This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft File: 21873e5a-a16d-4890-8dfe-c281bf6e020e.mft (raw, json) Hash identifier: +s01TxJtd7TZ11XhU7qGRY6Urd8dZjZ54OZGtHfLfPA= Subject key identifier: 0E:45:D0:4C:7B:2C:7A:CA:0B:43:C5:31:56:A9:15:15:31:1B:D7:18 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584C15F4ED743B79DB952353F800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft Manifest number: 010D0C9F4328584125F19CB051F83E2E5E6C6437 Signing time: Fri 05 Dec 2025 12:00:04 +0000 Manifest this update: Fri 05 Dec 2025 12:00:04 +0000 Manifest next update: Sun 07 Dec 2025 12:00:00 +0000 Files and hashes: 1: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (hash: nDWBdrjtgoKLrTLpE8lwoBBCD/E3oV/mqo1Jim10azU=) 2: 21873e5a-a16d-4890-8dfe-c281bf6e020e.crl (hash: F6c2SxoHTL4FlwGyK7okAJ4YChlvQjJeI0poy1eKlMY=) 3: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (hash: xjFBCJ525NlIzSq/m5+Tsfj3vcCcbj2EsxtKyTR/AUk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:15:f4:ed:74:3b:79:db:95:23:53:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Dec 5 12:00:04 2025 GMT Not After : Dec 7 12:00:00 2025 GMT Subject: CN=8aeb2ac7-6157-4378-a6d2-13c898a2feb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c5:70:d1:9d:c8:cf:d4:29:3a:3e:36:37:99: 74:ad:89:ce:b4:f4:d9:3e:11:6f:83:f0:48:e9:22: 88:cb:ea:57:32:51:49:9a:0c:44:2d:11:c8:8f:0d: 76:2b:3a:d7:a4:90:26:0a:94:c3:0d:68:93:1f:0e: 8e:af:ee:ea:94:e6:0f:a8:0e:b4:c1:b6:c6:92:3d: 11:d2:ba:60:d5:d5:21:13:26:0f:45:c3:0f:b5:0a: a9:09:4d:ae:38:05:89:02:87:72:53:49:36:dc:35: 58:07:1d:c1:f9:1b:9d:f7:79:43:1a:2c:55:d7:94: 35:0d:ab:24:c2:32:50:4c:31:74:91:27:28:2c:e1: 49:b9:a8:83:f4:b1:96:bf:ee:70:56:b0:d7:2e:99: f9:18:8d:43:75:93:6b:f1:98:62:fe:b4:8c:b4:8e: 84:d7:2f:5e:33:f0:ad:23:b6:b6:bb:81:3f:a2:89: 59:f3:ce:6f:90:31:fe:ab:87:09:c8:86:fd:45:29: ec:d3:06:4f:7a:8c:3c:af:90:9e:2e:88:3a:8e:7c: 76:af:6c:14:68:0f:ca:b8:fe:82:8a:22:66:3f:a3: 57:0f:47:8b:fd:0e:8b:83:b4:22:82:24:38:58:5c: e0:f9:f3:4b:f5:45:72:6b:b1:03:e1:c6:c6:d3:16: ba:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:45:D0:4C:7B:2C:7A:CA:0B:43:C5:31:56:A9:15:15:31:1B:D7:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:7a:df:24:66:2d:f3:03:ca:ad:f6:5b:b9:b4:a8:66:7f:dc: b2:aa:c9:fb:f2:76:a2:ee:35:17:33:80:66:c5:ab:0f:a9:23: 23:c7:3c:3b:92:f5:dc:19:ba:c9:3c:79:02:b5:f3:0a:e0:f1: 87:d6:a0:ad:76:59:5f:1f:c6:ed:7f:fb:4d:01:8f:5f:37:8f: 19:80:31:0c:7e:0e:3a:00:0a:81:79:34:cc:f9:c9:f2:76:1f: f7:b0:2b:4c:de:1e:73:b5:b4:e7:85:0e:1e:f9:b9:f1:e1:4e: c4:48:e9:7f:c0:7c:ae:1b:92:45:01:8a:ea:e4:52:da:09:ea: 87:7b:d2:6c:12:1d:c2:cc:12:34:46:e7:a8:d1:51:f5:1d:9a: 32:89:03:fb:5e:e7:88:9b:96:7e:48:e2:cd:44:de:fc:2e:2f: aa:c6:03:df:8d:0b:a1:59:31:7b:49:47:56:6e:d0:39:c2:d2: b9:d1:21:ae:47:f7:47:49:0f:cd:23:e3:f5:48:4f:ae:1e:11: 04:aa:b7:62:e7:42:40:4b:e1:65:92:b5:31:62:1c:3f:00:54: 80:d0:6a:81:99:4e:fc:f7:d7:67:b8:9f:2b:10:4b:17:c7:bb: 6a:80:99:01:95:22:73:8f:99:77:4b:80:c8:2e:63:b2:4d:49: 74:64:64:04 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwV9O10O3nblSNT+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI1MTIwNTEyMDAwNFoXDTI1MTIwNzEyMDAwMFowLzEtMCsGA1UEAxMk OGFlYjJhYzctNjE1Ny00Mzc4LWE2ZDItMTNjODk4YTJmZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMVw0Z3Iz9QpOj42N5l0rYnOtPTZPhFvg/BI 6SKIy+pXMlFJmgxELRHIjw12KzrXpJAmCpTDDWiTHw6Or+7qlOYPqA60wbbGkj0R 0rpg1dUhEyYPRcMPtQqpCU2uOAWJAodyU0k23DVYBx3B+Rud93lDGixV15Q1Dask wjJQTDF0kScoLOFJuaiD9LGWv+5wVrDXLpn5GI1DdZNr8Zhi/rSMtI6E1y9eM/Ct I7a2u4E/oolZ885vkDH+q4cJyIb9RSns0wZPeow8r5CeLog6jnx2r2wUaA/KuP6C iiJmP6NXD0eL/Q6Lg7QigiQ4WFzg+fNL9UVya7ED4cbG0xa6DwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA5F0Ex7LHrKC0PFMVapFRUxG9cYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMjE4NzNlNWEtYTE2ZC00 ODkwLThkZmUtYzI4MWJmNmUwMjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwet8kZi3zA8qt9lu5tKhm f9yyqsn78nai7jUXM4BmxasPqSMjxzw7kvXcGbrJPHkCtfMK4PGH1qCtdllfH8bt f/tNAY9fN48ZgDEMfg46AAqBeTTM+cnydh/3sCtM3h5ztbTnhQ4e+bnx4U7ESOl/ wHyuG5JFAYrq5FLaCeqHe9JsEh3CzBI0Rueo0VH1HZoyiQP7XueIm5Z+SOLNRN78 Li+qxgPfjQuhWTF7SUdWbtA5wtK50SGuR/dHSQ/NI+P1SE+uHhEEqrdi50JAS+Fl krUxYhw/AFSA0GqBmU7899dnuJ8rEEsXx7tqgJkBlSJzj5l3S4DILmOyTUl0ZGQE -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:56 2025 by rpki-client