHr2GHe -----END CERTIFICATE-----Generated at Sun Dec 21 03:50:17 2025 by rpki-client