This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft File: 2d00478e-6a9e-4570-970a-f0a5baefc323.mft (raw, json) Hash identifier: fwRQPdsBmG440iERYy09zTz0mpm+sPK3iHdh0FqWk9s= Subject key identifier: B7:D1:92:DF:29:D6:CD:98:AC:DE:64:40:F6:79:75:8C:12:02:59:ED Authority key identifier: 43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 Certificate issuer: /CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Certificate serial: 010D0C9F4328584C3AF2827191FB09A86EA62E90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft Manifest number: 010D0C9F4328584073A81EB2087DF5616A46D46D Signing time: Thu 18 Dec 2025 18:00:03 +0000 Manifest this update: Thu 18 Dec 2025 18:00:03 +0000 Manifest next update: Sun 21 Dec 2025 18:00:00 +0000 Files and hashes: 1: 2d00478e-6a9e-4570-970a-f0a5baefc323.crl (hash: ya66yNw+3/lsCf2T+uzdwCGMfPBtwBwmbS8djI/B8Mc=) 2: 4049b2cc-3517-376c-bb5b-5b5249957e1e.roa (hash: 9M80pVnfM7Xvf2MpMOkuP+x3XtG9zwgi9hO/uSmtyOo=) 3: 91a6b8e0-6501-3351-9a16-39a5680163e6.roa (hash: K3ZijzopOvIT5aHqOvdC92+O6uePYhYJ1AyI9AvMlIY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:f2:82:71:91:fb:09:a8:6e:a6:2e:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d00478e-6a9e-4570-970a-f0a5baefc323 Validity Not Before: Dec 18 18:00:03 2025 GMT Not After : Dec 21 18:00:00 2025 GMT Subject: CN=cd78a73d-85d3-4971-adba-880446abc3f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:86:db:22:83:7b:2d:08:9d:ff:99:fb:df:88: b7:0c:ef:42:f7:17:2d:98:f6:e4:ef:c3:af:e8:ba: 46:22:e0:61:7e:98:f2:34:11:af:7e:d8:5d:e8:46: ca:8a:17:62:1b:f1:02:20:62:fa:fa:5a:f1:48:e1: fd:10:ee:81:f5:cc:d6:f5:f5:a2:7c:8b:24:0f:0e: 42:55:6b:12:cf:15:0c:8d:35:98:3c:70:83:46:c1: a9:29:09:1f:24:ab:bf:a2:59:6b:8e:a6:28:45:78: 9d:a9:0d:1b:6b:9a:73:7b:55:a7:6b:e0:6a:23:68: ca:01:b6:51:81:1b:8d:79:7f:32:03:e5:ad:53:d0: 1e:ba:1c:65:04:62:16:56:d8:71:3c:7f:66:57:44: 27:95:d5:85:7a:00:1b:0d:5d:a4:05:13:a6:17:d7: 37:43:4c:03:a0:67:aa:6a:92:93:8b:fd:fe:f7:78: 0b:1d:5c:5b:06:6d:0e:bc:2b:b3:06:08:66:36:30: 51:b9:2a:cd:28:38:93:2b:1e:60:7a:d5:84:5b:ce: 9d:59:8d:eb:4e:97:f7:a9:ea:d2:44:84:73:d5:b5: 6c:35:1f:f8:95:70:a7:1d:18:b7:4e:ec:6e:a7:e7: d6:8c:3c:aa:18:cc:b5:2a:e7:2e:37:0a:04:62:13: c0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D1:92:DF:29:D6:CD:98:AC:DE:64:40:F6:79:75:8C:12:02:59:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323/2d00478e-6a9e-4570-970a-f0a5baefc323.crl X509v3 Authority Key Identifier: keyid:43:02:31:2F:E6:67:48:11:3A:0F:60:A4:03:91:D9:D5:01:66:40:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2d00478e-6a9e-4570-970a-f0a5baefc323.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:1a:35:d9:d2:a6:35:62:12:8d:45:68:8f:bf:1c:36:10:3f: 5c:e4:c9:c3:5d:99:b1:01:45:af:72:e8:5c:92:40:ef:e9:e7: 07:54:fc:e2:54:86:d4:ea:65:df:8f:0f:28:09:b0:69:dc:08: ad:6f:ab:ec:31:42:08:4e:15:b0:57:06:8d:86:b1:35:73:48: dd:95:39:9c:4b:d4:64:a5:89:52:ca:46:c8:5f:cc:6f:dc:b1: 4c:5c:a7:7c:90:cd:d2:de:e4:73:86:2e:38:a6:4b:b5:2a:0b: 8f:c1:9a:06:48:c6:63:3c:43:1a:95:6a:9f:5a:b5:6e:14:3f: d0:9a:46:a4:99:be:52:1a:6d:73:17:89:fb:52:a5:6e:7e:46: 95:6d:1a:d4:92:9d:dc:88:42:04:cf:35:92:24:67:02:41:87: d1:e0:67:92:b7:6f:03:55:35:f0:bf:3c:d9:dd:68:fb:91:65: fe:85:32:8a:82:f3:1c:a7:88:e6:82:56:3a:65:05:f6:75:a9: 4f:ec:08:ba:a8:16:aa:14:95:a6:51:1f:3c:06:64:10:5a:dc: d3:b3:49:0d:56:92:22:1b:03:48:24:d0:49:7b:f3:ec:97:5f: 46:cb:59:40:1f:7b:6d:50:1f:ab:ad:ef:f3:1c:f7:6c:d5:01: 65:57:99:2b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw68oJxkfsJqG6mLpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDQ3OGUtNmE5ZS00NTcwLTk3MGEtZjBhNWJhZWZj MzIzMB4XDTI1MTIxODE4MDAwM1oXDTI1MTIyMTE4MDAwMFowLzEtMCsGA1UEAxMk Y2Q3OGE3M2QtODVkMy00OTcxLWFkYmEtODgwNDQ2YWJjM2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YbbIoN7LQid/5n734i3DO9C9xctmPbk78Ov 6LpGIuBhfpjyNBGvfthd6EbKihdiG/ECIGL6+lrxSOH9EO6B9czW9fWifIskDw5C VWsSzxUMjTWYPHCDRsGpKQkfJKu/ollrjqYoRXidqQ0ba5pze1Wna+BqI2jKAbZR gRuNeX8yA+WtU9AeuhxlBGIWVthxPH9mV0QnldWFegAbDV2kBROmF9c3Q0wDoGeq apKTi/3+93gLHVxbBm0OvCuzBghmNjBRuSrNKDiTKx5getWEW86dWY3rTpf3qerS RIRz1bVsNR/4lXCnHRi3Tuxup+fWjDyqGMy1KucuNwoEYhPAIQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLfRkt8p1s2YrN5kQPZ5dYwSAlntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZDAw NDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1YmFlZmMzMjMvMmQwMDQ3OGUtNmE5ZS00 NTcwLTk3MGEtZjBhNWJhZWZjMzIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmQwMDQ3OGUtNmE5ZS00NTcwLTk3 MGEtZjBhNWJhZWZjMzIzLzJkMDA0NzhlLTZhOWUtNDU3MC05NzBhLWYwYTViYWVm YzMyMy5jcmwwHwYDVR0jBBgwFoAUQwIxL+ZnSBE6D2CkA5HZ1QFmQPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZDAwNDc4ZS02YTllLTQ1NzAtOTcwYS1mMGE1 YmFlZmMzMjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAVGjXZ0qY1YhKNRWiPvxw2 ED9c5MnDXZmxAUWvcuhckkDv6ecHVPziVIbU6mXfjw8oCbBp3Aitb6vsMUIIThWw VwaNhrE1c0jdlTmcS9RkpYlSykbIX8xv3LFMXKd8kM3S3uRzhi44pku1KguPwZoG SMZjPEMalWqfWrVuFD/Qmkakmb5SGm1zF4n7UqVufkaVbRrUkp3ciEIEzzWSJGcC QYfR4GeSt28DVTXwvzzZ3Wj7kWX+hTKKgvMcp4jmglY6ZQX2dalP7Ai6qBaqFJWm UR88BmQQWtzTs0kNVpIiGwNIJNBJe/Psl19Gy1lAH3ttUB+rre/zHPds1QFlV5kr -----END CERTIFICATE-----Generated at Thu Dec 18 23:50:09 2025 by rpki-client