This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.mft File: afc34129-e2da-4364-a9df-4c6c4db3d903.mft (raw, json) Hash identifier: nRL9KHleMEwuCHkKJ0JdKQcpom/Qd1UQjPHdQ5Xyymw= Subject key identifier: A8:E3:53:EC:27:5C:AA:C8:39:6C:FC:F8:F1:2E:18:6B:BC:3C:B1:2B Authority key identifier: FF:C7:B4:D6:2F:B2:EE:FE:7E:B5:EA:C5:2E:FE:37:52:A5:CF:FB:D4 Certificate issuer: /CN=afc34129-e2da-4364-a9df-4c6c4db3d903 Certificate serial: 010D0C9F4328584C1ECC24E358EB185C31F2A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.mft Manifest number: 010D0C9F432858431FAAA2A091D5C2B148AC4A8E Signing time: Mon 08 Dec 2025 16:00:09 +0000 Manifest this update: Mon 08 Dec 2025 16:00:09 +0000 Manifest next update: Wed 10 Dec 2025 16:00:00 +0000 Files and hashes: 1: a0d81ea3-b231-387f-bbf8-1c82ac3c29e1.roa (hash: xCDz3oTWViz3PrbzBL4lo12YMhD/51GHFrga/dl1W8Y=) 2: afc34129-e2da-4364-a9df-4c6c4db3d903.crl (hash: 2+RbrCZ3FOLA5Ms7edh/Z3it87aijBeKp5uknyL/fOg=) 3: be28d1d2-9462-3c33-965d-48b5eb9cc62e.roa (hash: rm8g6yPm87hyqcLx4iqc9vK0jPEIk0ZBlcoe4PrznME=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1e:cc:24:e3:58:eb:18:5c:31:f2:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc34129-e2da-4364-a9df-4c6c4db3d903 Validity Not Before: Dec 8 16:00:09 2025 GMT Not After : Dec 10 16:00:00 2025 GMT Subject: CN=f7d61299-e654-4bb1-9325-a63c2d9675d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9d:3b:8c:a4:c5:26:a4:3a:e7:40:a9:14:65: 36:45:84:ec:d6:7a:7e:62:ec:f1:56:05:80:4d:f0: 4d:97:b9:ca:64:21:0c:be:da:01:6f:26:b3:18:64: ea:ea:7c:f8:f2:02:ce:4c:2c:e4:07:dc:02:18:2d: a6:5a:4b:da:ad:a2:2d:5e:b7:70:2f:fe:ed:23:c8: 25:40:fd:e9:ce:1c:f7:26:a0:c0:36:e8:92:ca:a4: 3e:05:c0:36:5c:07:9f:a8:97:cd:88:c0:d2:b2:cd: ec:5f:1f:54:5c:cf:65:6f:ee:d9:f7:27:48:f8:ea: 73:c0:99:f3:fa:f0:bd:91:40:a2:c8:8e:d7:b4:b9: 80:2c:1e:b9:8c:28:38:4f:66:76:39:bd:2c:06:56: 44:5e:06:b3:54:05:02:8d:2e:fb:7c:d0:66:41:29: a9:20:1a:db:33:10:47:87:d8:d5:d6:05:17:42:9f: 84:49:b3:45:09:73:25:c1:c5:91:00:e2:a2:b4:71: f1:ea:41:68:97:19:52:5e:62:14:dc:1f:db:da:ed: 52:65:3e:4b:30:b2:e4:63:d8:5d:86:0d:07:4b:f8: 09:be:32:a0:bc:29:a2:6e:94:e5:da:c7:4b:97:12: 21:72:17:15:50:36:e2:3c:14:a6:33:7b:3c:45:8c: 18:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E3:53:EC:27:5C:AA:C8:39:6C:FC:F8:F1:2E:18:6B:BC:3C:B1:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903/afc34129-e2da-4364-a9df-4c6c4db3d903.crl X509v3 Authority Key Identifier: keyid:FF:C7:B4:D6:2F:B2:EE:FE:7E:B5:EA:C5:2E:FE:37:52:A5:CF:FB:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/afc34129-e2da-4364-a9df-4c6c4db3d903.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:21:e8:0b:43:91:1b:10:f6:24:31:96:13:ec:40:c9:42:9e: 8f:86:d5:e6:74:7a:bf:c1:04:d0:aa:71:34:ac:3e:eb:5b:16: 5a:c4:da:59:db:c8:4e:ba:bb:42:6c:7c:a6:da:33:f3:a4:f7: 59:9b:a4:bb:83:c6:fc:e6:7d:2b:11:1f:16:71:88:9e:77:86: 81:48:7a:0f:28:4f:fc:1c:49:6b:8b:38:b9:08:f2:8b:1e:5a: a6:dd:76:bf:8e:90:67:b7:b4:40:86:fa:1b:72:6a:5c:16:40: 02:32:9e:13:8e:58:fb:71:22:5b:b4:b5:f1:0e:a3:05:e4:3d: 72:77:d7:8b:3f:df:9e:de:af:fd:f4:f8:3a:15:91:28:e7:3a: a5:95:e3:96:e8:b4:60:ee:5a:80:e8:27:c1:40:b5:31:5f:e5: dd:71:ef:7c:cd:9e:b6:47:7e:b3:a9:ba:72:37:95:f6:d5:52: 75:cb:62:75:1b:e1:89:85:d5:3a:fd:fc:06:19:23:b2:d9:f5: fe:c6:38:fb:11:f9:37:3b:e0:b5:7c:a9:1c:7b:ce:78:9d:fc: e9:6b:20:45:63:77:41:6d:fc:fb:e3:61:12:a1:b7:b4:17:96: 3a:f8:91:be:bc:f3:3c:11:54:14:cd:8a:78:18:85:66:7e:c7: c8:a7:90:8b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwezCTjWOsYXDHyoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMzQxMjktZTJkYS00MzY0LWE5ZGYtNGM2YzRkYjNk OTAzMB4XDTI1MTIwODE2MDAwOVoXDTI1MTIxMDE2MDAwMFowLzEtMCsGA1UEAxMk ZjdkNjEyOTktZTY1NC00YmIxLTkzMjUtYTYzYzJkOTY3NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop07jKTFJqQ650CpFGU2RYTs1np+YuzxVgWA TfBNl7nKZCEMvtoBbyazGGTq6nz48gLOTCzkB9wCGC2mWkvaraItXrdwL/7tI8gl QP3pzhz3JqDANuiSyqQ+BcA2XAefqJfNiMDSss3sXx9UXM9lb+7Z9ydI+OpzwJnz +vC9kUCiyI7XtLmALB65jCg4T2Z2Ob0sBlZEXgazVAUCjS77fNBmQSmpIBrbMxBH h9jV1gUXQp+ESbNFCXMlwcWRAOKitHHx6kFolxlSXmIU3B/b2u1SZT5LMLLkY9hd hg0HS/gJvjKgvCmibpTl2sdLlxIhchcVUDbiPBSmM3s8RYwYDQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKjjU+wnXKrIOWz8+PEuGGu8PLErMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hZmMz NDEyOS1lMmRhLTQzNjQtYTlkZi00YzZjNGRiM2Q5MDMvYWZjMzQxMjktZTJkYS00 MzY0LWE5ZGYtNGM2YzRkYjNkOTAzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYWZjMzQxMjktZTJkYS00MzY0LWE5 ZGYtNGM2YzRkYjNkOTAzL2FmYzM0MTI5LWUyZGEtNDM2NC1hOWRmLTRjNmM0ZGIz ZDkwMy5jcmwwHwYDVR0jBBgwFoAU/8e01i+y7v5+terFLv43UqXP+9QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hZmMzNDEyOS1lMmRhLTQzNjQtYTlkZi00YzZj NGRiM2Q5MDMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDBIegLQ5EbEPYkMZYT7EDJ Qp6PhtXmdHq/wQTQqnE0rD7rWxZaxNpZ28hOurtCbHym2jPzpPdZm6S7g8b85n0r ER8WcYied4aBSHoPKE/8HElrizi5CPKLHlqm3Xa/jpBnt7RAhvobcmpcFkACMp4T jlj7cSJbtLXxDqMF5D1yd9eLP9+e3q/99Pg6FZEo5zqlleOW6LRg7lqA6CfBQLUx X+Xdce98zZ62R36zqbpyN5X21VJ1y2J1G+GJhdU6/fwGGSOy2fX+xjj7Efk3O+C1 fKkce854nfzpayBFY3dBbfz742ESobe0F5Y6+JG+vPM8EVQUzYp4GIVmfsfIp5CL -----END CERTIFICATE-----Generated at Mon Dec 8 17:51:49 2025 by rpki-client