This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft File: 2123fd68-596c-4806-bd9e-91167a6dc6d4.mft (raw, json) Hash identifier: jkXq/m8l7ohQQHl+1wK0Qp/8wG07fqYiWNKUMn2jAFo= Subject key identifier: BD:4D:C2:31:70:5E:FC:7C:B6:CB:26:0E:37:88:E6:78:49:FF:04:91 Authority key identifier: 98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B Certificate issuer: /CN=2123fd68-596c-4806-bd9e-91167a6dc6d4 Certificate serial: 010D0C9F4328584CA2B4F36A22E336348B7EF500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft Manifest number: 010D0C9F4328584A4223BB7C6A64F52EF4D43DA1 Signing time: Sat 24 Jan 2026 22:00:09 +0000 Manifest this update: Sat 24 Jan 2026 22:00:09 +0000 Manifest next update: Tue 27 Jan 2026 22:00:00 +0000 Files and hashes: 1: 2123fd68-596c-4806-bd9e-91167a6dc6d4.crl (hash: MpcCJJcLKkL8g33m0VzPq1rliQXGRoMvY0nEPednLIE=) 2: 5da9e3b3-3362-3bf6-a7cb-60f6e00b5190.roa (hash: uu5yzOFvWuRBXiBzQ/bRonp5l9VLvlwrmygRJ4Qj/IM=) 3: 953d87f2-e0b3-35f6-a98e-9b8c808d132f.roa (hash: uN4cxp4RBqFyDM9VA1Jj9I9iumG0HEHflFFQ+92ud9k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a2:b4:f3:6a:22:e3:36:34:8b:7e:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2123fd68-596c-4806-bd9e-91167a6dc6d4 Validity Not Before: Jan 24 22:00:09 2026 GMT Not After : Jan 27 22:00:00 2026 GMT Subject: CN=88e8af72-1951-4a23-b055-d8f66cf1ffef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9f:c7:ca:94:ff:a4:5e:e4:d2:e2:4f:68:33: f4:80:7b:42:c8:47:58:29:bb:79:5e:76:a2:e9:7a: 20:27:39:e4:59:ed:ff:f1:41:f0:20:7e:96:3f:bb: c5:86:8c:1b:a4:e6:12:bb:c8:9d:26:41:2e:5a:43: 9f:f9:f9:30:bd:8e:c9:47:1c:c1:c7:f4:6a:71:1e: ce:cf:29:96:14:77:38:2e:bb:6e:2b:a1:96:60:49: 57:4a:78:02:2f:75:4e:dc:d3:7f:f6:75:01:a2:e6: f7:a7:93:32:68:a0:ac:9f:89:69:29:63:2d:f5:5e: 72:ad:43:d0:4c:91:ef:6c:09:ed:0c:81:54:63:49: 72:1e:64:cd:64:ec:4f:c5:c3:8b:85:e5:47:83:38: 76:eb:eb:a2:11:9c:cd:81:fe:c3:0a:90:4c:a0:0c: 88:72:a3:6b:86:28:42:08:83:d4:9a:1c:52:de:a5: bf:f3:29:19:26:21:0e:a8:d1:19:be:76:52:5d:9d: b0:69:d6:71:41:a0:8e:38:42:89:e2:e2:cf:12:5d: c1:0d:e9:37:51:67:d0:e5:05:5b:a7:57:e1:66:e4: b7:55:df:c8:cf:c1:7d:d5:f9:ca:f1:70:18:50:a7: 28:09:8c:4d:ee:88:26:6d:ba:4f:17:af:5f:92:b4: 35:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4D:C2:31:70:5E:FC:7C:B6:CB:26:0E:37:88:E6:78:49:FF:04:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4/2123fd68-596c-4806-bd9e-91167a6dc6d4.crl X509v3 Authority Key Identifier: keyid:98:4E:FC:FB:1D:11:E4:50:81:2A:C7:E9:35:AC:C6:1A:49:F6:81:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2123fd68-596c-4806-bd9e-91167a6dc6d4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:31:6b:85:d3:c0:b4:d3:c8:83:43:6c:5a:2d:b9:1f:a7:f2: c0:cc:a7:0b:6e:5f:a3:a5:e8:5d:79:94:2c:42:da:0e:1c:5d: 6c:a5:74:ca:03:7f:0e:03:d7:07:01:24:2d:bf:5b:d6:96:77: 37:d4:cb:b6:a6:81:cd:16:8c:20:35:c9:02:d0:f1:05:89:9a: 66:d4:2b:0e:eb:0a:96:78:a7:71:17:b2:a0:1b:af:40:f4:15: 1e:ee:95:e9:64:4a:d5:ae:75:71:65:c4:f3:4d:5c:08:46:8f: a6:de:a4:2d:6d:b8:48:05:3e:38:84:2a:e2:b5:fd:76:82:3a: 98:d1:3e:32:59:d2:0d:b6:63:40:70:e4:b7:d3:9c:3d:eb:16: 35:95:7f:42:66:81:c4:42:b4:59:94:93:00:cb:23:fd:35:f7: 43:44:ae:cd:b1:60:d4:ca:13:1f:bb:75:db:79:23:e7:eb:ee: e5:f7:ce:2c:90:14:4e:c0:d8:e0:ad:e2:4f:7e:97:e4:10:50: 7c:92:b7:a0:e4:08:91:53:4d:3d:a0:2f:9c:55:42:28:1a:e7: 1f:59:89:33:28:50:93:e8:73:c6:4a:a1:1d:27:03:bf:c7:20: 09:74:75:92:db:f4:59:8a:a8:ca:99:45:c5:74:c7:9e:0c:e7: b4:e4:54:83 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyitPNqIuM2NIt+9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjEyM2ZkNjgtNTk2Yy00ODA2LWJkOWUtOTExNjdhNmRj NmQ0MB4XDTI2MDEyNDIyMDAwOVoXDTI2MDEyNzIyMDAwMFowLzEtMCsGA1UEAxMk ODhlOGFmNzItMTk1MS00YTIzLWIwNTUtZDhmNjZjZjFmZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5/HypT/pF7k0uJPaDP0gHtCyEdYKbt5Xnai 6XogJznkWe3/8UHwIH6WP7vFhowbpOYSu8idJkEuWkOf+fkwvY7JRxzBx/RqcR7O zymWFHc4LrtuK6GWYElXSngCL3VO3NN/9nUBoub3p5MyaKCsn4lpKWMt9V5yrUPQ TJHvbAntDIFUY0lyHmTNZOxPxcOLheVHgzh26+uiEZzNgf7DCpBMoAyIcqNrhihC CIPUmhxS3qW/8ykZJiEOqNEZvnZSXZ2wadZxQaCOOEKJ4uLPEl3BDek3UWfQ5QVb p1fhZuS3Vd/Iz8F91fnK8XAYUKcoCYxN7ogmbbpPF69fkrQ1hQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFL1NwjFwXvx8tssmDjeI5nhJ/wSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTIz ZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2N2E2ZGM2ZDQvMjEyM2ZkNjgtNTk2Yy00 ODA2LWJkOWUtOTExNjdhNmRjNmQ0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjEyM2ZkNjgtNTk2Yy00ODA2LWJk OWUtOTExNjdhNmRjNmQ0LzIxMjNmZDY4LTU5NmMtNDgwNi1iZDllLTkxMTY3YTZk YzZkNC5jcmwwHwYDVR0jBBgwFoAUmE78+x0R5FCBKsfpNazGGkn2gYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTIzZmQ2OC01OTZjLTQ4MDYtYmQ5ZS05MTE2 N2E2ZGM2ZDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQACMWuF08C008iDQ2xaLbkf p/LAzKcLbl+jpehdeZQsQtoOHF1spXTKA38OA9cHASQtv1vWlnc31Mu2poHNFowg NckC0PEFiZpm1CsO6wqWeKdxF7KgG69A9BUe7pXpZErVrnVxZcTzTVwIRo+m3qQt bbhIBT44hCritf12gjqY0T4yWdINtmNAcOS305w96xY1lX9CZoHEQrRZlJMAyyP9 NfdDRK7NsWDUyhMfu3XbeSPn6+7l984skBROwNjgreJPfpfkEFB8kreg5AiRU009 oC+cVUIoGucfWYkzKFCT6HPGSqEdJwO/xyAJdHWS2/RZiqjKmUXFdMeeDOe05FSD -----END CERTIFICATE-----Generated at Sun Jan 25 11:23:29 2026 by rpki-client