This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft File: 8d3868d4-1e91-4773-9cef-51b84f43c20e.mft (raw, json) Hash identifier: vteh3hIlB5qUJuQhxX0GhEyogeKJK2uQQGoQ2wRWN/0= Subject key identifier: A3:E8:10:4E:A0:38:DD:17:4C:28:CB:CE:23:D7:13:F0:99:F3:CB:92 Authority key identifier: C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A Certificate issuer: /CN=8d3868d4-1e91-4773-9cef-51b84f43c20e Certificate serial: 010D0C9F4328584C16C56453967F0D8EA08E8200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft Manifest number: 010D0C9F4328584073A81F5B29C8A372777F4E45 Signing time: Fri 05 Dec 2025 19:00:03 +0000 Manifest this update: Fri 05 Dec 2025 19:00:03 +0000 Manifest next update: Sun 07 Dec 2025 19:00:00 +0000 Files and hashes: 1: 542db07c-1ce5-3496-a24b-1970b9d4bceb.roa (hash: hSXfGRWhpCsh5IO6NJYpwURiZQB+EioU5mQpzu+ntHQ=) 2: 8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa (hash: 8Y84OtAOh1G8JSGYRBSnoAQoxXRdW+jAQ9zUYIBUJYc=) 3: 8d3868d4-1e91-4773-9cef-51b84f43c20e.crl (hash: J8wU8zRapRhKNOgtClu7BFk0NsBFBBkYVMUu3r9glVg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:c5:64:53:96:7f:0d:8e:a0:8e:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3868d4-1e91-4773-9cef-51b84f43c20e Validity Not Before: Dec 5 19:00:03 2025 GMT Not After : Dec 7 19:00:00 2025 GMT Subject: CN=f9344598-4c81-4fd3-92b1-4f8766a75789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:38:d2:3a:a0:8c:7d:29:e5:81:7f:72:af:fb: 48:cd:a0:62:85:a0:00:4c:81:79:d4:2c:b5:5b:15: 4d:56:80:7a:54:e1:ff:b3:d2:e4:4f:10:23:c1:bf: ed:24:2a:ad:bb:4d:51:1a:10:b7:b7:a1:05:1b:93: ff:9b:c9:74:09:40:3b:e7:a4:dd:a0:93:0b:03:1e: fc:2c:98:f2:3f:72:9f:4c:76:d9:f9:a1:46:b7:e8: 7d:e7:2b:9e:fa:a0:97:a4:47:da:6b:07:a6:05:b3: 53:74:5e:97:8f:3c:dd:3e:ab:4b:2e:d4:2e:5c:51: d5:91:72:65:54:ec:86:18:37:5d:9c:db:a6:23:16: d0:ca:28:d7:fc:a7:b5:0e:64:82:e0:50:67:9d:e6: 15:8e:34:14:e0:b0:90:cb:c9:a8:2d:53:d5:a5:9d: de:58:96:55:50:bb:a5:ae:8a:e7:2b:30:9e:fd:84: eb:a8:4f:f7:b0:c2:7c:4d:80:e9:88:2a:8c:cf:80: 5d:8d:07:dc:63:d8:49:ba:10:53:aa:1e:93:bf:fb: 89:17:0e:1d:0e:81:f1:9a:c6:4d:1e:05:e5:98:26: c4:64:c3:e1:e9:2d:3a:3c:bc:fe:eb:7b:ed:11:71: 23:25:67:0a:c8:8e:5b:1e:ed:45:b0:37:1e:66:ba: 22:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E8:10:4E:A0:38:DD:17:4C:28:CB:CE:23:D7:13:F0:99:F3:CB:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl X509v3 Authority Key Identifier: keyid:C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:84:47:88:ed:00:44:cf:d5:b8:3b:7a:cb:1c:cd:5c:97:9b: 3f:1b:99:43:b0:30:89:b4:e1:37:c8:11:53:a7:c5:13:3d:1e: bb:e4:18:64:d3:50:dc:2f:21:0b:6c:4d:8d:3e:1a:fe:ea:bd: c1:c2:f9:a6:85:72:27:d2:23:fe:1c:5f:99:ed:32:70:fe:be: 8b:2f:64:9a:15:c3:69:ba:2e:48:c8:8c:76:3f:7c:02:4f:16: 95:4e:41:90:0e:13:c2:6d:ba:3c:c1:a7:6f:c6:3b:d7:f2:90: d9:75:c6:9a:62:a8:a2:fd:6d:da:9d:d8:09:8d:3d:00:6c:0d: 17:e9:a6:79:d1:62:7f:d7:ff:bb:59:9e:c8:ee:38:34:ff:c2: c6:1c:90:83:3f:2d:7a:e7:82:98:37:50:42:0d:9f:97:4d:c4: 4b:02:ce:02:a9:52:17:8e:ca:41:9f:b7:ef:b8:0e:91:bc:29: 6f:cb:94:18:d3:6d:b4:96:ed:03:3f:08:5d:04:0b:ae:21:57: b2:c4:c0:6f:41:80:47:cf:29:67:c5:90:44:24:e1:8e:39:e5: da:38:b8:5c:1f:11:9d:ec:a0:92:f1:b1:7a:ec:5f:86:d1:ea: 51:37:89:49:da:31:34:3a:18:32:95:30:24:aa:8f:8f:b1:f8: 4d:3d:1f:ee -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWxWRTln8NjqCOggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzODY4ZDQtMWU5MS00NzczLTljZWYtNTFiODRmNDNj MjBlMB4XDTI1MTIwNTE5MDAwM1oXDTI1MTIwNzE5MDAwMFowLzEtMCsGA1UEAxMk ZjkzNDQ1OTgtNGM4MS00ZmQzLTkyYjEtNGY4NzY2YTc1Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTjSOqCMfSnlgX9yr/tIzaBihaAATIF51Cy1 WxVNVoB6VOH/s9LkTxAjwb/tJCqtu01RGhC3t6EFG5P/m8l0CUA756TdoJMLAx78 LJjyP3KfTHbZ+aFGt+h95yue+qCXpEfaawemBbNTdF6XjzzdPqtLLtQuXFHVkXJl VOyGGDddnNumIxbQyijX/Ke1DmSC4FBnneYVjjQU4LCQy8moLVPVpZ3eWJZVULul rornKzCe/YTrqE/3sMJ8TYDpiCqMz4BdjQfcY9hJuhBTqh6Tv/uJFw4dDoHxmsZN HgXlmCbEZMPh6S06PLz+63vtEXEjJWcKyI5bHu1FsDceZroikwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKPoEE6gON0XTCjLziPXE/CZ88uSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZDM4 NjhkNC0xZTkxLTQ3NzMtOWNlZi01MWI4NGY0M2MyMGUvOGQzODY4ZDQtMWU5MS00 NzczLTljZWYtNTFiODRmNDNjMjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGQzODY4ZDQtMWU5MS00NzczLTlj ZWYtNTFiODRmNDNjMjBlLzhkMzg2OGQ0LTFlOTEtNDc3My05Y2VmLTUxYjg0ZjQz YzIwZS5jcmwwHwYDVR0jBBgwFoAUw99vQ7x1F08JDM2+r7OE9K3N9gowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZDM4NjhkNC0xZTkxLTQ3NzMtOWNlZi01MWI4 NGY0M2MyMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBhEeI7QBEz9W4O3rLHM1c l5s/G5lDsDCJtOE3yBFTp8UTPR675Bhk01DcLyELbE2NPhr+6r3BwvmmhXIn0iP+ HF+Z7TJw/r6LL2SaFcNpui5IyIx2P3wCTxaVTkGQDhPCbbo8wadvxjvX8pDZdcaa Yqii/W3andgJjT0AbA0X6aZ50WJ/1/+7WZ7I7jg0/8LGHJCDPy1654KYN1BCDZ+X TcRLAs4CqVIXjspBn7fvuA6RvClvy5QY0220lu0DPwhdBAuuIVeyxMBvQYBHzyln xZBEJOGOOeXaOLhcHxGd7KCS8bF67F+G0epRN4lJ2jE0OhgylTAkqo+PsfhNPR/u -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:13 2025 by rpki-client