This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft File: 40392fe9-312c-47a6-8066-48fda2f4c80b.mft (raw, json) Hash identifier: tE8yVgSpdkQe8HjtXH6e1NpK+Z0w1IoXEp8MU2dPJjQ= Subject key identifier: C0:25:54:9B:00:61:1B:54:DB:50:34:4F:0A:A4:09:8A:05:90:F5:44 Authority key identifier: DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 Certificate issuer: /CN=40392fe9-312c-47a6-8066-48fda2f4c80b Certificate serial: 010D0C9F4328584C18841AFDFF7AEFD4A2988400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft Manifest number: 010D0C9F4328584073A84E58EA4BACB47C0E2AAF Signing time: Sat 06 Dec 2025 10:00:09 +0000 Manifest this update: Sat 06 Dec 2025 10:00:09 +0000 Manifest next update: Mon 08 Dec 2025 10:00:00 +0000 Files and hashes: 1: 40392fe9-312c-47a6-8066-48fda2f4c80b.crl (hash: A+rXuArTaBeOUCG1yn/nK8Et8c9mhd9UD2dUEmLCcN0=) 2: b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa (hash: 0RSHYPyyCmACMJ6PEkWDcZDjTiDvD6gQKIDtSL3YVp8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:84:1a:fd:ff:7a:ef:d4:a2:98:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40392fe9-312c-47a6-8066-48fda2f4c80b Validity Not Before: Dec 6 10:00:09 2025 GMT Not After : Dec 8 10:00:00 2025 GMT Subject: CN=8473c681-59a3-46df-8384-07ec7e141597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:9b:91:fe:38:9e:89:08:6e:46:7a:d4:31: fd:4e:1e:c8:c4:1f:8b:3b:00:f3:9f:43:7f:c2:83: 19:13:dd:de:a1:4d:6f:88:28:a5:58:8b:65:d0:f8: f5:ff:5c:b1:6c:27:0d:3f:b2:43:31:0f:da:c3:ff: 9f:5a:37:f1:3b:83:20:d5:6a:d9:77:9a:fa:9a:da: 65:cf:59:8c:e3:72:b4:01:25:87:d1:5b:03:b5:a8: ff:8e:fd:be:0f:a1:cd:a4:bf:8a:8f:66:e8:e0:c2: 1f:69:57:e5:26:11:f0:4a:92:32:eb:d9:25:b7:e7: d1:af:84:47:2c:75:6c:44:27:e4:05:47:61:2f:44: 1c:c1:97:13:4f:c9:00:c7:18:3f:c2:16:ad:13:4b: 39:38:1c:11:04:2d:c5:59:4a:c4:81:17:f2:44:df: c8:62:df:73:34:ac:71:d1:85:f5:82:25:6a:cf:a6: 70:c2:7e:78:ea:bb:43:10:46:72:66:a1:22:88:0b: ba:cd:08:47:f4:c1:1c:76:64:9f:de:8f:37:29:0f: dd:00:35:3d:33:14:31:30:be:84:4c:4a:ec:c0:3e: c1:4b:97:cb:30:33:3a:61:4a:34:c5:4d:55:22:80: 15:df:e6:3b:ac:8a:60:f4:39:bd:7c:f0:de:e7:26: 8e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:25:54:9B:00:61:1B:54:DB:50:34:4F:0A:A4:09:8A:05:90:F5:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl X509v3 Authority Key Identifier: keyid:DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:ca:1c:cb:b8:90:c6:58:12:0e:76:17:a8:b5:eb:e1:7c:40: 42:a4:93:d0:00:42:f2:84:69:32:0c:3f:34:23:23:b4:00:a4: c1:1f:8f:ff:91:ce:7c:67:0b:bc:a8:8b:d4:8d:d9:af:6a:07: 7e:c9:2a:99:52:9b:c0:86:ae:2d:2b:aa:7c:b6:31:3d:f7:e2: 9b:0b:55:2b:4e:00:f2:2a:d2:d2:73:4a:bd:30:d2:18:6f:8e: 3c:0a:f6:6c:ba:18:c1:1f:51:4d:b7:a2:2e:aa:52:6d:8f:7d: fd:40:a4:10:2f:af:b8:6d:84:a6:72:f0:8c:1e:f4:ea:b1:7c: 16:0e:d4:f4:56:c5:38:08:4e:c8:60:a3:da:d8:86:d1:8c:9d: 7e:8b:fa:bb:a0:28:d2:3f:f0:bf:ab:1a:66:dd:04:f1:d1:5b: 2b:8f:72:41:c6:4e:44:a9:ae:f0:a5:a4:fc:29:1d:6f:0e:f9: 9c:be:c7:3d:a6:ed:5d:55:e7:5b:6a:c2:2d:4c:c3:94:fa:07: 6e:fe:ec:59:3f:d5:78:23:41:75:22:07:61:df:82:54:c5:ae: 48:81:e9:63:9e:06:84:41:1b:19:d8:b8:9c:1e:44:e7:e1:6d: bd:d4:89:43:58:1e:16:9f:4e:b8:7d:b3:33:05:53:cf:b5:0f: c8:1c:c0:d1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwYhBr9/3rv1KKYhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAzOTJmZTktMzEyYy00N2E2LTgwNjYtNDhmZGEyZjRj ODBiMB4XDTI1MTIwNjEwMDAwOVoXDTI1MTIwODEwMDAwMFowLzEtMCsGA1UEAxMk ODQ3M2M2ODEtNTlhMy00NmRmLTgzODQtMDdlYzdlMTQxNTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd2bkf44nokIbkZ61DH9Th7IxB+LOwDzn0N/ woMZE93eoU1viCilWItl0Pj1/1yxbCcNP7JDMQ/aw/+fWjfxO4Mg1WrZd5r6mtpl z1mM43K0ASWH0VsDtaj/jv2+D6HNpL+Kj2bo4MIfaVflJhHwSpIy69klt+fRr4RH LHVsRCfkBUdhL0QcwZcTT8kAxxg/whatE0s5OBwRBC3FWUrEgRfyRN/IYt9zNKxx 0YX1giVqz6Zwwn546rtDEEZyZqEiiAu6zQhH9MEcdmSf3o83KQ/dADU9MxQxML6E TErswD7BS5fLMDM6YUo0xU1VIoAV3+Y7rIpg9Dm9fPDe5yaOfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMAlVJsAYRtU21A0TwqkCYoFkPVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5 MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZkYTJmNGM4MGIvNDAzOTJmZTktMzEyYy00 N2E2LTgwNjYtNDhmZGEyZjRjODBiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDAzOTJmZTktMzEyYy00N2E2LTgw NjYtNDhmZGEyZjRjODBiLzQwMzkyZmU5LTMxMmMtNDdhNi04MDY2LTQ4ZmRhMmY0 YzgwYi5jcmwwHwYDVR0jBBgwFoAU2h72atkxtsYeskDAgp5dBkW4L6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MDM5MmZlOS0zMTJjLTQ3YTYtODA2Ni00OGZk YTJmNGM4MGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCzyhzLuJDGWBIOdheotevh fEBCpJPQAELyhGkyDD80IyO0AKTBH4//kc58Zwu8qIvUjdmvagd+ySqZUpvAhq4t K6p8tjE99+KbC1UrTgDyKtLSc0q9MNIYb448CvZsuhjBH1FNt6IuqlJtj339QKQQ L6+4bYSmcvCMHvTqsXwWDtT0VsU4CE7IYKPa2IbRjJ1+i/q7oCjSP/C/qxpm3QTx 0Vsrj3JBxk5Eqa7wpaT8KR1vDvmcvsc9pu1dVedbasItTMOU+gdu/uxZP9V4I0F1 Igdh34JUxa5IgeljngaEQRsZ2LicHkTn4W291IlDWB4Wn064fbMzBVPPtQ/IHMDR -----END CERTIFICATE-----Generated at Sat Dec 6 20:18:48 2025 by rpki-client