This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft File: d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft (raw, json) Hash identifier: g1gXNgIJ9t7hfliikA70TCK2PtS2MzRP/6IK2DLbBBk= Subject key identifier: 63:F2:72:22:A0:3B:CA:E9:E3:E5:3A:1C:63:F0:77:86:C9:BD:20:90 Authority key identifier: 79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A Certificate issuer: /CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea Certificate serial: 010D0C9F4328584C182AB7B68D6AE8360BCFBEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft Manifest number: 010D0C9F4328584C0D030050911FE3D04B60D105 Signing time: Sat 06 Dec 2025 07:00:04 +0000 Manifest this update: Sat 06 Dec 2025 07:00:04 +0000 Manifest next update: Tue 09 Dec 2025 07:00:00 +0000 Files and hashes: 1: 513386d3-3a25-374a-bbaa-20d7c2d1043b.roa (hash: tCBx+nC1zIwNsPyuc2cehHAuY9KiPJbMJ3pTT51fnUM=) 2: c29da368-12a4-3190-8fb2-2391e3134074.roa (hash: fDn4Vh5MQIVnXcJ5JpbFyMvj1DF587Srpt7faTRH6n4=) 3: d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl (hash: X+sVZ37q5rdo6lNOxmNvsF9dTvmde8whPaywXolKXIg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:2a:b7:b6:8d:6a:e8:36:0b:cf:be:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea Validity Not Before: Dec 6 07:00:04 2025 GMT Not After : Dec 9 07:00:00 2025 GMT Subject: CN=eaa9671b-141d-4fe7-8a1f-e360ede7584e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9e:92:5b:12:97:51:2a:e7:23:02:dd:d9:bf: ed:5c:c2:96:bf:e6:4e:d5:1e:39:3d:01:e8:1f:94: 46:24:3d:18:fe:8d:21:8f:9f:8d:d1:87:b0:04:f0: f8:d0:ce:43:2b:eb:b1:e4:72:35:28:06:5b:80:e3: bd:88:e5:30:f5:a2:54:6b:a4:02:f8:b0:a3:ad:e2: 50:05:ea:37:ee:be:f8:56:0e:89:bb:39:d0:42:03: aa:af:bf:ac:9b:9a:56:db:c3:d9:54:f8:65:51:e7: c1:19:0f:cd:c6:2b:b7:00:91:b1:b8:83:a9:30:e0: b6:35:28:ad:2b:3b:2d:e3:7f:84:38:c4:09:e2:93: bf:9a:68:f6:9b:4a:99:e0:8b:f8:21:fd:3b:7f:fa: 65:9e:31:5b:1c:0c:23:b9:6e:c3:d6:ce:7b:35:68: a7:76:de:ea:bf:a7:da:15:35:c8:00:1e:c1:d4:9f: f2:5e:15:46:0d:f2:53:1d:69:df:f7:3b:09:3a:e3: 1e:74:d7:57:2b:f3:9a:a4:ea:66:08:8a:bf:0e:7a: d9:6e:50:75:08:d6:2c:93:83:26:b3:2d:6c:72:6f: 11:02:92:75:78:0c:ea:1a:54:8a:7a:1a:45:62:1b: bd:ef:ed:7e:7d:3f:79:7e:c4:a0:12:4f:3e:17:40: 17:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F2:72:22:A0:3B:CA:E9:E3:E5:3A:1C:63:F0:77:86:C9:BD:20:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl X509v3 Authority Key Identifier: keyid:79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e2:35:02:ad:36:d6:d3:76:81:fc:8f:19:6f:ac:2b:3e:8e: d9:af:c7:bb:5d:67:7b:2c:17:50:e3:ae:14:6a:48:40:42:1f: 4f:93:57:f0:df:80:aa:f7:8e:92:6c:4b:8b:8c:1e:ae:de:62: 7c:84:b9:72:fa:d0:63:0d:7d:da:88:4c:42:3a:28:d5:73:a0: c1:5d:36:00:31:6c:9b:f3:c1:d4:14:0f:28:4b:c6:53:22:ee: 5d:c0:01:c8:88:9a:df:af:50:5a:8e:00:bb:38:d8:80:ce:e0: fb:90:95:51:79:5f:34:ba:a4:76:57:49:d8:d4:b1:e2:d3:ee: c1:b6:61:b5:46:9a:19:62:db:80:b4:dd:2f:e2:c8:76:2a:6d: 1d:e7:db:af:a6:a2:bf:0e:13:a5:d5:41:86:2a:30:67:38:c4: 47:a9:04:a9:88:1c:62:4b:8c:57:a0:eb:85:41:db:24:79:bc: 1a:2f:87:57:35:8a:24:84:4d:8b:7b:bd:5b:02:3c:ec:25:a0: dc:c3:3c:23:47:26:12:ae:96:6b:54:9f:3f:9b:b7:6c:28:8e: 8f:a9:2a:3c:ce:af:14:f6:0c:bf:6e:79:3d:6c:a0:d1:0b:7b: 3e:0b:b9:94:be:c4:e7:17:f8:97:f8:94:8a:76:df:c7:73:b7: 0e:20:b6:47 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwYKre2jWroNgvPvsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRmYTE3MmUtMjc3OS00ODc4LThiZDMtMWI5MmQ3YTE4 Y2VhMB4XDTI1MTIwNjA3MDAwNFoXDTI1MTIwOTA3MDAwMFowLzEtMCsGA1UEAxMk ZWFhOTY3MWItMTQxZC00ZmU3LThhMWYtZTM2MGVkZTc1ODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh56SWxKXUSrnIwLd2b/tXMKWv+ZO1R45PQHo H5RGJD0Y/o0hj5+N0YewBPD40M5DK+ux5HI1KAZbgOO9iOUw9aJUa6QC+LCjreJQ Beo37r74Vg6JuznQQgOqr7+sm5pW28PZVPhlUefBGQ/Nxiu3AJGxuIOpMOC2NSit Kzst43+EOMQJ4pO/mmj2m0qZ4Iv4If07f/plnjFbHAwjuW7D1s57NWindt7qv6fa FTXIAB7B1J/yXhVGDfJTHWnf9zsJOuMedNdXK/OapOpmCIq/DnrZblB1CNYsk4Mm sy1scm8RApJ1eAzqGlSKehpFYhu97+1+fT95fsSgEk8+F0AXwwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGPyciKgO8rp4+U6HGPwd4bJvSCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNGZh MTcyZS0yNzc5LTQ4NzgtOGJkMy0xYjkyZDdhMThjZWEvZDRmYTE3MmUtMjc3OS00 ODc4LThiZDMtMWI5MmQ3YTE4Y2VhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDRmYTE3MmUtMjc3OS00ODc4LThi ZDMtMWI5MmQ3YTE4Y2VhL2Q0ZmExNzJlLTI3NzktNDg3OC04YmQzLTFiOTJkN2Ex OGNlYS5jcmwwHwYDVR0jBBgwFoAUec1OoZNMD8fpOu7iM/H7qRM+r3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNGZhMTcyZS0yNzc5LTQ4NzgtOGJkMy0xYjky ZDdhMThjZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU4jUCrTbW03aB/I8Zb6wr Po7Zr8e7XWd7LBdQ464UakhAQh9Pk1fw34Cq946SbEuLjB6u3mJ8hLly+tBjDX3a iExCOijVc6DBXTYAMWyb88HUFA8oS8ZTIu5dwAHIiJrfr1BajgC7ONiAzuD7kJVR eV80uqR2V0nY1LHi0+7BtmG1RpoZYtuAtN0v4sh2Km0d59uvpqK/DhOl1UGGKjBn OMRHqQSpiBxiS4xXoOuFQdskebwaL4dXNYokhE2Le71bAjzsJaDcwzwjRyYSrpZr VJ8/m7dsKI6PqSo8zq8U9gy/bnk9bKDRC3s+C7mUvsTnF/iX+JSKdt/Hc7cOILZH -----END CERTIFICATE-----Generated at Sat Dec 6 14:35:22 2025 by rpki-client