This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft File: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft (raw, json) Hash identifier: Lvaj1m3bnnqQjVNl4FGLdafLY9ecn9aAYABX856ZrRw= Subject key identifier: 45:5E:15:15:A2:B0:AC:8B:FE:9C:64:83:DD:B0:EB:F8:D3:BB:D9:98 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584C22DF53F41B1D8D2F051E9580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft Manifest number: 010D0C9F43285842F1887AD109A031873F5D58C2 Signing time: Wed 10 Dec 2025 03:02:03 +0000 Manifest this update: Wed 10 Dec 2025 03:02:03 +0000 Manifest next update: Fri 12 Dec 2025 03:00:00 +0000 Files and hashes: 1: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (hash: 5TkrB+NVI1RF83tXfMITdG6vN8CqwjWgkDhXjfyoj14=) 2: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl (hash: YMDh7Z+oydjZPRsVoXJuvP2mhpzbZdDOB1az7zZE3xI=) 3: b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa (hash: aOq+Z0omVNdwj6BOp70OmReynDEKtRzieXcATQF7iWY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 12 Dec 2025 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:22:df:53:f4:1b:1d:8d:2f:05:1e:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Dec 10 03:02:03 2025 GMT Not After : Dec 12 03:00:00 2025 GMT Subject: CN=c0ebaf87-96cd-4ffa-8167-3cebdf35d0ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:31:02:01:69:55:a0:1c:55:61:2b:1a:28: 4c:22:14:b4:ad:c1:c4:57:4a:f2:4a:53:e7:ad:54: 20:97:99:f8:69:ef:2f:a7:1b:e3:c0:6d:37:8c:0a: 80:a4:fb:eb:8f:64:a5:cf:f2:fc:ec:9c:bc:14:ba: 23:16:cb:8d:46:c1:82:88:10:26:be:03:65:a2:57: c7:c7:4b:f0:eb:93:ba:3f:de:88:76:63:a1:44:e3: 48:a1:34:6c:00:88:1a:09:6f:36:c1:ea:4d:00:72: de:f3:64:da:84:39:cc:b4:c0:d9:45:02:c3:ea:46: 32:35:45:fe:40:9f:fe:d7:14:38:e2:5a:f6:70:67: 0e:4a:a4:f7:f0:f9:9f:29:a3:27:5a:63:d2:14:09: 25:ff:14:5b:81:86:a2:75:6f:79:5d:e4:05:5a:f6: b7:47:5d:90:39:12:a7:7d:e0:1e:e2:03:f2:d1:8b: ff:47:45:4a:8b:0d:b8:cd:5f:43:20:ac:5c:3f:0d: 34:b3:0b:b9:5e:77:2f:e6:2f:83:b2:7b:1b:90:4d: 5c:de:68:f2:e5:fb:c0:08:ae:b2:1a:2e:a5:08:c6: 15:6b:12:2d:76:79:91:e6:f5:c8:10:5e:ce:6a:5f: 66:1f:3c:ec:76:45:39:6f:b0:5c:7c:42:69:15:26: bf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:5E:15:15:A2:B0:AC:8B:FE:9C:64:83:DD:B0:EB:F8:D3:BB:D9:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:7c:b7:e3:00:06:03:e6:25:be:03:5a:16:b3:40:53:ce:9f: 2d:b0:23:90:4e:93:44:b0:aa:23:a0:3e:b2:8a:23:7c:bf:c2: eb:b7:f8:bc:b3:f5:21:19:3a:da:f9:8a:c7:aa:49:15:29:c6: b1:30:f9:01:7a:ff:93:c8:8d:17:8e:39:75:f2:ca:eb:31:97: 3a:fb:a9:d3:f7:42:94:9f:94:2a:78:35:6a:f8:07:56:4c:56: b2:eb:3c:24:17:b5:d9:57:91:4c:35:7a:33:3d:80:96:73:db: 4c:79:43:86:64:73:63:42:82:55:74:38:d5:98:56:e4:ab:3e: 79:05:16:bf:9a:b1:d1:ea:0c:6b:2d:74:2f:4c:51:ed:91:71: c9:bc:e1:e9:61:b9:bb:fd:01:56:06:5f:fb:48:ba:be:7b:bd: 13:4a:75:bc:46:33:45:9e:ba:6c:44:3f:05:fc:48:da:68:14: fc:0d:0e:be:be:43:cd:f3:4f:0f:61:9a:d1:c5:c7:7b:0e:d6: 45:2a:fb:dd:bd:df:a2:bd:1c:6c:6d:99:3c:34:51:a6:d8:35: b1:0e:8e:9c:b6:bf:a5:b4:74:5e:5d:6e:d9:54:4f:0a:ff:36: f6:e0:6d:b6:3e:fa:58:64:37:87:34:02:93:5c:41:7d:28:fa: b0:9b:c9:19 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwi31P0Gx2NLwUelYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI1MTIxMDAzMDIwM1oXDTI1MTIxMjAzMDAwMFowLzEtMCsGA1UEAxMk YzBlYmFmODctOTZjZC00ZmZhLTgxNjctM2NlYmRmMzVkMGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIwxAgFpVaAcVWErGihMIhS0rcHEV0rySlPn rVQgl5n4ae8vpxvjwG03jAqApPvrj2Slz/L87Jy8FLojFsuNRsGCiBAmvgNlolfH x0vw65O6P96IdmOhRONIoTRsAIgaCW82wepNAHLe82TahDnMtMDZRQLD6kYyNUX+ QJ/+1xQ44lr2cGcOSqT38PmfKaMnWmPSFAkl/xRbgYaidW95XeQFWva3R12QORKn feAe4gPy0Yv/R0VKiw24zV9DIKxcPw00swu5Xncv5i+DsnsbkE1c3mjy5fvACK6y Gi6lCMYVaxItdnmR5vXIEF7Oal9mHzzsdkU5b7BcfEJpFSa/2wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEVeFRWisKyL/pxkg92w6/jTu9mYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvYWZkNDRiOWMtMjMxMi00 YWNiLWIyM2UtNDBhYWFhZmUyZGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbfLfjAAYD5iW+A1oWs0BT zp8tsCOQTpNEsKojoD6yiiN8v8Lrt/i8s/UhGTra+YrHqkkVKcaxMPkBev+TyI0X jjl18srrMZc6+6nT90KUn5QqeDVq+AdWTFay6zwkF7XZV5FMNXozPYCWc9tMeUOG ZHNjQoJVdDjVmFbkqz55BRa/mrHR6gxrLXQvTFHtkXHJvOHpYbm7/QFWBl/7SLq+ e70TSnW8RjNFnrpsRD8F/EjaaBT8DQ6+vkPN808PYZrRxcd7DtZFKvvdvd+ivRxs bZk8NFGm2DWxDo6ctr+ltHReXW7ZVE8K/zb24G22PvpYZDeHNAKTXEF9KPqwm8kZ -----END CERTIFICATE-----Generated at Wed Dec 10 17:09:46 2025 by rpki-client