This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft File: dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft (raw, json) Hash identifier: cz/7Hj9kaKsVfNSdCA9vknU9KrrGI2uXvCATYMSkMO0= Subject key identifier: 13:FA:14:CB:E8:29:A2:A6:57:0E:D4:BD:E2:11:B0:C4:89:9D:34:8A Authority key identifier: 35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 Certificate issuer: /CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Certificate serial: 010D0C9F4328584C332751D861646E5A96072E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft Manifest number: 010D0C9F4328584073A82DFC0659598689D499CE Signing time: Mon 15 Dec 2025 23:00:03 +0000 Manifest this update: Mon 15 Dec 2025 23:00:03 +0000 Manifest next update: Wed 17 Dec 2025 23:00:00 +0000 Files and hashes: 1: 7c20deec-1152-3c56-8ea4-d899a929dad8.roa (hash: 4g9pAdPJFnwUeBrvNgZMt/3h9XFcoOuYcpgCvJPqs4A=) 2: dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl (hash: qVLxsMnBJh3S6DhYTjovSDnCx2X4NaNzgg7l31xjkVk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:33:27:51:d8:61:64:6e:5a:96:07:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9 Validity Not Before: Dec 15 23:00:03 2025 GMT Not After : Dec 17 23:00:00 2025 GMT Subject: CN=86754deb-03c2-4e5f-aa20-dc02ecacd7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:80:b6:8f:c9:f1:79:74:bb:9f:06:9d:a5:67: 2d:af:8d:65:7f:a8:ab:38:07:7a:ec:ec:93:d1:8a: 91:7c:46:53:b5:07:fe:86:f1:c2:8c:bc:7e:7a:92: 95:02:f4:21:22:99:01:df:b9:de:0f:3b:4a:50:d5: 4c:3d:e9:31:1d:a0:44:b2:9e:cb:6c:83:b4:d5:8c: 8c:a8:27:0f:ed:18:ad:5d:6b:a2:39:14:21:29:77: e0:13:9f:66:84:6d:5c:aa:5d:ef:d2:91:ae:d3:9d: 3c:c8:89:d9:07:17:fe:07:90:58:97:b4:36:83:a4: 22:86:36:f5:06:1b:7e:ba:ff:ba:8a:a5:7d:c1:2e: 6d:f7:c3:0b:34:e1:da:0c:0b:06:2b:43:98:64:f3: 56:fc:ed:0f:70:e5:44:bd:46:d3:0f:00:d7:f4:8a: 3b:46:af:3d:9d:2b:53:6e:7d:2a:5a:6b:fb:c0:75: 67:75:82:95:ae:58:9e:18:ed:2a:9d:eb:3c:ec:fd: 9c:49:76:72:b6:81:f0:74:19:4d:85:09:7e:c9:ff: 7e:44:39:c5:b5:52:0f:7a:eb:c3:bb:db:80:29:6c: ab:4d:31:f0:d7:a9:e6:f7:ce:18:e8:9c:99:c1:93: ff:d7:8e:ec:64:63:d2:fe:09:26:ac:21:da:ad:cd: 6f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FA:14:CB:E8:29:A2:A6:57:0E:D4:BD:E2:11:B0:C4:89:9D:34:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl X509v3 Authority Key Identifier: keyid:35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cf:7f:57:56:93:0b:c0:61:06:99:62:93:c7:1b:2a:0e:86: c3:d6:1a:ee:b7:8f:49:1e:4b:7a:51:f1:89:0b:ed:be:76:c9: 7d:a4:4d:f6:da:ce:cc:e8:34:16:b4:f2:fe:c0:cb:d8:56:4e: ca:66:50:57:19:a9:c9:c1:11:0d:07:66:09:42:ae:64:f3:95: 36:63:e1:a5:a1:77:51:fe:c8:93:01:98:da:32:51:53:2d:c6: ec:b4:47:c4:10:1b:5e:d8:3e:be:5b:e8:ff:05:e7:ae:5c:65: d2:d3:77:bc:7a:be:b8:80:9f:be:b4:cc:d2:1a:6b:81:5c:a0: ae:b5:c3:81:ee:6c:df:bb:8a:01:08:82:a8:f3:52:60:a2:f0: 98:e1:51:86:df:61:80:f4:59:c9:20:c3:f4:25:f9:d8:0a:98: ca:be:69:8a:54:45:ad:cc:f2:34:e9:60:15:54:40:92:1b:18: 95:c4:fb:69:24:e4:12:c2:82:a4:06:1b:c1:77:0f:df:39:ec: 81:5c:76:8b:6a:66:1f:f1:70:af:0f:f5:9a:03:14:84:2b:51: a1:b6:4f:3c:6f:87:47:d8:9f:8e:ad:b8:92:fd:ba:59:a7:ff: 77:d5:89:28:5b:23:9d:1b:ec:aa:13:38:da:64:41:8f:b9:bf: af:5a:8a:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwzJ1HYYWRuWpYHLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFmYjdiNGMtMDhjYy00ZDc2LWFkYTItYjU3MmEyZDIz M2E5MB4XDTI1MTIxNTIzMDAwM1oXDTI1MTIxNzIzMDAwMFowLzEtMCsGA1UEAxMk ODY3NTRkZWItMDNjMi00ZTVmLWFhMjAtZGMwMmVjYWNkN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4C2j8nxeXS7nwadpWctr41lf6irOAd67OyT 0YqRfEZTtQf+hvHCjLx+epKVAvQhIpkB37neDztKUNVMPekxHaBEsp7LbIO01YyM qCcP7RitXWuiORQhKXfgE59mhG1cql3v0pGu0508yInZBxf+B5BYl7Q2g6Qihjb1 Bht+uv+6iqV9wS5t98MLNOHaDAsGK0OYZPNW/O0PcOVEvUbTDwDX9Io7Rq89nStT bn0qWmv7wHVndYKVrlieGO0qnes87P2cSXZytoHwdBlNhQl+yf9+RDnFtVIPeuvD u9uAKWyrTTHw16nm984Y6JyZwZP/147sZGPS/gkmrCHarc1vwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBP6FMvoKaKmVw7UveIRsMSJnTSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZi N2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcyYTJkMjMzYTkvZGFmYjdiNGMtMDhjYy00 ZDc2LWFkYTItYjU3MmEyZDIzM2E5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFmYjdiNGMtMDhjYy00ZDc2LWFk YTItYjU3MmEyZDIzM2E5L2RhZmI3YjRjLTA4Y2MtNGQ3Ni1hZGEyLWI1NzJhMmQy MzNhOS5jcmwwHwYDVR0jBBgwFoAUNX/ggAcTwJH090DQumO5Cuj1sxEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWZiN2I0Yy0wOGNjLTRkNzYtYWRhMi1iNTcy YTJkMjMzYTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUz39XVpMLwGEGmWKTxxsq DobD1hrut49JHkt6UfGJC+2+dsl9pE322s7M6DQWtPL+wMvYVk7KZlBXGanJwREN B2YJQq5k85U2Y+GloXdR/siTAZjaMlFTLcbstEfEEBte2D6+W+j/BeeuXGXS03e8 er64gJ++tMzSGmuBXKCutcOB7mzfu4oBCIKo81JgovCY4VGG32GA9FnJIMP0JfnY CpjKvmmKVEWtzPI06WAVVECSGxiVxPtpJOQSwoKkBhvBdw/fOeyBXHaLamYf8XCv D/WaAxSEK1Ghtk88b4dH2J+OrbiS/bpZp/931YkoWyOdG+yqEzjaZEGPub+vWooW -----END CERTIFICATE-----Generated at Tue Dec 16 23:48:38 2025 by rpki-client