This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft File: 2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft (raw, json) Hash identifier: S03W0uocziZ27f4oqqPSmOJwbfU0NKJKfw0bJ/qZ0Nc= Subject key identifier: 00:29:E9:AA:FA:A2:27:0C:09:DC:A4:88:E2:2D:CA:CA:AC:A9:BA:57 Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF Certificate issuer: /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Certificate serial: 010D0C9F4328584C37CE7BA2A872314500E31DE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft Manifest number: 010D0C9F4328584073A85A0DA80DD3D1C162DC53 Signing time: Wed 17 Dec 2025 15:00:03 +0000 Manifest this update: Wed 17 Dec 2025 15:00:03 +0000 Manifest next update: Sat 20 Dec 2025 15:00:00 +0000 Files and hashes: 1: 2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl (hash: 0BQOLu29uyxmUR2+pUX7eJfNzw6sYMwQgEf0HDm6oCw=) 2: 78358e57-94d9-3749-be72-74f054906580.roa (hash: kVF0DfGXIw1AkGaBdNLFm5mJtZpL+iUAeDfzZQrs8JU=) 3: feab4e24-c427-3262-ae07-c36619833029.roa (hash: Ishp8OYphCKlHOLc5eFWhDaKWdASWNCOY1ma7BpBYxk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:37:ce:7b:a2:a8:72:31:45:00:e3:1d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53 Validity Not Before: Dec 17 15:00:03 2025 GMT Not After : Dec 20 15:00:00 2025 GMT Subject: CN=54d0ee49-aeba-42fe-9b28-ce721b5135dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:26:ae:6a:b3:ef:0e:8c:fa:51:f6:dd:cf:10: 96:be:c6:e6:39:26:3f:91:b1:d1:2c:73:98:83:83: f6:87:ce:1a:6c:df:13:c2:5d:e4:c1:e9:08:c9:91: c2:f3:ca:46:74:bf:d3:9e:f1:ff:ec:f2:3f:0a:a2: da:1f:92:dd:d1:bd:ae:5b:ad:71:9f:97:4b:b4:58: 51:5a:73:c6:8c:84:28:d7:91:ee:d8:02:83:e8:6a: 64:92:38:73:5a:e0:88:ce:08:39:76:9f:0e:57:5e: c7:79:b6:64:e9:7b:35:f6:0e:cf:12:99:6d:3f:b4: 82:c4:9d:0f:a9:84:34:38:b5:62:1d:79:10:4a:ae: 92:5d:d9:2b:51:c9:23:ef:52:8c:a9:0b:fc:fe:35: 7d:73:c0:bc:f9:67:70:30:68:1e:35:f5:2b:3d:0b: fa:1c:5e:0e:00:60:ae:1f:1e:b0:b4:22:06:32:ec: 9d:8f:5a:94:4b:fd:de:2f:dc:0a:ba:89:aa:e2:e5: 75:53:f4:0e:c3:b5:ed:da:d0:68:a5:a5:51:31:6a: c9:08:e3:20:16:d2:71:ee:7d:ac:72:18:61:58:83: ad:13:91:5d:a2:11:66:c3:9e:d9:ef:f2:d6:62:b6: ba:d4:b6:4c:53:57:33:7f:32:11:8b:bf:54:73:fa: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:29:E9:AA:FA:A2:27:0C:09:DC:A4:88:E2:2D:CA:CA:AC:A9:BA:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl X509v3 Authority Key Identifier: keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:af:e2:4c:65:f8:ca:0e:89:a5:b5:5d:6a:39:4b:50:83:aa: 38:57:c8:c6:de:84:09:70:2d:87:38:9d:52:51:f0:d7:e5:c3: e6:6e:90:1d:4d:65:0c:36:55:e8:b0:8d:ac:d8:72:9c:c7:27: ff:6e:26:90:1f:0a:60:0f:68:db:01:fa:c0:54:f1:3e:a0:4e: 2a:1b:7d:ce:72:16:25:50:3c:91:23:d1:60:2e:8c:77:13:f4: ca:07:87:c7:fc:2c:aa:e8:3b:0c:ce:6f:00:39:f6:56:5c:58: f7:03:c5:b1:79:2d:f2:6d:a2:ea:5c:3c:44:7a:85:60:00:8f: 02:8e:6d:5a:0a:74:d9:2e:34:48:ca:db:9c:2c:de:32:e2:3c: 21:6f:b5:4b:22:f2:1d:4a:ec:51:a9:91:79:f3:c4:b9:9f:64: f4:3b:f3:ba:b2:a2:76:1c:aa:0f:68:0f:0c:05:51:d3:e7:99: 27:1c:76:eb:90:9f:56:4a:e8:cc:96:05:70:96:7e:2c:5a:b5: 1c:06:08:1c:f2:59:e8:c0:88:5f:07:1b:8a:58:30:96:95:d4: 6e:d0:ce:7e:5b:c8:c5:e4:56:ae:fb:e1:93:02:5b:d8:b7:b2: a8:86:57:86:81:90:d5:3a:26:88:9b:e1:4e:19:4b:a3:33:e6: 25:4f:6d:b8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw3znuiqHIxRQDjHeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4 YTUzMB4XDTI1MTIxNzE1MDAwM1oXDTI1MTIyMDE1MDAwMFowLzEtMCsGA1UEAxMk NTRkMGVlNDktYWViYS00MmZlLTliMjgtY2U3MjFiNTEzNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSauarPvDoz6UfbdzxCWvsbmOSY/kbHRLHOY g4P2h84abN8Twl3kwekIyZHC88pGdL/TnvH/7PI/CqLaH5Ld0b2uW61xn5dLtFhR WnPGjIQo15Hu2AKD6GpkkjhzWuCIzgg5dp8OV17HebZk6Xs19g7PEpltP7SCxJ0P qYQ0OLViHXkQSq6SXdkrUckj71KMqQv8/jV9c8C8+WdwMGgeNfUrPQv6HF4OAGCu Hx6wtCIGMuydj1qUS/3eL9wKuomq4uV1U/QOw7Xt2tBopaVRMWrJCOMgFtJx7n2s chhhWIOtE5FdohFmw57Z7/LWYra61LZMU1czfzIRi79Uc/o7EwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFAAp6ar6oicMCdykiOItysqsqbpXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0 MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvMmQxNDA3ZjktMzI4ZC00 YzQ0LWFiYzktMTFlNmQxOGU4YTUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2 ZDE4ZThhNTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAr+JMZfjKDomltV1qOUtQ g6o4V8jG3oQJcC2HOJ1SUfDX5cPmbpAdTWUMNlXosI2s2HKcxyf/biaQHwpgD2jb AfrAVPE+oE4qG33OchYlUDyRI9FgLox3E/TKB4fH/Cyq6DsMzm8AOfZWXFj3A8Wx eS3ybaLqXDxEeoVgAI8Cjm1aCnTZLjRIytucLN4y4jwhb7VLIvIdSuxRqZF588S5 n2T0O/O6sqJ2HKoPaA8MBVHT55knHHbrkJ9WSujMlgVwln4sWrUcBggc8lnowIhf BxuKWDCWldRu0M5+W8jF5Fau++GTAlvYt7KohleGgZDVOiaIm+FOGUujM+YlT224 -----END CERTIFICATE-----Generated at Thu Dec 18 06:03:35 2025 by rpki-client