This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft File: 1af0a650-f612-4b2a-9af3-b8090917fefd.mft (raw, json) Hash identifier: AzPUJCpwRWfb8kzpvQB1AmU8MnJC8gEoQOIIKmKNsnU= Subject key identifier: DB:55:E0:5B:93:7A:E0:C1:0D:7E:1C:3B:15:72:D6:85:47:5B:AD:72 Authority key identifier: 0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D Certificate issuer: /CN=1af0a650-f612-4b2a-9af3-b8090917fefd Certificate serial: 010D0C9F4328584C800AEC4D5BBBD0417BDFDAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft Manifest number: 010D0C9F4328584BE67F5BDBA8BBD49634FD1938 Signing time: Mon 12 Jan 2026 12:00:04 +0000 Manifest this update: Mon 12 Jan 2026 12:00:04 +0000 Manifest next update: Wed 14 Jan 2026 12:00:00 +0000 Files and hashes: 1: 1af0a650-f612-4b2a-9af3-b8090917fefd.crl (hash: Tv27/ZOpOhkPUW8EAmn0ZZXwVy6tVp9qJwdaB5z/sk4=) 2: a163ff4c-23b6-3304-be68-6017eeb9e220.roa (hash: Pf/B365zT6MABXsqQnlXoHX+HpGvmh5X1VsjGm24c+Y=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Jan 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:0a:ec:4d:5b:bb:d0:41:7b:df:da:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1af0a650-f612-4b2a-9af3-b8090917fefd Validity Not Before: Jan 12 12:00:04 2026 GMT Not After : Jan 14 12:00:00 2026 GMT Subject: CN=1f023e77-9a68-4ca8-b0d6-9c6229635b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:eb:53:d9:30:02:a9:0f:7e:b6:31:1e:24: 54:12:e3:5f:87:47:ae:cd:8f:d6:5b:d7:ac:40:17: a7:6c:df:2b:0e:50:3b:5e:7f:38:28:2e:99:5f:6a: 9e:08:16:99:64:67:1c:7d:60:7a:e2:5d:c2:b2:72: d1:37:3a:5f:80:b9:12:bb:e7:8a:61:e4:d0:a9:43: db:27:58:29:5e:b0:d5:b1:cd:8c:a3:21:d6:d6:fc: de:7e:cc:b7:a5:ee:f6:ba:fa:65:6c:79:33:5e:06: 35:59:94:db:3a:38:4a:44:8e:06:a7:33:78:87:8c: a6:13:a9:db:9a:85:d8:41:a2:69:19:e8:b7:d9:c1: 6a:2d:26:a9:d0:70:a2:8b:69:b4:d8:33:10:b6:0b: 56:94:d5:5b:66:8a:4e:87:c4:35:2b:79:f5:8b:f4: a8:c7:64:82:01:dc:d1:b9:41:c9:52:00:b1:b0:19: df:72:a7:78:53:78:1f:ed:95:4f:92:e4:61:56:c6: ba:9e:46:b2:3a:c8:3a:2f:a8:c9:e6:3c:19:b4:71: ac:6d:90:8c:13:3d:06:1e:66:89:20:c6:83:49:2e: f8:09:11:fc:fe:a4:87:6b:c7:4d:32:cb:8d:1d:ea: f1:6a:f0:66:c1:64:4e:dd:34:46:fa:ce:31:8f:18: 50:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:55:E0:5B:93:7A:E0:C1:0D:7E:1C:3B:15:72:D6:85:47:5B:AD:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd/1af0a650-f612-4b2a-9af3-b8090917fefd.crl X509v3 Authority Key Identifier: keyid:0D:64:E2:D9:AC:AA:5E:77:FC:CF:56:FF:07:D1:05:68:E5:F0:24:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1af0a650-f612-4b2a-9af3-b8090917fefd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f3:4e:3b:e4:0f:ed:ab:a5:8e:eb:ba:99:ae:c1:a5:6c:7e: 9b:93:d5:6c:94:1c:e2:60:22:f3:c1:ce:59:25:e7:28:8c:b4: ed:d3:cd:ac:2b:bf:73:bc:84:7d:79:be:e0:d8:ea:53:8d:89: 4f:ec:74:99:f2:0d:f0:94:c5:78:26:44:87:b8:92:c5:75:c7: bd:09:c1:e1:c8:57:bb:2c:27:9d:0f:62:d6:a4:5c:0b:d5:67: 38:35:f2:1f:23:eb:56:d4:3f:c1:33:d9:ab:ea:f3:ad:ce:e2: c0:bc:13:fc:d3:79:e4:47:d5:b7:72:de:0d:da:27:9f:f5:f3: 77:fb:e5:3b:11:d7:10:43:21:5a:d1:25:0c:64:0f:7f:85:03: 93:e9:ae:97:c1:f0:fb:5c:5c:1a:01:2c:e2:33:ef:3f:55:bb: fe:1b:be:db:5c:68:bb:ce:2a:c3:91:94:a3:ae:1e:c0:76:29: 00:20:fd:5f:e8:c9:aa:31:3e:a1:a0:dd:f2:de:07:3f:2e:f5: a8:4e:63:52:2b:5d:f8:6d:5d:e6:44:8b:89:3b:b5:bb:7c:c7: 57:b6:8e:11:c8:6e:50:9d:8d:41:1b:03:b7:7f:ba:26:fb:a7: d7:a2:6b:c3:39:ae:54:b4:d5:55:d0:67:b1:59:be:da:7d:29: 16:6d:ce:b9 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyACuxNW7vQQXvf2sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFmMGE2NTAtZjYxMi00YjJhLTlhZjMtYjgwOTA5MTdm ZWZkMB4XDTI2MDExMjEyMDAwNFoXDTI2MDExNDEyMDAwMFowLzEtMCsGA1UEAxMk MWYwMjNlNzctOWE2OC00Y2E4LWIwZDYtOWM2MjI5NjM1YjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+PrU9kwAqkPfrYxHiRUEuNfh0euzY/WW9es QBenbN8rDlA7Xn84KC6ZX2qeCBaZZGccfWB64l3CsnLRNzpfgLkSu+eKYeTQqUPb J1gpXrDVsc2MoyHW1vzefsy3pe72uvplbHkzXgY1WZTbOjhKRI4GpzN4h4ymE6nb moXYQaJpGei32cFqLSap0HCii2m02DMQtgtWlNVbZopOh8Q1K3n1i/Sox2SCAdzR uUHJUgCxsBnfcqd4U3gf7ZVPkuRhVsa6nkayOsg6L6jJ5jwZtHGsbZCMEz0GHmaJ IMaDSS74CRH8/qSHa8dNMsuNHerxavBmwWRO3TRG+s4xjxhQXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNtV4FuTeuDBDX4cOxVy1oVHW61yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYw YTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5MDkxN2ZlZmQvMWFmMGE2NTAtZjYxMi00 YjJhLTlhZjMtYjgwOTA5MTdmZWZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMWFmMGE2NTAtZjYxMi00YjJhLTlh ZjMtYjgwOTA5MTdmZWZkLzFhZjBhNjUwLWY2MTItNGIyYS05YWYzLWI4MDkwOTE3 ZmVmZC5jcmwwHwYDVR0jBBgwFoAUDWTi2ayqXnf8z1b/B9EFaOXwJJ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xYWYwYTY1MC1mNjEyLTRiMmEtOWFmMy1iODA5 MDkxN2ZlZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBA80475A/tq6WO67qZrsGl bH6bk9VslBziYCLzwc5ZJecojLTt082sK79zvIR9eb7g2OpTjYlP7HSZ8g3wlMV4 JkSHuJLFdce9CcHhyFe7LCedD2LWpFwL1Wc4NfIfI+tW1D/BM9mr6vOtzuLAvBP8 03nkR9W3ct4N2ief9fN3++U7EdcQQyFa0SUMZA9/hQOT6a6XwfD7XFwaASziM+8/ Vbv+G77bXGi7zirDkZSjrh7AdikAIP1f6MmqMT6hoN3y3gc/LvWoTmNSK134bV3m RIuJO7W7fMdXto4RyG5QnY1BGwO3f7om+6fXomvDOa5UtNVV0GexWb7afSkWbc65 -----END CERTIFICATE-----Generated at Mon Jan 12 17:20:23 2026 by rpki-client