This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft File: 21873e5a-a16d-4890-8dfe-c281bf6e020e.mft (raw, json) Hash identifier: xan1O0BbHQrQADykb6DMShlHNUBGdMAXPWdv9hYOtow= Subject key identifier: B7:5A:21:09:64:69:49:40:79:43:B7:23:29:04:21:D1:F3:56:47:0E Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584C2F152345139D6C0B7E2834C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft Manifest number: 010D0C9F4328584125F19CB051F83E2E5E6C6442 Signing time: Sun 14 Dec 2025 12:00:09 +0000 Manifest this update: Sun 14 Dec 2025 12:00:09 +0000 Manifest next update: Wed 17 Dec 2025 12:00:00 +0000 Files and hashes: 1: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (hash: NQGa/mxiZUYrPjMEtpKGdvAsKtew1Nn1QH7vPdfpTVU=) 2: 21873e5a-a16d-4890-8dfe-c281bf6e020e.crl (hash: VCgeYeVVdNeX3v/HX7OIihuI1whPaIL0pQbC/bml/Q0=) 3: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (hash: Fj+nFM0srdsiq8Kn6OSBXJ0xYxoMTThhB1YwWHtBWZg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2f:15:23:45:13:9d:6c:0b:7e:28:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Dec 14 12:00:09 2025 GMT Not After : Dec 17 12:00:00 2025 GMT Subject: CN=1a1a980f-5a44-49b3-a8f5-2f2b558e66a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0e:bf:09:20:98:0b:75:42:6f:75:69:c7:66: e1:99:71:a3:b1:5a:05:b5:01:11:ae:88:7a:2a:4b: 87:0f:85:f1:b2:6c:35:f1:38:65:14:c2:ee:ba:4d: a1:b7:f7:ac:e3:51:43:91:88:97:7c:70:91:e3:a3: 41:07:85:ca:25:a9:25:21:7e:db:35:cb:9e:7e:a1: 3d:91:43:4b:e1:ff:8f:03:c1:55:ca:8f:e9:d8:7d: 5c:8a:4c:72:14:a6:7e:7f:74:c2:62:1c:94:5b:d6: 15:d7:63:f3:00:96:71:f3:5d:57:29:46:3f:b6:81: f1:71:26:f7:e3:64:88:c9:1f:3f:bb:8f:87:87:87: 09:b6:a3:32:5e:4e:cf:81:1a:47:d8:a9:8e:37:59: b8:75:ac:b2:86:e0:2c:b4:ed:f9:33:cc:a3:27:8e: 26:88:9d:bd:70:90:21:42:09:e2:8e:9c:58:a8:8c: 9e:b9:0f:8e:bf:44:37:76:00:38:e7:33:73:f3:9b: cc:5c:6e:5f:b8:5f:02:80:22:c2:eb:27:f5:f0:f0: ad:eb:2c:d2:0f:a0:4c:55:7b:c4:2e:35:f6:0e:b0: f5:e7:2c:03:a4:03:2a:ef:92:4e:bd:68:0f:0a:92: 1a:74:28:58:3e:1c:09:6d:5f:07:86:f9:f9:59:4c: 3e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5A:21:09:64:69:49:40:79:43:B7:23:29:04:21:D1:F3:56:47:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:3a:38:c9:9a:f5:6b:0d:17:1e:d4:0c:07:b1:55:96:fd:5d: 74:4a:aa:c8:77:4f:66:36:5d:2c:38:fe:68:14:2a:93:bd:35: 2f:51:aa:fb:a5:f5:40:6b:d8:fe:31:38:be:b9:d2:f1:10:39: 53:89:4d:5d:c7:b3:fb:19:03:f1:06:c2:74:a6:29:7d:41:53: 56:de:5e:5a:f9:3e:1e:5a:96:f5:b5:0d:c4:90:f1:1f:96:e6: e1:da:f2:23:09:97:32:31:6c:34:48:88:68:1d:7b:07:81:cf: d9:ff:f3:5f:bf:a3:71:4b:28:40:b5:11:d8:7d:7c:48:68:14: 5d:c5:de:de:8f:82:9b:eb:9d:2c:78:0c:24:2b:6c:23:31:04: 24:ad:08:6d:88:42:f8:75:7c:1f:dd:3a:da:67:97:00:2b:56: cf:c9:19:f8:19:48:86:d3:6d:c5:9f:c3:4f:41:47:4c:a8:0b: cc:8f:80:f5:d1:eb:9d:8d:84:8e:e7:3a:9f:7f:df:b3:87:31: c4:24:50:da:59:9f:3d:03:b0:e4:6a:9b:c1:ff:6e:ff:0e:b3: b2:13:51:ac:08:46:58:b0:25:69:ca:26:83:b2:6f:48:fe:17: ab:79:6a:38:9e:8e:b8:36:0a:2c:f5:d5:82:6a:89:c8:7a:8e: 40:c4:56:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwvFSNFE51sC34oNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI1MTIxNDEyMDAwOVoXDTI1MTIxNzEyMDAwMFowLzEtMCsGA1UEAxMk MWExYTk4MGYtNWE0NC00OWIzLWE4ZjUtMmYyYjU1OGU2NmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhg6/CSCYC3VCb3Vpx2bhmXGjsVoFtQERroh6 KkuHD4Xxsmw18ThlFMLuuk2ht/es41FDkYiXfHCR46NBB4XKJaklIX7bNcuefqE9 kUNL4f+PA8FVyo/p2H1cikxyFKZ+f3TCYhyUW9YV12PzAJZx811XKUY/toHxcSb3 42SIyR8/u4+Hh4cJtqMyXk7PgRpH2KmON1m4dayyhuAstO35M8yjJ44miJ29cJAh QgnijpxYqIyeuQ+Ov0Q3dgA45zNz85vMXG5fuF8CgCLC6yf18PCt6yzSD6BMVXvE LjX2DrD15ywDpAMq75JOvWgPCpIadChYPhwJbV8Hhvn5WUw+cwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLdaIQlkaUlAeUO3IykEIdHzVkcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMjE4NzNlNWEtYTE2ZC00 ODkwLThkZmUtYzI4MWJmNmUwMjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUOjjJmvVrDRce1AwHsVWW /V10SqrId09mNl0sOP5oFCqTvTUvUar7pfVAa9j+MTi+udLxEDlTiU1dx7P7GQPx BsJ0pil9QVNW3l5a+T4eWpb1tQ3EkPEflubh2vIjCZcyMWw0SIhoHXsHgc/Z//Nf v6NxSyhAtRHYfXxIaBRdxd7ej4Kb650seAwkK2wjMQQkrQhtiEL4dXwf3TraZ5cA K1bPyRn4GUiG023Fn8NPQUdMqAvMj4D10eudjYSO5zqff9+zhzHEJFDaWZ89A7Dk apvB/27/DrOyE1GsCEZYsCVpyiaDsm9I/hereWo4no64Ngos9dWCaonIeo5AxFYN -----END CERTIFICATE-----Generated at Sun Dec 14 22:51:39 2025 by rpki-client