This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft File: caf19008-048f-4580-9101-f0d1eb7fc3ae.mft (raw, json) Hash identifier: 77FHNFbnZgucDI7iFIw1a1gy9DwqrFZpQbaRt0vFHPk= Subject key identifier: 62:0D:94:1F:B8:64:A9:D4:A9:60:F7:AD:93:DF:06:5B:E2:6D:05:1A Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 Certificate issuer: /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Certificate serial: 010D0C9F4328584C79E0A788CC32B8B7A27AD8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft Manifest number: 010D0C9F4328584073A84561B07C62D8C8FAA1E9 Signing time: Sat 10 Jan 2026 07:00:04 +0000 Manifest this update: Sat 10 Jan 2026 07:00:04 +0000 Manifest next update: Tue 13 Jan 2026 07:00:00 +0000 Files and hashes: 1: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (hash: Y7jkXwtXASlcnXF6E5pECW0R8iDd+Wq6YpqOSBlhfbU=) 2: a45902da-9e70-3943-a932-51f817256e75.roa (hash: FaSqYcelT5SxLp7Y1xqhA12gIZ0V4TRW5mBnhAl/400=) 3: caf19008-048f-4580-9101-f0d1eb7fc3ae.crl (hash: Ock+3HV4HrXgMPI+hrkjvwHc4cVG96mUxeWn3bsI3CQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:e0:a7:88:cc:32:b8:b7:a2:7a:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae Validity Not Before: Jan 10 07:00:04 2026 GMT Not After : Jan 13 07:00:00 2026 GMT Subject: CN=f51dfd87-be91-46b2-a6ba-c96873362776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:c4:cc:a3:8a:eb:bc:80:92:0b:5f:ce:04: 32:53:78:1c:aa:d2:67:a4:92:37:79:7d:d7:66:64: 06:dc:20:a9:a0:9f:f2:9c:64:f7:32:aa:71:36:40: ef:42:9f:be:f6:15:51:ba:51:6b:94:fb:40:ab:09: 6c:f5:04:e1:10:a7:ec:f6:55:18:d7:66:90:ac:01: 17:a0:af:6b:e0:e8:5f:f0:9b:18:a5:bc:fa:fa:92: 37:dd:d3:f0:60:bd:64:6d:a3:52:46:67:51:9e:24: 7a:99:ef:b1:cd:be:a4:44:22:09:37:dd:c9:99:5a: 70:67:28:b9:90:33:1d:ef:e0:9c:2a:f1:17:9e:41: e4:4e:43:f7:81:95:aa:f1:33:f8:60:2e:5a:42:67: 50:3e:85:0d:01:42:a7:c1:ef:9d:53:7c:a7:fe:41: 67:b9:c9:c8:fa:d1:08:0b:d7:10:b7:c2:8e:2d:1c: 99:b1:1e:30:81:31:90:91:ac:ff:bc:04:3f:88:83: 5c:ea:cb:93:e4:a5:56:4c:f1:3d:49:da:35:9f:8f: 25:17:a8:2e:4b:f1:99:02:05:a9:73:62:07:9f:45: 7c:ab:25:34:5e:fa:ab:84:4c:1e:2a:12:75:6b:5d: 46:0f:e9:43:34:75:ac:03:27:53:33:81:46:1a:70: 5c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0D:94:1F:B8:64:A9:D4:A9:60:F7:AD:93:DF:06:5B:E2:6D:05:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl X509v3 Authority Key Identifier: keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f1:cf:00:67:0a:6c:d5:36:fd:ae:75:b2:5f:57:62:7a:bb: 6d:44:77:8f:53:de:45:d3:48:c2:c8:12:cb:1e:bc:7b:9b:45: fe:db:59:51:f5:20:04:e1:76:15:c8:4f:a0:da:f4:f2:23:0f: ae:42:7a:cb:42:32:86:9b:c2:90:09:d4:04:76:63:89:ad:cd: d1:4c:67:cc:d1:8c:62:74:d9:1c:87:1b:a6:7b:89:c2:c0:05: 59:24:1e:e1:14:bd:b4:bd:05:c1:bf:fb:1c:e3:6d:40:c9:9a: d2:2a:03:47:c0:43:37:2e:d4:3a:1c:66:3f:38:25:52:75:b5: ea:7f:c4:27:0b:75:5b:8a:61:96:b9:0d:67:76:f2:b5:c7:a1: 4f:06:4d:7b:81:11:16:23:8b:4d:76:5a:2d:78:9d:67:d8:e5: 68:82:c8:01:b9:b2:6c:83:04:8f:00:3d:19:d2:5e:99:94:3d: 62:9a:1b:de:39:2e:a2:aa:84:0f:99:4b:b0:66:43:59:b8:e6: d3:e7:a1:2e:71:7e:8e:e7:64:ab:67:03:a9:59:56:01:3c:96: 74:30:e4:33:6a:73:bd:f5:6e:cb:7f:dd:19:39:0e:e3:4a:f9: 5b:ac:60:e5:2c:b7:0c:c4:81:04:03:99:f2:e5:8c:8e:ea:80: 7e:00:fd:bb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx54KeIzDK4t6J62MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMTkwMDgtMDQ4Zi00NTgwLTkxMDEtZjBkMWViN2Zj M2FlMB4XDTI2MDExMDA3MDAwNFoXDTI2MDExMzA3MDAwMFowLzEtMCsGA1UEAxMk ZjUxZGZkODctYmU5MS00NmIyLWE2YmEtYzk2ODczMzYyNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4LEzKOK67yAkgtfzgQyU3gcqtJnpJI3eX3X ZmQG3CCpoJ/ynGT3MqpxNkDvQp++9hVRulFrlPtAqwls9QThEKfs9lUY12aQrAEX oK9r4Ohf8JsYpbz6+pI33dPwYL1kbaNSRmdRniR6me+xzb6kRCIJN93JmVpwZyi5 kDMd7+CcKvEXnkHkTkP3gZWq8TP4YC5aQmdQPoUNAUKnwe+dU3yn/kFnucnI+tEI C9cQt8KOLRyZsR4wgTGQkaz/vAQ/iINc6suT5KVWTPE9Sdo1n48lF6guS/GZAgWp c2IHn0V8qyU0XvqrhEweKhJ1a11GD+lDNHWsAydTM4FGGnBcAQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGINlB+4ZKnUqWD3rZPfBlvibQUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYx OTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQxZWI3ZmMzYWUvY2FmMTkwMDgtMDQ4Zi00 NTgwLTkxMDEtZjBkMWViN2ZjM2FlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2FmMTkwMDgtMDQ4Zi00NTgwLTkx MDEtZjBkMWViN2ZjM2FlL2NhZjE5MDA4LTA0OGYtNDU4MC05MTAxLWYwZDFlYjdm YzNhZS5jcmwwHwYDVR0jBBgwFoAUQifSb7pJl+xBURbBJOgOsF/uYTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jYWYxOTAwOC0wNDhmLTQ1ODAtOTEwMS1mMGQx ZWI3ZmMzYWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAg8c8AZwps1Tb9rnWyX1di erttRHePU95F00jCyBLLHrx7m0X+21lR9SAE4XYVyE+g2vTyIw+uQnrLQjKGm8KQ CdQEdmOJrc3RTGfM0YxidNkchxume4nCwAVZJB7hFL20vQXBv/sc421AyZrSKgNH wEM3LtQ6HGY/OCVSdbXqf8QnC3VbimGWuQ1ndvK1x6FPBk17gREWI4tNdloteJ1n 2OVogsgBubJsgwSPAD0Z0l6ZlD1imhveOS6iqoQPmUuwZkNZuObT56EucX6O52Sr ZwOpWVYBPJZ0MOQzanO99W7Lf90ZOQ7jSvlbrGDlLLcMxIEEA5ny5YyO6oB+AP27 -----END CERTIFICATE-----Generated at Sat Jan 10 14:33:02 2026 by rpki-client