This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft File: df1c4d20-5b5b-4073-83b7-529a82c159fd.mft (raw, json) Hash identifier: xD5DMczcedfFTOZUd6jhQNJSaODbiiXBWJLicpgeefQ= Subject key identifier: 31:A5:06:51:ED:51:F8:C8:C1:EE:93:C3:4C:F4:DF:5B:59:EB:86:CD Authority key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Certificate issuer: /CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Certificate serial: 010D0C9F4328584C7681240BBDE164E3C7DFC080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft Manifest number: 010D0C9F4328584073A838657FFAC70B59F37628 Signing time: Fri 09 Jan 2026 02:00:09 +0000 Manifest this update: Fri 09 Jan 2026 02:00:09 +0000 Manifest next update: Sun 11 Jan 2026 02:00:00 +0000 Files and hashes: 1: 0ceb1403-3b7c-379d-b030-7fd9c941239b.roa (hash: MVTK4080M8HKiUoi3oYuLnZikFeF00lAyxvZ3UfHDKI=) 2: 6dfabb17-4437-3c66-996a-7acc0579861a.roa (hash: 5qKBDW5NN4Kbek2tvHXIENtIkGiCkgJSwy5jqlT+sGc=) 3: df1c4d20-5b5b-4073-83b7-529a82c159fd.crl (hash: toQCax6VmmtXd3eg9YQ/E1cq/SCPNakA/0IF0igh9/0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:24:0b:bd:e1:64:e3:c7:df:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Validity Not Before: Jan 9 02:00:09 2026 GMT Not After : Jan 11 02:00:00 2026 GMT Subject: CN=5d70614f-e27f-4ab8-a5d2-f1a8c859681f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d4:64:c6:1f:e4:15:3a:e5:01:7a:b1:60:a5: 7c:31:b9:6b:6d:47:10:8f:d4:ce:6f:79:60:bc:c7: 2f:e9:2a:21:5a:84:72:be:9f:1c:78:b6:5c:b8:a5: 35:61:db:7a:f9:91:f4:38:c0:a0:92:51:7c:1c:b3: 29:b7:a3:bb:fc:04:d4:ca:ac:b8:49:a7:de:a4:6e: 20:b3:2c:06:65:39:6b:73:38:1d:17:5f:93:0b:68: 9f:36:cd:5e:19:31:2b:bb:c3:d2:32:3c:7e:48:65: 8a:a4:4d:52:ee:9c:db:b6:b1:ad:09:34:38:f0:31: bc:ef:7a:49:96:90:b1:15:2a:16:d1:62:12:65:4f: 77:d7:79:82:ca:16:28:69:55:70:61:2d:c9:0f:3e: f2:29:66:55:ec:b5:d8:90:57:9d:8a:41:f3:f2:13: b9:e0:ce:f7:9c:aa:6c:12:b0:1f:a3:68:19:5f:f2: e8:dd:c7:4d:7f:86:31:09:d6:78:53:ae:d4:5e:41: b8:ab:44:f9:09:97:95:0b:61:92:dd:32:9d:4f:2a: cc:e8:40:9a:11:dd:f3:1d:90:dd:b7:c2:f2:93:b2: 88:ee:70:2e:b1:f6:b7:65:3b:42:14:82:ef:22:3f: 8e:6e:2f:5e:0e:f1:27:07:60:df:b3:37:1a:26:69: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A5:06:51:ED:51:F8:C8:C1:EE:93:C3:4C:F4:DF:5B:59:EB:86:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.crl X509v3 Authority Key Identifier: keyid:36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:e2:53:a3:89:a9:f5:96:1b:25:8c:78:43:9d:cc:f3:a3:0b: e4:55:d1:e3:d9:ed:da:cd:bd:fb:28:23:ec:c1:fe:08:c5:d0: fd:e7:ac:8c:94:1d:14:49:71:6f:d8:70:6a:8d:0e:c4:b1:61: 40:32:c0:11:29:1a:c7:42:37:8e:56:0e:b0:0c:31:21:ea:d4: 24:f0:d3:77:aa:ad:de:f5:6a:c3:ed:87:d6:ee:39:dd:d0:f6: 10:72:15:d0:09:e8:83:8a:d0:18:0c:9a:54:fd:ef:ec:94:5e: a2:a7:31:be:ed:b2:ce:1a:35:6f:22:72:84:8c:70:09:98:8c: 35:ec:96:5c:c1:fb:13:aa:18:16:47:a8:e5:b6:c0:bd:7e:51: bc:55:b4:73:2d:d7:c3:7f:f8:68:df:ca:93:f8:43:40:6d:f2: 0f:b0:90:4c:01:7c:bc:7b:7a:61:33:b9:fe:05:b4:9d:96:3d: 32:35:c3:6a:f6:b6:fb:c1:be:9a:83:da:52:ba:4b:bd:93:be: 21:76:50:0f:d1:bc:75:2a:9d:9a:b2:20:ec:ef:4b:4e:f2:86: bf:45:a7:29:3e:ff:cb:09:12:d9:70:33:ea:34:85:0f:dc:b4: 73:bc:45:50:8f:f7:30:56:6e:3c:d9:2f:cf:27:d8:29:15:21: 56:64:10:78 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx2gSQLveFk48ffwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1 OWZkMB4XDTI2MDEwOTAyMDAwOVoXDTI2MDExMTAyMDAwMFowLzEtMCsGA1UEAxMk NWQ3MDYxNGYtZTI3Zi00YWI4LWE1ZDItZjFhOGM4NTk2ODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9Rkxh/kFTrlAXqxYKV8MblrbUcQj9TOb3lg vMcv6SohWoRyvp8ceLZcuKU1Ydt6+ZH0OMCgklF8HLMpt6O7/ATUyqy4SafepG4g sywGZTlrczgdF1+TC2ifNs1eGTEru8PSMjx+SGWKpE1S7pzbtrGtCTQ48DG873pJ lpCxFSoW0WISZU9313mCyhYoaVVwYS3JDz7yKWZV7LXYkFedikHz8hO54M73nKps ErAfo2gZX/Lo3cdNf4YxCdZ4U67UXkG4q0T5CZeVC2GS3TKdTyrM6ECaEd3zHZDd t8Lyk7KI7nAusfa3ZTtCFILvIj+Obi9eDvEnB2DfszcaJmkvDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDGlBlHtUfjIwe6Tw0z031tZ64bNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFj NGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvZGYxYzRkMjAtNWI1Yi00 MDczLTgzYjctNTI5YTgyYzE1OWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGYxYzRkMjAtNWI1Yi00MDczLTgz YjctNTI5YTgyYzE1OWZkL2RmMWM0ZDIwLTViNWItNDA3My04M2I3LTUyOWE4MmMx NTlmZC5jcmwwHwYDVR0jBBgwFoAUNrw0KynM+RarIlemQ3NzemhZ61cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01Mjlh ODJjMTU5ZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA54lOjian1lhsljHhDnczz owvkVdHj2e3azb37KCPswf4IxdD956yMlB0USXFv2HBqjQ7EsWFAMsARKRrHQjeO Vg6wDDEh6tQk8NN3qq3e9WrD7YfW7jnd0PYQchXQCeiDitAYDJpU/e/slF6ipzG+ 7bLOGjVvInKEjHAJmIw17JZcwfsTqhgWR6jltsC9flG8VbRzLdfDf/ho38qT+ENA bfIPsJBMAXy8e3phM7n+BbSdlj0yNcNq9rb7wb6ag9pSuku9k74hdlAP0bx1Kp2a siDs70tO8oa/RacpPv/LCRLZcDPqNIUP3LRzvEVQj/cwVm482S/PJ9gpFSFWZBB4 -----END CERTIFICATE-----Generated at Fri Jan 9 08:59:59 2026 by rpki-client