This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft File: d4cafeea-cee5-442f-9f6c-530abebc6186.mft (raw, json) Hash identifier: 5HaPB+b6IG+KIr0r+oEpBFC4huxx+zHHa3xuJtqJqn4= Subject key identifier: C0:9E:DA:AD:E4:74:96:0D:A2:A9:16:3A:7E:60:85:F9:28:1B:CA:B3 Authority key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Certificate issuer: /CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Certificate serial: 010D0C9F4328584C2CC18296151F4FC7EC6F6380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft Manifest number: 010D0C9F432858466538CFF5850836B76B5A4D26 Signing time: Sat 13 Dec 2025 16:00:03 +0000 Manifest this update: Sat 13 Dec 2025 16:00:03 +0000 Manifest next update: Tue 16 Dec 2025 16:00:00 +0000 Files and hashes: 1: 4acb54f0-442a-3620-b23f-cd1fd9630d0e.roa (hash: 56KQV9CT+Om7716YvNYbzC22YlKK5Hy0z4vmdvttZo0=) 2: 8077d11c-1f26-3f4c-8c7f-0b53d3b799c6.roa (hash: JrDSGr5fuxCKSw01TJmEGTzEfDpIUHV5128cngTky0c=) 3: d4cafeea-cee5-442f-9f6c-530abebc6186.crl (hash: eu2NdNrFFQb8Cu30CT5h8Tv5NMKu5jGwDkDo7jHeW/c=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2c:c1:82:96:15:1f:4f:c7:ec:6f:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Validity Not Before: Dec 13 16:00:03 2025 GMT Not After : Dec 16 16:00:00 2025 GMT Subject: CN=f1b50622-1118-4aa3-9062-ef4e6014691b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a4:6a:7d:85:eb:33:4d:80:dd:ff:0e:29:fe: 42:a7:d5:7a:a2:6d:b3:19:d0:ed:81:50:52:f5:85: 11:00:40:4f:43:4d:be:2e:26:d0:18:ad:b5:95:ff: 38:4b:09:05:56:49:c9:a0:af:a5:6c:77:5d:7d:56: 2d:5a:8e:f7:61:b2:c8:1d:c2:26:b0:c4:3a:02:34: 11:1e:38:a7:fd:af:95:d2:50:b3:a0:95:6f:a7:94: 79:b3:c4:3c:49:f3:a9:6e:d5:76:01:61:47:1b:44: 26:e0:45:30:63:fc:b4:72:ed:d8:14:89:82:56:5a: 52:2f:6e:1c:e1:1c:a9:b8:f6:8a:ce:47:88:01:1c: 15:86:4c:13:bb:98:df:de:a4:06:c8:3f:14:01:db: 6f:53:c3:d1:f7:6d:9e:7e:cd:6b:47:a5:23:f4:09: 58:27:30:68:e2:40:a6:ee:5a:c1:93:d0:4e:33:5c: ec:15:34:3e:dd:01:2d:c6:d0:a7:2c:b7:f2:6b:e7: 71:9e:32:83:5b:de:c6:3b:8d:35:cc:ac:a9:a3:47: 03:a1:2b:14:f7:bf:17:af:a9:90:23:4c:e7:ac:9b: 53:7e:ac:cb:eb:ca:f0:03:91:06:3d:2e:07:f2:45: 74:b1:1b:97:92:81:58:1a:ce:7d:23:9c:d6:92:9f: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9E:DA:AD:E4:74:96:0D:A2:A9:16:3A:7E:60:85:F9:28:1B:CA:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.crl X509v3 Authority Key Identifier: keyid:59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:bd:69:af:49:c7:a2:b4:4b:39:56:de:f4:c2:2d:2b:bd:4a: 9f:df:66:ff:9a:e5:08:5e:42:4e:09:7c:98:15:0c:e1:69:7c: a4:41:a0:bc:28:7e:67:a1:6f:e3:fd:2a:ac:bc:24:1e:87:fe: be:dc:8b:51:81:05:0c:4c:5b:59:2e:fd:90:e2:61:b6:2d:10: b0:25:05:f3:34:af:cc:2b:a7:b3:ad:62:c7:8c:e8:05:fe:ab: d9:98:54:8f:76:ca:20:4c:5b:ee:52:3b:82:62:80:2f:28:a5: 5d:96:5b:7d:2a:8e:4c:e8:fb:d9:6f:f5:5e:e3:c9:95:0d:78: 27:2f:9e:fa:9a:1e:33:47:20:8a:f6:57:0b:be:bb:d5:79:31: bc:9c:75:76:bd:ca:b8:cd:7a:18:98:9f:1e:c6:9e:77:87:80: d1:cb:e5:73:3c:c2:60:f1:af:2d:e8:fa:ad:30:87:a9:97:f0: d9:25:5c:74:1e:27:bd:b4:5f:02:a3:20:12:04:e0:5b:78:c6: d9:f1:07:fc:a5:98:a2:4f:cc:81:f8:3f:e7:53:83:e3:f5:06: bb:35:6b:c5:1c:de:fe:84:20:9a:23:43:bc:1b:8d:b4:77:a2: 84:01:0b:89:98:8b:36:e6:31:64:ae:18:e6:2c:00:74:74:8f: ed:5b:e5:af -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwswYKWFR9Px+xvY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRjYWZlZWEtY2VlNS00NDJmLTlmNmMtNTMwYWJlYmM2 MTg2MB4XDTI1MTIxMzE2MDAwM1oXDTI1MTIxNjE2MDAwMFowLzEtMCsGA1UEAxMk ZjFiNTA2MjItMTExOC00YWEzLTkwNjItZWY0ZTYwMTQ2OTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36RqfYXrM02A3f8OKf5Cp9V6om2zGdDtgVBS 9YURAEBPQ02+LibQGK21lf84SwkFVknJoK+lbHddfVYtWo73YbLIHcImsMQ6AjQR Hjin/a+V0lCzoJVvp5R5s8Q8SfOpbtV2AWFHG0Qm4EUwY/y0cu3YFImCVlpSL24c 4RypuPaKzkeIARwVhkwTu5jf3qQGyD8UAdtvU8PR922efs1rR6Uj9AlYJzBo4kCm 7lrBk9BOM1zsFTQ+3QEtxtCnLLfya+dxnjKDW97GO401zKypo0cDoSsU978Xr6mQ I0znrJtTfqzL68rwA5EGPS4H8kV0sRuXkoFYGs59I5zWkp9BEQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMCe2q3kdJYNoqkWOn5ghfkoG8qzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNh ZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmViYzYxODYvZDRjYWZlZWEtY2VlNS00 NDJmLTlmNmMtNTMwYWJlYmM2MTg2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZDRjYWZlZWEtY2VlNS00NDJmLTlm NmMtNTMwYWJlYmM2MTg2L2Q0Y2FmZWVhLWNlZTUtNDQyZi05ZjZjLTUzMGFiZWJj NjE4Ni5jcmwwHwYDVR0jBBgwFoAUWV9X8eTPjzE2ogtDdn5KrdeOieIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kNGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBh YmViYzYxODYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABvWmvSceitEs5Vt70wi0r vUqf32b/muUIXkJOCXyYFQzhaXykQaC8KH5noW/j/SqsvCQeh/6+3ItRgQUMTFtZ Lv2Q4mG2LRCwJQXzNK/MK6ezrWLHjOgF/qvZmFSPdsogTFvuUjuCYoAvKKVdllt9 Ko5M6PvZb/Ve48mVDXgnL576mh4zRyCK9lcLvrvVeTG8nHV2vcq4zXoYmJ8exp53 h4DRy+VzPMJg8a8t6PqtMIepl/DZJVx0Hie9tF8CoyASBOBbeMbZ8Qf8pZiiT8yB +D/nU4Pj9Qa7NWvFHN7+hCCaI0O8G420d6KEAQuJmIs25jFkrhjmLAB0dI/tW+Wv -----END CERTIFICATE-----Generated at Sun Dec 14 10:11:59 2025 by rpki-client