This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft File: ab3688e8-3425-4e58-a239-949508a9f6dd.mft (raw, json) Hash identifier: hpsr4wVvW/MB2JW6S9ToGXDV5c2kc+ppA3a5n9IfOY4= Subject key identifier: 44:50:04:64:9C:43:42:32:54:89:8D:03:F9:AD:63:4E:79:C0:40:73 Authority key identifier: 48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB Certificate issuer: /CN=ab3688e8-3425-4e58-a239-949508a9f6dd Certificate serial: 010D0C9F4328584C4228C29C32D92588F7A5D600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft Manifest number: 010D0C9F4328584073A848040FBC3E28BCA28AC7 Signing time: Sun 21 Dec 2025 08:00:03 +0000 Manifest this update: Sun 21 Dec 2025 08:00:03 +0000 Manifest next update: Wed 24 Dec 2025 08:00:00 +0000 Files and hashes: 1: 27d876b9-8aed-36f6-9c6a-1c14bd3b0427.roa (hash: Q3xOTSPeOFsdUTp8eQSx9hMxzFEJ5bq2okbUhJhAYF0=) 2: 2c2f2002-b19b-3f29-a667-5eca934bdc03.roa (hash: O9vI3yvWb9XtbZa8jEoWoo1UDO1TlKxxI1fC5/+bXuE=) 3: ab3688e8-3425-4e58-a239-949508a9f6dd.crl (hash: 4eXSmOp38+9TsMj5PkRfxMAs08GiZvc5WzFNZYiBBro=) 4: e062dbf9-e39f-3cd8-af8e-ed425d95313b.roa (hash: TAbe7Rhv8upsURJFip9UEwHOOAizLA40cDFMm7mSYtA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:28:c2:9c:32:d9:25:88:f7:a5:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab3688e8-3425-4e58-a239-949508a9f6dd Validity Not Before: Dec 21 08:00:03 2025 GMT Not After : Dec 24 08:00:00 2025 GMT Subject: CN=3afabff7-297f-403e-be09-23289ee8c494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:97:68:1c:d3:ba:6c:67:39:2e:6f:f8:b4: ec:b5:0a:06:52:a9:3d:50:62:1c:18:c2:d9:c9:f0: 70:e2:49:33:ee:0a:b7:1c:6d:7b:45:77:89:c7:4c: e3:1c:36:63:12:a5:ec:bf:08:75:dd:15:43:20:ad: 36:f4:59:d1:18:11:8e:5f:8a:58:0c:c9:0d:8e:d9: 6f:38:9c:72:81:79:a5:b9:98:47:f6:33:4b:0e:68: 70:a2:e1:55:13:59:94:66:eb:b9:b9:c4:e6:7c:6e: 74:ba:b3:85:fa:fc:69:45:4a:7e:38:e2:74:18:6d: 3b:40:7d:a4:58:ea:5e:66:e3:08:18:14:9e:2f:bb: 5c:38:01:60:d3:4f:17:3d:7c:01:91:05:47:69:40: 5a:98:50:a9:90:7a:d0:3c:3f:5e:55:2e:e0:76:1e: fe:1b:f8:1e:a9:c0:f0:c7:83:c2:99:dd:5b:7b:64: 11:57:aa:10:84:4b:a7:d5:fd:12:b2:58:ab:83:c7: 93:a0:48:7a:b7:5f:4a:62:fb:3f:6d:59:7f:1b:4d: b1:4e:cc:f6:6d:9a:da:8c:bb:87:10:7c:c1:e1:8e: ee:c9:be:22:73:a2:51:29:f7:96:f1:26:40:ea:f5: f2:37:de:c9:29:32:65:2c:30:ac:57:fe:6d:ee:02: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:50:04:64:9C:43:42:32:54:89:8D:03:F9:AD:63:4E:79:C0:40:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd/ab3688e8-3425-4e58-a239-949508a9f6dd.crl X509v3 Authority Key Identifier: keyid:48:68:72:45:64:2E:EE:B7:D1:4C:89:AA:BF:91:87:19:4D:93:99:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab3688e8-3425-4e58-a239-949508a9f6dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:0c:92:87:36:15:13:fd:6d:d7:28:45:50:eb:3b:63:74:84: 93:fa:1f:f8:75:69:b4:e2:f6:d2:2c:5d:4a:3f:cb:76:5a:5e: 55:9f:ac:b2:14:a0:e9:3b:1f:09:a8:28:11:69:4d:d2:77:af: c0:e5:f5:e8:bd:99:f9:a5:20:bb:c9:1e:4a:aa:30:90:38:ff: f0:41:60:e8:3e:a9:66:24:5a:a5:fd:82:d1:71:33:39:af:fb: 84:77:40:7d:3d:bd:dc:5d:eb:18:98:d7:fd:91:fd:48:72:85: f3:c3:70:60:f3:70:39:b6:17:3a:17:68:e2:8d:47:9e:5b:e1: bd:57:02:7e:86:09:cd:a9:cb:2e:c5:f6:55:15:83:dc:56:0d: d4:15:b3:dd:fa:07:44:27:9d:3c:f4:02:d5:10:ee:28:a9:3b: c2:04:33:d1:b2:1a:ef:83:93:55:02:2f:50:82:b0:b6:b3:74: b1:57:87:0a:42:e5:54:3f:32:27:d6:79:f6:6e:75:e4:58:7f: 74:f2:dc:a8:67:a9:d7:c3:42:c1:d8:5d:43:c9:0c:d0:bd:48: 51:3f:06:ee:4a:d8:fa:77:48:87:fe:2e:e9:85:aa:5f:33:b9: b0:cd:0d:e9:e6:23:99:09:fb:e9:ae:52:a3:fd:90:40:82:7b: 14:20:a3:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExCKMKcMtkliPel1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIzNjg4ZTgtMzQyNS00ZTU4LWEyMzktOTQ5NTA4YTlm NmRkMB4XDTI1MTIyMTA4MDAwM1oXDTI1MTIyNDA4MDAwMFowLzEtMCsGA1UEAxMk M2FmYWJmZjctMjk3Zi00MDNlLWJlMDktMjMyODllZThjNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUGXaBzTumxnOS5v+LTstQoGUqk9UGIcGMLZ yfBw4kkz7gq3HG17RXeJx0zjHDZjEqXsvwh13RVDIK029FnRGBGOX4pYDMkNjtlv OJxygXmluZhH9jNLDmhwouFVE1mUZuu5ucTmfG50urOF+vxpRUp+OOJ0GG07QH2k WOpeZuMIGBSeL7tcOAFg008XPXwBkQVHaUBamFCpkHrQPD9eVS7gdh7+G/geqcDw x4PCmd1be2QRV6oQhEun1f0Sslirg8eToEh6t19KYvs/bVl/G02xTsz2bZrajLuH EHzB4Y7uyb4ic6JRKfeW8SZA6vXyN97JKTJlLDCsV/5t7gK6YwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFERQBGScQ0IyVImNA/mtY055wEBzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2 ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1MDhhOWY2ZGQvYWIzNjg4ZTgtMzQyNS00 ZTU4LWEyMzktOTQ5NTA4YTlmNmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWIzNjg4ZTgtMzQyNS00ZTU4LWEy MzktOTQ5NTA4YTlmNmRkL2FiMzY4OGU4LTM0MjUtNGU1OC1hMjM5LTk0OTUwOGE5 ZjZkZC5jcmwwHwYDVR0jBBgwFoAUSGhyRWQu7rfRTImqv5GHGU2TmdswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjM2ODhlOC0zNDI1LTRlNTgtYTIzOS05NDk1 MDhhOWY2ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrDJKHNhUT/W3XKEVQ6ztj dIST+h/4dWm04vbSLF1KP8t2Wl5Vn6yyFKDpOx8JqCgRaU3Sd6/A5fXovZn5pSC7 yR5KqjCQOP/wQWDoPqlmJFql/YLRcTM5r/uEd0B9Pb3cXesYmNf9kf1IcoXzw3Bg 83A5thc6F2jijUeeW+G9VwJ+hgnNqcsuxfZVFYPcVg3UFbPd+gdEJ5089ALVEO4o qTvCBDPRshrvg5NVAi9QgrC2s3SxV4cKQuVUPzIn1nn2bnXkWH908tyoZ6nXw0LB 2F1DyQzQvUhRPwbuStj6d0iH/i7phapfM7mwzQ3p5iOZCfvprlKj/ZBAgnsUIKPw -----END CERTIFICATE-----Generated at Sun Dec 21 11:28:21 2025 by rpki-client