This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft File: 0af21de0-2cae-45f7-b42c-9598c4271ef0.mft (raw, json) Hash identifier: yoTqTmdfBojsy7ZCZgacLAJYNLMLiTqTNd13TFni3O0= Subject key identifier: E3:7B:65:06:C2:96:DC:02:0B:67:27:D7:50:E4:82:FF:BD:E9:1E:3E Authority key identifier: 91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 Certificate issuer: /CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Certificate serial: 010D0C9F4328584C35D43AF58ED08E453ED60C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft Manifest number: 010D0C9F4328584200D9C72B5C6113CC8D16087F Signing time: Tue 16 Dec 2025 22:00:03 +0000 Manifest this update: Tue 16 Dec 2025 22:00:03 +0000 Manifest next update: Fri 19 Dec 2025 22:00:00 +0000 Files and hashes: 1: 0af21de0-2cae-45f7-b42c-9598c4271ef0.crl (hash: Rr+MBcwNuNwBr/bQXAFcg7eJRiFmN6lftZuuOJe2T1E=) 2: 4552c21f-8d05-3fbb-9242-1de377b08109.roa (hash: i5f+PQMcneKVzCLqj+o9qGquF3BnF9iknTY4YXBoBSE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:35:d4:3a:f5:8e:d0:8e:45:3e:d6:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af21de0-2cae-45f7-b42c-9598c4271ef0 Validity Not Before: Dec 16 22:00:03 2025 GMT Not After : Dec 19 22:00:00 2025 GMT Subject: CN=20d66468-2d9b-4a12-a6e9-e2bd7d78fa73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f5:56:a7:a8:59:20:8f:c9:8d:0c:3d:61:bd: aa:f1:82:5d:0c:38:26:4b:65:a8:bc:50:89:be:6e: ce:e4:89:0a:96:ab:96:e6:ee:5d:1e:ba:45:d1:61: 7a:d4:86:5b:6d:7c:73:e1:c1:31:e8:6d:5a:1e:cf: 8f:00:c3:0a:c9:aa:59:83:b6:b8:65:19:8e:ce:84: 10:14:41:5b:ec:80:76:c9:18:43:3c:a3:e2:10:6d: f7:22:8d:49:9a:8d:06:cc:b8:a4:b2:cf:22:e3:39: a3:0e:a8:a1:50:1e:09:7f:fd:a0:a2:01:91:0e:bf: 44:b7:46:e5:0e:85:5a:9a:dd:ef:dd:2d:0b:ba:91: 84:71:45:80:03:b0:c9:cc:d4:9b:63:1c:e0:ec:f7: f4:fa:8e:74:1a:64:30:52:4b:9d:16:e6:68:ff:c6: 55:34:31:18:c9:7e:c5:e1:70:78:52:e9:36:86:fa: a9:91:87:14:28:bd:ac:65:79:6e:1a:56:4b:b4:c8: a1:e6:3c:e6:c8:21:bd:3e:68:af:2c:16:ea:19:d9: 88:67:ec:10:a6:ba:c3:ee:05:a4:41:42:76:4c:c8: 0b:c2:41:b1:2c:92:de:cd:c1:80:db:43:77:b0:3e: 31:e2:84:6e:1c:69:9f:5b:66:5e:9a:c1:9b:36:fe: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7B:65:06:C2:96:DC:02:0B:67:27:D7:50:E4:82:FF:BD:E9:1E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0/0af21de0-2cae-45f7-b42c-9598c4271ef0.crl X509v3 Authority Key Identifier: keyid:91:47:0C:DB:DF:CB:1A:CF:B9:BE:2F:82:97:00:77:8C:96:E5:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0af21de0-2cae-45f7-b42c-9598c4271ef0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:9d:0e:ae:95:44:f6:d8:d7:40:b8:4f:75:65:52:35:8f:b7: 9e:bd:43:b9:44:2b:4d:38:c0:80:01:ce:9f:d2:4d:76:ce:61: dd:93:31:8c:b8:75:74:9e:86:10:a7:01:d4:cd:47:d2:1a:48: 49:63:7f:00:94:90:f1:95:a0:d2:97:f0:d8:bf:91:96:0d:78: a3:42:eb:7d:8e:05:63:07:41:2f:1d:63:f0:b4:e2:13:80:9a: 50:3b:90:55:10:24:a8:fc:67:3c:5a:a8:cd:ee:d6:69:31:65: 22:cb:d9:ac:ad:4f:39:14:f4:36:22:d3:1d:f0:bc:fa:ad:db: e1:94:f1:b4:9f:eb:d5:fd:47:d2:55:87:f8:91:77:8f:cf:70: e6:59:a1:7d:42:c8:54:00:95:dd:4e:90:be:e3:13:87:eb:ab: b9:a3:f4:ec:b6:f7:18:32:4b:f6:99:56:ae:d8:5e:09:55:26: 4b:58:b7:4f:8b:e5:43:f5:38:ce:4f:cb:7d:a1:c0:56:2b:be: 83:01:96:ac:4d:24:1a:df:35:8c:69:cc:2b:cf:16:5b:91:48: e0:d2:ee:e1:87:9f:2b:7f:d2:8c:3f:3b:a4:70:c7:93:19:8e: 37:8a:b2:89:08:26:1f:aa:06:a2:e2:57:90:0e:aa:dd:08:02: cb:64:f4:5f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw11Dr1jtCORT7WDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFmMjFkZTAtMmNhZS00NWY3LWI0MmMtOTU5OGM0Mjcx ZWYwMB4XDTI1MTIxNjIyMDAwM1oXDTI1MTIxOTIyMDAwMFowLzEtMCsGA1UEAxMk MjBkNjY0NjgtMmQ5Yi00YTEyLWE2ZTktZTJiZDdkNzhmYTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPVWp6hZII/JjQw9Yb2q8YJdDDgmS2WovFCJ vm7O5IkKlquW5u5dHrpF0WF61IZbbXxz4cEx6G1aHs+PAMMKyapZg7a4ZRmOzoQQ FEFb7IB2yRhDPKPiEG33Io1Jmo0GzLikss8i4zmjDqihUB4Jf/2gogGRDr9Et0bl DoVamt3v3S0LupGEcUWAA7DJzNSbYxzg7Pf0+o50GmQwUkudFuZo/8ZVNDEYyX7F 4XB4Uuk2hvqpkYcUKL2sZXluGlZLtMih5jzmyCG9PmivLBbqGdmIZ+wQprrD7gWk QUJ2TMgLwkGxLJLezcGA20N3sD4x4oRuHGmfW2ZemsGbNv6ipwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFON7ZQbCltwCC2cn11Dkgv+96R4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYWYy MWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4YzQyNzFlZjAvMGFmMjFkZTAtMmNhZS00 NWY3LWI0MmMtOTU5OGM0MjcxZWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGFmMjFkZTAtMmNhZS00NWY3LWI0 MmMtOTU5OGM0MjcxZWYwLzBhZjIxZGUwLTJjYWUtNDVmNy1iNDJjLTk1OThjNDI3 MWVmMC5jcmwwHwYDVR0jBBgwFoAUkUcM29/LGs+5vi+ClwB3jJblLWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYWYyMWRlMC0yY2FlLTQ1ZjctYjQyYy05NTk4 YzQyNzFlZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBunQ6ulUT22NdAuE91ZVI1 j7eevUO5RCtNOMCAAc6f0k12zmHdkzGMuHV0noYQpwHUzUfSGkhJY38AlJDxlaDS l/DYv5GWDXijQut9jgVjB0EvHWPwtOITgJpQO5BVECSo/Gc8WqjN7tZpMWUiy9ms rU85FPQ2ItMd8Lz6rdvhlPG0n+vV/UfSVYf4kXePz3DmWaF9QshUAJXdTpC+4xOH 66u5o/TstvcYMkv2mVau2F4JVSZLWLdPi+VD9TjOT8t9ocBWK76DAZasTSQa3zWM acwrzxZbkUjg0u7hh58rf9KMPzukcMeTGY43irKJCCYfqgai4leQDqrdCALLZPRf -----END CERTIFICATE-----Generated at Wed Dec 17 16:39:08 2025 by rpki-client