This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft File: 21428d3a-0040-4c60-9202-cd68b2fd51de.mft (raw, json) Hash identifier: kC8FIzdEyKKXq3C8BR9gtYGGRq0NW7yPlm3tzV/zVn8= Subject key identifier: 26:E8:1B:34:93:EC:B0:8A:AC:DB:30:3D:8A:6E:89:7E:C2:33:11:77 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F4328584C1700EED49C920EF94ACDD200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft Manifest number: 010D0C9F43285849095C568CC434510E452459A0 Signing time: Fri 05 Dec 2025 21:00:03 +0000 Manifest this update: Fri 05 Dec 2025 21:00:03 +0000 Manifest next update: Mon 08 Dec 2025 21:00:00 +0000 Files and hashes: 1: 21428d3a-0040-4c60-9202-cd68b2fd51de.crl (hash: u6c2vVNPixRUl1gVmL/ovmrT+jenrk+gD7hRiT9gAwY=) 2: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (hash: B/fXTfeSP5nz69mBHCwEAufkZo7mpP3WJm5k2llEAb0=) 3: d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa (hash: h6mq6cZpHjkpdt87yB3WzDormW30hScxXCrXxzVhipM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:00:ee:d4:9c:92:0e:f9:4a:cd:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Dec 5 21:00:03 2025 GMT Not After : Dec 8 21:00:00 2025 GMT Subject: CN=38b1fe99-c3f9-4e93-a307-b1b450ed7f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:57:f1:8f:09:6b:86:65:e7:2e:43:2d:b9:a9: 48:86:f1:9d:a6:c0:8c:3a:41:5c:17:34:80:ff:e8: 78:d3:45:61:b4:01:87:5b:19:1d:1c:8e:6a:b6:e3: c7:5b:c4:00:8c:8b:30:4e:43:b4:01:00:07:9b:58: 22:eb:1d:c8:9e:38:1b:08:ed:12:e4:60:d4:d2:33: c2:7e:71:3c:d9:90:de:bd:f2:8f:de:28:65:b3:f3: e5:db:07:32:a9:c9:25:5d:b5:cc:53:d2:97:a2:50: 1c:65:ac:88:c5:e2:6c:23:de:83:56:16:da:9e:62: 40:3b:73:9e:6d:02:0c:01:5d:9a:ae:b7:a1:ec:b2: 47:96:37:11:2e:27:42:c7:77:42:3f:4c:44:03:ab: 4a:71:bb:e6:2b:f8:ce:90:f2:28:16:0b:3a:2a:bb: fb:95:c3:55:c4:16:ce:a9:81:89:4e:7b:ae:a8:a1: 3a:ad:90:6c:0f:f4:e8:6d:2e:bd:21:2e:39:eb:6e: 6c:a2:2b:ef:f1:8b:a3:11:06:e3:65:8d:51:c5:d7: 98:c9:2e:64:60:2d:e9:a6:f8:b1:ef:9d:7b:38:d7: ac:51:a2:c4:16:12:a5:c9:d9:d6:3d:00:da:e7:06: ec:86:da:c1:17:46:67:be:02:24:11:a2:e4:21:bb: 30:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:E8:1B:34:93:EC:B0:8A:AC:DB:30:3D:8A:6E:89:7E:C2:33:11:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:69:ec:5f:1c:b5:77:d6:c5:6f:3a:f7:5f:3a:a6:88:6b:ca: 0e:20:3c:a3:d2:50:7e:0f:db:55:3e:df:34:7f:d4:88:23:ca: 43:2d:1d:96:34:75:54:b7:3b:03:eb:b0:7b:0e:79:1c:b4:98: d2:d4:66:d0:77:f7:a5:1e:ae:93:23:3e:21:88:02:dd:1b:43: aa:2a:0f:17:ab:ff:37:e7:62:66:fd:df:31:b9:cb:0d:a9:44: 8d:37:f0:bc:af:27:6a:9c:60:3e:92:d6:e0:ab:ce:24:66:8d: f1:d9:34:9d:bc:7f:78:2b:63:e6:08:d8:14:df:2e:e9:f7:9e: f1:c9:21:e7:d0:f6:1c:b4:9a:0c:c8:13:d7:99:f8:fe:a9:b3: e0:a4:51:55:73:86:f5:82:53:f7:16:9b:bd:75:55:aa:71:5d: fb:ac:95:8f:ff:bc:31:0c:31:6f:fa:93:92:e0:86:4b:fa:3e: 45:01:9b:ba:08:c2:7d:92:9d:9f:85:3d:73:89:d3:dc:07:d6: d7:3a:53:93:cd:4f:7c:8d:f1:b3:00:62:20:dd:40:e9:28:2d: 8d:9a:e7:11:1f:c6:00:63:12:5c:6b:d8:b6:8c:25:7b:59:a1: 8f:7e:2e:b5:97:a2:2f:69:09:64:74:34:31:5f:95:a2:b7:60: 77:3b:5d:c9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXAO7UnJIO+UrN0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI1MTIwNTIxMDAwM1oXDTI1MTIwODIxMDAwMFowLzEtMCsGA1UEAxMk MzhiMWZlOTktYzNmOS00ZTkzLWEzMDctYjFiNDUwZWQ3Zjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFfxjwlrhmXnLkMtualIhvGdpsCMOkFcFzSA /+h400VhtAGHWxkdHI5qtuPHW8QAjIswTkO0AQAHm1gi6x3InjgbCO0S5GDU0jPC fnE82ZDevfKP3ihls/Pl2wcyqcklXbXMU9KXolAcZayIxeJsI96DVhbanmJAO3Oe bQIMAV2arreh7LJHljcRLidCx3dCP0xEA6tKcbvmK/jOkPIoFgs6Krv7lcNVxBbO qYGJTnuuqKE6rZBsD/TobS69IS45625soivv8YujEQbjZY1RxdeYyS5kYC3ppvix 7517ONesUaLEFhKlydnWPQDa5wbshtrBF0ZnvgIkEaLkIbswQQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCboGzST7LCKrNswPYpuiX7CMxF3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvMjE0MjhkM2EtMDA0MC00 YzYwLTkyMDItY2Q2OGIyZmQ1MWRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwaexfHLV31sVvOvdfOqaI a8oOIDyj0lB+D9tVPt80f9SII8pDLR2WNHVUtzsD67B7DnkctJjS1GbQd/elHq6T Iz4hiALdG0OqKg8Xq/8352Jm/d8xucsNqUSNN/C8rydqnGA+ktbgq84kZo3x2TSd vH94K2PmCNgU3y7p957xySHn0PYctJoMyBPXmfj+qbPgpFFVc4b1glP3Fpu9dVWq cV37rJWP/7wxDDFv+pOS4IZL+j5FAZu6CMJ9kp2fhT1zidPcB9bXOlOTzU98jfGz AGIg3UDpKC2NmucRH8YAYxJca9i2jCV7WaGPfi61l6IvaQlkdDQxX5Wit2B3O13J -----END CERTIFICATE-----Generated at Sat Dec 6 16:11:39 2025 by rpki-client