This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft File: d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft (raw, json) Hash identifier: NqDa9iU6LLQx8b9c9nxS9GMCD634pp+0fGUK/0ZfDlo= Subject key identifier: EC:0A:BC:8D:6E:07:77:8B:B3:2F:11:10:D2:E5:F9:8F:B3:10:57:F9 Authority key identifier: 47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F Certificate issuer: /CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Certificate serial: 010D0C9F4328584C794BC47BB3773E6766EC65E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft Manifest number: 010D0C9F4328584073A836239D3A75822B1705E9 Signing time: Sat 10 Jan 2026 02:00:03 +0000 Manifest this update: Sat 10 Jan 2026 02:00:03 +0000 Manifest next update: Tue 13 Jan 2026 02:00:00 +0000 Files and hashes: 1: 454c9603-4dfb-34e7-9bc2-02242c547e78.roa (hash: CH2nkMXNpGOEdgNktVxA2gKTPaekUJjMddaLTnxl3hY=) 2: 7c69f6d0-f92d-3ea9-91d2-5d8a53da8b6b.roa (hash: 3HVCaoUAgEypQT42N2PJkh5mCE/yY2Aj+8mG5qGxHZk=) 3: d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl (hash: SG+aovNlRVt66Yq8ZWtFrVNBo9EnBbu9rt9emFh3qsM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4b:c4:7b:b3:77:3e:67:66:ec:65:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d671e95c-e484-4b53-91ff-e14d33eaa2a6 Validity Not Before: Jan 10 02:00:03 2026 GMT Not After : Jan 13 02:00:00 2026 GMT Subject: CN=57ad1561-325e-44f1-b436-bd0806090fe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:63:18:e5:34:97:cf:59:cc:c4:7b:9f:7d: 2a:20:4e:14:81:a9:e6:0e:a0:91:81:22:6a:7d:da: 3f:4c:ac:a7:b2:13:dc:fa:08:d8:c3:3f:60:73:46: 25:93:7f:67:96:14:22:8f:7b:65:20:85:18:3c:60: 2f:3c:2c:2b:d1:d1:6d:b2:0f:4f:ef:70:37:b7:d7: 1f:20:03:92:96:2a:f2:65:7c:e8:ff:42:9e:7f:53: bb:23:63:f9:1e:3c:1d:1d:e7:41:84:92:17:0a:c4: f9:9d:61:05:10:0a:26:d1:f1:c7:9a:c4:6c:c4:6d: 6e:bf:4c:36:31:2f:d5:7e:c3:ac:77:3e:0e:5f:b3: dc:69:05:0d:71:69:8f:71:36:d6:68:84:27:26:36: 1d:bc:68:31:a6:ef:54:3e:7a:fe:95:ae:d1:a4:ab: 7b:b8:a0:86:eb:b9:98:8a:08:65:b8:da:ad:ca:0f: 23:01:c3:27:c8:e3:0c:9a:ad:c6:5c:fa:8c:7b:b4: 9e:01:c0:6f:91:00:0f:5d:85:ed:53:61:ca:d2:47: 0a:39:53:d9:2d:1a:f1:12:6e:db:c7:0d:e1:f6:b3: f9:24:54:cc:d4:47:0d:e0:68:47:8c:12:cd:53:b9: ce:46:be:82:74:42:11:33:c1:4a:48:1b:63:42:cc: 5c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0A:BC:8D:6E:07:77:8B:B3:2F:11:10:D2:E5:F9:8F:B3:10:57:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6/d671e95c-e484-4b53-91ff-e14d33eaa2a6.crl X509v3 Authority Key Identifier: keyid:47:DB:1B:A5:CB:4F:8E:44:5C:C2:6C:2C:59:D7:62:B7:EC:A9:31:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d671e95c-e484-4b53-91ff-e14d33eaa2a6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2c:33:1a:8a:b3:4c:cf:30:dc:a9:ca:a5:a5:65:03:7d:af: 0d:cc:7e:4c:37:89:ad:44:be:0c:d5:f7:37:55:4f:f2:4b:a3: 97:d0:dc:fe:9b:da:89:47:51:46:7f:4e:23:b8:1a:35:1a:f6: ed:fa:a4:68:e0:66:2e:f4:bc:29:d9:a7:50:6f:26:19:6d:82: fe:8e:c9:d3:97:48:3b:e2:58:1a:01:1e:ab:e4:3b:13:6f:8b: 47:62:30:08:82:60:c0:90:3a:54:ab:c0:e1:1f:47:cc:33:8a: 3a:ab:60:87:48:b5:33:e9:2a:ee:af:73:56:7e:f1:ac:c0:a5: dc:82:f1:53:28:45:75:97:bd:b3:a8:dd:8d:9f:1c:25:b8:a2: 76:0c:62:22:24:3e:60:0e:d8:95:63:bd:b8:c3:03:96:4a:db: eb:39:34:e3:35:f6:65:9e:d7:a2:38:72:d4:89:b0:81:d0:18: d2:92:fa:85:2d:35:01:53:9a:09:a8:32:4a:77:27:38:44:c4: 2f:07:58:8d:d4:5e:ed:33:20:d4:be:70:a7:e7:29:82:41:fe: b6:c2:60:4d:9d:17:39:05:9a:00:75:ef:7b:e8:0f:1b:d1:a1: d0:c0:92:ef:d5:0c:19:e3:db:00:95:6f:cb:93:b5:34:ed:56: 56:13:26:13 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx5S8R7s3c+Z2bsZegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY3MWU5NWMtZTQ4NC00YjUzLTkxZmYtZTE0ZDMzZWFh MmE2MB4XDTI2MDExMDAyMDAwM1oXDTI2MDExMzAyMDAwMFowLzEtMCsGA1UEAxMk NTdhZDE1NjEtMzI1ZS00NGYxLWI0MzYtYmQwODA2MDkwZmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHFjGOU0l89ZzMR7n30qIE4UganmDqCRgSJq fdo/TKynshPc+gjYwz9gc0Ylk39nlhQij3tlIIUYPGAvPCwr0dFtsg9P73A3t9cf IAOSliryZXzo/0Kef1O7I2P5HjwdHedBhJIXCsT5nWEFEAom0fHHmsRsxG1uv0w2 MS/VfsOsdz4OX7PcaQUNcWmPcTbWaIQnJjYdvGgxpu9UPnr+la7RpKt7uKCG67mY ighluNqtyg8jAcMnyOMMmq3GXPqMe7SeAcBvkQAPXYXtU2HK0kcKOVPZLRrxEm7b xw3h9rP5JFTM1EcN4GhHjBLNU7nORr6CdEIRM8FKSBtjQsxc+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOwKvI1uB3eLsy8RENLl+Y+zEFf5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcx ZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRkMzNlYWEyYTYvZDY3MWU5NWMtZTQ4NC00 YjUzLTkxZmYtZTE0ZDMzZWFhMmE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDY3MWU5NWMtZTQ4NC00YjUzLTkx ZmYtZTE0ZDMzZWFhMmE2L2Q2NzFlOTVjLWU0ODQtNGI1My05MWZmLWUxNGQzM2Vh YTJhNi5jcmwwHwYDVR0jBBgwFoAUR9sbpctPjkRcwmwsWddit+ypMW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNjcxZTk1Yy1lNDg0LTRiNTMtOTFmZi1lMTRk MzNlYWEyYTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAyLDMairNMzzDcqcqlpWUD fa8NzH5MN4mtRL4M1fc3VU/yS6OX0Nz+m9qJR1FGf04juBo1Gvbt+qRo4GYu9Lwp 2adQbyYZbYL+jsnTl0g74lgaAR6r5DsTb4tHYjAIgmDAkDpUq8DhH0fMM4o6q2CH SLUz6Srur3NWfvGswKXcgvFTKEV1l72zqN2NnxwluKJ2DGIiJD5gDtiVY724wwOW StvrOTTjNfZlnteiOHLUibCB0BjSkvqFLTUBU5oJqDJKdyc4RMQvB1iN1F7tMyDU vnCn5ymCQf62wmBNnRc5BZoAde976A8b0aHQwJLv1QwZ49sAlW/Lk7U07VZWEyYT -----END CERTIFICATE-----Generated at Sat Jan 10 13:37:00 2026 by rpki-client