This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft File: 1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft (raw, json) Hash identifier: l5vRGS+X0U9/oAFocAR0XUAGOo2z0pWJL20llLyGp9s= Subject key identifier: 0E:00:61:7E:F9:44:C1:34:D1:2E:43:73:4D:53:4D:CF:CE:1D:81:86 Authority key identifier: 65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1 Certificate issuer: /CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2 Certificate serial: 010D0C9F4328584C3845988189B8172C95688380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft Manifest number: 010D0C9F4328584073A824BE45AB4E8E05DC5991 Signing time: Wed 17 Dec 2025 19:00:03 +0000 Manifest this update: Wed 17 Dec 2025 19:00:03 +0000 Manifest next update: Fri 19 Dec 2025 19:00:00 +0000 Files and hashes: 1: 1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl (hash: GLIz41851dQxQsxXTNCrbAMq/t4LfuxETrou5nEu90w=) 2: 4b50e3cb-bf61-3242-bd51-7c419281bb0e.roa (hash: TdCCDDXAEJMXA+DxIBgi7O7CTp3uoTThni5Pd29eV7I=) 3: f0ae1a02-4b48-37f2-8fba-9e1fff45177a.roa (hash: scDkri7vaDMZQah//8XZssRTvUwKNReJVQRdidpE+0o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:38:45:98:81:89:b8:17:2c:95:68:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e38a0af-c492-44f5-88b1-b4dfdb1180f2 Validity Not Before: Dec 17 19:00:03 2025 GMT Not After : Dec 19 19:00:00 2025 GMT Subject: CN=597e880d-86ad-451d-a3f5-7c4efb0fd58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:59:6c:6e:d7:f8:e6:24:72:7c:d0:ad:d7:20: 9b:f1:17:e1:1e:5d:03:67:82:06:8a:e5:85:a7:1e: ad:a1:f8:2c:84:84:cf:df:74:94:19:c9:56:8d:a9: 55:d4:59:7a:2d:b6:04:5b:e0:8d:96:dd:b5:f2:eb: f9:bb:0f:0d:41:a3:c9:99:22:4d:f1:77:fd:5b:39: 7f:78:d2:e5:59:47:30:1f:c4:05:91:4f:db:5e:67: da:77:e3:87:59:83:37:c2:1b:91:08:11:6d:9b:6a: 70:34:b5:cf:04:d2:3d:ce:0c:5d:c9:b0:9e:f4:c4: dc:58:99:7c:dd:67:a6:29:c1:aa:3c:0f:a0:c5:71: 76:38:64:ba:6c:f1:9d:42:ca:2e:12:95:a1:10:7a: 18:3f:13:be:cb:ee:23:10:9b:07:8c:fc:00:cd:e7: ff:8c:1d:bb:d5:85:ce:9e:14:c1:29:19:64:b0:ea: 4c:4f:54:69:19:1b:d3:50:6d:9b:9d:b1:f8:8e:33: 49:9c:1c:00:7c:24:9b:be:80:cb:28:a8:07:5d:00: 4a:2d:3d:0c:90:70:7b:9d:d2:89:47:e0:f9:01:a1: 0f:1f:23:5c:75:0f:e0:4b:0b:1e:b5:a1:0d:08:8c: 2b:dd:8e:38:fa:04:87:c8:f4:f1:03:69:00:d1:3e: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:00:61:7E:F9:44:C1:34:D1:2E:43:73:4D:53:4D:CF:CE:1D:81:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.crl X509v3 Authority Key Identifier: keyid:65:A9:BA:30:CA:A9:4B:F4:DD:1C:34:F5:E9:D5:C8:5A:94:81:1B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e38a0af-c492-44f5-88b1-b4dfdb1180f2.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:24:5f:14:5a:f7:6e:ad:26:4f:36:21:bc:67:27:7f:c7:15: 37:3d:5a:18:78:82:03:f8:7b:e6:41:b3:6c:e9:4b:46:65:18: 40:2c:ca:93:fd:99:9c:c8:65:db:17:39:e3:be:f9:93:aa:a8: 0d:9f:3e:2d:cf:88:f6:78:58:e1:56:21:57:f3:ee:25:ee:f6: 3d:12:50:7d:c9:b4:2c:94:28:4a:3c:b4:53:c9:56:d9:c6:5f: f6:77:e8:70:20:cc:7b:b1:8e:1b:ce:50:1b:45:80:1c:8e:54: b6:ed:2c:83:2b:7d:ee:28:9a:59:05:a6:2f:40:03:ef:16:22: 3b:28:eb:84:ea:05:9c:58:f3:ae:7d:d8:bd:22:87:1f:e4:57: cd:26:74:19:5f:8a:23:a2:b1:d3:55:2a:02:18:94:94:7d:bd: 5f:c4:d4:35:cf:c8:4b:80:5b:30:82:1c:dc:79:f4:58:77:0c: a5:a0:47:2d:21:01:54:7c:4e:ce:2c:c6:74:cc:76:c5:bf:88: f6:4f:4f:80:c8:eb:49:30:ff:1c:95:ff:55:50:39:8a:3a:b4: 62:92:aa:90:98:33:13:73:80:29:db:98:ef:ff:d3:13:20:b6: 56:b3:d2:8b:ed:99:56:72:08:ad:f2:c4:5a:2a:ce:94:2f:bf: da:7f:1d:58 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw4RZiBibgXLJVog4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUzOGEwYWYtYzQ5Mi00NGY1LTg4YjEtYjRkZmRiMTE4 MGYyMB4XDTI1MTIxNzE5MDAwM1oXDTI1MTIxOTE5MDAwMFowLzEtMCsGA1UEAxMk NTk3ZTg4MGQtODZhZC00NTFkLWEzZjUtN2M0ZWZiMGZkNThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVlsbtf45iRyfNCt1yCb8RfhHl0DZ4IGiuWF px6tofgshITP33SUGclWjalV1Fl6LbYEW+CNlt218uv5uw8NQaPJmSJN8Xf9Wzl/ eNLlWUcwH8QFkU/bXmfad+OHWYM3whuRCBFtm2pwNLXPBNI9zgxdybCe9MTcWJl8 3WemKcGqPA+gxXF2OGS6bPGdQsouEpWhEHoYPxO+y+4jEJsHjPwAzef/jB271YXO nhTBKRlksOpMT1RpGRvTUG2bnbH4jjNJnBwAfCSbvoDLKKgHXQBKLT0MkHB7ndKJ R+D5AaEPHyNcdQ/gSwsetaENCIwr3Y44+gSHyPTxA2kA0T7XLQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFA4AYX75RME00S5Dc01TTc/OHYGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTM4 YTBhZi1jNDkyLTQ0ZjUtODhiMS1iNGRmZGIxMTgwZjIvMWUzOGEwYWYtYzQ5Mi00 NGY1LTg4YjEtYjRkZmRiMTE4MGYyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUzOGEwYWYtYzQ5Mi00NGY1LTg4 YjEtYjRkZmRiMTE4MGYyLzFlMzhhMGFmLWM0OTItNDRmNS04OGIxLWI0ZGZkYjEx ODBmMi5jcmwwHwYDVR0jBBgwFoAUZam6MMqpS/TdHDT16dXIWpSBG6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTM4YTBhZi1jNDkyLTQ0ZjUtODhiMS1iNGRm ZGIxMTgwZjIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcJF8UWvdurSZPNiG8Zyd/ xxU3PVoYeIID+HvmQbNs6UtGZRhALMqT/ZmcyGXbFznjvvmTqqgNnz4tz4j2eFjh ViFX8+4l7vY9ElB9ybQslChKPLRTyVbZxl/2d+hwIMx7sY4bzlAbRYAcjlS27SyD K33uKJpZBaYvQAPvFiI7KOuE6gWcWPOufdi9Iocf5FfNJnQZX4ojorHTVSoCGJSU fb1fxNQ1z8hLgFswghzcefRYdwyloEctIQFUfE7OLMZ0zHbFv4j2T0+AyOtJMP8c lf9VUDmKOrRikqqQmDMTc4Ap25jv/9MTILZWs9KL7ZlWcgit8sRaKs6UL7/afx1Y -----END CERTIFICATE-----Generated at Thu Dec 18 11:33:24 2025 by rpki-client