This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft File: 2149afff-d907-4d42-a1e9-e162fad34f0d.mft (raw, json) Hash identifier: SX8RkuCzie43ShTPMf8ES0rf6Abn+pxr9CxEg9j6PHc= Subject key identifier: D6:21:A9:02:29:BA:6D:55:F8:C9:6C:4E:33:31:04:C0:28:D6:BA:1E Authority key identifier: 2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 Certificate issuer: /CN=2149afff-d907-4d42-a1e9-e162fad34f0d Certificate serial: 010D0C9F4328584C56A1C5A8C35DA9C212E8B440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft Manifest number: 010D0C9F432858449B57AC092D104FF3C5F04405 Signing time: Sun 28 Dec 2025 16:00:04 +0000 Manifest this update: Sun 28 Dec 2025 16:00:04 +0000 Manifest next update: Tue 30 Dec 2025 16:00:00 +0000 Files and hashes: 1: 2149afff-d907-4d42-a1e9-e162fad34f0d.crl (hash: JfgTuZMZuhQR+AYgYvupYp4HznbzfYFYzxU00PpDPtw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:56:a1:c5:a8:c3:5d:a9:c2:12:e8:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2149afff-d907-4d42-a1e9-e162fad34f0d Validity Not Before: Dec 28 16:00:04 2025 GMT Not After : Dec 30 16:00:00 2025 GMT Subject: CN=8a444d24-f03a-4ea1-a15a-6b178a8aa8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:33:31:28:6e:2a:ad:fc:c2:f0:7c:d1:d8:10: cc:34:2b:79:97:9a:7a:ed:e8:99:35:a3:d1:9c:ed: 62:3f:ef:54:b9:73:5f:b5:ae:1c:8a:be:e7:d4:10: c0:fb:fe:c6:de:bc:f6:54:01:bc:b6:da:a6:83:56: 68:9a:51:7d:9b:4e:84:a5:fb:d2:83:23:47:92:e1: 2a:e7:73:66:83:e3:f9:06:5e:cb:f9:23:14:aa:e7: 92:11:ad:ae:cd:fa:19:06:73:0b:43:58:39:5c:aa: 31:3a:e6:a1:e5:d0:31:ee:84:cc:d8:f2:9d:11:71: 97:64:ca:ac:25:d4:7a:f6:9c:c2:4b:7c:55:fa:ed: be:83:8e:04:51:86:a9:46:34:9e:2b:09:08:01:0b: 1b:b3:ab:c1:63:31:ba:44:63:11:08:d1:00:58:91: 7b:d4:bd:16:04:8a:8d:e2:47:c4:ac:98:c1:93:69: 18:25:5c:c3:5c:97:7a:44:eb:6c:eb:e7:16:24:7d: 43:25:17:bc:2f:83:63:97:63:7c:b1:02:de:6d:84: 28:6d:06:92:bb:f1:dc:20:7f:d5:98:27:22:e7:c7: 2d:7e:d9:ff:37:f3:16:7a:c4:9c:37:b9:e6:d6:39: d0:b6:95:65:a5:2b:8e:64:14:43:d0:22:89:2b:ae: 14:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:21:A9:02:29:BA:6D:55:F8:C9:6C:4E:33:31:04:C0:28:D6:BA:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d/2149afff-d907-4d42-a1e9-e162fad34f0d.crl X509v3 Authority Key Identifier: keyid:2F:51:9D:35:2E:74:34:BE:31:27:9C:22:B1:C5:33:D7:B8:1F:6E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2149afff-d907-4d42-a1e9-e162fad34f0d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:03:d0:0f:e9:6b:00:02:d2:c0:1e:72:be:78:02:65:dd:a3: 87:e1:54:f1:b0:56:c0:aa:8e:82:ad:e8:71:95:ca:cb:e3:c2: 6b:3e:72:a7:4b:3a:e3:83:8f:d2:54:42:50:45:55:68:be:20: ef:a0:1c:8d:b5:04:1a:30:ed:d5:3a:69:ed:cb:51:55:75:64: 75:b6:28:fd:c4:80:84:b3:23:d7:cf:41:5d:c3:0f:de:05:99: 59:62:d9:43:81:fa:ac:c7:67:a8:0c:54:49:c6:7f:8a:33:ea: b2:fc:a5:33:3b:39:33:36:81:d9:db:98:83:1f:0a:1a:03:8b: 7e:1c:1a:6a:5c:93:a9:ae:a9:2e:5f:6c:91:f6:15:f2:e6:c3: c1:1f:54:cc:e3:85:99:ca:98:09:e6:3c:00:8d:94:3b:d2:26: d2:fb:3f:61:7e:5b:c3:a9:14:80:3c:01:af:03:57:9e:87:34: 8a:40:b4:a6:6d:db:78:8b:47:e7:d9:34:60:e3:85:3d:56:4d: fb:2e:8c:cb:ef:0c:27:be:4a:db:81:44:0a:96:11:86:74:a0: 8c:01:e4:71:70:c6:f3:57:de:2c:32:75:6d:43:3c:2b:d2:49: 71:35:d2:92:63:1f:2e:62:ce:e4:90:bb:1c:fd:b9:bb:20:cc: 9b:0b:7d:fd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExWocWow12pwhLotEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0OWFmZmYtZDkwNy00ZDQyLWExZTktZTE2MmZhZDM0 ZjBkMB4XDTI1MTIyODE2MDAwNFoXDTI1MTIzMDE2MDAwMFowLzEtMCsGA1UEAxMk OGE0NDRkMjQtZjAzYS00ZWExLWExNWEtNmIxNzhhOGFhOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjMxKG4qrfzC8HzR2BDMNCt5l5p67eiZNaPR nO1iP+9UuXNfta4cir7n1BDA+/7G3rz2VAG8ttqmg1ZomlF9m06EpfvSgyNHkuEq 53Nmg+P5Bl7L+SMUqueSEa2uzfoZBnMLQ1g5XKoxOuah5dAx7oTM2PKdEXGXZMqs JdR69pzCS3xV+u2+g44EUYapRjSeKwkIAQsbs6vBYzG6RGMRCNEAWJF71L0WBIqN 4kfErJjBk2kYJVzDXJd6ROts6+cWJH1DJRe8L4Njl2N8sQLebYQobQaSu/HcIH/V mCci58ctftn/N/MWesScN7nm1jnQtpVlpSuOZBRD0CKJK64UhwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNYhqQIpum1V+MlsTjMxBMAo1roeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5 YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYyZmFkMzRmMGQvMjE0OWFmZmYtZDkwNy00 ZDQyLWExZTktZTE2MmZhZDM0ZjBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjE0OWFmZmYtZDkwNy00ZDQyLWEx ZTktZTE2MmZhZDM0ZjBkLzIxNDlhZmZmLWQ5MDctNGQ0Mi1hMWU5LWUxNjJmYWQz NGYwZC5jcmwwHwYDVR0jBBgwFoAUL1GdNS50NL4xJ5wiscUz17gfbkcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yMTQ5YWZmZi1kOTA3LTRkNDItYTFlOS1lMTYy ZmFkMzRmMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2A9AP6WsAAtLAHnK+eAJl 3aOH4VTxsFbAqo6CrehxlcrL48JrPnKnSzrjg4/SVEJQRVVoviDvoByNtQQaMO3V Omnty1FVdWR1tij9xICEsyPXz0Fdww/eBZlZYtlDgfqsx2eoDFRJxn+KM+qy/KUz OzkzNoHZ25iDHwoaA4t+HBpqXJOprqkuX2yR9hXy5sPBH1TM44WZypgJ5jwAjZQ7 0ibS+z9hflvDqRSAPAGvA1eehzSKQLSmbdt4i0fn2TRg44U9Vk37LozL7wwnvkrb gUQKlhGGdKCMAeRxcMbzV94sMnVtQzwr0klxNdKSYx8uYs7kkLsc/bm7IMybC339 -----END CERTIFICATE-----Generated at Mon Dec 29 00:09:28 2025 by rpki-client