This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft File: cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft (raw, json) Hash identifier: EghazMCMxzsv5EnnDTnVVpjxTA6BbeefMAbo210qGsw= Subject key identifier: 8F:4A:80:4C:92:D1:21:31:F2:EA:AC:5C:99:57:47:AB:38:FC:8D:5E Authority key identifier: DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57 Certificate issuer: /CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f Certificate serial: 010D0C9F4328584C16A7A18C811FA908437AC140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft Manifest number: 010D0C9F4328584073A822003F42BAF0B9DFB82E Signing time: Fri 05 Dec 2025 18:00:08 +0000 Manifest this update: Fri 05 Dec 2025 18:00:08 +0000 Manifest next update: Sun 07 Dec 2025 18:00:00 +0000 Files and hashes: 1: be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer (hash: Q766is9CsNxf+oAeoFRHBlF3rRv+yC8thSLO7UN+2pU=) 2: cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl (hash: jb+yFAIW1z0JdhFqB9A+SKJdgnLrpQKfV850glsCsw4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:a7:a1:8c:81:1f:a9:08:43:7a:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f Validity Not Before: Dec 5 18:00:08 2025 GMT Not After : Dec 7 18:00:00 2025 GMT Subject: CN=76d12b00-47c1-487e-a20b-74c80402d6c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8d:24:77:93:ff:36:23:66:77:b3:3f:d8:f3: c0:38:46:5d:be:63:1a:a7:2c:7d:46:92:4e:62:e6: 2a:0d:70:46:bd:b9:b6:4b:28:a9:36:f2:e1:74:b4: dd:5d:6c:93:2b:2e:3e:b7:35:eb:23:43:4c:eb:58: 00:9e:8a:3b:29:2c:89:2b:e9:9e:fc:4e:cc:7f:c3: 5e:8c:df:1e:a5:c2:74:5e:c6:cf:8b:da:64:ab:f8: 0a:b6:31:c1:b8:e7:14:f7:33:f3:8d:16:7f:68:6f: 76:35:16:af:1d:be:33:cb:c9:48:0b:15:73:75:56: b8:b7:09:90:0b:13:9b:ce:a2:44:d1:c0:7c:1d:7e: a0:39:ae:95:a8:72:3c:83:f6:72:f3:6a:44:26:94: 14:82:9d:e8:5c:46:a4:1b:4e:a0:61:a7:bc:b2:05: 3a:41:ed:8d:85:d9:63:47:2e:b8:ff:ed:1f:24:0d: 3f:87:00:fc:5f:67:a6:67:46:f9:8e:44:93:ce:b4: 7f:0d:0e:72:80:c9:eb:6a:af:5c:79:bd:66:10:8c: 4f:97:71:24:70:a5:d7:30:ec:16:df:b3:09:7b:16: 03:4a:18:7d:9e:a1:d8:ac:29:1e:a7:c8:97:c3:d6: 89:85:38:cf:dd:88:a6:3e:35:6b:a3:ef:a9:68:b3: 8a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4A:80:4C:92:D1:21:31:F2:EA:AC:5C:99:57:47:AB:38:FC:8D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl X509v3 Authority Key Identifier: keyid:DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:46:87:71:0a:12:18:b4:89:05:7e:b1:fc:a5:1a:d7:a8:c9: df:5d:f7:c4:5d:7f:d7:19:dd:c4:d4:21:9b:d3:c5:d6:c3:55: dc:be:8d:1e:b7:d3:ca:73:7f:cf:b1:ec:e5:88:53:0b:4f:0b: 64:42:90:42:3e:c7:00:73:35:de:a4:bc:e7:b9:4e:9f:57:f6: 7b:c7:4f:b3:d7:c5:2d:c4:b6:7b:60:4b:a6:f2:2b:c2:3b:f0: 05:8d:03:ce:fa:4b:ba:2b:54:96:8b:cd:fa:33:01:e6:66:e1: 13:7c:0b:55:b6:fc:ef:b3:48:a8:09:74:dd:cf:fd:92:f9:38: c2:27:74:7e:03:a9:3b:01:4f:c5:5c:f8:6b:0e:cd:51:3b:03: 6b:fa:80:9d:25:42:7e:18:0d:29:8d:19:da:93:33:d5:0e:88: 82:9a:16:23:27:83:bc:83:a9:9f:6a:3f:a7:22:70:d0:fd:5f: cb:9c:ab:5c:cf:59:ae:50:8e:a4:db:45:b8:a1:b6:60:cb:9f: 05:0d:01:db:64:76:a8:1e:a7:d4:c0:d5:30:68:0e:86:be:bc: bd:85:54:ed:c4:ad:c2:94:02:9f:58:ab:4d:e0:3b:27:1d:4e: 05:02:7f:37:59:95:20:ff:b6:a1:e8:b6:7d:a3:38:c4:be:79: f6:d9:4e:43 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWp6GMgR+pCEN6wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzYTgxMmMtMGYxMC00NWVjLWFjYTMtNjhhNzNlOTlk MDhmMB4XDTI1MTIwNTE4MDAwOFoXDTI1MTIwNzE4MDAwMFowLzEtMCsGA1UEAxMk NzZkMTJiMDAtNDdjMS00ODdlLWEyMGItNzRjODA0MDJkNmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY0kd5P/NiNmd7M/2PPAOEZdvmMapyx9RpJO YuYqDXBGvbm2SyipNvLhdLTdXWyTKy4+tzXrI0NM61gAnoo7KSyJK+me/E7Mf8Ne jN8epcJ0XsbPi9pkq/gKtjHBuOcU9zPzjRZ/aG92NRavHb4zy8lICxVzdVa4twmQ CxObzqJE0cB8HX6gOa6VqHI8g/Zy82pEJpQUgp3oXEakG06gYae8sgU6Qe2Nhdlj Ry64/+0fJA0/hwD8X2emZ0b5jkSTzrR/DQ5ygMnraq9ceb1mEIxPl3EkcKXXMOwW 37MJexYDShh9nqHYrCkep8iXw9aJhTjP3YimPjVro++paLOKDwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI9KgEyS0SEx8uqsXJlXR6s4/I1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZjNh ODEyYy0wZjEwLTQ1ZWMtYWNhMy02OGE3M2U5OWQwOGYvY2YzYTgxMmMtMGYxMC00 NWVjLWFjYTMtNjhhNzNlOTlkMDhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2YzYTgxMmMtMGYxMC00NWVjLWFj YTMtNjhhNzNlOTlkMDhmL2NmM2E4MTJjLTBmMTAtNDVlYy1hY2EzLTY4YTczZTk5 ZDA4Zi5jcmwwHwYDVR0jBBgwFoAU3JtUtNtPLDoiI9Ba12aAQGt5H1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZjNhODEyYy0wZjEwLTQ1ZWMtYWNhMy02OGE3 M2U5OWQwOGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfRodxChIYtIkFfrH8pRrX qMnfXffEXX/XGd3E1CGb08XWw1Xcvo0et9PKc3/PsezliFMLTwtkQpBCPscAczXe pLznuU6fV/Z7x0+z18UtxLZ7YEum8ivCO/AFjQPO+ku6K1SWi836MwHmZuETfAtV tvzvs0ioCXTdz/2S+TjCJ3R+A6k7AU/FXPhrDs1ROwNr+oCdJUJ+GA0pjRnakzPV DoiCmhYjJ4O8g6mfaj+nInDQ/V/LnKtcz1muUI6k20W4obZgy58FDQHbZHaoHqfU wNUwaA6Gvry9hVTtxK3ClAKfWKtN4DsnHU4FAn83WZUg/7ah6LZ9ozjEvnn22U5D -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:03 2025 by rpki-client