This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft File: d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft (raw, json) Hash identifier: rQR8p8poTaKP9hSdRUv+nYy4PMl3zFN4KvYh5Br9pBE= Subject key identifier: E4:80:B5:76:81:21:8A:79:AC:5C:FF:3D:72:02:D2:92:14:00:4D:6F Authority key identifier: 47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F Certificate issuer: /CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Certificate serial: 010D0C9F4328584C39160847C7907F1A4247DCC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft Manifest number: 010D0C9F4328584073A836239D3A75822B1705D2 Signing time: Thu 18 Dec 2025 02:00:03 +0000 Manifest this update: Thu 18 Dec 2025 02:00:03 +0000 Manifest next update: Sat 20 Dec 2025 02:00:00 +0000 Files and hashes: 1: 454c9603-4dfb-34e7-9bc2-02242c547e78.roa (hash: CH2nkMXNpGOEdgNktVxA2gKTPaekUJjMddaLTnxl3hY=) 2: 7c69f6d0-f92d-3ea9-91d2-5d8a53da8b6b.roa (hash: 3HVCaoUAgEypQT42N2PJkh5mCE/yY2Aj+8mG5qGxHZk=) 3: d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl (hash: QtzQHzxChVkmt7xGeAX692Rt7hRf/Ggu1Cl6DX3Z4aA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:16:08:47:c7:90:7f:1a:42:47:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Validity Not Before: Dec 18 02:00:03 2025 GMT Not After : Dec 20 02:00:00 2025 GMT Subject: CN=646b4052-5f0b-4d22-9455-774a1b4fe8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e7:75:44:66:a4:36:07:5a:15:0b:fe:6e:a7: 97:29:40:6a:65:e5:49:4e:f2:c6:6b:87:a2:07:33: e9:3d:8e:06:6a:49:e2:83:f8:3a:a1:d0:49:05:3b: 48:29:2b:bf:7a:0d:fc:d8:f4:1c:ac:a8:3b:f5:1e: b7:12:cf:f2:9b:ef:e2:b5:db:94:04:97:c7:0a:ad: 6d:c0:fc:26:86:31:6c:be:7d:3a:26:55:65:e1:7b: 11:92:0f:19:55:67:ec:f6:c5:7d:cf:b4:86:c8:3c: 5d:2d:91:6d:cb:21:56:c0:15:17:7e:71:df:4f:09: d9:96:3d:f4:31:f0:8f:e3:3d:85:9c:23:08:13:bc: 11:8f:fd:e0:6a:18:40:69:ce:15:ff:b2:0e:ea:d9: 5a:6f:dd:33:91:df:b7:83:fb:ed:0a:69:0b:b0:63: 0d:d5:a9:41:0f:88:bb:d4:a6:fd:d1:02:9f:d3:99: 66:73:e4:1a:1e:29:45:3b:1f:09:f6:fc:ed:7f:58: 68:c2:75:8c:7d:79:29:fd:d3:ba:8e:e5:ac:4b:c8: fc:b8:ce:fa:db:53:9d:8d:84:4d:c0:0f:cb:6f:af: 34:e7:af:83:cd:72:7f:7d:48:0d:c1:f7:19:ab:54: 39:9a:bb:ae:4d:05:20:72:07:e9:cf:0c:25:25:ec: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:80:B5:76:81:21:8A:79:AC:5C:FF:3D:72:02:D2:92:14:00:4D:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl X509v3 Authority Key Identifier: keyid:47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:d9:12:06:79:59:18:ec:77:09:87:0b:02:82:ce:24:49:29: 0b:f5:c6:f7:c0:1f:91:22:4a:fc:9b:e2:57:17:c0:9f:8b:5f: 4f:41:2b:b2:80:b7:4a:35:9c:7b:ff:21:ab:ad:23:3c:09:37: 62:12:c3:c2:87:7e:b4:ba:30:15:37:b0:8e:51:54:e0:fc:e8: b4:2f:e1:bb:08:e3:0e:4e:ff:4e:1f:e7:31:af:aa:f7:ba:92: 46:0d:74:66:b1:3c:40:9c:ef:d0:a7:9a:1f:11:1a:c9:ed:97: 86:a0:bb:c1:f5:25:9a:93:17:29:e1:94:d8:0d:00:98:24:7f: 0b:e3:e0:69:cc:cc:21:4a:e1:a6:7e:e2:f1:f5:43:35:b7:04: dd:c8:77:9e:dd:4b:22:ae:fb:d1:2f:75:0e:43:ce:f3:b5:6c: 05:d7:c6:0f:df:f4:fc:c4:5a:c3:1d:a5:5f:4f:86:b6:f6:a2: 16:f9:f9:75:49:18:cd:b7:7b:ae:98:80:5c:2b:05:87:2e:56: 52:20:bf:94:b4:b8:ab:35:a8:b2:9e:37:89:43:ca:3f:b4:af: d0:39:5d:05:d0:37:82:01:68:cd:c7:6b:1f:18:e4:6a:6c:2a: 70:b6:fe:51:30:06:6e:4f:a4:fb:47:a7:c5:b7:78:c6:e9:eb: 66:53:49:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw5FghHx5B/GkJH3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3MWU5NWMtZTQ4NC00YjUzLTkxZmYtZTE0ZDMzZWFh MmE2MB4XDTI1MTIxODAyMDAwM1oXDTI1MTIyMDAyMDAwMFowLzEtMCsGA1UEAxMk NjQ2YjQwNTItNWYwYi00ZDIyLTk0NTUtNzc0YTFiNGZlOGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOd1RGakNgdaFQv+bqeXKUBqZeVJTvLGa4ei BzPpPY4Gaknig/g6odBJBTtIKSu/eg382PQcrKg79R63Es/ym+/itduUBJfHCq1t wPwmhjFsvn06JlVl4XsRkg8ZVWfs9sV9z7SGyDxdLZFtyyFWwBUXfnHfTwnZlj30 MfCP4z2FnCMIE7wRj/3gahhAac4V/7IO6tlab90zkd+3g/vtCmkLsGMN1alBD4i7 1Kb90QKf05lmc+QaHilFOx8J9vztf1hownWMfXkp/dO6juWsS8j8uM7621OdjYRN wA/Lb68056+DzXJ/fUgNwfcZq1Q5mruuTQUgcgfpzwwlJezZPQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOSAtXaBIYp5rFz/PXIC0pIUAE1vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcx ZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRkMzNlYWEyYTYvZDY3MWU5NWMtZTQ4NC00 YjUzLTkxZmYtZTE0ZDMzZWFhMmE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDY3MWU5NWMtZTQ4NC00YjUzLTkx ZmYtZTE0ZDMzZWFhMmE2L2Q2NzFlOTVjLWU0ODQtNGI1My05MWZmLWUxNGQzM2Vh YTJhNi5jcmwwHwYDVR0jBBgwFoAUR9sbpctPjkRcwmwsWddit+ypMW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcxZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRk MzNlYWEyYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBe2RIGeVkY7HcJhwsCgs4k SSkL9cb3wB+RIkr8m+JXF8Cfi19PQSuygLdKNZx7/yGrrSM8CTdiEsPCh360ujAV N7COUVTg/Oi0L+G7COMOTv9OH+cxr6r3upJGDXRmsTxAnO/Qp5ofERrJ7ZeGoLvB 9SWakxcp4ZTYDQCYJH8L4+BpzMwhSuGmfuLx9UM1twTdyHee3UsirvvRL3UOQ87z tWwF18YP3/T8xFrDHaVfT4a29qIW+fl1SRjNt3uumIBcKwWHLlZSIL+UtLirNaiy njeJQ8o/tK/QOV0F0DeCAWjNx2sfGORqbCpwtv5RMAZuT6T7R6fFt3jG6etmU0nS -----END CERTIFICATE-----Generated at Thu Dec 18 20:32:35 2025 by rpki-client