This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft File: cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft (raw, json) Hash identifier: 4zo82Iv6Y+EVgL7GEHvUZefjMbFLnRjvgn02lRrbnwI= Subject key identifier: FD:8E:F5:EC:30:B9:37:FB:C9:99:A2:A1:8C:85:AC:C6:BE:8E:F8:10 Authority key identifier: BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 Certificate issuer: /CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Certificate serial: 010D0C9F4328584C355D201B4C583C1B9A4CB780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft Manifest number: 010D0C9F4328584073A82089A2176C2624B9BB98 Signing time: Tue 16 Dec 2025 18:00:03 +0000 Manifest this update: Tue 16 Dec 2025 18:00:03 +0000 Manifest next update: Fri 19 Dec 2025 18:00:00 +0000 Files and hashes: 1: 9682d34a-d558-35ce-b94a-c06ff912b18e.roa (hash: Ltb0OkA/3DNcOVROn0IOhLCXDnP6BADIg0sTN921q5U=) 2: cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl (hash: ouLZZ6nPFiPXfjpzUKl5WYDzTPK0DgfNaubY56FAgfc=) 3: d44b739e-4693-3efd-8c82-67f73703b4ec.roa (hash: 7lnQJ3GNaxDyFOVPdoWdKLgcG8OdgaML8CTpayVlJcw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:35:5d:20:1b:4c:58:3c:1b:9a:4c:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde39d3e-3837-4341-a8bd-86c74c06a6e4 Validity Not Before: Dec 16 18:00:03 2025 GMT Not After : Dec 19 18:00:00 2025 GMT Subject: CN=80ae4f80-3f99-4cec-a778-0e3a9f046bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8e:8c:07:8e:c2:1b:37:0a:dc:44:2b:80:74: 95:db:ae:95:9d:7c:bb:3d:be:7e:3c:b2:fd:43:3b: 72:90:ee:52:3e:62:1e:1e:86:88:08:fc:43:3c:cb: 75:c9:6e:bf:2d:7f:7d:a6:3a:8c:1f:cf:96:d3:e9: ac:80:8d:77:6f:9f:81:ab:7b:cf:68:03:19:8f:1b: 70:7d:41:44:c6:e6:a3:30:ad:4f:c6:56:c6:bb:00: ec:7f:e5:4a:7f:6f:47:4a:cc:b4:7e:d8:f1:d3:d4: f9:e5:61:92:79:ff:e7:eb:3c:85:aa:1d:11:1a:7a: 3a:f1:82:e8:4e:75:73:00:7a:90:66:e0:c4:fe:7b: f9:b5:0d:f9:a2:89:d4:31:c1:2f:e0:16:89:2e:e7: 3d:d4:5d:2f:57:05:9f:d8:2d:ac:eb:d1:04:7d:ab: 9f:41:52:91:ae:c3:4b:b1:70:74:05:51:90:f2:c6: db:44:ed:4d:36:91:f3:f3:1a:0f:8f:66:a6:cb:da: 1b:28:56:19:04:ac:21:80:62:cc:e2:3e:61:51:74: 31:ab:2e:77:3c:b5:25:b4:4d:4d:78:1c:bb:ec:d9: f9:13:e3:d0:89:31:c7:ff:15:ee:de:d3:e1:58:81: a4:8c:bc:21:86:d5:4b:65:1c:ae:92:69:d5:d4:1f: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:8E:F5:EC:30:B9:37:FB:C9:99:A2:A1:8C:85:AC:C6:BE:8E:F8:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4/cde39d3e-3837-4341-a8bd-86c74c06a6e4.crl X509v3 Authority Key Identifier: keyid:BE:E1:A9:58:D6:8A:ED:2B:7E:F2:AE:35:4D:3B:EC:EC:C2:2F:5B:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cde39d3e-3837-4341-a8bd-86c74c06a6e4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d3:ac:42:56:51:d4:88:a7:bb:51:8c:8d:e0:33:8f:c4:64: ef:5e:19:49:5f:8c:27:ca:06:f2:91:9f:03:83:74:36:b1:a8: 78:57:41:ba:00:be:01:6d:a2:d3:25:e6:48:e1:87:df:0d:2c: e4:ef:54:28:0a:e4:2a:9d:97:5b:15:01:69:59:36:0b:d7:f8: f8:32:3e:43:7f:36:85:dc:10:de:58:3b:19:35:e3:6a:b8:81: 07:89:8c:13:89:5f:f8:c4:25:e3:53:ba:56:91:6d:91:b2:8d: a5:52:f5:84:af:02:42:e7:44:27:92:5d:e6:dd:ea:5c:44:bf: 34:f7:82:67:d9:63:37:b8:e4:52:f2:5d:84:21:aa:07:d1:81: 61:af:c6:74:73:af:b1:b0:52:f3:9d:21:34:a5:14:f7:b0:86: 53:89:71:59:0b:5d:2b:ab:1a:86:6b:9f:c0:a1:25:23:d2:ed: 05:1f:90:28:60:bb:ae:7c:01:8f:f6:d1:be:46:4d:a3:75:f4: a0:0d:e5:4d:6a:d0:d5:3c:7f:21:ba:64:a8:27:d3:09:6c:1f: 20:a3:cf:2f:bd:85:df:2f:c1:5f:2a:d1:3b:64:89:1c:a6:6a: 1e:7a:dc:5c:41:0a:07:3e:8c:38:a0:f6:43:40:30:8e:e3:4c: 73:43:cb:b3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw1XSAbTFg8G5pMt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RlMzlkM2UtMzgzNy00MzQxLWE4YmQtODZjNzRjMDZh NmU0MB4XDTI1MTIxNjE4MDAwM1oXDTI1MTIxOTE4MDAwMFowLzEtMCsGA1UEAxMk ODBhZTRmODAtM2Y5OS00Y2VjLWE3NzgtMGUzYTlmMDQ2YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo6MB47CGzcK3EQrgHSV266VnXy7Pb5+PLL9 QztykO5SPmIeHoaICPxDPMt1yW6/LX99pjqMH8+W0+msgI13b5+Bq3vPaAMZjxtw fUFExuajMK1PxlbGuwDsf+VKf29HSsy0ftjx09T55WGSef/n6zyFqh0RGno68YLo TnVzAHqQZuDE/nv5tQ35oonUMcEv4BaJLuc91F0vVwWf2C2s69EEfaufQVKRrsNL sXB0BVGQ8sbbRO1NNpHz8xoPj2amy9obKFYZBKwhgGLM4j5hUXQxqy53PLUltE1N eBy77Nn5E+PQiTHH/xXu3tPhWIGkjLwhhtVLZRyukmnV1B+SgQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP2O9ewwuTf7yZmioYyFrMa+jvgQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUz OWQzZS0zODM3LTQzNDEtYThiZC04NmM3NGMwNmE2ZTQvY2RlMzlkM2UtMzgzNy00 MzQxLWE4YmQtODZjNzRjMDZhNmU0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2RlMzlkM2UtMzgzNy00MzQxLWE4 YmQtODZjNzRjMDZhNmU0L2NkZTM5ZDNlLTM4MzctNDM0MS1hOGJkLTg2Yzc0YzA2 YTZlNC5jcmwwHwYDVR0jBBgwFoAUvuGpWNaK7St+8q41TTvs7MIvWykwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZGUzOWQzZS0zODM3LTQzNDEtYThiZC04NmM3 NGMwNmE2ZTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAG06xCVlHUiKe7UYyN4DOP xGTvXhlJX4wnygbykZ8Dg3Q2sah4V0G6AL4BbaLTJeZI4YffDSzk71QoCuQqnZdb FQFpWTYL1/j4Mj5DfzaF3BDeWDsZNeNquIEHiYwTiV/4xCXjU7pWkW2Rso2lUvWE rwJC50Qnkl3m3epcRL8094Jn2WM3uORS8l2EIaoH0YFhr8Z0c6+xsFLznSE0pRT3 sIZTiXFZC10rqxqGa5/AoSUj0u0FH5AoYLuufAGP9tG+Rk2jdfSgDeVNatDVPH8h umSoJ9MJbB8go88vvYXfL8FfKtE7ZIkcpmoeetxcQQoHPow4oPZDQDCO40xzQ8uz -----END CERTIFICATE-----Generated at Wed Dec 17 17:55:50 2025 by rpki-client