This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft File: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft (raw, json) Hash identifier: ev2PC8RLTKGJPFTA3GgbOI907L2uJsZOyc6OWqcrPE4= Subject key identifier: B3:15:3F:BD:AA:1D:08:07:FE:3E:31:E3:90:E1:D7:BE:AA:04:8D:33 Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED Certificate issuer: /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Certificate serial: 010D0C9F4328584C74FE01740D503E499320FAD0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft Manifest number: 010D0C9F4328584073A856D03CF168C619A11C26 Signing time: Thu 08 Jan 2026 13:00:08 +0000 Manifest this update: Thu 08 Jan 2026 13:00:08 +0000 Manifest next update: Sun 11 Jan 2026 13:00:00 +0000 Files and hashes: 1: 3cc7131d-7a60-3712-92dd-3528026436b0.roa (hash: tgMdEvw3hihtfknRLFdH7kxkAJ/beP+5DxnJwEX+yUo=) 2: 420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl (hash: Mol9bKcapNOs3ceSgSz/ns8FWU+NewKwTNP444NNm+Q=) 3: 5d7f2a84-fbdf-341c-acc2-0dc424d3bd9d.roa (hash: nh+kWIbdKhZOMAE1+gOCXS/38s7VP5r/HUozmAcdeVA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:74:fe:01:74:0d:50:3e:49:93:20:fa:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5 Validity Not Before: Jan 8 13:00:08 2026 GMT Not After : Jan 11 13:00:00 2026 GMT Subject: CN=ee180e1d-12da-45e3-a734-60c2c32cbc1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:9a:d5:94:fc:31:c7:9e:28:14:01:c6:c0: 09:b0:7e:e7:67:ef:3f:fb:a4:49:34:6a:b1:2f:88: 77:27:48:d5:50:20:be:60:2b:bb:cc:c7:b0:62:f3: 53:72:c0:ce:e0:57:d2:3e:91:a3:a4:6c:49:3e:58: f7:9d:3e:a9:e6:73:a4:90:cd:b1:c2:f6:5d:72:bb: 9a:f9:c3:b8:7a:53:f5:89:62:0b:6d:c3:6c:2b:00: a6:0a:c3:56:12:42:eb:8c:1b:d0:24:ac:cc:fe:44: 89:84:36:b0:8a:32:f1:1b:fc:ba:de:6a:71:0c:9b: 1a:12:6e:8f:a2:c9:e5:0b:9b:e9:75:ac:c4:ca:33: 14:91:b3:44:d2:c1:ca:8e:c8:dd:e5:f5:35:91:68: 22:e9:81:38:a5:c4:d2:32:d5:b6:53:38:b9:7c:28: 15:00:31:5f:8a:2c:a4:1e:9a:8f:a7:a0:ed:f9:28: 15:f2:b1:60:6e:86:9c:3f:86:24:b2:8f:5a:c4:66: ee:65:65:52:d4:47:22:5d:a1:a0:93:bd:2d:3e:03: f4:d1:f4:57:60:be:1b:fa:bf:29:47:0c:21:29:c6: 57:74:85:13:63:cd:c2:1f:fb:6b:df:f1:08:25:d4: 65:78:33:ba:8d:b7:84:a3:30:3a:e5:a2:01:a1:c4: aa:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:15:3F:BD:AA:1D:08:07:FE:3E:31:E3:90:E1:D7:BE:AA:04:8D:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl X509v3 Authority Key Identifier: keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:94:6c:1a:e4:8b:90:d2:e7:65:87:0c:9c:40:fb:08:21:8d: 91:5f:f3:a4:c5:7e:68:b7:43:61:77:b6:64:c5:76:0b:4c:15: cc:71:c6:7f:06:7b:41:cd:ae:4d:43:a7:ce:70:20:97:98:55: 24:79:fc:9c:20:89:58:93:51:e6:31:65:e5:6b:ae:c3:29:aa: ef:1e:be:e3:bb:1b:2c:c7:b1:2d:13:fa:f3:41:4b:61:9b:c5: 56:29:31:f0:9d:59:c9:ea:14:9a:32:57:5d:ac:e0:23:08:0e: 76:2e:90:93:75:4e:75:3b:fc:eb:af:d2:08:8c:4c:d7:ed:c3: fd:c0:fa:6b:68:dc:9e:f0:a6:b4:e2:7e:0a:a6:3c:37:ec:da: c5:34:4e:38:45:25:cc:8f:69:ba:82:b7:76:3f:a9:0e:9c:3e: 4d:a7:86:c5:ec:b9:bb:bb:e0:41:95:4f:38:47:9b:75:a7:12: eb:c0:ab:39:d7:c2:ea:41:08:d0:79:ed:2b:9e:15:29:1b:55: d1:06:f6:e4:6e:46:2e:5a:71:4c:a0:2d:53:10:d5:e6:03:ef: ae:d7:09:ed:77:fd:00:59:a5:5d:43:69:a0:df:bb:52:e6:f3: 43:d4:5a:13:aa:cc:a9:c6:4f:8c:2f:db:d3:92:54:5d:95:c7: c4:71:fc:a9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx0/gF0DVA+SZMg+tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDIwZjM4ZWItMjY4My00Yjc5LThhNWMtYjE2ZmVkYWFh OWY1MB4XDTI2MDEwODEzMDAwOFoXDTI2MDExMTEzMDAwMFowLzEtMCsGA1UEAxMk ZWUxODBlMWQtMTJkYS00NWUzLWE3MzQtNjBjMmMzMmNiYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD+a1ZT8MceeKBQBxsAJsH7nZ+8/+6RJNGqx L4h3J0jVUCC+YCu7zMewYvNTcsDO4FfSPpGjpGxJPlj3nT6p5nOkkM2xwvZdcrua +cO4elP1iWILbcNsKwCmCsNWEkLrjBvQJKzM/kSJhDawijLxG/y63mpxDJsaEm6P osnlC5vpdazEyjMUkbNE0sHKjsjd5fU1kWgi6YE4pcTSMtW2Uzi5fCgVADFfiiyk HpqPp6Dt+SgV8rFgboacP4Ykso9axGbuZWVS1EciXaGgk70tPgP00fRXYL4b+r8p RwwhKcZXdIUTY83CH/tr3/EIJdRleDO6jbeEozA65aIBocSqYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLMVP72qHQgH/j4x45Dh176qBI0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MjBm MzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZmZWRhYWE5ZjUvNDIwZjM4ZWItMjY4My00 Yjc5LThhNWMtYjE2ZmVkYWFhOWY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDIwZjM4ZWItMjY4My00Yjc5LThh NWMtYjE2ZmVkYWFhOWY1LzQyMGYzOGViLTI2ODMtNGI3OS04YTVjLWIxNmZlZGFh YTlmNS5jcmwwHwYDVR0jBBgwFoAUU1izP0u4jb0DSRhrShSHu9PuZ+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MjBmMzhlYi0yNjgzLTRiNzktOGE1Yy1iMTZm ZWRhYWE5ZjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCjlGwa5IuQ0udlhwycQPsI IY2RX/OkxX5ot0Nhd7ZkxXYLTBXMccZ/BntBza5NQ6fOcCCXmFUkefycIIlYk1Hm MWXla67DKarvHr7juxssx7EtE/rzQUthm8VWKTHwnVnJ6hSaMlddrOAjCA52LpCT dU51O/zrr9IIjEzX7cP9wPpraNye8Ka04n4Kpjw37NrFNE44RSXMj2m6grd2P6kO nD5Np4bF7Lm7u+BBlU84R5t1pxLrwKs518LqQQjQee0rnhUpG1XRBvbkbkYuWnFM oC1TENXmA++u1wntd/0AWaVdQ2mg37tS5vND1FoTqsypxk+ML9vTklRdlcfEcfyp -----END CERTIFICATE-----Generated at Fri Jan 9 00:53:42 2026 by rpki-client