This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft File: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft (raw, json) Hash identifier: B6c2r3MTEgrQJ/NSet2TofMNrX+EdrSdyrUWvgLEsPo= Subject key identifier: 39:EB:4B:88:B4:DD:CD:A9:D5:17:E6:FC:D3:BD:C1:99:8D:2D:FD:DD Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584C3AD4B8CEA24D53A6F6D4D2B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft Manifest number: 010D0C9F432858492FFDC9CA712E0CA721145720 Signing time: Thu 18 Dec 2025 17:00:03 +0000 Manifest this update: Thu 18 Dec 2025 17:00:03 +0000 Manifest next update: Sat 20 Dec 2025 17:00:00 +0000 Files and hashes: 1: 435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa (hash: 4rYINi66PalfvsDMfM2OIMb1jR3OIdm0wUf9yYgc2pI=) 2: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl (hash: hH6/jEBulglFPNPanF/0L92tsxSK6vlL1Y4+rBpOKsE=) 3: ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa (hash: 9vaQDVpBV++7eoLWnNla2WK5S1Ar28FcORm3f9h3lGI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:d4:b8:ce:a2:4d:53:a6:f6:d4:d2:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Dec 18 17:00:03 2025 GMT Not After : Dec 20 17:00:00 2025 GMT Subject: CN=fe6c8b9d-97a9-4dbf-8fe4-4e72d9be22af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:1b:3a:f7:fc:c4:68:ae:0a:2a:97:17:13: 36:d1:9d:da:f2:ce:50:c6:6d:9b:b0:9c:f0:70:4c: 93:bf:4f:77:8a:7e:ae:3f:a6:af:d5:3b:04:5a:49: f2:97:6d:67:90:37:92:32:00:08:f9:48:61:a3:70: 4b:23:60:b6:be:11:f8:e9:71:77:3f:87:e1:e4:1b: 78:a9:d0:57:5e:81:8c:ef:93:37:eb:1d:c6:a9:5c: 1d:f7:43:e9:c7:d0:70:fa:c6:16:ea:05:c3:56:83: 5d:11:89:14:f0:4c:d4:4a:b0:d1:52:ed:02:c1:16: fd:cd:48:f6:73:da:63:25:40:7a:d1:bc:71:71:2a: 07:fb:d4:38:44:ff:2b:8b:08:b9:e3:7e:09:87:56: 53:7b:cf:41:2c:20:41:07:f2:2f:e4:af:b2:8d:fe: 0d:74:93:53:93:e6:d4:06:49:58:3a:f0:c0:c7:02: 85:0d:94:df:69:b0:d8:ee:d7:19:c0:6c:e0:16:e6: f2:23:4b:21:de:df:e7:e8:55:98:9c:55:3b:90:b5: c0:47:a9:4c:e4:f7:66:44:78:0a:dc:66:5a:61:9e: c9:f2:6c:eb:89:af:55:fc:66:f4:a8:96:87:3a:88: 30:22:e3:fc:5f:cf:12:aa:74:33:72:c4:25:44:e6: a1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EB:4B:88:B4:DD:CD:A9:D5:17:E6:FC:D3:BD:C1:99:8D:2D:FD:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4f:0a:9c:7a:01:a5:5e:1c:ab:59:ef:e6:0b:79:c2:92:59: de:69:a2:d5:64:80:b1:10:48:d3:bd:07:61:1d:72:cd:1e:87: de:9e:d6:09:35:8f:34:b4:2d:87:36:e9:5f:75:8e:8c:f0:e6: 72:32:fe:1b:30:9a:dc:fa:37:22:22:23:0f:90:50:37:eb:9f: 0c:8a:54:d8:57:66:b9:60:e1:b0:51:03:2f:ec:f8:e3:ed:bd: 5a:04:c4:bf:d3:b9:09:ee:8a:c3:59:6d:bf:89:ac:05:a6:95: 5c:e9:94:9d:9b:2a:b5:f3:d7:88:ba:74:2a:5f:46:3d:46:11: 6e:a9:b9:be:c9:ad:c7:73:5b:cf:b8:d1:9f:79:b9:c2:11:57: 28:41:13:97:99:c7:d7:40:b9:ed:a7:85:0e:d2:f8:57:66:b0: 97:37:34:dc:b2:eb:5c:43:fd:53:d2:b2:1e:78:e1:c0:9a:d4: 7e:22:75:9c:9f:11:2c:f8:4f:73:72:7b:55:29:91:84:bf:7d: 5b:a6:4a:d3:b8:86:b1:28:80:2e:1f:51:b3:72:e6:7a:3d:db: 05:d4:3d:bf:bc:79:70:16:df:e7:94:53:2a:61:ee:cc:2b:49: 09:22:3d:16:95:c7:78:51:6b:54:e4:d2:d6:18:41:df:7d:2f: 78:d0:97:53 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw61LjOok1TpvbU0rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI1MTIxODE3MDAwM1oXDTI1MTIyMDE3MDAwMFowLzEtMCsGA1UEAxMk ZmU2YzhiOWQtOTdhOS00ZGJmLThmZTQtNGU3MmQ5YmUyMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBgbOvf8xGiuCiqXFxM20Z3a8s5Qxm2bsJzw cEyTv093in6uP6av1TsEWknyl21nkDeSMgAI+Uhho3BLI2C2vhH46XF3P4fh5Bt4 qdBXXoGM75M36x3GqVwd90Ppx9Bw+sYW6gXDVoNdEYkU8EzUSrDRUu0CwRb9zUj2 c9pjJUB60bxxcSoH+9Q4RP8riwi5434Jh1ZTe89BLCBBB/Iv5K+yjf4NdJNTk+bU BklYOvDAxwKFDZTfabDY7tcZwGzgFubyI0sh3t/n6FWYnFU7kLXAR6lM5PdmRHgK 3GZaYZ7J8mzria9V/Gb0qJaHOogwIuP8X88SqnQzcsQlROahpwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDnrS4i03c2p1Rfm/NO9wZmNLf3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvODZmNWNkOGEtZjkwMy00 MTc2LTk3YTctNjY3MWU0OWIxYzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBCTwqcegGlXhyrWe/mC3nC klneaaLVZICxEEjTvQdhHXLNHofentYJNY80tC2HNulfdY6M8OZyMv4bMJrc+jci IiMPkFA3658MilTYV2a5YOGwUQMv7Pjj7b1aBMS/07kJ7orDWW2/iawFppVc6ZSd myq189eIunQqX0Y9RhFuqbm+ya3Hc1vPuNGfebnCEVcoQROXmcfXQLntp4UO0vhX ZrCXNzTcsutcQ/1T0rIeeOHAmtR+InWcnxEs+E9zcntVKZGEv31bpkrTuIaxKIAu H1GzcuZ6PdsF1D2/vHlwFt/nlFMqYe7MK0kJIj0Wlcd4UWtU5NLWGEHffS940JdT -----END CERTIFICATE-----Generated at Thu Dec 18 20:33:38 2025 by rpki-client