This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft File: 8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft (raw, json) Hash identifier: 9fd0Twv5xEQQkp+fzm94qQZUy4VNa6AeLZkfz0i2m10= Subject key identifier: 3B:75:8E:B4:01:E7:75:BE:42:0F:E9:23:46:23:65:25:93:5F:B8:35 Authority key identifier: D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD Certificate issuer: /CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Certificate serial: 010D0C9F4328584C753988A6E72EFBB66DA61300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft Manifest number: 010D0C9F432858477C339A00B272D91F2D524B85 Signing time: Thu 08 Jan 2026 15:00:03 +0000 Manifest this update: Thu 08 Jan 2026 15:00:03 +0000 Manifest next update: Sun 11 Jan 2026 15:00:00 +0000 Files and hashes: 1: 2307101c-a448-3f6e-b60c-140a7a61a087.roa (hash: 2rB2Ok6Ga0oLRhy5VwgIv6Ql4MsUZi/VxaloZOsauiY=) 2: 8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl (hash: 0tD0oaCqzuoYo3j55dy1A22aI8jgGyn8cb5FuyanqpE=) 3: d67a5b61-08ff-3d90-af0c-435ed8a0acfd.roa (hash: 8dU1LCwd3LgpyHtuMPLsM6GKRbAWy7Cv4oPEWTkotMY=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:39:88:a6:e7:2e:fb:b6:6d:a6:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8825e8fb-1b9c-43c4-8f9f-40df1c716211 Validity Not Before: Jan 8 15:00:03 2026 GMT Not After : Jan 11 15:00:00 2026 GMT Subject: CN=f0a8e7f5-566f-4e9f-a74e-954e7d836e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e9:19:95:c8:05:21:18:7d:56:7c:44:4e:42: 8f:fb:bb:d3:e8:d4:57:75:30:c1:32:a2:76:72:71: 2a:51:1e:84:83:e1:b1:07:df:82:a5:9b:86:01:77: d3:1c:79:0a:0a:7c:bc:76:50:c4:dd:09:bd:e9:e3: 12:50:1b:0b:e3:2a:23:5a:5e:af:6b:1c:3f:7d:56: 9e:7f:6d:57:29:3f:47:4e:79:ed:ae:87:e9:5a:c6: 94:97:0d:8b:fe:56:0b:d7:ad:16:5e:f4:4f:fb:3f: a6:8c:90:44:0c:65:87:b2:cc:f8:7f:a9:1c:43:2c: 70:ad:98:5c:7f:28:5a:d7:e8:dd:07:63:86:e2:1f: 86:2f:93:d3:7b:17:13:71:ab:e8:9f:a8:6d:e7:d9: 14:31:d4:99:2a:80:fe:67:59:0a:c4:e9:f4:de:95: e9:15:7f:1d:bf:5d:de:92:13:d3:32:91:0a:fc:78: 9d:5d:4f:cd:6a:45:61:4a:b8:b9:b7:fc:18:7a:e7: 42:97:0a:1a:cb:cd:8c:c3:dd:3e:76:6c:c2:97:2a: 33:2f:e7:34:72:c2:50:ab:01:7e:a9:2b:eb:81:76: 46:78:a5:09:0c:26:7f:c6:49:c5:99:03:5f:7f:e0: e2:df:94:38:98:5e:af:39:31:ef:73:2d:6b:49:e2: 6b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:75:8E:B4:01:E7:75:BE:42:0F:E9:23:46:23:65:25:93:5F:B8:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211/8825e8fb-1b9c-43c4-8f9f-40df1c716211.crl X509v3 Authority Key Identifier: keyid:D4:C5:80:8B:1B:8C:EF:EB:84:32:DD:06:33:18:88:53:D4:A4:B0:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8825e8fb-1b9c-43c4-8f9f-40df1c716211.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0c:53:3c:66:d4:eb:63:55:3c:0f:5c:72:ce:0e:02:c0:f3: d4:66:a7:7c:45:30:cf:b0:08:ab:eb:44:ed:ac:1a:76:e9:cf: 33:0a:3f:f4:19:4d:ee:af:69:28:73:90:08:80:de:7a:d3:ca: dd:94:d0:d6:72:3a:41:60:f6:37:fc:59:50:3c:ee:f1:81:b2: 54:c0:93:5d:08:d8:a8:87:b5:85:ac:f8:f3:90:3e:4a:01:7f: 55:11:d0:f6:ba:db:23:fe:d9:ca:09:a8:17:ed:81:74:13:77: 7d:22:68:04:70:80:16:37:ee:7d:55:ed:ef:e5:75:03:18:34: 6d:db:a9:7f:e2:6f:c8:37:dc:f4:be:a0:1c:d2:3c:52:57:26: 2f:7f:a2:d9:0b:a5:10:61:c5:e2:31:68:f2:79:52:b0:1b:7d: d0:4d:e7:4c:9d:ec:eb:9f:60:1e:f8:82:17:24:fb:17:22:c0: c2:82:a3:e6:62:d2:68:a0:86:32:5b:34:e3:10:13:53:8a:34: c1:43:dc:c0:f8:8a:95:d6:e0:e6:1c:a6:07:a2:bf:e9:f0:29: 90:63:9d:20:13:cc:bb:b9:ff:31:7c:8a:38:78:8d:f5:d3:85: 56:5a:36:0c:c1:e5:04:02:61:b6:d6:59:dc:eb:99:17:d5:3a: ac:36:99:bc -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx1OYim5y77tm2mEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgyNWU4ZmItMWI5Yy00M2M0LThmOWYtNDBkZjFjNzE2 MjExMB4XDTI2MDEwODE1MDAwM1oXDTI2MDExMTE1MDAwMFowLzEtMCsGA1UEAxMk ZjBhOGU3ZjUtNTY2Zi00ZTlmLWE3NGUtOTU0ZTdkODM2ZTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+kZlcgFIRh9VnxETkKP+7vT6NRXdTDBMqJ2 cnEqUR6Eg+GxB9+CpZuGAXfTHHkKCny8dlDE3Qm96eMSUBsL4yojWl6vaxw/fVae f21XKT9HTnntrofpWsaUlw2L/lYL160WXvRP+z+mjJBEDGWHssz4f6kcQyxwrZhc fyha1+jdB2OG4h+GL5PTexcTcavon6ht59kUMdSZKoD+Z1kKxOn03pXpFX8dv13e khPTMpEK/HidXU/NakVhSri5t/wYeudClwoay82Mw90+dmzClyozL+c0csJQqwF+ qSvrgXZGeKUJDCZ/xknFmQNff+Di35Q4mF6vOTHvcy1rSeJrkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDt1jrQB53W+Qg/pI0YjZSWTX7g1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1 ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRmMWM3MTYyMTEvODgyNWU4ZmItMWI5Yy00 M2M0LThmOWYtNDBkZjFjNzE2MjExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODgyNWU4ZmItMWI5Yy00M2M0LThm OWYtNDBkZjFjNzE2MjExLzg4MjVlOGZiLTFiOWMtNDNjNC04ZjlmLTQwZGYxYzcx NjIxMS5jcmwwHwYDVR0jBBgwFoAU1MWAixuM7+uEMt0GMxiIU9SksN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ODI1ZThmYi0xYjljLTQzYzQtOGY5Zi00MGRm MWM3MTYyMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBEDFM8ZtTrY1U8D1xyzg4C wPPUZqd8RTDPsAir60TtrBp26c8zCj/0GU3ur2koc5AIgN5608rdlNDWcjpBYPY3 /FlQPO7xgbJUwJNdCNioh7WFrPjzkD5KAX9VEdD2utsj/tnKCagX7YF0E3d9ImgE cIAWN+59Ve3v5XUDGDRt26l/4m/IN9z0vqAc0jxSVyYvf6LZC6UQYcXiMWjyeVKw G33QTedMnezrn2Ae+IIXJPsXIsDCgqPmYtJooIYyWzTjEBNTijTBQ9zA+IqV1uDm HKYHor/p8CmQY50gE8y7uf8xfIo4eI3104VWWjYMweUEAmG21lnc65kX1TqsNpm8 -----END CERTIFICATE-----Generated at Fri Jan 9 16:29:57 2026 by rpki-client