This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.mft (raw, json) Hash identifier: R6k7SxkVSN1U5LH1GV1suByPLkp34u7Y+IwbdEobJe0= Subject key identifier: EA:4F:E1:7D:47:4C:DF:F2:B9:F3:C1:84:A9:99:6D:10:3F:E3:CF:30 Authority key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Certificate issuer: /CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Certificate serial: 010D0C9F4328584C8DC4D319494B1BCB1A98B600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft Manifest number: 010D0C9F4328584073A84C6382713EC3B9026CF0 Signing time: Sat 17 Jan 2026 10:00:08 +0000 Manifest this update: Sat 17 Jan 2026 10:00:08 +0000 Manifest next update: Mon 19 Jan 2026 10:00:00 +0000 Files and hashes: 1: 2ed04e60-1e97-3647-b39a-9a93be9e3ceb.roa (hash: xKS5dDL4uvITst9UbO+LG4cGqgdrvmgMi89oisspobc=) 2: 3a636afd-ece5-4e23-a54f-c43e0fc08124.crl (hash: fjGSotBBzsMqW023E62oxlwiJGrEW+i5znIIYSQZiXs=) 3: 86ce795d-c584-310b-9693-21cb26b6e90a.roa (hash: tyu/ZwC6SFzUuLpdo6IDvjF0vSqzmXyC9vxaQWTYx/w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Jan 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8d:c4:d3:19:49:4b:1b:cb:1a:98:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Validity Not Before: Jan 17 10:00:08 2026 GMT Not After : Jan 19 10:00:00 2026 GMT Subject: CN=51e4dfb3-740d-41d3-9b27-041cfad363ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:9b:3c:75:d4:db:d1:7a:49:76:d6:ac:8a: 27:e8:95:e6:0c:5f:27:61:d1:4b:bc:f1:41:ef:d2: 5b:e0:b8:11:ea:5d:1c:f5:42:a0:92:9d:a1:40:b2: c2:53:d7:e5:78:0e:36:20:27:f8:68:77:a6:13:8d: 97:21:07:e2:05:16:4e:9c:8c:23:b3:ac:b1:dd:9f: b4:70:e2:9b:8f:92:6a:05:01:d7:30:c0:e0:2a:5c: 6f:95:cf:43:0b:d2:22:86:ef:8e:74:da:68:03:5e: 72:b5:2e:30:25:88:01:0e:6f:6a:89:5c:38:2b:39: 2e:d4:90:cf:12:47:2f:e7:2d:69:1a:27:9e:7a:48: d2:b3:9d:1a:ec:08:99:96:0d:ab:01:59:a1:d3:33: cb:a7:87:6f:33:88:a2:2b:c2:22:4a:c8:41:ad:7e: b2:58:75:15:48:37:73:93:44:e3:1e:95:27:b7:55: 31:2e:13:58:e6:48:c4:b2:1f:4b:e9:41:f2:b6:f9: 25:16:63:8b:c8:6b:1e:ca:2d:73:f2:87:6b:68:c8: b4:8a:60:83:3e:c7:61:6f:55:5e:18:5a:bf:bc:f0: d4:46:ab:8c:b4:50:98:41:41:a0:29:a6:90:41:24: 7e:5d:f4:e1:8d:be:9d:06:96:5c:17:27:4e:66:90: 7b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4F:E1:7D:47:4C:DF:F2:B9:F3:C1:84:A9:99:6D:10:3F:E3:CF:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.crl X509v3 Authority Key Identifier: keyid:8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:9d:da:fc:28:d0:cb:99:3d:a0:d2:8f:06:60:c5:53:0e:71: f2:c3:fa:08:f8:a5:eb:78:2f:19:7c:3b:ff:0b:51:16:ae:99: 48:34:0d:b4:11:8d:cb:05:57:bd:90:9d:ba:df:6b:57:0b:65: 0b:21:f2:be:ab:6e:a2:76:bf:32:44:61:f6:0c:64:86:59:02: 8f:99:a3:8d:19:e0:21:97:d2:38:f0:5b:71:47:1b:c8:56:89: 97:c4:59:80:85:e8:de:20:0c:5c:16:85:45:70:34:67:e9:e8: 52:75:9d:33:7d:b9:c0:ae:d7:cf:2e:1f:fe:a0:38:d6:19:04: 59:c0:8a:d5:b9:60:5b:ad:f1:6b:f6:90:30:49:af:3c:2b:0b: 13:22:d3:03:9d:9b:c0:87:2e:35:04:36:1e:c2:02:60:12:1f: c1:3e:1d:29:3b:4b:c0:1f:70:23:d7:04:de:09:ba:69:a1:57: 00:c6:d4:c0:dd:cf:5f:1a:e6:2d:40:1b:ff:a8:d0:3f:80:b9: 89:34:02:07:2e:91:e8:08:91:05:f9:75:c9:52:65:45:f7:9c: 8f:4a:40:41:c2:9e:2e:eb:40:b6:ff:79:6e:ed:1e:ed:cb:8b: 01:42:10:03:f9:7e:3b:44:28:35:11:13:de:5a:44:ba:73:31: 42:78:3f:6b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyNxNMZSUsbyxqYtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4 MTI0MB4XDTI2MDExNzEwMDAwOFoXDTI2MDExOTEwMDAwMFowLzEtMCsGA1UEAxMk NTFlNGRmYjMtNzQwZC00MWQzLTliMjctMDQxY2ZhZDM2M2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq16bPHXU29F6SXbWrIon6JXmDF8nYdFLvPFB 79Jb4LgR6l0c9UKgkp2hQLLCU9fleA42ICf4aHemE42XIQfiBRZOnIwjs6yx3Z+0 cOKbj5JqBQHXMMDgKlxvlc9DC9Iihu+OdNpoA15ytS4wJYgBDm9qiVw4Kzku1JDP Ekcv5y1pGieeekjSs50a7AiZlg2rAVmh0zPLp4dvM4iiK8IiSshBrX6yWHUVSDdz k0TjHpUnt1UxLhNY5kjEsh9L6UHytvklFmOLyGseyi1z8odraMi0imCDPsdhb1Ve GFq/vPDURquMtFCYQUGgKaaQQSR+XfThjb6dBpZcFydOZpB7RwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOpP4X1HTN/yufPBhKmZbRA/488wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYz NmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvM2E2MzZhZmQtZWNlNS00 ZTIzLWE1NGYtYzQzZTBmYzA4MTI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2MzZhZmQtZWNlNS00ZTIzLWE1 NGYtYzQzZTBmYzA4MTI0LzNhNjM2YWZkLWVjZTUtNGUyMy1hNTRmLWM0M2UwZmMw ODEyNC5jcmwwHwYDVR0jBBgwFoAUi85A8V4+45U8NUK2BDw+0WEHNyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNl MGZjMDgxMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTndr8KNDLmT2g0o8GYMVT DnHyw/oI+KXreC8ZfDv/C1EWrplINA20EY3LBVe9kJ2632tXC2ULIfK+q26idr8y RGH2DGSGWQKPmaONGeAhl9I48FtxRxvIVomXxFmAhejeIAxcFoVFcDRn6ehSdZ0z fbnArtfPLh/+oDjWGQRZwIrVuWBbrfFr9pAwSa88KwsTItMDnZvAhy41BDYewgJg Eh/BPh0pO0vAH3Aj1wTeCbppoVcAxtTA3c9fGuYtQBv/qNA/gLmJNAIHLpHoCJEF +XXJUmVF95yPSkBBwp4u60C2/3lu7R7ty4sBQhAD+X47RCg1ERPeWkS6czFCeD9r -----END CERTIFICATE-----Generated at Sun Jan 18 04:11:20 2026 by rpki-client