This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft File: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft (raw, json) Hash identifier: BiaZqUyLjOFHAPtCc81EeB1u23zDsgqd7HXyUJmbH1A= Subject key identifier: 6D:C5:0A:CB:17:C6:28:08:D5:1F:FC:E2:4F:45:2A:4C:2D:AA:EE:28 Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 Certificate issuer: /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Certificate serial: 010D0C9F4328584C36691F94E62DA0F917C8D000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft Manifest number: 010D0C9F43285842F1887AD109A031873F5D58CA Signing time: Wed 17 Dec 2025 03:00:04 +0000 Manifest this update: Wed 17 Dec 2025 03:00:04 +0000 Manifest next update: Sat 20 Dec 2025 03:00:00 +0000 Files and hashes: 1: 1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (hash: 5TkrB+NVI1RF83tXfMITdG6vN8CqwjWgkDhXjfyoj14=) 2: afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl (hash: EL7MbvA7OK8QS0W0PUHSTJdONUsBpnXJvODXfjfOZ/4=) 3: b6d01a71-1404-3909-bbb8-6b3acc6cf542.roa (hash: aOq+Z0omVNdwj6BOp70OmReynDEKtRzieXcATQF7iWY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:36:69:1f:94:e6:2d:a0:f9:17:c8:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe Validity Not Before: Dec 17 03:00:04 2025 GMT Not After : Dec 20 03:00:00 2025 GMT Subject: CN=b7c633c0-7400-4fc0-b95c-b89406997254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:36:6d:f8:7f:eb:f3:c4:ca:0a:6d:3d:c1:44: 0a:b3:09:f5:eb:a5:7c:7b:98:36:e5:f5:84:c6:fd: 94:16:e7:e2:a3:9a:ef:0d:f6:4e:ff:f7:15:1c:7e: 05:e4:d6:b0:64:4d:c7:61:1d:14:cb:b7:4f:86:e3: 5f:38:6a:14:15:9e:fb:8b:98:37:43:6b:72:46:82: 89:49:b1:26:77:bf:84:ba:69:ed:22:01:f0:ac:5c: 42:98:45:df:d4:33:94:59:d2:97:e5:1c:20:b1:2f: fd:ab:00:96:ce:fb:13:4d:15:4d:b6:0f:00:7f:77: e6:4e:2d:02:e8:ed:84:40:78:f7:99:aa:68:57:23: 79:45:8c:73:d7:38:2f:fc:24:f0:59:1e:dd:47:0a: 50:1c:0d:8d:d0:ce:1b:44:18:00:e0:dd:76:be:38: 5a:c8:ce:1f:4a:bd:12:0f:1f:39:ea:14:a9:e8:2c: c0:a4:9e:ba:97:91:ab:3a:be:68:b0:95:f6:c1:6e: 44:8d:94:86:99:b8:fe:36:72:1a:26:0d:3b:e6:83: cd:10:c4:65:37:4a:83:46:64:6c:05:6e:c0:e3:9d: 16:aa:7a:3b:4e:df:a0:0b:f3:fc:08:fc:bd:ae:e2: bc:12:44:1a:e0:32:8c:7a:18:0b:08:a7:f6:77:89: 40:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C5:0A:CB:17:C6:28:08:D5:1F:FC:E2:4F:45:2A:4C:2D:AA:EE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl X509v3 Authority Key Identifier: keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c6:48:e2:0b:b3:7f:9b:9f:c8:5f:05:82:49:26:a3:f5:97: ea:6e:e9:0b:ff:d5:1b:12:d5:f4:cd:b9:fe:17:26:64:98:0c: 4f:9a:82:5f:5b:96:d8:e7:49:9a:85:a0:9a:06:65:28:4f:2f: 8f:a7:ab:7a:32:5b:db:25:40:40:f4:a0:76:5f:f4:48:09:a9: 44:f3:de:ac:7d:87:9d:ab:5b:04:d4:da:7c:b2:ed:7d:35:98: 6e:6a:71:15:c0:7f:a1:39:1c:23:4c:a1:4e:df:37:7c:46:5e: 82:76:12:06:2a:55:a6:05:09:32:7d:ad:14:05:fc:f4:51:7b: c3:80:94:68:53:3b:ad:99:a4:88:9e:a0:7e:31:ae:97:94:59: c4:9d:aa:4e:b5:e2:84:28:63:31:ad:81:de:c3:ed:46:b3:52: 8f:8b:7e:64:bb:aa:ee:ae:87:c0:d6:0d:06:99:a6:7c:e4:52: dc:13:10:33:a0:e8:f3:58:7f:31:27:34:80:6e:50:c8:80:22: 1b:53:24:bf:cf:dc:af:7b:a6:c8:5a:78:b7:7a:c6:d4:e1:2b: 04:1c:2d:16:4b:6b:d0:a0:80:9b:fe:47:d7:b4:a9:42:df:50: 58:d4:3c:b0:da:2c:31:19:cb:08:e3:b8:b9:ab:bb:49:f0:19: 74:0c:1b:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw2aR+U5i2g+RfI0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkNDRiOWMtMjMxMi00YWNiLWIyM2UtNDBhYWFhZmUy ZGZlMB4XDTI1MTIxNzAzMDAwNFoXDTI1MTIyMDAzMDAwMFowLzEtMCsGA1UEAxMk YjdjNjMzYzAtNzQwMC00ZmMwLWI5NWMtYjg5NDA2OTk3MjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTZt+H/r88TKCm09wUQKswn166V8e5g25fWE xv2UFufio5rvDfZO//cVHH4F5NawZE3HYR0Uy7dPhuNfOGoUFZ77i5g3Q2tyRoKJ SbEmd7+EumntIgHwrFxCmEXf1DOUWdKX5RwgsS/9qwCWzvsTTRVNtg8Af3fmTi0C 6O2EQHj3mapoVyN5RYxz1zgv/CTwWR7dRwpQHA2N0M4bRBgA4N12vjhayM4fSr0S Dx856hSp6CzApJ66l5GrOr5osJX2wW5EjZSGmbj+NnIaJg075oPNEMRlN0qDRmRs BW7A450Wqno7Tt+gC/P8CPy9ruK8EkQa4DKMehgLCKf2d4lAswIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG3FCssXxigI1R/84k9FKkwtqu4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0 NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFhYWFmZTJkZmUvYWZkNDRiOWMtMjMxMi00 YWNiLWIyM2UtNDBhYWFhZmUyZGZlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWZkNDRiOWMtMjMxMi00YWNiLWIy M2UtNDBhYWFhZmUyZGZlL2FmZDQ0YjljLTIzMTItNGFjYi1iMjNlLTQwYWFhYWZl MmRmZS5jcmwwHwYDVR0jBBgwFoAU3VPC1ExvAcI2CpURgEKTUANY04QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hZmQ0NGI5Yy0yMzEyLTRhY2ItYjIzZS00MGFh YWFmZTJkZmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4xkjiC7N/m5/IXwWCSSaj 9ZfqbukL/9UbEtX0zbn+FyZkmAxPmoJfW5bY50mahaCaBmUoTy+Pp6t6MlvbJUBA 9KB2X/RICalE896sfYedq1sE1Np8su19NZhuanEVwH+hORwjTKFO3zd8Rl6CdhIG KlWmBQkyfa0UBfz0UXvDgJRoUzutmaSInqB+Ma6XlFnEnapOteKEKGMxrYHew+1G s1KPi35ku6rurofA1g0GmaZ85FLcExAzoOjzWH8xJzSAblDIgCIbUyS/z9yve6bI Wni3esbU4SsEHC0WS2vQoICb/kfXtKlC31BY1Dyw2iwxGcsI47i5q7tJ8Bl0DBtf -----END CERTIFICATE-----Generated at Wed Dec 17 15:25:57 2025 by rpki-client