This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft File: cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft (raw, json) Hash identifier: T+UsM75pHUOsQXRyCZ7MV66jwKNhBtd+G0BA2euH4rU= Subject key identifier: 6E:87:5F:3A:29:8B:73:83:B0:C4:B4:18:E5:9D:FD:AB:33:F2:E3:0A Authority key identifier: DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57 Certificate issuer: /CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f Certificate serial: 010D0C9F4328584C43528F59DC0108CD06A2C980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft Manifest number: 010D0C9F4328584073A822003F42BAF0B9DFB83E Signing time: Sun 21 Dec 2025 18:00:03 +0000 Manifest this update: Sun 21 Dec 2025 18:00:03 +0000 Manifest next update: Tue 23 Dec 2025 18:00:00 +0000 Files and hashes: 1: be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer (hash: Q766is9CsNxf+oAeoFRHBlF3rRv+yC8thSLO7UN+2pU=) 2: cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl (hash: f0ev1Ds9waG8mDxJ0R67keJU9dniL7eTfAtLl6zFFw0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:43:52:8f:59:dc:01:08:cd:06:a2:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf3a812c-0f10-45ec-aca3-68a73e99d08f Validity Not Before: Dec 21 18:00:03 2025 GMT Not After : Dec 23 18:00:00 2025 GMT Subject: CN=aa332e92-db7d-4fcc-b25a-1c5249898c9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:1d:27:c1:84:23:65:7a:5d:25:29:38:db: 74:bb:8b:1a:1d:6f:19:72:76:63:0e:73:84:3d:e5: 0d:26:75:5e:66:69:1c:b0:5a:ee:6d:ef:ce:01:1d: 15:ed:f1:cf:bc:ff:8a:c9:0e:aa:06:d5:2f:cb:6a: 9b:a9:6c:99:ed:f5:ea:3c:36:58:5a:e5:0d:7a:62: b8:fc:c7:ef:ca:49:61:a0:d1:b9:c0:68:0a:ea:69: c3:bd:c6:bd:3f:5c:09:c9:a1:17:16:db:97:25:a9: 05:c4:39:89:a9:a1:30:e8:9e:50:ae:f1:5d:7e:e2: 13:d9:62:78:cc:fd:c6:8d:2e:72:b9:fc:ae:48:c9: 4e:6d:62:82:2a:c6:9e:2f:8e:f4:de:8f:54:a8:74: be:f5:e8:54:7f:98:87:0b:33:79:6c:7d:90:c6:64: fa:72:bf:e5:d7:6a:d6:96:c0:cf:38:9c:0d:0e:0a: 9b:4f:02:d1:28:f7:e0:82:18:b8:20:55:db:ef:9c: a9:f7:68:82:00:dc:24:77:69:f5:37:78:65:04:7b: b6:f1:ab:5d:0c:3f:dd:93:12:7e:0d:67:ce:19:d2: 84:38:2d:e1:d8:c8:24:63:e4:3b:63:8a:cc:51:73: 3c:31:c6:21:93:38:d4:6c:67:30:e4:31:d1:ba:0a: ef:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:87:5F:3A:29:8B:73:83:B0:C4:B4:18:E5:9D:FD:AB:33:F2:E3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl X509v3 Authority Key Identifier: keyid:DC:9B:54:B4:DB:4F:2C:3A:22:23:D0:5A:D7:66:80:40:6B:79:1F:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:52:2e:e3:d0:09:22:d7:ff:5e:cd:1c:60:68:85:f5:c3:f7: 44:b3:1c:4d:e3:18:d7:c3:60:af:be:ce:6e:5b:80:21:2e:46: 7c:79:ab:dd:8c:a4:a4:4c:ca:85:b8:64:fe:c9:c1:fe:a0:f4: dc:d3:0d:c9:e7:d0:dc:a9:55:fd:64:95:32:58:d5:d0:23:88: ae:f7:74:8a:9d:9a:de:41:95:1f:cd:9e:ec:9a:51:3c:ba:a0: b7:0d:8b:73:da:df:11:b7:f9:b2:a1:cf:05:bc:3f:5e:b2:32: fa:37:9a:33:5a:b4:3c:c0:bf:e2:a1:de:a1:f5:7c:2b:a0:49: 68:1d:5b:24:8b:43:93:8c:77:26:2b:7c:7d:a4:d7:f0:46:76: 91:08:05:e7:b4:f8:85:72:6b:13:65:27:d9:cb:cb:d9:e1:69: db:41:62:18:91:20:b3:1b:74:09:e0:ad:b1:fe:ae:dc:b7:83: 21:17:44:90:b1:ca:da:7a:ca:87:85:03:4e:53:60:c1:ac:90: 07:08:c4:f6:e3:a7:ee:47:c4:ff:2a:35:dd:a0:cd:06:de:5b: c5:16:6c:78:1e:2e:77:0a:46:5c:46:1b:12:1c:e4:4b:e8:cc: d9:0b:32:5d:21:44:60:14:29:52:dc:38:86:48:90:69:97:05: 33:ef:cb:0a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExDUo9Z3AEIzQaiyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzYTgxMmMtMGYxMC00NWVjLWFjYTMtNjhhNzNlOTlk MDhmMB4XDTI1MTIyMTE4MDAwM1oXDTI1MTIyMzE4MDAwMFowLzEtMCsGA1UEAxMk YWEzMzJlOTItZGI3ZC00ZmNjLWIyNWEtMWM1MjQ5ODk4YzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSwdJ8GEI2V6XSUpONt0u4saHW8ZcnZjDnOE PeUNJnVeZmkcsFrube/OAR0V7fHPvP+KyQ6qBtUvy2qbqWyZ7fXqPDZYWuUNemK4 /MfvyklhoNG5wGgK6mnDvca9P1wJyaEXFtuXJakFxDmJqaEw6J5QrvFdfuIT2WJ4 zP3GjS5yufyuSMlObWKCKsaeL4703o9UqHS+9ehUf5iHCzN5bH2QxmT6cr/l12rW lsDPOJwNDgqbTwLRKPfgghi4IFXb75yp92iCANwkd2n1N3hlBHu28atdDD/dkxJ+ DWfOGdKEOC3h2MgkY+Q7Y4rMUXM8McYhkzjUbGcw5DHRugrvBwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFG6HXzopi3ODsMS0GOWd/asz8uMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZjNh ODEyYy0wZjEwLTQ1ZWMtYWNhMy02OGE3M2U5OWQwOGYvY2YzYTgxMmMtMGYxMC00 NWVjLWFjYTMtNjhhNzNlOTlkMDhmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2YzYTgxMmMtMGYxMC00NWVjLWFj YTMtNjhhNzNlOTlkMDhmL2NmM2E4MTJjLTBmMTAtNDVlYy1hY2EzLTY4YTczZTk5 ZDA4Zi5jcmwwHwYDVR0jBBgwFoAU3JtUtNtPLDoiI9Ba12aAQGt5H1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZjNhODEyYy0wZjEwLTQ1ZWMtYWNhMy02OGE3 M2U5OWQwOGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEUi7j0Aki1/9ezRxgaIX1 w/dEsxxN4xjXw2Cvvs5uW4AhLkZ8eavdjKSkTMqFuGT+ycH+oPTc0w3J59DcqVX9 ZJUyWNXQI4iu93SKnZreQZUfzZ7smlE8uqC3DYtz2t8Rt/myoc8FvD9esjL6N5oz WrQ8wL/iod6h9XwroEloHVski0OTjHcmK3x9pNfwRnaRCAXntPiFcmsTZSfZy8vZ 4WnbQWIYkSCzG3QJ4K2x/q7ct4MhF0SQscraesqHhQNOU2DBrJAHCMT246fuR8T/ KjXdoM0G3lvFFmx4Hi53CkZcRhsSHORL6MzZCzJdIURgFClS3DiGSJBplwUz78sK -----END CERTIFICATE-----Generated at Mon Dec 22 11:56:30 2025 by rpki-client