This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft File: 3e511aed-c666-436d-b4a4-947790e6c9e5.mft (raw, json) Hash identifier: gpMpHhkreVUVm6sGbEnQ/isxMF1FUu3CUwcgimMvet8= Subject key identifier: 6D:2B:22:EB:94:E5:03:20:C4:E8:86:D4:E5:29:A8:87:3C:B2:FC:1F Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Certificate serial: 010D0C9F4328584C631412A32D3496A771845D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft Manifest number: 010D0C9F432858442FB69E4685B850D03895F603 Signing time: Fri 02 Jan 2026 03:00:04 +0000 Manifest this update: Fri 02 Jan 2026 03:00:04 +0000 Manifest next update: Mon 05 Jan 2026 03:00:00 +0000 Files and hashes: 1: 2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (hash: RWYhTQAzbUWDVxGkVcCvxWZvkvfGM9+TUXuWbY1nQ7M=) 2: 3e511aed-c666-436d-b4a4-947790e6c9e5.crl (hash: mtvLlLcDcriQJjOiIUxVThIkGaxxVq5ETgG/eCsX7kg=) 3: 938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (hash: abXImAg+Q4JTRrOlOmP00xtTyX6xiM74fyxjPz3bloo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:63:14:12:a3:2d:34:96:a7:71:84:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5 Validity Not Before: Jan 2 03:00:04 2026 GMT Not After : Jan 5 03:00:00 2026 GMT Subject: CN=cd308d53-d004-4af9-b182-1fec25252b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2d:68:58:19:2d:49:42:30:70:af:58:ae:2e: a8:4c:57:4e:bb:32:2f:0c:35:80:9f:1f:75:34:c0: 8b:4b:80:32:f9:c5:ad:ca:52:c2:cc:22:67:56:a6: 4b:e9:55:cf:cc:c4:e3:db:8e:fa:c6:01:93:6b:3e: 06:7f:da:75:7b:91:ca:fa:1c:41:f5:5e:6a:59:a9: 98:d5:6c:56:e1:6f:1f:85:2f:07:f5:b6:54:b2:28: da:41:a8:f1:6d:77:79:e7:f9:90:ac:00:37:6e:38: 49:d0:20:d0:69:e2:80:d3:ce:68:1f:57:b5:ef:04: ca:d6:eb:01:10:30:cd:37:ae:d2:57:69:92:db:9f: 2d:a8:f5:b8:6f:63:e4:f2:84:8e:95:e1:86:3a:8e: 1c:ea:48:16:2b:23:f3:73:a0:2c:e0:72:15:b9:78: 10:3d:2b:ab:65:a5:ea:eb:00:12:aa:f2:5c:92:50: 0e:72:87:d0:b4:04:63:ba:64:25:21:bd:2a:71:2d: b0:bb:0f:0c:09:00:ca:ff:d9:03:68:9b:29:23:ae: 83:bc:4f:14:57:6b:78:c0:24:68:9a:f0:a1:85:8a: 28:d7:48:66:de:a5:7b:90:df:6d:2f:52:c2:95:36: 9b:5c:4c:51:a4:0c:f3:fa:57:de:1a:0c:cd:6a:43: 84:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2B:22:EB:94:E5:03:20:C4:E8:86:D4:E5:29:A8:87:3C:B2:FC:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl X509v3 Authority Key Identifier: keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:d9:a2:e2:9c:9d:c5:5d:a0:c2:33:9b:38:72:13:1d:5f:38: 75:42:3b:7a:21:15:9b:7e:d4:a7:d8:64:fb:0d:ff:8e:ae:c9: 2d:51:67:19:02:3b:0a:79:4a:31:a8:ff:37:5c:96:b2:46:4d: b3:f3:5b:c5:a3:18:7f:8f:7c:fd:17:85:c5:fe:42:7e:f3:df: 3f:7d:a4:74:d5:29:0c:27:a8:67:7a:e5:5a:68:d3:03:c8:e7: 34:bb:12:10:40:a4:67:38:59:4c:4d:9e:22:a6:da:d7:5e:5b: d4:cd:98:4e:45:b2:80:ad:db:11:35:ea:7a:b5:8a:7a:55:15: 63:19:59:e6:de:34:15:38:b5:45:bb:83:0b:bb:5e:ba:f7:41: 0b:48:4e:e4:17:00:2e:7c:67:6b:e1:5e:6c:f0:2b:83:cf:16: cb:94:4a:5a:37:fd:8a:f4:cc:00:45:e8:d1:2b:c8:76:f9:0f: 9c:5b:5e:63:c1:ca:0f:b2:a1:54:26:75:97:2f:20:9d:bd:fe: 5a:ac:9c:ba:c7:f2:5a:dd:a9:3f:0e:80:f3:a1:4e:f7:0e:1a: e4:d9:8b:fe:00:87:8c:82:3c:cc:0b:dd:50:da:90:09:3b:3c: d4:8d:fa:af:35:b5:f4:f3:d6:15:1e:6d:f7:d0:9e:a2:9e:25: c7:71:1b:f7 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExjFBKjLTSWp3GEXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U1MTFhZWQtYzY2Ni00MzZkLWI0YTQtOTQ3NzkwZTZj OWU1MB4XDTI2MDEwMjAzMDAwNFoXDTI2MDEwNTAzMDAwMFowLzEtMCsGA1UEAxMk Y2QzMDhkNTMtZDAwNC00YWY5LWIxODItMWZlYzI1MjUyYjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi1oWBktSUIwcK9Yri6oTFdOuzIvDDWAnx91 NMCLS4Ay+cWtylLCzCJnVqZL6VXPzMTj2476xgGTaz4Gf9p1e5HK+hxB9V5qWamY 1WxW4W8fhS8H9bZUsijaQajxbXd55/mQrAA3bjhJ0CDQaeKA085oH1e17wTK1usB EDDNN67SV2mS258tqPW4b2Pk8oSOleGGOo4c6kgWKyPzc6As4HIVuXgQPSurZaXq 6wASqvJcklAOcofQtARjumQlIb0qcS2wuw8MCQDK/9kDaJspI66DvE8UV2t4wCRo mvChhYoo10hm3qV7kN9tL1LClTabXExRpAzz+lfeGgzNakOE9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG0rIuuU5QMgxOiG1OUpqIc8svwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUx MWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3OTBlNmM5ZTUvM2U1MTFhZWQtYzY2Ni00 MzZkLWI0YTQtOTQ3NzkwZTZjOWU1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2U1MTFhZWQtYzY2Ni00MzZkLWI0 YTQtOTQ3NzkwZTZjOWU1LzNlNTExYWVkLWM2NjYtNDM2ZC1iNGE0LTk0Nzc5MGU2 YzllNS5jcmwwHwYDVR0jBBgwFoAUKwmS/tmDKfEKhQALGTTw3YepF2AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZTUxMWFlZC1jNjY2LTQzNmQtYjRhNC05NDc3 OTBlNmM5ZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBV2aLinJ3FXaDCM5s4chMd Xzh1Qjt6IRWbftSn2GT7Df+OrsktUWcZAjsKeUoxqP83XJayRk2z81vFoxh/j3z9 F4XF/kJ+898/faR01SkMJ6hneuVaaNMDyOc0uxIQQKRnOFlMTZ4iptrXXlvUzZhO RbKArdsRNep6tYp6VRVjGVnm3jQVOLVFu4MLu16690ELSE7kFwAufGdr4V5s8CuD zxbLlEpaN/2K9MwARejRK8h2+Q+cW15jwcoPsqFUJnWXLyCdvf5arJy6x/Ja3ak/ DoDzoU73Dhrk2Yv+AIeMgjzMC91Q2pAJOzzUjfqvNbX089YVHm330J6iniXHcRv3 -----END CERTIFICATE-----Generated at Fri Jan 2 11:21:16 2026 by rpki-client