This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft File: 2ce98e57-da60-49a3-b167-e6998e0d2945.mft (raw, json) Hash identifier: vdZmc0z519LIXAIwROE+OoKs5s0lFJRLH3XXzddOOtg= Subject key identifier: C2:B0:D9:CC:2B:BB:41:B7:6C:17:15:8D:43:63:4A:5A:96:0B:E9:8B Authority key identifier: 41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 Certificate issuer: /CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Certificate serial: 010D0C9F4328584C3E344805E92D81D1248C4A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft Manifest number: 010D0C9F4328584B647ED64DB623142887471510 Signing time: Fri 19 Dec 2025 22:00:03 +0000 Manifest this update: Fri 19 Dec 2025 22:00:03 +0000 Manifest next update: Mon 22 Dec 2025 22:00:00 +0000 Files and hashes: 1: 256d24fc-eda3-3794-a5c2-a337859acf22.roa (hash: fG0oRf1uXZKRgP1OEVJlGGGM507Vnru4Sj8N9fpxA9w=) 2: 2ce98e57-da60-49a3-b167-e6998e0d2945.crl (hash: DqQpUUaNh2THXMt4s3eqdLpnZAbrQv2t2EjWBWOswow=) 3: a18bc8e5-3031-3334-b765-3392f5d4fe56.roa (hash: w38RZlnzkBGS5upDczKN0Nv967tcKJ/OKOgZP3jrxpE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:34:48:05:e9:2d:81:d1:24:8c:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ce98e57-da60-49a3-b167-e6998e0d2945 Validity Not Before: Dec 19 22:00:03 2025 GMT Not After : Dec 22 22:00:00 2025 GMT Subject: CN=13c92360-fa47-43ba-84cb-6aac21e77b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6c:07:ae:ee:ab:8f:b5:a5:77:93:83:ef:68: 4a:e7:b2:19:a6:af:7d:4f:d1:95:8e:38:a9:15:81: e2:80:d2:d3:a4:b9:26:f4:e5:a6:66:34:8c:a0:f4: 6f:0b:5a:2c:bd:f7:af:95:66:00:7f:39:4b:4d:a4: c9:58:3a:53:92:bb:a3:4c:19:57:99:1e:8b:8d:1f: 4a:a5:f9:10:d3:18:43:42:c9:9e:b6:d4:c4:3b:d5: 40:3f:0f:46:9d:96:26:28:8a:52:db:0f:67:51:b1: de:33:8f:4a:97:46:e7:81:0d:63:84:dc:87:c2:bf: 29:28:67:cd:08:ee:6f:bd:84:c7:d7:fa:ce:9f:1d: b3:82:cc:ce:f8:39:d5:04:1c:1b:b3:58:67:5a:88: 6e:7c:90:72:90:35:80:1c:e8:96:85:34:c9:b8:16: 43:b4:9f:2b:79:4f:81:65:6c:01:b0:05:2a:a5:8f: 52:23:dd:52:12:32:f9:8d:2a:ba:0b:8f:36:5f:b1: 76:4d:2e:ea:24:36:9f:a7:9a:57:a5:08:28:0e:38: 1d:65:4c:4f:f2:f3:50:99:a0:b8:7d:27:dd:03:a5: 35:ea:33:24:c5:db:0b:24:95:26:83:5e:fe:ea:a7: 2e:65:e9:b5:8d:fc:74:08:fb:ea:a9:67:ee:ef:cb: be:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:B0:D9:CC:2B:BB:41:B7:6C:17:15:8D:43:63:4A:5A:96:0B:E9:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945/2ce98e57-da60-49a3-b167-e6998e0d2945.crl X509v3 Authority Key Identifier: keyid:41:BA:59:99:07:6F:1E:07:D0:EF:E6:D8:C8:88:A0:DB:40:B5:3D:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2ce98e57-da60-49a3-b167-e6998e0d2945.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:75:2e:b2:0c:42:8c:64:40:a1:93:7f:3a:05:79:f4:47:3a: ac:5c:ef:45:c3:c7:bf:e4:23:5b:e1:fc:99:f0:75:d8:b9:8c: 16:ca:78:69:3f:98:3a:48:19:6a:f9:31:27:64:ec:3f:db:63: 52:fa:43:ec:7e:40:d6:b0:ed:d7:96:7a:7b:f6:c0:08:c1:ab: b8:fb:64:45:62:af:f9:73:0b:da:f4:ba:56:4c:26:4b:d1:42: b1:c3:b3:a1:b5:a2:59:83:50:c1:d9:39:b1:0b:2a:29:48:48: 4f:d3:87:9c:36:78:5c:e6:e3:d0:d1:11:aa:b7:1b:0c:93:01: 32:97:a0:0e:2e:ea:06:1e:58:50:a4:11:15:24:35:19:9e:b2: a5:51:9a:64:e5:9a:a9:d3:44:2d:a5:51:06:54:97:a2:02:d4: b6:1f:6d:4c:e8:43:b1:bc:39:b9:50:8f:41:35:03:55:d2:70: ad:64:f1:4b:44:40:34:56:53:dc:9f:4f:f4:27:8f:0e:ce:5a: ff:08:8a:a6:bc:c5:79:00:47:7f:65:bf:89:87:8e:4e:0a:03: 61:17:10:b2:77:50:46:8e:c8:95:a6:22:c4:d2:45:c2:7c:79: 3a:7f:fd:4d:96:5c:04:c3:af:ee:ef:d5:9b:93:28:e6:2e:ff: d9:31:20:69 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw+NEgF6S2B0SSMSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNlOThlNTctZGE2MC00OWEzLWIxNjctZTY5OThlMGQy OTQ1MB4XDTI1MTIxOTIyMDAwM1oXDTI1MTIyMjIyMDAwMFowLzEtMCsGA1UEAxMk MTNjOTIzNjAtZmE0Ny00M2JhLTg0Y2ItNmFhYzIxZTc3YjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGwHru6rj7Wld5OD72hK57IZpq99T9GVjjip FYHigNLTpLkm9OWmZjSMoPRvC1osvfevlWYAfzlLTaTJWDpTkrujTBlXmR6LjR9K pfkQ0xhDQsmettTEO9VAPw9GnZYmKIpS2w9nUbHeM49Kl0bngQ1jhNyHwr8pKGfN CO5vvYTH1/rOnx2zgszO+DnVBBwbs1hnWohufJBykDWAHOiWhTTJuBZDtJ8reU+B ZWwBsAUqpY9SI91SEjL5jSq6C482X7F2TS7qJDafp5pXpQgoDjgdZUxP8vNQmaC4 fSfdA6U16jMkxdsLJJUmg17+6qcuZem1jfx0CPvqqWfu78u+swIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMKw2cwru0G3bBcVjUNjSlqWC+mLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5 OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5OGUwZDI5NDUvMmNlOThlNTctZGE2MC00 OWEzLWIxNjctZTY5OThlMGQyOTQ1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmNlOThlNTctZGE2MC00OWEzLWIx NjctZTY5OThlMGQyOTQ1LzJjZTk4ZTU3LWRhNjAtNDlhMy1iMTY3LWU2OTk4ZTBk Mjk0NS5jcmwwHwYDVR0jBBgwFoAUQbpZmQdvHgfQ7+bYyIig20C1PXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yY2U5OGU1Ny1kYTYwLTQ5YTMtYjE2Ny1lNjk5 OGUwZDI5NDUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrdS6yDEKMZEChk386BXn0 RzqsXO9Fw8e/5CNb4fyZ8HXYuYwWynhpP5g6SBlq+TEnZOw/22NS+kPsfkDWsO3X lnp79sAIwau4+2RFYq/5cwva9LpWTCZL0UKxw7OhtaJZg1DB2TmxCyopSEhP04ec Nnhc5uPQ0RGqtxsMkwEyl6AOLuoGHlhQpBEVJDUZnrKlUZpk5Zqp00QtpVEGVJei AtS2H21M6EOxvDm5UI9BNQNV0nCtZPFLREA0VlPcn0/0J48Ozlr/CIqmvMV5AEd/ Zb+Jh45OCgNhFxCyd1BGjsiVpiLE0kXCfHk6f/1NllwEw6/u79WbkyjmLv/ZMSBp -----END CERTIFICATE-----Generated at Sat Dec 20 13:19:02 2025 by rpki-client