This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft File: 4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft (raw, json) Hash identifier: sGbi73Lb718ehHHH4pg6o9DqDdZX4zh0hS5ASIdTgfg= Subject key identifier: E7:6F:AD:49:8C:76:4D:75:B0:7A:75:9A:B9:31:43:73:D2:69:B2:D3 Authority key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Certificate issuer: /CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Certificate serial: 010D0C9F4328584C57723B6C132D348C45F71800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft Manifest number: 010D0C9F4328584073A83051F4D825D02C88E3F5 Signing time: Sun 28 Dec 2025 23:00:03 +0000 Manifest this update: Sun 28 Dec 2025 23:00:03 +0000 Manifest next update: Wed 31 Dec 2025 23:00:00 +0000 Files and hashes: 1: 4443ea3e-5515-393f-9b6c-71ed5816326b.roa (hash: zm1yjpZ0KlnuRQac1zl9aiBCOdneUzM4efvj/Cnva3I=) 2: 4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl (hash: crnUWZ85cRhfZCt5BH59PnTK2i8G6thVibkSh323UKA=) 3: a0319291-6260-33b7-94e3-177209ea6dc7.roa (hash: 0+nXy7mWDoxEPbN7S7PZltaUkZtq0l/Lx+lxfjUr55g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:57:72:3b:6c:13:2d:34:8c:45:f7:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Validity Not Before: Dec 28 23:00:03 2025 GMT Not After : Dec 31 23:00:00 2025 GMT Subject: CN=065a4bf6-5351-43f1-a926-225748badaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:31:29:a0:c0:05:b0:fa:38:4f:1c:8e:e3:a7: cc:b3:4a:5c:c6:47:ba:76:66:25:41:b9:dc:0c:d0: e6:95:6d:64:6a:c1:e9:99:e1:25:5c:4d:57:4e:52: 5d:83:1e:9f:2d:5a:7c:96:27:47:21:f3:97:2d:8f: 7c:ff:95:f9:02:87:0c:05:76:af:cd:10:87:cc:4c: e6:b2:e0:03:28:de:01:0f:b1:0f:4e:8a:6d:3c:c7: 67:96:96:dc:1f:ea:cc:fd:4a:32:4e:60:b4:1c:b9: b8:fc:51:b3:e8:8f:6d:63:9b:69:ea:8b:46:9c:98: 0f:07:9d:c4:2a:32:3d:0f:16:f2:41:03:9c:92:23: e8:3d:97:e9:93:03:b5:18:de:7c:30:28:39:d4:63: 0a:3c:61:e8:85:f9:0e:7d:f1:3c:47:8a:96:d0:3f: b9:65:98:2d:00:3b:82:f3:3f:03:2b:7f:f8:70:0a: a5:79:81:c5:2c:42:a2:47:0a:56:74:35:06:48:54: 6b:cf:c0:86:12:86:00:f6:01:82:92:9c:b7:2d:42: 08:73:ae:bf:6d:9b:43:4d:23:c3:81:9a:06:44:1a: 3a:25:88:e1:66:81:4c:ef:03:2d:a1:8f:ca:97:60: 95:f4:11:08:65:f1:7d:90:a0:09:61:04:f3:6f:2e: f5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:6F:AD:49:8C:76:4D:75:B0:7A:75:9A:B9:31:43:73:D2:69:B2:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.crl X509v3 Authority Key Identifier: keyid:1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:67:54:97:41:14:6f:5c:6b:e4:c2:7e:2d:aa:e6:d5:d6:86: dd:46:c2:a2:1e:99:ad:e1:57:00:91:e2:2d:0f:3e:92:d7:f6: 12:c9:ec:2f:1f:7b:1d:21:4d:a9:29:d6:de:4d:3d:e2:2c:c9: 7a:a3:fd:0a:6b:0f:75:1d:be:f6:cf:2c:dc:cf:e3:3f:5e:06: 4c:4f:c5:04:e7:38:f2:ff:94:91:ff:9e:2d:86:a6:5c:ad:c8: fa:52:a3:c0:3c:9d:78:75:75:c7:30:78:61:91:c1:ee:1a:fd: f8:56:26:8f:02:41:06:a6:91:26:dc:42:a2:2a:05:23:d6:5b: f1:05:9b:fa:9c:95:b8:77:dd:15:94:de:3f:96:af:6d:e0:3a: 75:7e:4a:22:1a:23:d8:a9:b8:79:92:be:88:04:24:a8:22:fa: 72:2b:3f:48:6c:14:f4:69:0f:7e:42:2d:e8:9d:d6:da:b2:55: 61:27:66:4f:af:a1:89:26:42:0c:89:4b:af:44:06:5e:b0:ef: bf:39:77:0c:36:18:f3:6a:5f:fd:6c:1a:b4:5f:93:d5:75:8d: a5:e0:09:09:cc:14:87:85:a4:41:79:55:fa:0b:0f:2a:0d:26: 12:93:89:87:83:b8:60:20:89:e2:f5:8c:b3:c7:23:9a:cb:09: d7:80:fc:a4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExXcjtsEy00jEX3GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMx OTc5MB4XDTI1MTIyODIzMDAwM1oXDTI1MTIzMTIzMDAwMFowLzEtMCsGA1UEAxMk MDY1YTRiZjYtNTM1MS00M2YxLWE5MjYtMjI1NzQ4YmFkYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DEpoMAFsPo4TxyO46fMs0pcxke6dmYlQbnc DNDmlW1kasHpmeElXE1XTlJdgx6fLVp8lidHIfOXLY98/5X5AocMBXavzRCHzEzm suADKN4BD7EPToptPMdnlpbcH+rM/UoyTmC0HLm4/FGz6I9tY5tp6otGnJgPB53E KjI9DxbyQQOckiPoPZfpkwO1GN58MCg51GMKPGHohfkOffE8R4qW0D+5ZZgtADuC 8z8DK3/4cAqleYHFLEKiRwpWdDUGSFRrz8CGEoYA9gGCkpy3LUIIc66/bZtDTSPD gZoGRBo6JYjhZoFM7wMtoY/Kl2CV9BEIZfF9kKAJYQTzby71KQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOdvrUmMdk11sHp1mrkxQ3PSabLTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3 ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvNGU4N2Q4M2YtYjUwYy00 YTY1LTlkOWEtYzI4NDU4ZmMxOTc5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGU4N2Q4M2YtYjUwYy00YTY1LTlk OWEtYzI4NDU4ZmMxOTc5LzRlODdkODNmLWI1MGMtNGE2NS05ZDlhLWMyODQ1OGZj MTk3OS5jcmwwHwYDVR0jBBgwFoAUGggBUYL46DBD52qzRc1UcqS0zfwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0 NThmYzE5NzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUZ1SXQRRvXGvkwn4tqubV 1obdRsKiHpmt4VcAkeItDz6S1/YSyewvH3sdIU2pKdbeTT3iLMl6o/0Kaw91Hb72 zyzcz+M/XgZMT8UE5zjy/5SR/54thqZcrcj6UqPAPJ14dXXHMHhhkcHuGv34ViaP AkEGppEm3EKiKgUj1lvxBZv6nJW4d90VlN4/lq9t4Dp1fkoiGiPYqbh5kr6IBCSo IvpyKz9IbBT0aQ9+Qi3ondbaslVhJ2ZPr6GJJkIMiUuvRAZesO+/OXcMNhjzal/9 bBq0X5PVdY2l4AkJzBSHhaRBeVX6Cw8qDSYSk4mHg7hgIIni9YyzxyOaywnXgPyk -----END CERTIFICATE-----Generated at Mon Dec 29 22:38:39 2025 by rpki-client