This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft File: 43ff624d-a377-4e6b-aaf2-c18a45007d56.mft (raw, json) Hash identifier: EZ6ykboklR2Pa/aBDNMOzZ4TIRVeBNyYpj4ove3nueA= Subject key identifier: A8:3E:C3:8E:9B:AE:65:E4:FC:AE:A4:36:15:8A:81:63:6A:C7:36:BE Authority key identifier: CB:DF:E7:4E:CA:E6:E3:DF:CE:E3:33:AC:51:E0:05:A2:A7:41:85:EA Certificate issuer: /CN=43ff624d-a377-4e6b-aaf2-c18a45007d56 Certificate serial: 010D0C9F4328584C32B0383CE56849787E710E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft Manifest number: 010D0C9F4328584073A8246CF81CC82C18638435 Signing time: Mon 15 Dec 2025 19:00:03 +0000 Manifest this update: Mon 15 Dec 2025 19:00:03 +0000 Manifest next update: Wed 17 Dec 2025 19:00:00 +0000 Files and hashes: 1: 43ff624d-a377-4e6b-aaf2-c18a45007d56.crl (hash: tmvYd9vqUv8sn1eLJrafPPSFP/RA2/MLt3lN1I82+SY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:b0:38:3c:e5:68:49:78:7e:71:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43ff624d-a377-4e6b-aaf2-c18a45007d56 Validity Not Before: Dec 15 19:00:03 2025 GMT Not After : Dec 17 19:00:00 2025 GMT Subject: CN=bf029655-70e8-437a-b2a1-e2df76d6af28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:fa:ab:b4:17:4b:6d:84:7c:cb:0d:1c:82: 68:14:7d:32:05:18:38:2f:65:85:4f:2f:d8:9a:3c: f7:0c:39:0b:22:b4:e8:49:86:c0:e7:c4:ba:7b:fa: f0:28:65:cc:4a:23:f8:22:20:dd:7e:84:cd:7a:59: 82:09:f2:73:5d:a5:be:75:28:48:ca:b7:1e:9c:c5: a0:d8:5b:1b:5f:61:55:4a:97:2c:cb:ab:3a:9d:da: c4:cc:d8:10:5a:38:8e:d6:25:df:d0:97:da:29:74: 93:d8:52:d3:95:92:4a:ac:dc:9c:e8:0c:fa:45:22: 50:3f:c0:8d:26:7b:77:ea:d1:23:3e:6a:52:a7:22: c0:75:94:53:b7:ee:82:5f:6c:a6:a9:01:c3:f2:98: be:93:6d:49:b6:38:a7:55:54:3b:50:50:02:e9:e6: f8:5e:b3:e6:db:0e:b9:40:d8:6d:f5:03:8c:39:a1: 45:44:0d:19:53:4c:38:64:c6:80:d4:8b:df:5c:4b: 41:dc:c6:80:15:57:c5:ae:b6:df:b1:44:68:39:a7: 19:34:50:2e:e7:e5:41:37:ac:1b:f2:32:97:48:24: d9:0e:9f:22:10:74:d4:b6:60:48:cb:54:04:6c:cb: db:9c:63:53:81:5e:27:04:41:73:ac:98:b4:62:bf: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3E:C3:8E:9B:AE:65:E4:FC:AE:A4:36:15:8A:81:63:6A:C7:36:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56/43ff624d-a377-4e6b-aaf2-c18a45007d56.crl X509v3 Authority Key Identifier: keyid:CB:DF:E7:4E:CA:E6:E3:DF:CE:E3:33:AC:51:E0:05:A2:A7:41:85:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ff624d-a377-4e6b-aaf2-c18a45007d56.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:1f:5e:35:2a:45:77:32:f5:c2:7b:94:43:79:e4:e2:37:0f: fd:21:eb:74:32:33:fb:88:e6:f7:6f:50:b2:9a:03:ad:5a:c0: ec:2f:a2:04:3c:bd:0d:1e:21:3a:b8:86:5e:6a:f0:68:1a:14: a9:12:bb:fe:50:f7:b7:43:28:b2:13:e7:17:dc:b1:f4:64:64: 31:45:66:58:04:77:f8:f2:3f:e4:30:2e:e1:c6:ba:fb:1d:93: 21:8a:6b:7b:f2:33:f6:f2:93:16:aa:2e:3e:ab:51:ae:22:c2: d8:0a:5d:38:42:0f:a7:6a:45:94:91:5b:ac:ef:6d:f3:0c:3c: ab:23:45:8b:bd:10:34:c0:a3:e6:de:8b:09:cb:0b:a0:09:ac: fa:ba:e3:0a:f4:12:ed:c2:f8:24:ec:35:52:9f:29:28:8f:92: 7c:40:b1:f4:d8:95:d9:81:3a:f4:76:6c:91:05:f6:21:d4:4f: 16:39:e9:af:b8:a6:3b:ef:6f:0d:34:fb:5a:77:1e:03:76:a6: 4c:89:dd:cc:ea:14:ca:97:82:df:65:f2:d2:7c:2f:0b:7d:25: a8:de:94:94:67:3d:e7:f4:7e:9d:10:68:12:ac:4c:89:00:e8: 6a:cd:b6:21:44:06:c4:76:6e:c4:21:4d:8e:ad:06:01:f0:3c: 0e:ed:9e:70 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwysDg85WhJeH5xDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNmZjYyNGQtYTM3Ny00ZTZiLWFhZjItYzE4YTQ1MDA3 ZDU2MB4XDTI1MTIxNTE5MDAwM1oXDTI1MTIxNzE5MDAwMFowLzEtMCsGA1UEAxMk YmYwMjk2NTUtNzBlOC00MzdhLWIyYTEtZTJkZjc2ZDZhZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxP6q7QXS22EfMsNHIJoFH0yBRg4L2WFTy/Y mjz3DDkLIrToSYbA58S6e/rwKGXMSiP4IiDdfoTNelmCCfJzXaW+dShIyrcenMWg 2FsbX2FVSpcsy6s6ndrEzNgQWjiO1iXf0JfaKXST2FLTlZJKrNyc6Az6RSJQP8CN Jnt36tEjPmpSpyLAdZRTt+6CX2ymqQHD8pi+k21JtjinVVQ7UFAC6eb4XrPm2w65 QNht9QOMOaFFRA0ZU0w4ZMaA1IvfXEtB3MaAFVfFrrbfsURoOacZNFAu5+VBN6wb 8jKXSCTZDp8iEHTUtmBIy1QEbMvbnGNTgV4nBEFzrJi0Yr+N7wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKg+w46brmXk/K6kNhWKgWNqxza+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80M2Zm NjI0ZC1hMzc3LTRlNmItYWFmMi1jMThhNDUwMDdkNTYvNDNmZjYyNGQtYTM3Ny00 ZTZiLWFhZjItYzE4YTQ1MDA3ZDU2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDNmZjYyNGQtYTM3Ny00ZTZiLWFh ZjItYzE4YTQ1MDA3ZDU2LzQzZmY2MjRkLWEzNzctNGU2Yi1hYWYyLWMxOGE0NTAw N2Q1Ni5jcmwwHwYDVR0jBBgwFoAUy9/nTsrm49/O4zOsUeAFoqdBheowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80M2ZmNjI0ZC1hMzc3LTRlNmItYWFmMi1jMThh NDUwMDdkNTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCgH141KkV3MvXCe5RDeeTi Nw/9Iet0MjP7iOb3b1CymgOtWsDsL6IEPL0NHiE6uIZeavBoGhSpErv+UPe3Qyiy E+cX3LH0ZGQxRWZYBHf48j/kMC7hxrr7HZMhimt78jP28pMWqi4+q1GuIsLYCl04 Qg+nakWUkVus723zDDyrI0WLvRA0wKPm3osJywugCaz6uuMK9BLtwvgk7DVSnyko j5J8QLH02JXZgTr0dmyRBfYh1E8WOemvuKY7728NNPtadx4DdqZMid3M6hTKl4Lf ZfLSfC8LfSWo3pSUZz3n9H6dEGgSrEyJAOhqzbYhRAbEdm7EIU2OrQYB8DwO7Z5w -----END CERTIFICATE-----Generated at Tue Dec 16 17:54:50 2025 by rpki-client