This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft File: d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft (raw, json) Hash identifier: wPVJ9Jje9z2ja7+phgtiTvn+8dzjR9ByqhttNNqlRsA= Subject key identifier: 3D:E5:D5:D2:73:C4:49:7E:A6:4A:27:B8:FE:9B:15:84:0D:03:C5:E9 Authority key identifier: 79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A Certificate issuer: /CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea Certificate serial: 010D0C9F4328584C1AF5743AD07737BECB7596B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft Manifest number: 010D0C9F4328584C0D030050911FE3D04B60D106 Signing time: Sun 07 Dec 2025 07:00:09 +0000 Manifest this update: Sun 07 Dec 2025 07:00:09 +0000 Manifest next update: Tue 09 Dec 2025 07:00:00 +0000 Files and hashes: 1: 513386d3-3a25-374a-bbaa-20d7c2d1043b.roa (hash: tCBx+nC1zIwNsPyuc2cehHAuY9KiPJbMJ3pTT51fnUM=) 2: c29da368-12a4-3190-8fb2-2391e3134074.roa (hash: fDn4Vh5MQIVnXcJ5JpbFyMvj1DF587Srpt7faTRH6n4=) 3: d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl (hash: iyg1F7br46bQl/iLAU71yfpnlbBmVXGqNUdpA1NN4yE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1a:f5:74:3a:d0:77:37:be:cb:75:96:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea Validity Not Before: Dec 7 07:00:09 2025 GMT Not After : Dec 9 07:00:00 2025 GMT Subject: CN=8d9252a0-c9c4-4238-9507-349425dbb4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9b:f0:a0:54:8e:78:1c:e3:02:97:04:47:b7: bc:f9:b2:a4:a7:59:01:b3:db:39:9c:51:5e:10:ac: 50:36:47:df:9f:e1:f5:86:97:41:f5:80:e0:8c:19: d0:80:a3:51:a3:ce:46:a4:74:fa:bd:76:41:de:a8: 69:fe:2a:ad:31:c7:ef:1f:4c:c6:1a:71:26:b7:63: e5:ed:f5:33:3f:11:2d:48:fd:50:04:c9:a9:ca:e8: 8a:fd:44:7e:bf:3a:14:91:d0:1c:fd:a0:a5:d0:ef: 81:3d:61:6c:85:6e:38:3c:7d:d7:d7:22:e8:e4:66: 1d:c1:c6:bc:cc:74:4c:8f:ee:ef:c9:2c:ec:cc:2c: 00:55:6c:d3:e0:f1:6c:ad:a8:89:78:1e:0d:96:8a: e7:56:26:bb:03:73:6d:91:66:25:65:ef:82:06:57: 54:b6:4a:82:3e:03:5b:1c:3b:59:54:98:30:c4:23: 61:5c:e0:b4:f0:f9:85:ea:8d:d5:9f:ca:b5:d6:ff: 09:1d:64:de:29:d5:fc:d7:e3:53:9f:57:05:42:fd: 68:ee:7a:86:d5:de:68:7b:0d:e5:2c:99:a6:f2:1f: 06:90:ce:4d:e5:97:a9:03:37:ff:97:75:4a:09:b5: ce:61:16:93:5f:09:77:30:77:9e:51:f2:b6:5e:8f: ca:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E5:D5:D2:73:C4:49:7E:A6:4A:27:B8:FE:9B:15:84:0D:03:C5:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl X509v3 Authority Key Identifier: keyid:79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b1:6c:f9:6f:aa:7e:91:e4:3f:ea:d8:1c:ea:0b:22:d0:4a: 25:2b:56:93:7b:bf:c5:4e:a5:b9:88:e4:19:1c:d8:cc:cb:43: be:f0:93:ca:90:2a:81:58:99:88:18:a1:dd:9b:fe:11:f1:d5: e5:09:f5:0f:29:9c:89:63:7a:6e:09:ab:34:75:65:fd:ae:1f: db:c0:b8:fa:4b:19:60:e8:64:ad:57:d6:05:88:25:62:d2:57: 54:a6:d0:26:57:e4:d8:75:b5:b3:99:d9:be:60:b9:fb:23:50: 7b:be:c4:64:b2:95:15:de:0f:db:a8:64:02:3b:e7:f2:f8:e0: 62:ac:25:35:a0:35:e6:9c:5b:b8:1c:48:05:f0:90:ef:86:b4: c6:be:e3:86:1f:16:b0:54:b2:21:cd:9d:3e:95:ba:71:79:fa: 49:83:a4:e2:5d:02:77:9d:a6:b4:50:51:c8:75:e4:b0:84:9c: c3:29:f3:b1:26:99:f1:88:11:95:1a:fe:2d:75:3e:65:ac:25: e5:d1:59:2c:96:b3:33:20:0e:78:38:7d:04:d3:2f:3a:44:51: b9:59:be:49:50:6e:b3:26:f1:ea:8d:d6:df:3e:29:ce:2b:13: 31:44:c2:0a:4a:d6:83:e1:8e:85:bb:1a:75:b3:5f:65:ed:c7: 8e:b6:ad:ba -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwa9XQ60Hc3vst1lrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRmYTE3MmUtMjc3OS00ODc4LThiZDMtMWI5MmQ3YTE4 Y2VhMB4XDTI1MTIwNzA3MDAwOVoXDTI1MTIwOTA3MDAwMFowLzEtMCsGA1UEAxMk OGQ5MjUyYTAtYzljNC00MjM4LTk1MDctMzQ5NDI1ZGJiNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJvwoFSOeBzjApcER7e8+bKkp1kBs9s5nFFe EKxQNkffn+H1hpdB9YDgjBnQgKNRo85GpHT6vXZB3qhp/iqtMcfvH0zGGnEmt2Pl 7fUzPxEtSP1QBMmpyuiK/UR+vzoUkdAc/aCl0O+BPWFshW44PH3X1yLo5GYdwca8 zHRMj+7vySzszCwAVWzT4PFsraiJeB4NlornVia7A3NtkWYlZe+CBldUtkqCPgNb HDtZVJgwxCNhXOC08PmF6o3Vn8q11v8JHWTeKdX81+NTn1cFQv1o7nqG1d5oew3l LJmm8h8GkM5N5ZepAzf/l3VKCbXOYRaTXwl3MHeeUfK2Xo/K7QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD3l1dJzxEl+pkonuP6bFYQNA8XpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNGZh MTcyZS0yNzc5LTQ4NzgtOGJkMy0xYjkyZDdhMThjZWEvZDRmYTE3MmUtMjc3OS00 ODc4LThiZDMtMWI5MmQ3YTE4Y2VhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDRmYTE3MmUtMjc3OS00ODc4LThi ZDMtMWI5MmQ3YTE4Y2VhL2Q0ZmExNzJlLTI3NzktNDg3OC04YmQzLTFiOTJkN2Ex OGNlYS5jcmwwHwYDVR0jBBgwFoAUec1OoZNMD8fpOu7iM/H7qRM+r3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNGZhMTcyZS0yNzc5LTQ4NzgtOGJkMy0xYjky ZDdhMThjZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBksWz5b6p+keQ/6tgc6gsi 0EolK1aTe7/FTqW5iOQZHNjMy0O+8JPKkCqBWJmIGKHdm/4R8dXlCfUPKZyJY3pu Cas0dWX9rh/bwLj6Sxlg6GStV9YFiCVi0ldUptAmV+TYdbWzmdm+YLn7I1B7vsRk spUV3g/bqGQCO+fy+OBirCU1oDXmnFu4HEgF8JDvhrTGvuOGHxawVLIhzZ0+lbpx efpJg6TiXQJ3naa0UFHIdeSwhJzDKfOxJpnxiBGVGv4tdT5lrCXl0VkslrMzIA54 OH0E0y86RFG5Wb5JUG6zJvHqjdbfPinOKxMxRMIKStaD4Y6Fuxp1s19l7ceOtq26 -----END CERTIFICATE-----Generated at Sun Dec 7 14:32:11 2025 by rpki-client