This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft File: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft (raw, json) Hash identifier: CMFHIhPD2dyjZm4mMcR4gI+Pm6R9cRJL1FrO3qr5xtA= Subject key identifier: 82:1E:7A:CB:74:49:3E:DB:A2:BF:7A:46:84:61:B1:89:60:B5:5D:F9 Authority key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Certificate issuer: /CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Certificate serial: 010D0C9F4328584C39AAF62BE72D11C5B140F480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft Manifest number: 010D0C9F4328584073A845B1E7CF882A25356491 Signing time: Thu 18 Dec 2025 07:00:08 +0000 Manifest this update: Thu 18 Dec 2025 07:00:08 +0000 Manifest next update: Sat 20 Dec 2025 07:00:00 +0000 Files and hashes: 1: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl (hash: VJ1jfl37czNOT+A7NWZRPowHNgzv2HisnA3uBUNAAMc=) 2: 44e6412a-ad9a-3379-a2fe-2eda7500f614.roa (hash: ww+E2//TcQhbrtAPxlqyfAP8oKFYpGeUR3jVnG1BoYU=) 3: d73a5915-ee1f-33f2-8b70-f050ef95069f.roa (hash: 8ySd6lSRHwO2zZnLC3OKz2eQGlDvNdEuAU+bpGzev0Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:39:aa:f6:2b:e7:2d:11:c5:b1:40:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Validity Not Before: Dec 18 07:00:08 2025 GMT Not After : Dec 20 07:00:00 2025 GMT Subject: CN=9b7fae4c-3a17-438f-88af-fae2a914f8a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:59:c7:5b:9e:d2:5b:64:7f:01:4e:3e:46:ec: b9:76:95:d2:47:d1:9a:b0:a7:8a:63:ea:b4:f8:98: 55:3e:2f:d6:b9:e2:d8:e1:99:2c:33:5b:2a:5c:6b: 10:7a:55:a5:06:4c:f7:bb:34:b0:df:21:80:bd:08: 76:ff:51:9d:72:c8:2b:23:81:5c:9f:90:c8:96:93: b8:2d:46:42:8b:1a:7d:1f:3b:33:a8:1d:cf:03:71: e8:09:ce:17:f9:d3:1c:0a:09:2b:06:16:29:5c:09: 55:a8:a8:b6:fd:5e:82:d1:57:92:33:8e:3f:04:d5: 9b:58:94:4f:fc:c5:27:53:27:d1:f6:76:d2:5f:d5: 15:cd:f2:36:13:a3:d5:8e:da:96:7b:1c:ed:39:d9: ba:bc:15:e1:ee:fd:5b:7a:78:de:90:cd:bc:5e:b2: 0c:d2:79:b4:e9:a8:ea:1b:d5:63:fd:e9:41:8b:fe: 96:cb:cc:76:3b:fb:49:9b:15:2e:d7:8c:76:f7:01: 8d:24:bf:9c:fc:55:f8:44:ed:91:da:d0:82:a2:59: 39:9a:30:ad:9b:b1:0f:e0:2f:47:fd:89:ab:bf:fe: e0:8e:b1:9b:a5:23:4e:95:dc:1c:14:93:1b:c0:2a: c1:8b:d5:58:85:b1:5a:60:06:f5:f4:f0:95:10:66: 08:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:1E:7A:CB:74:49:3E:DB:A2:BF:7A:46:84:61:B1:89:60:B5:5D:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl X509v3 Authority Key Identifier: keyid:C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:07:6f:f7:99:fa:35:29:c0:ca:f5:57:30:58:4e:60:b8:6b: ba:66:4d:f3:b4:3b:5f:3a:6a:49:92:21:0e:ec:1b:23:ae:3b: 42:e2:54:a9:14:b9:ff:8d:95:70:f9:77:a5:a2:c9:b6:e8:e4: 8f:7c:69:39:7b:e5:c0:e0:11:c1:a7:97:04:8a:26:dd:ad:4c: 11:fc:8c:2c:0d:42:37:73:5e:bd:dc:27:a9:5b:1e:cd:28:1b: 28:89:45:6e:05:00:4d:55:fe:0d:70:46:86:38:4c:48:eb:23: 19:b5:25:bd:9b:a6:45:71:d2:c3:d8:ee:56:1c:c3:7f:a3:12: c8:b3:d9:ff:0a:d6:56:1d:ac:67:c4:7f:04:10:c4:88:4b:bf: 9e:51:35:3c:9b:6c:47:16:4f:88:f2:d8:f0:a6:8a:24:09:37: 0e:c5:4c:cc:3b:23:87:c0:60:00:f9:4e:54:00:27:a4:a8:17: d3:32:9e:c1:85:fe:ed:6d:bf:81:38:0b:eb:59:26:b7:72:b6: 36:fb:96:57:e6:f8:cf:17:b9:fd:c4:d7:17:ae:c2:8d:01:da: f0:02:3f:b9:46:f7:43:d7:bd:de:36:8f:43:bf:b7:6e:e8:c3: 03:96:c3:46:b4:4b:c9:de:04:ef:cb:db:36:4e:d8:8e:48:e6: 3f:3c:0c:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw5qvYr5y0RxbFA9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YyOGI2MmMtN2M1MC00Y2NmLWJhYzUtYTZjZWQ5YzUx MGFlMB4XDTI1MTIxODA3MDAwOFoXDTI1MTIyMDA3MDAwMFowLzEtMCsGA1UEAxMk OWI3ZmFlNGMtM2ExNy00MzhmLTg4YWYtZmFlMmE5MTRmOGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFnHW57SW2R/AU4+Ruy5dpXSR9GasKeKY+q0 +JhVPi/WueLY4ZksM1sqXGsQelWlBkz3uzSw3yGAvQh2/1GdcsgrI4Fcn5DIlpO4 LUZCixp9HzszqB3PA3HoCc4X+dMcCgkrBhYpXAlVqKi2/V6C0VeSM44/BNWbWJRP /MUnUyfR9nbSX9UVzfI2E6PVjtqWexztOdm6vBXh7v1benjekM28XrIM0nm06ajq G9Vj/elBi/6Wy8x2O/tJmxUu14x29wGNJL+c/FX4RO2R2tCColk5mjCtm7EP4C9H /Ymrv/7gjrGbpSNOldwcFJMbwCrBi9VYhbFaYAb19PCVEGYIHwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIIeest0ST7bor96RoRhsYlgtV35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4 YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDljNTEwYWUvM2YyOGI2MmMtN2M1MC00 Y2NmLWJhYzUtYTZjZWQ5YzUxMGFlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2YyOGI2MmMtN2M1MC00Y2NmLWJh YzUtYTZjZWQ5YzUxMGFlLzNmMjhiNjJjLTdjNTAtNGNjZi1iYWM1LWE2Y2VkOWM1 MTBhZS5jcmwwHwYDVR0jBBgwFoAUx41gkQp7ujkifr5s5i8FjtJm/YYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNl ZDljNTEwYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8B2/3mfo1KcDK9VcwWE5g uGu6Zk3ztDtfOmpJkiEO7BsjrjtC4lSpFLn/jZVw+Xelosm26OSPfGk5e+XA4BHB p5cEiibdrUwR/IwsDUI3c1693CepWx7NKBsoiUVuBQBNVf4NcEaGOExI6yMZtSW9 m6ZFcdLD2O5WHMN/oxLIs9n/CtZWHaxnxH8EEMSIS7+eUTU8m2xHFk+I8tjwpook CTcOxUzMOyOHwGAA+U5UACekqBfTMp7Bhf7tbb+BOAvrWSa3crY2+5ZX5vjPF7n9 xNcXrsKNAdrwAj+5RvdD173eNo9Dv7du6MMDlsNGtEvJ3gTvy9s2TtiOSOY/PAwD -----END CERTIFICATE-----Generated at Thu Dec 18 15:42:11 2025 by rpki-client