This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft File: f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft (raw, json) Hash identifier: mHcptg7QEff7PYUUC3yNnrDwxoUjw/KqyydEJf/sDjI= Subject key identifier: 25:FC:CC:77:81:4B:95:22:BF:46:B7:18:93:F1:1B:98:B7:A2:2B:5A Authority key identifier: 02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50 Certificate issuer: /CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37 Certificate serial: 010D0C9F4328584C38BCB27AD0C31F9DB8143100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft Manifest number: 010D0C9F4328584073A82EDE07D377C7FA5BABA0 Signing time: Wed 17 Dec 2025 23:00:03 +0000 Manifest this update: Wed 17 Dec 2025 23:00:03 +0000 Manifest next update: Fri 19 Dec 2025 23:00:00 +0000 Files and hashes: 1: 6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc.cer (hash: 18G2w1WVQUi7+PuXp7lLDNNhIQHOB9fy9DqN5o/2wfM=) 2: f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl (hash: IiY7cV1laxcPr1PZOp9XEJ/hbUbg5L4aR7EtF6K+nxQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Dec 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:38:bc:b2:7a:d0:c3:1f:9d:b8:14:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1ab8d45-a1ae-408a-9e45-b04fdd663f37 Validity Not Before: Dec 17 23:00:03 2025 GMT Not After : Dec 19 23:00:00 2025 GMT Subject: CN=a839e9da-9355-4ae9-9f9e-526a08141adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0a:7f:27:11:81:b9:a5:ca:7d:89:85:76:bd: 85:d1:a4:63:f4:5f:d4:07:a9:35:69:c5:57:58:e3: 22:74:7c:0a:69:e9:2e:49:73:18:06:8c:0a:7f:25: 5b:f6:cc:de:f6:6d:ce:af:f4:c5:d7:40:a0:5e:80: d6:7e:c5:5f:e7:96:a0:51:c2:dc:69:50:69:79:ce: 04:8f:25:5e:49:a9:3d:f1:f1:96:a7:d2:01:a4:5d: 48:3e:00:0f:4a:e4:49:dd:60:dd:da:4d:23:97:a8: 2a:ac:aa:f6:b9:5d:df:ba:01:86:7a:48:70:01:f1: 0e:92:e3:22:e7:d7:61:52:f3:7e:a1:36:95:a6:f7: e8:22:34:98:8b:69:bf:91:47:8b:52:5f:df:3a:4e: b0:4f:e9:a2:33:77:37:a3:9a:d4:13:4d:6d:92:a3: e2:20:2d:4e:b8:03:b2:97:20:31:fb:52:ed:ff:e3: c2:97:3e:27:d7:fc:c2:02:6e:69:a8:c6:ff:8a:1a: 8c:30:5d:73:d6:ab:bd:ab:e0:b2:12:b3:ab:d5:6a: 5c:a1:94:cf:21:4b:25:f6:8e:ae:0a:46:2a:68:bf: 04:1d:bb:1a:11:24:fb:86:65:64:e4:72:d4:96:c0: 8e:79:2d:d8:bf:36:03:39:3c:57:7f:24:c6:56:fc: 8c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:FC:CC:77:81:4B:95:22:BF:46:B7:18:93:F1:1B:98:B7:A2:2B:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl X509v3 Authority Key Identifier: keyid:02:E8:5B:AB:47:BE:DA:68:6A:D4:40:55:94:84:26:59:DE:6F:AB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:86:23:f6:0c:1b:67:5f:ee:fe:3c:a6:ea:54:3c:d4:93:82: d3:01:f0:91:78:33:85:62:2a:21:bd:71:5e:4b:97:77:3b:19: 03:9e:c5:75:4e:d3:24:6a:0c:a4:64:bd:0a:0f:75:f7:01:b1: a9:41:78:88:e0:6f:0f:a8:32:27:0d:f4:44:10:b9:98:52:24: c1:19:de:f1:94:a1:f3:ed:9a:e3:c7:1e:66:1a:1c:b1:a0:62: cf:2b:45:ce:4a:a0:9a:0e:09:2d:c9:38:a0:d5:b1:0f:01:ee: 4f:a7:98:a7:6a:79:ea:df:2d:be:0e:d3:76:0b:4a:8b:58:1d: ea:86:f1:bf:fd:7c:33:d4:e5:87:b6:19:6e:c1:62:76:f4:00: bb:c4:01:ec:d7:6f:f4:98:8b:91:1e:e9:c2:63:2f:6f:c4:10: f7:f8:c8:64:f1:12:a1:d9:43:c1:2a:3b:1a:66:82:46:12:c1: 25:c4:52:12:ae:3e:55:b6:99:57:cd:0f:db:58:64:58:c4:f3: a2:31:6e:4a:e8:8d:33:ae:2f:8c:1d:ec:a7:c1:53:97:12:10: e8:3a:33:26:09:3d:a1:09:6f:e5:81:87:f6:7f:65:d3:e6:50: 0f:70:63:f5:f0:ab:5d:32:b7:ee:6c:71:bd:31:3a:6b:c9:c8: 95:e8:42:1c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw4vLJ60MMfnbgUMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRkNjYz ZjM3MB4XDTI1MTIxNzIzMDAwM1oXDTI1MTIxOTIzMDAwMFowLzEtMCsGA1UEAxMk YTgzOWU5ZGEtOTM1NS00YWU5LTlmOWUtNTI2YTA4MTQxYWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgp/JxGBuaXKfYmFdr2F0aRj9F/UB6k1acVX WOMidHwKaekuSXMYBowKfyVb9sze9m3Or/TF10CgXoDWfsVf55agUcLcaVBpec4E jyVeSak98fGWp9IBpF1IPgAPSuRJ3WDd2k0jl6gqrKr2uV3fugGGekhwAfEOkuMi 59dhUvN+oTaVpvfoIjSYi2m/kUeLUl/fOk6wT+miM3c3o5rUE01tkqPiIC1OuAOy lyAx+1Lt/+PClz4n1/zCAm5pqMb/ihqMMF1z1qu9q+CyErOr1WpcoZTPIUsl9o6u CkYqaL8EHbsaEST7hmVk5HLUlsCOeS3YvzYDOTxXfyTGVvyMvQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCX8zHeBS5Uiv0a3GJPxG5i3oitaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mMWFi OGQ0NS1hMWFlLTQwOGEtOWU0NS1iMDRmZGQ2NjNmMzcvZjFhYjhkNDUtYTFhZS00 MDhhLTllNDUtYjA0ZmRkNjYzZjM3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjFhYjhkNDUtYTFhZS00MDhhLTll NDUtYjA0ZmRkNjYzZjM3L2YxYWI4ZDQ1LWExYWUtNDA4YS05ZTQ1LWIwNGZkZDY2 M2YzNy5jcmwwHwYDVR0jBBgwFoAUAuhbq0e+2mhq1EBVlIQmWd5vq1AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mMWFiOGQ0NS1hMWFlLTQwOGEtOWU0NS1iMDRm ZGQ2NjNmMzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBhiP2DBtnX+7+PKbqVDzU k4LTAfCReDOFYiohvXFeS5d3OxkDnsV1TtMkagykZL0KD3X3AbGpQXiI4G8PqDIn DfREELmYUiTBGd7xlKHz7Zrjxx5mGhyxoGLPK0XOSqCaDgktyTig1bEPAe5Pp5in annq3y2+DtN2C0qLWB3qhvG//Xwz1OWHthluwWJ29AC7xAHs12/0mIuRHunCYy9v xBD3+Mhk8RKh2UPBKjsaZoJGEsElxFISrj5VtplXzQ/bWGRYxPOiMW5K6I0zri+M HeynwVOXEhDoOjMmCT2hCW/lgYf2f2XT5lAPcGP18KtdMrfubHG9MTpryciV6EIc -----END CERTIFICATE-----Generated at Thu Dec 18 06:03:03 2025 by rpki-client