This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/a60afcac-eb4f-49e1-8a25-f9596d96a796.mft File: a60afcac-eb4f-49e1-8a25-f9596d96a796.mft (raw, json) Hash identifier: 16faQjU/8knGt+9EFpIQYYcppWjrbo/pnTNjtrOPVg4= Subject key identifier: 71:03:5B:BC:0E:8A:1B:F0:94:14:C0:BC:58:2F:50:39:19:2F:7B:C9 Authority key identifier: E8:96:C6:09:EF:5A:31:1A:BD:94:FB:7D:4C:75:69:C9:77:F0:3B:65 Certificate issuer: /CN=a60afcac-eb4f-49e1-8a25-f9596d96a796 Certificate serial: 010D0C9F4328584CA25B93F04579987FBA6201A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/a60afcac-eb4f-49e1-8a25-f9596d96a796.mft Manifest number: 010D0C9F43285849F3AB255448179294BC1E527D Signing time: Sat 24 Jan 2026 19:00:04 +0000 Manifest this update: Sat 24 Jan 2026 19:00:04 +0000 Manifest next update: Tue 27 Jan 2026 19:00:00 +0000 Files and hashes: 1: 8c04f79a-282b-3a3d-9503-041806202ca2.roa (hash: r0aKhZ4ahVob5hXsBIPcu9dQ/m9jEUoQoMrBI40IR/I=) 2: 98592216-7266-3a00-80cd-6ef3636b3a8e.roa (hash: w9O1MDHKkGUm4alpPuX1QxsM1Nyj2GVbNHv1dCBeCfc=) 3: a60afcac-eb4f-49e1-8a25-f9596d96a796.crl (hash: zgmyp5HUfM7g6BBgkulnK8odkFWsaW11e67Ue3yb0j4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/a60afcac-eb4f-49e1-8a25-f9596d96a796.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/a60afcac-eb4f-49e1-8a25-f9596d96a796.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a2:5b:93:f0:45:79:98:7f:ba:62:01:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60afcac-eb4f-49e1-8a25-f9596d96a796 Validity Not Before: Jan 24 19:00:04 2026 GMT Not After : Jan 27 19:00:00 2026 GMT Subject: CN=cccd9fa1-88e3-44dc-a233-affbb32da177 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:89:38:6e:9f:b5:2d:d1:79:05:b3:9c:fa:7d: d6:c4:ad:63:de:76:3a:08:29:6a:9b:67:fb:b2:20: 89:f3:6c:c2:3e:f0:fd:07:dd:9b:5f:39:23:85:2f: 18:4b:9e:1d:b3:dd:f0:1f:f3:27:46:39:b6:b9:f0: 1e:df:41:1c:66:bd:8c:04:cb:e7:4a:9b:51:de:56: 13:7b:14:c7:d0:87:6e:f7:15:60:b0:b9:b2:71:03: 75:43:21:13:a1:8c:eb:2e:30:b6:18:01:0f:ad:05: 0c:0f:a2:be:b7:4c:ff:8b:7c:53:63:8a:30:f8:a1: 6a:9e:00:d2:ef:6b:1e:57:40:6d:61:70:68:48:de: b8:22:be:2f:34:eb:3c:96:32:d1:56:c4:bf:b6:4c: d7:d6:3f:7a:b6:d7:6e:9f:88:94:c2:8c:12:f1:bf: ab:c5:60:c1:de:31:b3:42:ec:86:86:13:50:3f:b5: 4e:99:46:77:ad:24:be:b5:f2:5b:d1:ff:3a:a4:c0: 90:5c:df:8c:cc:2f:0b:9b:c9:b0:03:f1:52:64:cf: c2:8c:1e:3f:b1:a1:6b:61:78:4d:93:b4:67:68:33: b9:9f:6c:9d:e3:5b:d0:48:55:d2:b6:53:19:ce:57: db:1f:12:07:41:91:41:d8:3f:72:e5:a4:ba:98:ed: af:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:03:5B:BC:0E:8A:1B:F0:94:14:C0:BC:58:2F:50:39:19:2F:7B:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/a60afcac-eb4f-49e1-8a25-f9596d96a796.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796/a60afcac-eb4f-49e1-8a25-f9596d96a796.crl X509v3 Authority Key Identifier: keyid:E8:96:C6:09:EF:5A:31:1A:BD:94:FB:7D:4C:75:69:C9:77:F0:3B:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a60afcac-eb4f-49e1-8a25-f9596d96a796.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:58:03:99:ec:73:6c:63:9a:13:94:f2:31:92:05:e0:ea:0e: 65:76:5a:8c:b9:01:6f:29:43:ff:54:f2:5f:5b:63:33:83:ba: ef:cf:4d:d2:1f:6d:a0:09:f1:ea:4c:32:35:a1:ea:d1:22:4a: b6:96:45:2d:a7:52:61:d0:cf:7b:bf:f3:10:8f:b6:87:88:36: 17:03:26:4c:94:99:f6:45:b5:c2:73:4a:32:8f:67:0e:f7:63: 1b:dd:5b:50:80:50:d8:95:72:54:4b:85:e6:6a:76:7f:f3:3e: 36:90:bf:04:08:67:26:6c:db:47:8c:87:24:09:97:bf:5b:06: 59:1e:fb:9d:d6:3f:5f:a3:29:68:f6:dd:24:c5:85:7a:b6:91: 6d:76:4a:2a:c7:14:24:71:c1:d0:c8:73:f9:92:7d:d5:0c:f5: db:95:55:31:99:80:63:bd:57:d5:33:53:ca:68:1f:2b:b1:40: fc:26:dc:7f:ce:58:12:e3:7b:20:65:75:c2:65:fd:47:bb:86: 2b:e8:24:4a:ba:53:7d:bf:86:68:d6:10:fd:ac:dc:15:62:8a: 47:a9:80:fe:3f:56:98:3d:f4:15:ec:57:3e:67:79:e8:b1:9d: 21:75:a1:18:bf:1d:ff:90:10:c7:b2:b2:14:b3:ab:96:2c:2b: 83:cb:0b:a1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyiW5PwRXmYf7piAaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTYwYWZjYWMtZWI0Zi00OWUxLThhMjUtZjk1OTZkOTZh Nzk2MB4XDTI2MDEyNDE5MDAwNFoXDTI2MDEyNzE5MDAwMFowLzEtMCsGA1UEAxMk Y2NjZDlmYTEtODhlMy00NGRjLWEyMzMtYWZmYmIzMmRhMTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIk4bp+1LdF5BbOc+n3WxK1j3nY6CClqm2f7 siCJ82zCPvD9B92bXzkjhS8YS54ds93wH/MnRjm2ufAe30EcZr2MBMvnSptR3lYT exTH0Idu9xVgsLmycQN1QyEToYzrLjC2GAEPrQUMD6K+t0z/i3xTY4ow+KFqngDS 72seV0BtYXBoSN64Ir4vNOs8ljLRVsS/tkzX1j96ttdun4iUwowS8b+rxWDB3jGz QuyGhhNQP7VOmUZ3rSS+tfJb0f86pMCQXN+MzC8Lm8mwA/FSZM/CjB4/saFrYXhN k7RnaDO5n2yd41vQSFXStlMZzlfbHxIHQZFB2D9y5aS6mO2vLwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHEDW7wOihvwlBTAvFgvUDkZL3vJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hNjBh ZmNhYy1lYjRmLTQ5ZTEtOGEyNS1mOTU5NmQ5NmE3OTYvYTYwYWZjYWMtZWI0Zi00 OWUxLThhMjUtZjk1OTZkOTZhNzk2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTYwYWZjYWMtZWI0Zi00OWUxLThh MjUtZjk1OTZkOTZhNzk2L2E2MGFmY2FjLWViNGYtNDllMS04YTI1LWY5NTk2ZDk2 YTc5Ni5jcmwwHwYDVR0jBBgwFoAU6JbGCe9aMRq9lPt9THVpyXfwO2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hNjBhZmNhYy1lYjRmLTQ5ZTEtOGEyNS1mOTU5 NmQ5NmE3OTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxWAOZ7HNsY5oTlPIxkgXg 6g5ldlqMuQFvKUP/VPJfW2Mzg7rvz03SH22gCfHqTDI1oerRIkq2lkUtp1Jh0M97 v/MQj7aHiDYXAyZMlJn2RbXCc0oyj2cO92Mb3VtQgFDYlXJUS4XmanZ/8z42kL8E CGcmbNtHjIckCZe/WwZZHvud1j9foylo9t0kxYV6tpFtdkoqxxQkccHQyHP5kn3V DPXblVUxmYBjvVfVM1PKaB8rsUD8Jtx/zlgS43sgZXXCZf1Hu4Yr6CRKulN9v4Zo 1hD9rNwVYopHqYD+P1aYPfQV7Fc+Z3nosZ0hdaEYvx3/kBDHsrIUs6uWLCuDywuh -----END CERTIFICATE-----Generated at Sun Jan 25 18:56:23 2026 by rpki-client