This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft File: caf19008-048f-4580-9101-f0d1eb7fc3ae.mft (raw, json) Hash identifier: H4PRxoHwxX+8QkMSotDXy7tSpuHSTxeKb4u58aQkZe8= Subject key identifier: 34:F0:A8:57:29:98:73:92:18:10:A4:6B:A8:EA:0D:AD:91:3C:A3:E6 Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584C182AB9599FAFF06C04B9FF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft Manifest number: 010D0C9F4328584073A84561B07C62D8C8FAA1C5 Signing time: Sat 06 Dec 2025 07:00:04 +0000 Manifest this update: Sat 06 Dec 2025 07:00:04 +0000 Manifest next update: Mon 08 Dec 2025 07:00:00 +0000 Files and hashes: 1: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (hash: LprQpzEECX+liWqilk9BrMHjerkbBN2z+kCpe43yrxE=) 2: a45902da-9e70-3943-a932-51f817256e75.roa (hash: YOPIAP9M3QnL9vkDsrBvzxiagMzIO5nJt4NR/B12uFE=) 3: caf19008-048f-4580-9101-f0d1eb7fc3ae.crl (hash: jp23FkOHIVisWOZj7LtZJvHIoHL2WMBC1y6tnpPw1kw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:2a:b9:59:9f:af:f0:6c:04:b9:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Dec 6 07:00:04 2025 GMT Not After : Dec 8 07:00:00 2025 GMT Subject: CN=2c274017-c7c9-48ab-ae5f-9b13275aaff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:16:01:b8:ed:63:3f:c5:29:91:05:bf:93: 3c:2c:27:4d:5f:ee:5e:25:72:67:4d:e3:fd:60:8e: fb:18:e2:f8:1a:05:3f:c2:0a:4b:e1:1b:63:9e:d1: 5c:43:f3:2a:11:9a:e2:c5:e7:15:0b:82:9c:19:c6: 11:59:0a:3f:6d:83:21:d2:93:df:b3:3e:43:08:9e: b4:0f:85:42:08:5a:b8:26:f5:89:e8:8f:10:7c:05: 56:b8:31:6d:69:ca:8b:ac:4b:ed:a4:46:56:cc:18: 74:7a:25:f8:24:e0:a7:10:ef:76:82:4a:b9:28:77: d6:e5:2d:57:ff:f0:5d:4c:9f:57:53:0f:b4:f3:0c: 9b:dd:ac:86:b9:d1:f2:3f:2d:9f:72:7c:a3:7e:73: da:81:a7:02:bb:d6:8a:6d:bf:52:c2:03:1f:87:6c: a7:e9:a3:10:a5:cc:7f:2c:75:d5:0d:c1:60:e9:ba: 43:92:d8:44:85:ec:38:1e:75:91:ef:bc:86:f0:15: e9:ba:9b:6d:ac:87:20:3e:b4:eb:e6:53:b7:8f:21: 67:6c:85:8a:b9:bf:8e:f1:1b:40:3b:fe:30:4c:90: 5b:a1:1c:03:fa:8e:91:57:ff:7a:4a:5d:c0:8e:af: 56:d8:31:41:38:25:43:29:18:e8:b0:ba:06:4e:83: 78:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F0:A8:57:29:98:73:92:18:10:A4:6B:A8:EA:0D:AD:91:3C:A3:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:4b:32:86:fc:38:9b:7b:ec:eb:da:ff:bd:7a:99:36:a8:c3: d0:c8:e1:c1:38:46:0c:fc:d6:cf:2b:1f:db:45:d0:4f:91:c3: 70:90:c2:87:ed:f3:73:a2:5e:d6:4c:7a:a8:63:57:a2:a5:ca: 00:c4:f8:8a:24:b0:d7:a3:93:5f:6d:5e:36:f2:6d:8e:53:07: 7b:bb:28:62:2e:53:d5:48:c0:62:fd:63:47:7a:41:32:ec:13: f4:ed:01:d8:6d:2e:19:86:72:98:c8:74:bc:2e:75:8f:ef:82: 8a:4d:ba:4b:1c:4d:42:f4:2e:73:df:e8:ad:75:46:dd:88:71: 70:98:18:6f:e9:6e:be:0b:f8:6f:2f:31:34:39:fd:d1:71:b3: e6:09:cd:f8:f5:b0:18:65:f0:71:08:2f:e0:97:fa:e6:ea:c7: b9:d4:4f:cb:f7:0a:d7:27:9b:9c:8c:66:f6:5e:06:06:e5:54: e8:0e:66:b3:87:15:0b:48:64:8f:69:99:b5:66:53:16:a0:eb: b5:24:52:f3:f1:ae:21:e8:01:96:0f:00:d5:a5:80:67:e4:8e: 6b:3e:6b:29:0d:2b:d2:31:0d:ee:73:18:50:c7:72:f7:6c:07: 30:5f:bb:cf:6f:d4:57:79:cc:b2:59:26:74:ed:25:60:78:7c: f8:36:c4:be -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwYKrlZn6/wbAS5/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI1MTIwNjA3MDAwNFoXDTI1MTIwODA3MDAwMFowLzEtMCsGA1UEAxMk MmMyNzQwMTctYzdjOS00OGFiLWFlNWYtOWIxMzI3NWFhZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTsWAbjtYz/FKZEFv5M8LCdNX+5eJXJnTeP9 YI77GOL4GgU/wgpL4RtjntFcQ/MqEZrixecVC4KcGcYRWQo/bYMh0pPfsz5DCJ60 D4VCCFq4JvWJ6I8QfAVWuDFtacqLrEvtpEZWzBh0eiX4JOCnEO92gkq5KHfW5S1X //BdTJ9XUw+08wyb3ayGudHyPy2fcnyjfnPagacCu9aKbb9SwgMfh2yn6aMQpcx/ LHXVDcFg6bpDkthEhew4HnWR77yG8BXpupttrIcgPrTr5lO3jyFnbIWKub+O8RtA O/4wTJBboRwD+o6RV/96Sl3Ajq9W2DFBOCVDKRjosLoGToN49QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDTwqFcpmHOSGBCka6jqDa2RPKPmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvY2FmMTkwMDgtMDQ4Zi00 NTgwLTkxMDEtZjBkMWViN2ZjM2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBySzKG/Dibe+zr2v+9epk2 qMPQyOHBOEYM/NbPKx/bRdBPkcNwkMKH7fNzol7WTHqoY1eipcoAxPiKJLDXo5Nf bV428m2OUwd7uyhiLlPVSMBi/WNHekEy7BP07QHYbS4ZhnKYyHS8LnWP74KKTbpL HE1C9C5z3+itdUbdiHFwmBhv6W6+C/hvLzE0Of3RcbPmCc349bAYZfBxCC/gl/rm 6se51E/L9wrXJ5ucjGb2XgYG5VToDmazhxULSGSPaZm1ZlMWoOu1JFLz8a4h6AGW DwDVpYBn5I5rPmspDSvSMQ3ucxhQx3L3bAcwX7vPb9RXecyyWSZ07SVgeHz4NsS+ -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:48 2025 by rpki-client