This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft File: cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft (raw, json) Hash identifier: YeSlFuWUqYnBaJSNNzqJH21dUV94lIXk9kGJyDSI9B0= Subject key identifier: 0B:11:D7:38:CC:54:BE:02:E5:F6:CE:F2:EC:41:0D:5A:76:BF:B9:A7 Authority key identifier: 2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 Certificate issuer: /CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Certificate serial: 010D0C9F4328584CA23DCE5AF0216BD279888880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft Manifest number: 010D0C9F4328584C72DC04738F61ECAAC4343E92 Signing time: Sat 24 Jan 2026 18:00:04 +0000 Manifest this update: Sat 24 Jan 2026 18:00:04 +0000 Manifest next update: Mon 26 Jan 2026 18:00:00 +0000 Files and hashes: 1: cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl (hash: bLUxRosPxStq/O6owgH9fzT8jBUJW6Iil8bLn1W/7to=) 2: dfb735f8-bbda-39f3-a3c2-137b2ab2bb33.roa (hash: Mj5ln4gIVd7xGAAoCIqaJRS9uIrroPPBVUYOnngu8vA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a2:3d:ce:5a:f0:21:6b:d2:79:88:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaf95f1-8d08-4887-ae22-544a0d2b316c Validity Not Before: Jan 24 18:00:04 2026 GMT Not After : Jan 26 18:00:00 2026 GMT Subject: CN=fd19f214-16aa-4e22-9837-6da1bfc3d73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b5:99:37:f2:4b:44:4d:e8:76:4b:bc:0a:ca: 95:6c:59:a0:9e:c2:83:4e:65:ce:66:bd:35:78:dc: 42:c9:47:bd:30:f3:b1:75:28:9e:79:49:dd:57:70: 96:95:89:01:f1:5f:17:1a:74:1d:07:b4:36:c5:f9: 5c:c8:48:ca:99:fd:73:9f:57:04:94:4a:eb:4c:b9: 53:25:18:3b:93:4e:92:39:ba:11:97:f0:37:fa:b6: ce:b6:a5:18:06:43:4e:f4:38:a6:f5:f2:af:8d:66: 31:27:5f:05:cb:d3:2d:71:5b:18:95:ac:f7:9b:ad: 88:4c:fe:43:fa:ec:c1:37:38:64:02:4f:71:e6:ff: b3:a6:6a:d6:75:55:ac:03:0c:26:14:f5:c4:40:e6: b7:0a:a5:3a:34:41:37:07:c9:19:7e:07:d1:8f:1e: eb:1f:d5:4f:02:b6:eb:c4:c1:03:e6:9b:0f:6f:92: 07:8a:df:fe:07:74:a4:c0:dc:2f:92:9e:11:8c:06: e4:43:9b:bf:e5:61:65:90:da:d8:09:b9:ca:a8:e7: 28:fb:a5:b0:f2:76:8a:2f:33:85:63:3c:77:bf:1f: bd:3a:32:0c:6c:32:e4:e5:72:60:ee:3c:73:57:33: c0:ae:3c:d7:ec:4b:be:d8:34:4b:1d:fd:33:08:1d: a2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:11:D7:38:CC:54:BE:02:E5:F6:CE:F2:EC:41:0D:5A:76:BF:B9:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c/cfaf95f1-8d08-4887-ae22-544a0d2b316c.crl X509v3 Authority Key Identifier: keyid:2D:D9:CA:7C:7A:E2:52:26:6C:E0:19:ED:92:9B:62:91:6A:2A:31:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cfaf95f1-8d08-4887-ae22-544a0d2b316c.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d7:a3:4f:89:d5:13:d4:40:42:d7:05:b3:56:4f:29:93:46: 9c:17:e1:68:27:61:72:1f:5a:c0:f3:56:96:8a:f6:b1:ab:91: ff:0f:01:34:ec:f2:33:76:fc:92:a7:05:e2:4c:de:75:fc:43: 02:d0:2f:b3:b6:af:59:d5:b5:76:7e:65:a4:8e:9c:50:47:d9: 5e:44:29:54:2c:f7:71:ae:48:bf:d2:35:68:db:6f:68:cd:7a: 4a:ae:f8:cd:86:c7:27:20:96:45:fc:a5:39:5a:d3:bc:34:e6: 27:0d:c7:1d:53:7c:1c:13:42:3a:fd:71:5e:30:c2:fb:06:f6: 56:dd:15:13:7f:30:0e:8f:4e:4d:0b:7e:bd:43:da:a8:be:05: 79:ba:66:db:ab:d1:cc:ca:f6:db:e5:8d:7e:ec:72:4d:71:34: 0f:76:b7:10:bf:0a:3e:74:81:1a:b9:e2:0a:5d:71:be:ff:d6: e0:b8:21:08:6b:c2:7d:a4:e6:df:21:c2:b8:0d:01:85:f3:cb: 09:3a:a8:02:22:67:0a:16:44:07:3e:c3:78:cf:7e:f0:9f:fd: 7d:11:38:09:43:2d:42:86:5a:e3:d8:b1:5b:b2:3f:0d:06:bd: 0d:5f:39:16:46:03:bb:c8:c8:e8:8e:e6:45:35:8a:60:4b:84: ac:b1:62:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyiPc5a8CFr0nmIiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhZjk1ZjEtOGQwOC00ODg3LWFlMjItNTQ0YTBkMmIz MTZjMB4XDTI2MDEyNDE4MDAwNFoXDTI2MDEyNjE4MDAwMFowLzEtMCsGA1UEAxMk ZmQxOWYyMTQtMTZhYS00ZTIyLTk4MzctNmRhMWJmYzNkNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbWZN/JLRE3odku8CsqVbFmgnsKDTmXOZr01 eNxCyUe9MPOxdSieeUndV3CWlYkB8V8XGnQdB7Q2xflcyEjKmf1zn1cElErrTLlT JRg7k06SOboRl/A3+rbOtqUYBkNO9Dim9fKvjWYxJ18Fy9MtcVsYlaz3m62ITP5D +uzBNzhkAk9x5v+zpmrWdVWsAwwmFPXEQOa3CqU6NEE3B8kZfgfRjx7rH9VPArbr xMED5psPb5IHit/+B3SkwNwvkp4RjAbkQ5u/5WFlkNrYCbnKqOco+6Ww8naKLzOF Yzx3vx+9OjIMbDLk5XJg7jxzVzPArjzX7Eu+2DRLHf0zCB2iIwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAsR1zjMVL4C5fbO8uxBDVp2v7mnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFm OTVmMS04ZDA4LTQ4ODctYWUyMi01NDRhMGQyYjMxNmMvY2ZhZjk1ZjEtOGQwOC00 ODg3LWFlMjItNTQ0YTBkMmIzMTZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2ZhZjk1ZjEtOGQwOC00ODg3LWFl MjItNTQ0YTBkMmIzMTZjL2NmYWY5NWYxLThkMDgtNDg4Ny1hZTIyLTU0NGEwZDJi MzE2Yy5jcmwwHwYDVR0jBBgwFoAULdnKfHriUiZs4BntkptikWoqMUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZmFmOTVmMS04ZDA4LTQ4ODctYWUyMi01NDRh MGQyYjMxNmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA516NPidUT1EBC1wWzVk8p k0acF+FoJ2FyH1rA81aWivaxq5H/DwE07PIzdvySpwXiTN51/EMC0C+ztq9Z1bV2 fmWkjpxQR9leRClULPdxrki/0jVo229ozXpKrvjNhscnIJZF/KU5WtO8NOYnDccd U3wcE0I6/XFeMML7BvZW3RUTfzAOj05NC369Q9qovgV5umbbq9HMyvbb5Y1+7HJN cTQPdrcQvwo+dIEaueIKXXG+/9bguCEIa8J9pObfIcK4DQGF88sJOqgCImcKFkQH PsN4z37wn/19ETgJQy1Chlrj2LFbsj8NBr0NXzkWRgO7yMjojuZFNYpgS4SssWL3 -----END CERTIFICATE-----Generated at Sun Jan 25 08:41:18 2026 by rpki-client