This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft File: 5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft (raw, json) Hash identifier: SlKVjotkNfHkUqa+RoKwdrGHb2OXlP5vyyhmMJ5B9z8= Subject key identifier: C9:64:04:A4:E2:23:32:78:D6:38:71:3F:82:66:3C:E0:28:49:13:A7 Authority key identifier: 93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0 Certificate issuer: /CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04 Certificate serial: 010D0C9F4328584CA1E48363E716A308F79565C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft Manifest number: 010D0C9F4328584A97E27F4BEEA764DA25668900 Signing time: Sat 24 Jan 2026 15:00:08 +0000 Manifest this update: Sat 24 Jan 2026 15:00:08 +0000 Manifest next update: Mon 26 Jan 2026 15:00:00 +0000 Files and hashes: 1: 1bc62835-53d3-3758-ab64-28f4099871ce.roa (hash: Y30R+QU2GHVKdVFmVGJy1Qccnd+IBG8NEbQXvEmtArM=) 2: 5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl (hash: jwKrrKkSlbF5mWPr9HW16wBVlXrDOarfMujJ7vc8RXw=) 3: e6bc8b59-9ec0-3bce-9613-5085d606d708.roa (hash: XFpTw3X19KXlt3FawX2jooO4xgQdXUTaQJHeKv/Sjqs=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a1:e4:83:63:e7:16:a3:08:f7:95:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5570a1c9-b9da-44c0-96d8-c5b478b52a04 Validity Not Before: Jan 24 15:00:08 2026 GMT Not After : Jan 26 15:00:00 2026 GMT Subject: CN=8d092ee5-6c45-48d6-9f4e-62bbb398f763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0c:be:4d:7d:56:95:9b:17:fe:89:a1:89:6d: b6:8c:43:71:9a:0a:49:e8:b2:f9:06:1f:1f:98:c3: 65:a7:92:1c:63:cb:90:c6:97:4d:28:6d:e1:cc:5e: 31:27:a3:6f:97:50:3d:b0:40:a9:7c:6b:cd:61:8d: 38:49:34:08:01:8e:37:a7:0e:51:48:49:fe:08:db: ff:b6:d2:3f:21:1b:e0:ad:0a:78:b5:7f:4c:96:21: 05:d4:f6:9e:6c:a1:95:6f:a2:c9:32:d3:95:05:78: ec:c6:2a:28:2b:bd:57:b5:97:6b:5b:ca:41:77:58: b3:47:f7:ba:65:81:61:ff:ac:45:a9:84:bf:3e:eb: c8:f8:a2:8f:76:70:98:f1:d3:4f:a2:64:11:4d:f7: 5b:11:7d:31:e5:6c:69:ef:ef:2c:e5:5c:74:20:f5: 2b:8c:c7:c7:49:c5:9d:88:83:fe:b4:b0:62:30:a7: 6a:1d:df:64:9f:47:31:b4:de:20:01:5e:98:87:77: 50:f3:99:99:50:df:75:43:5a:7a:c9:c2:b9:21:9a: 1e:fc:ac:46:ef:61:ff:eb:1b:aa:88:75:63:55:44: 0a:80:30:d6:bb:1f:10:c0:30:04:5f:f0:61:e2:e3: f0:59:27:2b:6e:94:e4:1d:d7:33:2f:4a:14:45:55: fe:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:64:04:A4:E2:23:32:78:D6:38:71:3F:82:66:3C:E0:28:49:13:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04/5570a1c9-b9da-44c0-96d8-c5b478b52a04.crl X509v3 Authority Key Identifier: keyid:93:24:CC:12:9A:E9:0C:98:B7:F1:D4:F9:17:FA:6C:C6:19:2E:18:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5570a1c9-b9da-44c0-96d8-c5b478b52a04.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:49:9f:3e:9a:f0:72:53:6c:27:48:d4:90:12:7c:00:f9:1a: 0e:10:4a:62:59:23:66:93:cc:9e:6d:87:17:a4:6e:63:4a:b4: a0:99:c7:5a:2c:64:5f:46:dd:00:6c:56:22:3e:ca:dd:7b:ab: 2f:d1:62:24:06:a6:1b:c8:10:03:4f:2a:f7:ea:28:94:78:8b: 67:54:b4:b0:45:af:cb:ed:c1:97:ec:ae:8c:00:8d:a1:cf:12: af:1e:12:73:13:98:5f:98:dd:75:48:16:92:ca:82:8a:5d:92: a7:76:6e:d7:8f:f1:48:01:2c:8b:7b:af:86:58:72:08:26:9e: 29:e5:65:51:b1:48:9a:a7:55:3a:f2:a7:5a:9e:67:6d:ec:7d: 72:b4:29:0a:d4:75:23:4a:95:8c:31:7f:8a:28:98:34:05:12: 67:ee:de:f0:d6:9b:bb:75:1b:9e:bb:ea:a4:fe:39:1d:30:41: b7:61:05:2e:e8:69:c5:09:d6:a8:5e:7d:3e:2e:a9:d3:01:b9: 2c:dc:fc:4c:f0:79:01:7e:9d:b3:2f:06:02:f0:e7:f8:21:5a: 76:9d:dd:00:3e:33:aa:d4:d4:61:4d:5f:a2:82:3f:13:54:df: 11:04:4a:96:ad:34:f8:46:2b:45:44:94:04:82:b3:07:85:13: 0f:6c:4d:1f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyh5INj5xajCPeVZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU3MGExYzktYjlkYS00NGMwLTk2ZDgtYzViNDc4YjUy YTA0MB4XDTI2MDEyNDE1MDAwOFoXDTI2MDEyNjE1MDAwMFowLzEtMCsGA1UEAxMk OGQwOTJlZTUtNmM0NS00OGQ2LTlmNGUtNjJiYmIzOThmNzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgy+TX1WlZsX/omhiW22jENxmgpJ6LL5Bh8f mMNlp5IcY8uQxpdNKG3hzF4xJ6Nvl1A9sECpfGvNYY04STQIAY43pw5RSEn+CNv/ ttI/IRvgrQp4tX9MliEF1PaebKGVb6LJMtOVBXjsxiooK71XtZdrW8pBd1izR/e6 ZYFh/6xFqYS/PuvI+KKPdnCY8dNPomQRTfdbEX0x5Wxp7+8s5Vx0IPUrjMfHScWd iIP+tLBiMKdqHd9kn0cxtN4gAV6Yh3dQ85mZUN91Q1p6ycK5IZoe/KxG72H/6xuq iHVjVUQKgDDWux8QwDAEX/Bh4uPwWScrbpTkHdczL0oURVX+owIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMlkBKTiIzJ41jhxP4JmPOAoSROnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81NTcw YTFjOS1iOWRhLTQ0YzAtOTZkOC1jNWI0NzhiNTJhMDQvNTU3MGExYzktYjlkYS00 NGMwLTk2ZDgtYzViNDc4YjUyYTA0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTU3MGExYzktYjlkYS00NGMwLTk2 ZDgtYzViNDc4YjUyYTA0LzU1NzBhMWM5LWI5ZGEtNDRjMC05NmQ4LWM1YjQ3OGI1 MmEwNC5jcmwwHwYDVR0jBBgwFoAUkyTMEprpDJi38dT5F/psxhkuGOAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81NTcwYTFjOS1iOWRhLTQ0YzAtOTZkOC1jNWI0 NzhiNTJhMDQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3SZ8+mvByU2wnSNSQEnwA +RoOEEpiWSNmk8yebYcXpG5jSrSgmcdaLGRfRt0AbFYiPsrde6sv0WIkBqYbyBAD Tyr36iiUeItnVLSwRa/L7cGX7K6MAI2hzxKvHhJzE5hfmN11SBaSyoKKXZKndm7X j/FIASyLe6+GWHIIJp4p5WVRsUiap1U68qdanmdt7H1ytCkK1HUjSpWMMX+KKJg0 BRJn7t7w1pu7dRueu+qk/jkdMEG3YQUu6GnFCdaoXn0+LqnTAbks3PxM8HkBfp2z LwYC8Of4IVp2nd0APjOq1NRhTV+igj8TVN8RBEqWrTT4RitFRJQEgrMHhRMPbE0f -----END CERTIFICATE-----Generated at Sun Jan 25 08:59:26 2026 by rpki-client