This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft File: ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft (raw, json) Hash identifier: FEhfYxJbalgIWOQ+doqk8djytbYvvMAy8Ga7Iz4mQ2g= Subject key identifier: E2:31:2D:01:33:73:03:50:2B:7D:F2:48:64:33:08:6E:A2:3E:84:1E Authority key identifier: 9F:3F:D8:F6:54:55:42:C4:0F:23:03:9F:C0:84:40:6C:D6:01:DF:C6 Certificate issuer: /CN=ca0f18ca-4189-45e1-9c58-09f2daa808fa Certificate serial: 010D0C9F4328584C3E520FE6ECD608B303D0ED00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft Manifest number: 010D0C9F4328584B21AA24C0C83B1A425711BD71 Signing time: Fri 19 Dec 2025 23:00:03 +0000 Manifest this update: Fri 19 Dec 2025 23:00:03 +0000 Manifest next update: Mon 22 Dec 2025 23:00:00 +0000 Files and hashes: 1: 27622481-583a-3bf7-9a8b-7ffbe7bbebef.roa (hash: ihc1zSMdhELUuWVxTe/WKLgXwLry48NQEMyL5piresg=) 2: ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl (hash: 31n8aD+kne+lD+dcvQSYF1BdgM09NL0Cj+c6h82qiMQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:52:0f:e6:ec:d6:08:b3:03:d0:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca0f18ca-4189-45e1-9c58-09f2daa808fa Validity Not Before: Dec 19 23:00:03 2025 GMT Not After : Dec 22 23:00:00 2025 GMT Subject: CN=352d0ef9-0fac-4350-9be4-1349d7d8b0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:41:fd:e0:a5:36:08:f0:97:73:bb:ec:0b:3e: 62:64:6e:87:ae:d6:97:53:0b:c8:74:35:9e:38:bb: f0:72:db:0a:bd:a2:1a:1e:d9:c0:58:e1:25:56:49: 28:bd:ba:e8:31:e9:f9:22:18:00:07:e4:81:8d:4c: 36:13:c3:7f:90:24:56:4c:98:92:71:d6:05:07:fb: eb:5b:d4:94:c7:fa:17:6b:a2:20:20:14:47:88:a4: 91:64:e0:3e:7f:e6:63:d4:3e:57:b4:f6:ea:d3:6f: f3:5c:72:78:95:6d:d7:b0:59:eb:44:91:f3:a7:7a: 06:cc:97:f1:85:4a:e5:f2:e5:91:4b:ef:f9:88:34: 0f:63:4a:77:fd:79:51:e1:d0:5e:86:ea:ee:01:1b: 07:2b:62:3c:01:e3:0c:37:a3:b2:f7:aa:c8:75:36: d0:15:7c:f4:03:16:9d:f9:c1:7f:ef:f7:2f:9e:1b: a2:8f:cc:96:29:ed:b9:6c:32:59:db:c1:c3:7d:2c: 7e:82:7b:c5:d6:78:49:9c:06:b0:d2:37:4c:39:50: 7b:7d:bc:2a:d1:12:d0:ad:45:a9:b2:68:59:64:fe: fe:f5:d0:63:6e:68:76:3e:7b:ad:d8:8e:50:a1:a0: 76:03:c8:a3:1d:26:48:73:eb:07:ef:94:3e:57:55: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:31:2D:01:33:73:03:50:2B:7D:F2:48:64:33:08:6E:A2:3E:84:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa/ca0f18ca-4189-45e1-9c58-09f2daa808fa.crl X509v3 Authority Key Identifier: keyid:9F:3F:D8:F6:54:55:42:C4:0F:23:03:9F:C0:84:40:6C:D6:01:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ca0f18ca-4189-45e1-9c58-09f2daa808fa.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:79:be:23:b9:87:9d:53:30:39:19:d0:14:82:0d:44:c5:50: 84:07:5b:92:43:75:e4:44:e2:2a:4d:c9:13:9d:08:1a:07:c8: a9:96:ec:70:87:6b:02:52:36:81:ee:d7:4e:c8:f8:8f:03:b0: e5:d2:96:5e:bd:52:85:c9:5d:80:a0:ac:56:35:c4:f4:86:e8: 1e:f5:b1:60:ef:76:b3:4d:6a:7f:c0:a8:2c:3b:61:29:bc:93: de:23:dc:a8:7e:40:7a:3d:ed:de:cb:2e:76:8b:3b:9d:64:b8: 77:bf:fa:c3:da:02:7a:9c:97:ff:2c:b3:3a:be:e8:74:74:e9: 2d:e1:a4:43:46:64:e1:70:34:e4:47:96:23:b0:18:54:7a:86: e7:48:3c:18:2a:05:cb:e1:9f:59:44:19:ea:93:35:2d:f7:c5: 7a:e1:a5:49:54:84:a5:c9:05:61:d8:a4:21:a7:8b:2f:ed:2f: 9b:36:aa:28:97:cd:79:f4:ca:61:27:da:7d:c4:8e:51:71:b8: 8a:42:e9:48:df:4a:88:d1:af:f7:37:44:b3:6c:5d:14:da:bb: 3b:2c:c1:18:44:a3:17:05:0f:bd:36:f2:b5:56:22:fd:ed:3b: 52:6f:22:3f:27:fd:ff:fa:4a:86:b1:6c:f2:4b:40:bf:90:96: d9:d5:26:15 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw+Ug/m7NYIswPQ7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EwZjE4Y2EtNDE4OS00NWUxLTljNTgtMDlmMmRhYTgw OGZhMB4XDTI1MTIxOTIzMDAwM1oXDTI1MTIyMjIzMDAwMFowLzEtMCsGA1UEAxMk MzUyZDBlZjktMGZhYy00MzUwLTliZTQtMTM0OWQ3ZDhiMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUH94KU2CPCXc7vsCz5iZG6HrtaXUwvIdDWe OLvwctsKvaIaHtnAWOElVkkovbroMen5IhgAB+SBjUw2E8N/kCRWTJiScdYFB/vr W9SUx/oXa6IgIBRHiKSRZOA+f+Zj1D5XtPbq02/zXHJ4lW3XsFnrRJHzp3oGzJfx hUrl8uWRS+/5iDQPY0p3/XlR4dBehuruARsHK2I8AeMMN6Oy96rIdTbQFXz0Axad +cF/7/cvnhuij8yWKe25bDJZ28HDfSx+gnvF1nhJnAaw0jdMOVB7fbwq0RLQrUWp smhZZP7+9dBjbmh2Pnut2I5QoaB2A8ijHSZIc+sH75Q+V1XqFwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOIxLQEzcwNQK33ySGQzCG6iPoQeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYTBm MThjYS00MTg5LTQ1ZTEtOWM1OC0wOWYyZGFhODA4ZmEvY2EwZjE4Y2EtNDE4OS00 NWUxLTljNTgtMDlmMmRhYTgwOGZhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2EwZjE4Y2EtNDE4OS00NWUxLTlj NTgtMDlmMmRhYTgwOGZhL2NhMGYxOGNhLTQxODktNDVlMS05YzU4LTA5ZjJkYWE4 MDhmYS5jcmwwHwYDVR0jBBgwFoAUnz/Y9lRVQsQPIwOfwIRAbNYB38YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYTBmMThjYS00MTg5LTQ1ZTEtOWM1OC0wOWYy ZGFhODA4ZmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxeb4juYedUzA5GdAUgg1E xVCEB1uSQ3XkROIqTckTnQgaB8ipluxwh2sCUjaB7tdOyPiPA7Dl0pZevVKFyV2A oKxWNcT0huge9bFg73azTWp/wKgsO2EpvJPeI9yofkB6Pe3eyy52izudZLh3v/rD 2gJ6nJf/LLM6vuh0dOkt4aRDRmThcDTkR5YjsBhUeobnSDwYKgXL4Z9ZRBnqkzUt 98V64aVJVISlyQVh2KQhp4sv7S+bNqool8159MphJ9p9xI5RcbiKQulI30qI0a/3 N0SzbF0U2rs7LMEYRKMXBQ+9NvK1ViL97TtSbyI/J/3/+kqGsWzyS0C/kJbZ1SYV -----END CERTIFICATE-----Generated at Sat Dec 20 15:18:42 2025 by rpki-client