This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft File: df1c4d20-5b5b-4073-83b7-529a82c159fd.mft (raw, json) Hash identifier: Btjc+qty6jOIfYNUeIxuxeH8+vcqSmsSA86u5HqyTJc= Subject key identifier: E8:09:F2:24:D7:10:37:D3:6F:F1:11:7D:69:52:38:4C:20:C2:B3:5B Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Certificate serial: 010D0C9F4328584C1795DC9EB6395779C70DF780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft Manifest number: 010D0C9F4328584073A838657FFAC70B59F37606 Signing time: Sat 06 Dec 2025 02:00:08 +0000 Manifest this update: Sat 06 Dec 2025 02:00:08 +0000 Manifest next update: Mon 08 Dec 2025 02:00:00 +0000 Files and hashes: 1: 0ceb1403-3b7c-379d-b030-7fd9c941239b.roa (hash: MVTK4080M8HKiUoi3oYuLnZikFeF00lAyxvZ3UfHDKI=) 2: 6dfabb17-4437-3c66-996a-7acc0579861a.roa (hash: 5qKBDW5NN4Kbek2tvHXIENtIkGiCkgJSwy5jqlT+sGc=) 3: df1c4d20-5b5b-4073-83b7-529a82c159fd.crl (hash: mRYfSYnNeQHC2axT3/NxHDcGcEpvtMdNw5Cpnkv1jdk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:95:dc:9e:b6:39:57:79:c7:0d:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Validity Not Before: Dec 6 02:00:08 2025 GMT Not After : Dec 8 02:00:00 2025 GMT Subject: CN=ccea40cf-b843-43a9-aacb-f316eaaae5df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cb:34:09:d1:ed:0a:f6:2d:2b:f4:ea:e4:19: 4e:0a:28:4f:01:81:95:4e:3d:92:56:8b:ea:d5:03: 29:1b:b6:79:2f:a5:f8:ed:06:00:1a:b7:4f:db:58: 0e:11:9a:39:51:6b:a6:df:c2:5c:81:88:80:1b:07: cd:0d:13:e8:41:28:0e:d8:8d:15:06:e8:b7:83:ab: 96:a3:31:8c:25:fd:2f:0f:d8:59:33:63:c7:93:c3: d9:8f:46:ac:a0:36:ad:ae:1e:5a:be:96:ba:51:c5: f0:e4:9b:30:2b:dd:9b:5b:53:b8:28:26:a4:01:6d: a7:6c:d6:69:16:4c:61:bb:9d:3c:1c:d6:29:3b:84: 36:e6:84:ca:31:60:75:5e:c3:44:e2:b6:99:ca:1e: fe:7c:8c:69:a8:84:6f:21:8a:dd:25:43:50:82:ea: 2e:8d:14:5b:61:08:e3:fc:08:8a:e2:4c:8d:2e:5a: de:36:2a:fa:c5:4b:e1:a7:46:fb:f4:af:21:c7:9a: b9:c1:b8:b6:4a:3a:46:46:97:c6:77:aa:76:09:3c: d7:f3:31:1d:b8:b3:fc:a5:dc:ba:0d:2e:48:8c:4c: ec:cd:62:bc:5b:79:94:08:fd:7a:05:b5:8d:c1:9d: c5:bb:d7:16:91:59:a3:0f:3d:b1:a6:ab:fe:66:be: c2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:09:F2:24:D7:10:37:D3:6F:F1:11:7D:69:52:38:4C:20:C2:B3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl X509v3 Authority Key Identifier: keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:eb:72:0e:6d:1e:43:53:71:72:76:79:1a:2a:ad:11:a2:6d: 5e:9a:0a:06:e8:2b:02:e4:14:9a:6d:c7:78:7c:c6:05:3b:fb: d1:fc:9b:4d:3a:51:c1:3e:d5:63:79:c5:f3:52:9c:b7:6b:8d: ab:20:e7:3f:31:16:45:e6:fc:b3:77:78:dd:f0:47:34:e7:83: 0b:06:cd:11:91:66:d8:3d:d5:91:e5:2a:c3:1d:6d:d1:98:14: cb:96:09:3f:6d:79:90:dd:bf:c7:c6:07:59:b7:47:59:ca:bc: 19:06:db:3b:a5:0c:56:0a:f2:80:66:a3:b5:e8:c5:7c:19:3c: aa:6d:98:1c:95:cb:b0:5a:e0:31:b4:fe:88:23:1d:7b:5a:19: 61:38:f8:72:c7:5b:49:e6:6f:6f:a7:3c:18:2a:d5:41:e6:7f: 73:31:f9:82:cf:42:89:85:e5:83:83:37:f9:38:26:0d:0a:a7: b4:6d:a7:00:48:13:52:7b:5d:5e:a9:5f:81:a9:95:1e:5c:4b: a4:7f:a2:69:bb:04:41:63:94:62:61:eb:6b:39:e2:8e:d8:af: 19:05:69:b5:c2:6c:6c:73:2a:56:47:de:cd:e7:46:39:b5:3c: 4f:24:c7:ba:bf:97:5f:bd:9e:e4:8c:a7:fa:5e:2d:0a:65:06: 0f:b8:80:80 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXldyetjlXeccN94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1 OWZkMB4XDTI1MTIwNjAyMDAwOFoXDTI1MTIwODAyMDAwMFowLzEtMCsGA1UEAxMk Y2NlYTQwY2YtYjg0My00M2E5LWFhY2ItZjMxNmVhYWFlNWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgss0CdHtCvYtK/Tq5BlOCihPAYGVTj2SVovq 1QMpG7Z5L6X47QYAGrdP21gOEZo5UWum38JcgYiAGwfNDRPoQSgO2I0VBui3g6uW ozGMJf0vD9hZM2PHk8PZj0asoDatrh5avpa6UcXw5JswK92bW1O4KCakAW2nbNZp Fkxhu508HNYpO4Q25oTKMWB1XsNE4raZyh7+fIxpqIRvIYrdJUNQguoujRRbYQjj /AiK4kyNLlreNir6xUvhp0b79K8hx5q5wbi2SjpGRpfGd6p2CTzX8zEduLP8pdy6 DS5IjEzszWK8W3mUCP16BbWNwZ3Fu9cWkVmjDz2xpqv+Zr7CfwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOgJ8iTXEDfTb/ERfWlSOEwgwrNbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFj NGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvZGYxYzRkMjAtNWI1Yi00 MDczLTgzYjctNTI5YTgyYzE1OWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxYzRkMjAtNWI1Yi00MDczLTgz YjctNTI5YTgyYzE1OWZkL2RmMWM0ZDIwLTViNWItNDA3My04M2I3LTUyOWE4MmMx NTlmZC5jcmwwHwYDVR0jBBgwFoAUNrw0KynM+RarIlemQ3NzemhZ61cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01Mjlh ODJjMTU5ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBU63IObR5DU3FydnkaKq0R om1emgoG6CsC5BSabcd4fMYFO/vR/JtNOlHBPtVjecXzUpy3a42rIOc/MRZF5vyz d3jd8Ec054MLBs0RkWbYPdWR5SrDHW3RmBTLlgk/bXmQ3b/HxgdZt0dZyrwZBts7 pQxWCvKAZqO16MV8GTyqbZgclcuwWuAxtP6IIx17WhlhOPhyx1tJ5m9vpzwYKtVB 5n9zMfmCz0KJheWDgzf5OCYNCqe0bacASBNSe11eqV+BqZUeXEukf6JpuwRBY5Ri YetrOeKO2K8ZBWm1wmxscypWR97N50Y5tTxPJMe6v5dfvZ7kjKf6Xi0KZQYPuICA -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:47 2025 by rpki-client