This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft File: 21f498b5-84f8-4255-a971-76e62e3a212d.mft (raw, json) Hash identifier: LZvLsX403I0xqXqdkLiMmlrIBGDXWXc3Spi736qSZEs= Subject key identifier: C5:AE:20:44:9E:A0:28:CC:D4:86:9D:0B:B9:78:99:21:C2:8B:98:E2 Authority key identifier: 9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD Certificate issuer: /CN=21f498b5-84f8-4255-a971-76e62e3a212d Certificate serial: 010D0C9F4328584C1936C75FFCA3ABC1271C1680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft Manifest number: 010D0C9F432858494BC7E01DBD9900CCA033E337 Signing time: Sat 06 Dec 2025 16:00:08 +0000 Manifest this update: Sat 06 Dec 2025 16:00:08 +0000 Manifest next update: Mon 08 Dec 2025 16:00:00 +0000 Files and hashes: 1: 21f498b5-84f8-4255-a971-76e62e3a212d.crl (hash: o3NdEDyZlRsN2hjUlikkLiCTUywshRFfUkmCk9zXALw=) 2: ebb0be46-5340-3989-b64b-7de27da0d802.roa (hash: ZYwfSi9xVZj3T2KGb5Dm3el9eeZgXsvgCBm4zUYhH4A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:19:36:c7:5f:fc:a3:ab:c1:27:1c:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21f498b5-84f8-4255-a971-76e62e3a212d Validity Not Before: Dec 6 16:00:08 2025 GMT Not After : Dec 8 16:00:00 2025 GMT Subject: CN=42f85734-fc14-4694-9371-a3112785b8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:77:a5:92:25:2b:8f:1d:6b:21:77:2c:e9:75: 65:62:7c:b1:3b:53:11:48:1a:53:07:af:da:91:f0: 89:c4:7a:c5:d0:82:d8:89:a3:c2:c6:41:f8:44:16: 34:48:69:69:9d:b7:62:3e:99:c5:aa:37:09:f6:e2: 69:9e:15:60:33:16:69:fc:9a:70:7a:15:c8:ea:f4: 94:a4:39:f5:15:db:40:7d:c5:60:17:55:8e:43:1e: ca:01:df:2e:62:8a:7c:70:82:1f:6d:86:ce:6b:33: e4:4e:4f:49:9b:82:88:eb:a9:c9:0d:a7:40:5e:0a: 0c:47:c2:24:b5:c8:f5:1e:1f:96:fa:fe:2a:2f:a2: 81:51:cb:33:22:56:9d:f2:ce:7f:03:3d:ce:18:58: 7a:f4:9b:d9:da:66:55:5f:e8:20:a9:b5:e1:c5:69: 73:d6:98:53:c3:35:c2:aa:e1:47:e2:cf:db:3c:d4: fa:0a:92:ec:80:3f:81:c3:2e:d4:f6:22:c7:ec:27: 46:bc:1d:f1:66:2d:ad:53:74:68:b7:4b:03:fc:9a: 55:06:95:5d:bc:90:90:01:ed:d8:ac:07:5f:55:21: 4b:be:6f:93:bb:72:d8:c5:1e:35:f9:ff:73:2b:ed: d6:be:04:1c:7e:bf:cb:e3:6d:c1:f8:97:59:30:53: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:AE:20:44:9E:A0:28:CC:D4:86:9D:0B:B9:78:99:21:C2:8B:98:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d/21f498b5-84f8-4255-a971-76e62e3a212d.crl X509v3 Authority Key Identifier: keyid:9A:04:7D:F3:38:84:EF:9D:DB:6D:20:D9:20:AD:5D:D4:06:65:77:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21f498b5-84f8-4255-a971-76e62e3a212d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:30:31:9a:5b:c4:12:41:cb:74:4e:48:a2:05:e8:08:73:da: cf:31:3c:d4:af:f0:52:fa:8d:43:ca:b2:fd:03:d2:af:ad:33: 9f:59:44:99:14:37:27:49:0f:4a:97:23:0d:20:1a:ff:32:da: 21:44:f6:b0:85:6c:ea:d7:7f:82:a0:80:66:f0:02:b9:0a:1f: 10:f0:75:e1:28:66:dd:a4:4c:26:13:5c:77:5e:0a:76:03:ca: d7:ac:89:2a:ad:da:2d:06:5e:44:44:22:57:03:10:dd:9e:a4: c4:f2:c2:6f:ba:e3:d8:ff:c2:84:94:d2:ef:61:16:c6:da:cc: c4:03:76:3f:20:bd:b2:f4:f5:3e:2c:7e:e7:ef:c0:e0:a3:7a: db:e9:e9:95:7d:2d:5d:3b:72:3b:df:ab:f2:a0:2f:60:65:cc: 97:1f:80:b5:19:89:f9:27:49:af:3e:e4:4c:16:13:66:d6:45: 72:91:9e:ba:cc:ee:57:12:6c:c9:b8:f9:ef:59:f6:a1:5f:db: 67:62:d8:62:34:24:1a:29:fa:1b:02:84:0b:c2:c0:45:b6:f7: 65:78:ee:1d:2d:cc:67:67:86:79:a0:32:b1:52:87:10:a3:62: 2f:ef:f7:21:6f:c4:0c:29:72:f0:af:0e:3a:a2:2d:a3:bd:a9: 9f:0c:a6:12 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwZNsdf/KOrwSccFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFmNDk4YjUtODRmOC00MjU1LWE5NzEtNzZlNjJlM2Ey MTJkMB4XDTI1MTIwNjE2MDAwOFoXDTI1MTIwODE2MDAwMFowLzEtMCsGA1UEAxMk NDJmODU3MzQtZmMxNC00Njk0LTkzNzEtYTMxMTI3ODViOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3elkiUrjx1rIXcs6XVlYnyxO1MRSBpTB6/a kfCJxHrF0ILYiaPCxkH4RBY0SGlpnbdiPpnFqjcJ9uJpnhVgMxZp/JpwehXI6vSU pDn1FdtAfcVgF1WOQx7KAd8uYop8cIIfbYbOazPkTk9Jm4KI66nJDadAXgoMR8Ik tcj1Hh+W+v4qL6KBUcszIlad8s5/Az3OGFh69JvZ2mZVX+ggqbXhxWlz1phTwzXC quFH4s/bPNT6CpLsgD+Bwy7U9iLH7CdGvB3xZi2tU3Rot0sD/JpVBpVdvJCQAe3Y rAdfVSFLvm+Tu3LYxR41+f9zK+3WvgQcfr/L423B+JdZMFP9vwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMWuIESeoCjM1IadC7l4mSHCi5jiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0 OThiNS04NGY4LTQyNTUtYTk3MS03NmU2MmUzYTIxMmQvMjFmNDk4YjUtODRmOC00 MjU1LWE5NzEtNzZlNjJlM2EyMTJkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFmNDk4YjUtODRmOC00MjU1LWE5 NzEtNzZlNjJlM2EyMTJkLzIxZjQ5OGI1LTg0ZjgtNDI1NS1hOTcxLTc2ZTYyZTNh MjEyZC5jcmwwHwYDVR0jBBgwFoAUmgR98ziE753bbSDZIK1d1AZld90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWY0OThiNS04NGY4LTQyNTUtYTk3MS03NmU2 MmUzYTIxMmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmMDGaW8QSQct0TkiiBegI c9rPMTzUr/BS+o1DyrL9A9KvrTOfWUSZFDcnSQ9KlyMNIBr/MtohRPawhWzq13+C oIBm8AK5Ch8Q8HXhKGbdpEwmE1x3Xgp2A8rXrIkqrdotBl5ERCJXAxDdnqTE8sJv uuPY/8KElNLvYRbG2szEA3Y/IL2y9PU+LH7n78Dgo3rb6emVfS1dO3I736vyoC9g ZcyXH4C1GYn5J0mvPuRMFhNm1kVykZ66zO5XEmzJuPnvWfahX9tnYthiNCQaKfob AoQLwsBFtvdleO4dLcxnZ4Z5oDKxUocQo2Iv7/chb8QMKXLwrw46oi2jvamfDKYS -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:21 2025 by rpki-client