This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft File: 21873e5a-a16d-4890-8dfe-c281bf6e020e.mft (raw, json) Hash identifier: G60yRbP9gS0EI/wq6oxlvnVd+qk7TxxNMwspTxqfFLc= Subject key identifier: 5A:25:3B:C4:E7:6B:18:65:86:83:50:4A:A6:22:8D:A4:E4:A9:22:3A Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584CA455D00621F0F97BF5043F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft Manifest number: 010D0C9F4328584125F19CB051F83E2E5E6C646E Signing time: Sun 25 Jan 2026 12:00:04 +0000 Manifest this update: Sun 25 Jan 2026 12:00:04 +0000 Manifest next update: Wed 28 Jan 2026 12:00:00 +0000 Files and hashes: 1: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (hash: NQGa/mxiZUYrPjMEtpKGdvAsKtew1Nn1QH7vPdfpTVU=) 2: 21873e5a-a16d-4890-8dfe-c281bf6e020e.crl (hash: 7OIX7rtF/A0SQ2vX/piuBD/x5coEPsaiDZY/K4UFmGU=) 3: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (hash: Fj+nFM0srdsiq8Kn6OSBXJ0xYxoMTThhB1YwWHtBWZg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:55:d0:06:21:f0:f9:7b:f5:04:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Jan 25 12:00:04 2026 GMT Not After : Jan 28 12:00:00 2026 GMT Subject: CN=769ce0f3-9555-4aa3-bca1-437fa8bdbcf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:bc:12:ec:f3:a1:b9:e2:50:06:56:8a:6d: ad:44:59:c9:55:44:a1:f2:8d:af:53:9e:08:28:c8: 7d:96:ce:5a:93:54:ed:2a:35:90:38:f8:bd:9c:a0: 64:38:55:34:bb:a3:69:24:d3:1c:ac:f6:f5:c2:1e: 13:df:3e:60:a1:f6:63:df:23:2a:11:a0:e9:d4:c5: fd:41:57:f1:19:c7:f9:56:5b:8c:84:de:ce:fa:b4: 1a:e8:1c:a5:1e:e5:45:ba:40:3d:65:33:9b:74:ea: c2:ed:d5:69:1e:ad:83:63:77:15:bc:2e:09:b4:d6: 6d:da:00:a8:4c:fa:91:0f:b6:4f:07:d2:c6:74:58: 70:33:62:c6:56:85:a5:be:ac:a6:a4:d7:19:8c:a0: db:d5:cf:7a:d8:19:ea:8e:bf:8c:c6:0f:62:c0:a9: 22:2a:fd:81:ef:5e:1a:37:25:eb:5c:9d:eb:17:78: 62:c0:fc:30:8b:c2:04:55:14:90:9a:6d:69:de:bb: 28:a0:b8:f2:e4:7b:85:04:2c:01:76:e1:44:5d:ff: f8:af:6d:b1:1c:54:8c:3f:e2:05:50:c3:d0:dc:0b: d5:b8:21:ca:18:b3:9f:9b:54:cd:36:f4:eb:ef:3d: f6:62:43:36:ed:a2:53:03:9a:a4:01:06:b8:2f:8b: 67:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:25:3B:C4:E7:6B:18:65:86:83:50:4A:A6:22:8D:A4:E4:A9:22:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:53:53:64:d0:50:0f:e0:30:e2:34:13:29:39:26:96:01:52: ae:a7:87:12:4b:27:d5:d5:33:8e:ff:65:02:09:2e:36:53:99: 2f:b9:7a:ac:86:99:ec:9a:3d:d4:6a:98:b0:3d:f1:70:a5:7c: 05:10:3d:b1:24:1d:38:a1:d3:d2:65:b1:52:53:d3:5d:e7:17: 28:b4:73:66:d2:6b:04:ca:44:4c:84:77:34:15:56:8d:db:d6: 6e:81:d5:9b:91:cf:4d:14:fa:cf:45:ec:f4:9b:c5:30:9f:55: e2:65:0e:43:20:53:d9:a9:17:92:9c:19:6e:6c:9c:30:93:81: 55:55:2f:38:ba:24:7f:30:4f:4a:63:cb:f5:0d:64:11:90:a6: 11:0a:36:22:de:7d:3b:ef:05:ec:80:6a:e4:df:20:5c:d6:4e: 44:b9:f3:08:cb:ae:86:93:ce:42:4b:40:4c:0d:1f:79:24:05: be:06:6d:0f:3b:a5:95:d9:15:13:5b:0c:57:93:42:d9:59:9f: 14:e5:a0:86:2c:3f:8b:f3:74:a0:33:2b:69:90:a5:8c:b2:85: 39:15:3c:b7:f0:c5:37:4f:53:39:5f:90:09:d6:eb:99:98:41: 90:b1:85:e9:24:74:f9:83:b0:34:de:83:40:9d:83:93:5b:b4: 3a:68:47:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEykVdAGIfD5e/UEP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI2MDEyNTEyMDAwNFoXDTI2MDEyODEyMDAwMFowLzEtMCsGA1UEAxMk NzY5Y2UwZjMtOTU1NS00YWEzLWJjYTEtNDM3ZmE4YmRiY2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+O8EuzzobniUAZWim2tRFnJVUSh8o2vU54I KMh9ls5ak1TtKjWQOPi9nKBkOFU0u6NpJNMcrPb1wh4T3z5gofZj3yMqEaDp1MX9 QVfxGcf5VluMhN7O+rQa6BylHuVFukA9ZTObdOrC7dVpHq2DY3cVvC4JtNZt2gCo TPqRD7ZPB9LGdFhwM2LGVoWlvqympNcZjKDb1c962Bnqjr+Mxg9iwKkiKv2B714a NyXrXJ3rF3hiwPwwi8IEVRSQmm1p3rsooLjy5HuFBCwBduFEXf/4r22xHFSMP+IF UMPQ3AvVuCHKGLOfm1TNNvTr7z32YkM27aJTA5qkAQa4L4tnDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFolO8TnaxhlhoNQSqYijaTkqSI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMjE4NzNlNWEtYTE2ZC00 ODkwLThkZmUtYzI4MWJmNmUwMjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlU1Nk0FAP4DDiNBMpOSaW AVKup4cSSyfV1TOO/2UCCS42U5kvuXqshpnsmj3UapiwPfFwpXwFED2xJB04odPS ZbFSU9Nd5xcotHNm0msEykRMhHc0FVaN29ZugdWbkc9NFPrPRez0m8Uwn1XiZQ5D IFPZqReSnBlubJwwk4FVVS84uiR/ME9KY8v1DWQRkKYRCjYi3n077wXsgGrk3yBc 1k5EufMIy66Gk85CS0BMDR95JAW+Bm0PO6WV2RUTWwxXk0LZWZ8U5aCGLD+L83Sg MytpkKWMsoU5FTy38MU3T1M5X5AJ1uuZmEGQsYXpJHT5g7A03oNAnYOTW7Q6aEfE -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:45 2026 by rpki-client