This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft File: df1c4d20-5b5b-4073-83b7-529a82c159fd.mft (raw, json) Hash identifier: usa0CELK4eymZGTYbXiD+pUEKw0xtpJaRAcdaJ2P7S4= Subject key identifier: 62:D3:04:D1:7E:50:DC:CA:CB:5C:BC:D9:98:37:18:60:A4:23:08:A5 Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Certificate serial: 010D0C9F4328584CA32E020885B9134838B7600B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft Manifest number: 010D0C9F4328584073A838657FFAC70B59F37639 Signing time: Sun 25 Jan 2026 02:04:03 +0000 Manifest this update: Sun 25 Jan 2026 02:04:03 +0000 Manifest next update: Tue 27 Jan 2026 02:00:00 +0000 Files and hashes: 1: 0ceb1403-3b7c-379d-b030-7fd9c941239b.roa (hash: U1WKwee8Xptb3HhA46+WmhiZDhFfu5z0xZBcE22eJVc=) 2: 6dfabb17-4437-3c66-996a-7acc0579861a.roa (hash: yua2W0IAOC/GqEgrwhXo1aY5dlsCfAiAvITO1WUSdK0=) 3: df1c4d20-5b5b-4073-83b7-529a82c159fd.crl (hash: 3jB9A/Gn0cLXssg+2Ojk8wplio4r+UaWAvzcEj8ra9I=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2e:02:08:85:b9:13:48:38:b7:60:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Validity Not Before: Jan 25 02:04:03 2026 GMT Not After : Jan 27 02:00:00 2026 GMT Subject: CN=4fcbc3e6-593e-4217-8549-d727facdeb64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b6:10:b4:c1:48:70:9c:99:f3:32:85:03:41: 5f:f8:69:13:fe:af:55:36:70:42:7a:b0:da:96:3e: d0:50:e0:95:84:a4:19:21:ab:bb:bd:be:35:e2:ed: 25:15:5c:1d:1a:45:c2:6e:85:b0:1f:30:53:27:b2: 0f:f6:6b:a7:aa:6c:21:50:29:c4:5a:dc:82:74:f8: 95:ff:bd:b8:36:99:15:e1:ba:a9:37:04:b4:19:0b: 89:1f:bb:4a:10:9d:47:0b:49:70:59:af:cf:7b:38: 57:bd:a9:7e:f7:9a:69:8a:63:08:ff:89:10:e6:4e: e7:ef:36:c8:24:3a:57:50:33:d5:50:4f:8e:1c:a2: 67:42:cb:da:c4:e8:c3:1b:fd:4f:b5:b4:63:14:d4: 10:40:18:dd:ae:89:33:8f:1f:5c:1c:e9:29:34:1e: 78:83:a9:a5:1c:9a:af:05:43:53:3b:78:b9:60:79: 2e:b5:42:86:e9:db:8b:99:c0:13:6e:5e:15:e7:e7: 78:45:26:5b:5e:e2:1a:87:71:18:86:da:c8:bd:6c: f8:66:9b:c8:3e:da:d0:37:37:3f:25:e9:58:95:78: 9f:35:a4:dd:e1:73:1a:c7:f2:2f:e3:f6:22:53:79: a6:79:fa:66:3b:15:00:55:b0:2a:6f:ca:ff:32:71: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D3:04:D1:7E:50:DC:CA:CB:5C:BC:D9:98:37:18:60:A4:23:08:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl X509v3 Authority Key Identifier: keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:97:78:c4:e3:19:50:f5:c7:9c:1b:fc:b2:51:95:83:c8:ac: 07:65:bf:91:aa:20:f5:96:77:08:87:a7:d4:a1:24:0c:7f:ab: 8d:b0:28:c7:c6:45:68:cd:9f:bb:17:c7:a5:35:10:d2:21:17: 1f:55:d0:f9:b9:ab:ea:4a:6b:6d:3e:1b:16:1c:da:dc:28:6f: be:91:0c:e5:9a:f6:c8:14:46:ad:b6:10:0a:96:22:ca:40:b0: f3:2e:e9:7b:08:d8:b4:0c:f9:05:57:16:43:0b:e6:f0:7d:bb: 74:aa:5f:43:4f:e4:ec:6a:ec:bf:6e:e5:42:64:b3:9f:c9:89: e3:98:2c:4d:0f:f9:01:6f:6c:cd:ce:d6:77:65:d2:5f:e9:06: 04:bf:80:ce:64:dc:26:44:2a:01:8f:41:a3:6c:43:21:d3:51: 40:36:f2:3e:d3:59:39:b9:c0:2a:db:2b:5d:f2:d8:e6:dc:a5: 80:c0:27:9f:57:ba:80:fc:a3:de:a1:4e:7c:09:7a:d0:fd:00: 59:31:f6:76:77:be:29:e4:65:28:1a:8f:85:e5:8d:33:b2:b1: 49:59:a5:49:a7:3c:16:82:56:82:f8:04:ef:16:62:d1:35:ec: e3:65:ef:a9:db:dc:bd:9c:90:ee:ae:4b:b2:d2:81:f7:15:dd: b7:9b:e9:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyjLgIIhbkTSDi3YAswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1 OWZkMB4XDTI2MDEyNTAyMDQwM1oXDTI2MDEyNzAyMDAwMFowLzEtMCsGA1UEAxMk NGZjYmMzZTYtNTkzZS00MjE3LTg1NDktZDcyN2ZhY2RlYjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLYQtMFIcJyZ8zKFA0Ff+GkT/q9VNnBCerDa lj7QUOCVhKQZIau7vb414u0lFVwdGkXCboWwHzBTJ7IP9munqmwhUCnEWtyCdPiV /724NpkV4bqpNwS0GQuJH7tKEJ1HC0lwWa/PezhXval+95ppimMI/4kQ5k7n7zbI JDpXUDPVUE+OHKJnQsvaxOjDG/1PtbRjFNQQQBjdrokzjx9cHOkpNB54g6mlHJqv BUNTO3i5YHkutUKG6duLmcATbl4V5+d4RSZbXuIah3EYhtrIvWz4ZpvIPtrQNzc/ JelYlXifNaTd4XMax/Iv4/YiU3mmefpmOxUAVbAqb8r/MnGDDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGLTBNF+UNzKy1y82Zg3GGCkIwilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFj NGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvZGYxYzRkMjAtNWI1Yi00 MDczLTgzYjctNTI5YTgyYzE1OWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxYzRkMjAtNWI1Yi00MDczLTgz YjctNTI5YTgyYzE1OWZkL2RmMWM0ZDIwLTViNWItNDA3My04M2I3LTUyOWE4MmMx NTlmZC5jcmwwHwYDVR0jBBgwFoAUNrw0KynM+RarIlemQ3NzemhZ61cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01Mjlh ODJjMTU5ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBKl3jE4xlQ9cecG/yyUZWD yKwHZb+RqiD1lncIh6fUoSQMf6uNsCjHxkVozZ+7F8elNRDSIRcfVdD5uavqSmtt PhsWHNrcKG++kQzlmvbIFEatthAKliLKQLDzLul7CNi0DPkFVxZDC+bwfbt0ql9D T+Tsauy/buVCZLOfyYnjmCxND/kBb2zNztZ3ZdJf6QYEv4DOZNwmRCoBj0GjbEMh 01FANvI+01k5ucAq2ytd8tjm3KWAwCefV7qA/KPeoU58CXrQ/QBZMfZ2d74p5GUo Go+F5Y0zsrFJWaVJpzwWglaC+ATvFmLRNezjZe+p29y9nJDurkuy0oH3Fd23m+ln -----END CERTIFICATE-----Generated at Sun Jan 25 14:14:01 2026 by rpki-client