This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: FNTfOiC+SvdhaK0QzYdLYjkANPH20oJGm5DwRZ0VoTM= Subject key identifier: 1A:70:B9:A5:53:74:26:D5:D4:D1:96:D4:80:1E:3A:15:CA:E2:96:54 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584CA14F92955098115730FDAA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026CF7 Signing time: Sat 24 Jan 2026 10:00:04 +0000 Manifest this update: Sat 24 Jan 2026 10:00:04 +0000 Manifest next update: Tue 27 Jan 2026 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: xKS5dDL4uvITst9UbO+LG4cGqgdrvmgMi89oisspobc=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: 8rfdFTXvAVD1HO/3ZHvYXyFkJjCjONyJB4Cr2Su/VkE=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: tyu/ZwC6SFzUuLpdo6IDvjF0vSqzmXyC9vxaQWTYx/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a1:4f:92:95:50:98:11:57:30:fd:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Jan 24 10:00:04 2026 GMT Not After : Jan 27 10:00:00 2026 GMT Subject: CN=ac9a8d29-cdc0-4b38-a90c-49ca4ad9569e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:ee:cd:aa:c9:02:4d:2f:a4:95:2a:4d:70: b9:25:31:52:5d:3f:01:16:ba:e5:61:09:6b:b1:f2: 59:ce:d9:39:ef:5d:ec:ff:a3:48:65:99:c2:93:73: 13:d2:ac:30:bb:1e:3c:36:a5:93:45:1b:23:2e:38: f0:65:60:0e:ef:c1:67:4d:e7:78:c2:b8:9e:09:87: 65:c9:93:ab:fa:39:db:f1:bc:dd:d6:45:3b:1b:45: c5:93:6b:2a:aa:94:1d:ef:c5:4c:fc:c6:27:ba:a4: 1d:8e:dc:a8:73:55:a6:c7:c1:3b:b5:62:fd:d8:ec: 99:22:8c:22:39:b0:e6:a1:26:6b:d0:c8:d0:3f:43: a0:0d:67:d9:99:02:60:c7:aa:eb:3a:67:40:d8:cf: c8:57:12:fb:06:5f:c8:f1:7c:c8:13:e3:95:c0:d0: 75:3e:9d:cc:7a:42:4e:41:09:b7:95:e7:98:1b:6d: a8:10:e4:aa:fa:f7:fc:cf:a7:a3:b2:b5:1d:bf:e2: b4:b2:38:69:7f:22:14:58:38:46:e8:5c:cf:ef:2f: c7:2f:64:ca:30:85:60:f9:cb:0e:22:e8:be:a4:7e: 4a:7e:ea:dd:f1:32:ec:b1:ad:b7:47:3c:a1:6b:66: 7b:2e:81:dc:e4:34:c4:3f:70:86:73:d4:f6:1e:ca: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:70:B9:A5:53:74:26:D5:D4:D1:96:D4:80:1E:3A:15:CA:E2:96:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:1d:23:7c:52:f3:4e:a5:8d:67:1d:d0:1d:04:d0:a0:1d:16: a6:12:10:2a:68:8d:87:58:af:c6:06:65:15:37:63:76:a3:83: 30:6c:48:85:64:8c:44:cb:7f:b1:c3:67:82:1d:04:d5:df:8b: 23:94:f4:4a:1c:b3:d1:22:b4:ad:70:0c:bf:8b:23:61:49:df: 70:1a:69:5a:03:80:d6:6b:47:95:0a:f2:0d:48:44:36:04:6e: f4:fd:5c:46:fa:18:c5:ea:22:02:2f:61:ef:55:d5:ad:65:96: 19:04:d2:c4:9f:6a:5a:89:ca:74:9d:de:b6:cf:9c:92:d7:e4: a8:8b:8f:14:a3:90:b7:57:7d:4e:12:3a:4a:89:29:28:bb:f2: df:08:41:5f:23:83:13:d3:2d:f8:18:cc:cb:2d:1e:52:1c:e1: 1f:7b:4d:b8:86:d5:71:e4:22:3a:4f:eb:4f:2b:b3:86:9b:c5: 5b:d7:13:84:97:51:22:2e:93:dd:f4:18:23:fa:ea:6a:7c:b2: bb:65:4c:2a:5f:7c:ba:f0:c6:10:8d:0a:e6:21:b1:01:a6:b8: 9e:e8:a2:db:c3:77:7c:bc:dc:3e:94:05:3a:8d:c7:21:34:59: 68:69:f2:95:74:20:d6:c9:46:62:5b:74:f6:c4:a9:4c:7d:fb: 05:e2:61:b5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyhT5KVUJgRVzD9qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI2MDEyNDEwMDAwNFoXDTI2MDEyNzEwMDAwMFowLzEtMCsGA1UEAxMk YWM5YThkMjktY2RjMC00YjM4LWE5MGMtNDljYTRhZDk1NjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBzuzarJAk0vpJUqTXC5JTFSXT8BFrrlYQlr sfJZztk5713s/6NIZZnCk3MT0qwwux48NqWTRRsjLjjwZWAO78FnTed4wrieCYdl yZOr+jnb8bzd1kU7G0XFk2sqqpQd78VM/MYnuqQdjtyoc1Wmx8E7tWL92OyZIowi ObDmoSZr0MjQP0OgDWfZmQJgx6rrOmdA2M/IVxL7Bl/I8XzIE+OVwNB1Pp3MekJO QQm3leeYG22oEOSq+vf8z6ejsrUdv+K0sjhpfyIUWDhG6FzP7y/HL2TKMIVg+csO Iui+pH5Kfurd8TLssa23Rzyha2Z7LoHc5DTEP3CGc9T2HsqN6QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBpwuaVTdCbV1NGW1IAeOhXK4pZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnHSN8UvNOpY1nHdAdBNCg HRamEhAqaI2HWK/GBmUVN2N2o4MwbEiFZIxEy3+xw2eCHQTV34sjlPRKHLPRIrSt cAy/iyNhSd9wGmlaA4DWa0eVCvINSEQ2BG70/VxG+hjF6iICL2HvVdWtZZYZBNLE n2paicp0nd62z5yS1+Soi48Uo5C3V31OEjpKiSkou/LfCEFfI4MT0y34GMzLLR5S HOEfe024htVx5CI6T+tPK7OGm8Vb1xOEl1EiLpPd9Bgj+upqfLK7ZUwqX3y68MYQ jQrmIbEBprie6KLbw3d8vNw+lAU6jcchNFloafKVdCDWyUZiW3T2xKlMffsF4mG1 -----END CERTIFICATE-----Generated at Sun Jan 25 09:21:06 2026 by rpki-client