This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft File: 23c12684-32d1-4215-8c13-2912d85e2080.mft (raw, json) Hash identifier: 4INqPc3UpgKR9DLkxoEg4/KvLldMWIy3mZ9HHtz1uzk= Subject key identifier: AF:4E:09:15:83:84:5E:69:48:AB:E0:92:E2:06:30:55:58:FC:74:9C Authority key identifier: B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F Certificate issuer: /CN=23c12684-32d1-4215-8c13-2912d85e2080 Certificate serial: 010D0C9F4328584C3A7B6BFBA5AFBE9F4CC8A4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft Manifest number: 010D0C9F432858496FD72A74B2C272C9F5FAB3E6 Signing time: Thu 18 Dec 2025 14:00:08 +0000 Manifest this update: Thu 18 Dec 2025 14:00:08 +0000 Manifest next update: Sun 21 Dec 2025 14:00:00 +0000 Files and hashes: 1: 23c12684-32d1-4215-8c13-2912d85e2080.crl (hash: fdnM/coiapUCR+VsjrTeJbl06TAzOiz2aWmyGjZEEJY=) 2: 8f690edc-6f21-33ed-b758-ed68d6ea1ce5.roa (hash: ymdPD2lr3y2KvVGdKdQmy9TXJulIA7qfCq4dWC29wHI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3a:7b:6b:fb:a5:af:be:9f:4c:c8:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23c12684-32d1-4215-8c13-2912d85e2080 Validity Not Before: Dec 18 14:00:08 2025 GMT Not After : Dec 21 14:00:00 2025 GMT Subject: CN=c2d989d3-5de1-4200-b2a2-19e8da6c02f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8b:0a:69:9e:cd:d2:d9:d2:0d:d9:74:33:3d: c2:c1:ca:98:2f:33:47:cb:24:38:23:81:09:a9:d7: 83:86:4e:86:0f:ab:ed:c4:64:d0:ec:10:be:f9:27: 6d:5f:26:6a:0b:dd:09:73:de:cd:7f:bd:b1:4c:4a: b9:45:9f:1a:2a:52:df:6c:79:9d:b4:02:5c:34:66: fd:90:5a:2d:e1:ab:6c:04:31:93:28:44:a0:b1:25: 38:84:d6:e1:69:90:73:a6:7d:ca:32:84:30:a3:d3: 16:34:1d:a2:61:ab:f1:3f:a2:88:34:8d:fa:42:a5: 60:de:08:d1:ba:c9:6b:02:38:c9:96:f7:17:21:d7: 86:37:c1:b3:69:1a:97:d5:50:fb:16:21:7d:76:e8: 7d:51:2f:4c:fb:0f:6e:0a:93:a2:4a:1c:01:c1:27: 7a:d5:0a:a0:2b:b3:aa:40:ca:ca:e2:50:ff:70:ca: b2:24:8e:fe:51:51:3d:db:48:8c:68:e1:3a:18:11: 6f:ff:8f:ad:ce:b4:12:f9:8f:d2:9b:94:5d:47:74: a2:45:f7:39:81:a9:8a:9a:d2:6d:36:9d:21:d1:5d: cc:40:ad:d8:47:14:9a:f3:c6:cd:57:dc:15:9b:ee: 77:57:7a:92:d7:06:de:59:f4:cf:a8:ba:58:ef:86: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:4E:09:15:83:84:5E:69:48:AB:E0:92:E2:06:30:55:58:FC:74:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080/23c12684-32d1-4215-8c13-2912d85e2080.crl X509v3 Authority Key Identifier: keyid:B9:0B:AE:23:6D:B0:71:8E:BF:6E:FE:73:4D:BC:28:A4:EC:F0:C2:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23c12684-32d1-4215-8c13-2912d85e2080.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:27:a9:d6:f5:00:92:1e:50:26:2b:90:2c:c1:c5:e9:20:bc: 8f:ad:41:ac:7b:e9:dc:77:6a:79:b6:90:c8:7d:5e:ec:4e:95: f5:55:f8:cf:6e:a6:66:f8:4c:55:fc:05:0a:a1:db:a7:7d:d0: 60:4f:d1:d5:78:c1:cf:64:c7:4a:bc:70:f9:4e:39:39:66:9e: 70:53:04:04:ea:8d:13:91:a3:62:a8:77:04:8f:b5:73:c4:e1: 76:c6:76:f9:e7:99:25:1e:6f:46:8e:68:0a:63:b3:34:8c:1f: fb:be:4a:ac:2d:d0:ba:c5:b0:8c:d4:1c:71:21:ae:dd:3f:e2: 13:0f:04:b1:88:72:2f:de:94:4f:a4:33:54:1d:07:d7:62:72: 00:f5:df:22:a1:b3:15:96:5b:55:f9:ca:d7:ad:af:bc:5a:ac: dd:34:8c:d8:4b:be:ce:ee:f2:7b:0d:01:2c:5d:fc:f2:9c:94: a3:a9:9c:e8:b0:6e:4f:05:b9:87:84:27:2a:9c:af:c1:4d:60: d5:ba:e5:cb:bc:4f:ef:e5:64:bc:bc:fa:47:43:39:a1:1d:71: e8:37:17:be:c4:36:af:a3:4e:b4:04:17:d7:dc:5c:6b:26:d4: fa:0d:c7:1e:5c:89:50:ae:33:f0:b7:88:14:93:20:16:54:c0: 6d:e4:20:c4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw6e2v7pa++n0zIpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNjMTI2ODQtMzJkMS00MjE1LThjMTMtMjkxMmQ4NWUy MDgwMB4XDTI1MTIxODE0MDAwOFoXDTI1MTIyMTE0MDAwMFowLzEtMCsGA1UEAxMk YzJkOTg5ZDMtNWRlMS00MjAwLWIyYTItMTllOGRhNmMwMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYsKaZ7N0tnSDdl0Mz3CwcqYLzNHyyQ4I4EJ qdeDhk6GD6vtxGTQ7BC++SdtXyZqC90Jc97Nf72xTEq5RZ8aKlLfbHmdtAJcNGb9 kFot4atsBDGTKESgsSU4hNbhaZBzpn3KMoQwo9MWNB2iYavxP6KINI36QqVg3gjR uslrAjjJlvcXIdeGN8GzaRqX1VD7FiF9duh9US9M+w9uCpOiShwBwSd61QqgK7Oq QMrK4lD/cMqyJI7+UVE920iMaOE6GBFv/4+tzrQS+Y/Sm5RdR3SiRfc5gamKmtJt Np0h0V3MQK3YRxSa88bNV9wVm+53V3qS1wbeWfTPqLpY74ZFOwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK9OCRWDhF5pSKvgkuIGMFVY/HScMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2Mx MjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEyZDg1ZTIwODAvMjNjMTI2ODQtMzJkMS00 MjE1LThjMTMtMjkxMmQ4NWUyMDgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNjMTI2ODQtMzJkMS00MjE1LThj MTMtMjkxMmQ4NWUyMDgwLzIzYzEyNjg0LTMyZDEtNDIxNS04YzEzLTI5MTJkODVl MjA4MC5jcmwwHwYDVR0jBBgwFoAUuQuuI22wcY6/bv5zTbwopOzwwn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2MxMjY4NC0zMmQxLTQyMTUtOGMxMy0yOTEy ZDg1ZTIwODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEJ6nW9QCSHlAmK5AswcXp ILyPrUGse+ncd2p5tpDIfV7sTpX1VfjPbqZm+ExV/AUKodunfdBgT9HVeMHPZMdK vHD5Tjk5Zp5wUwQE6o0TkaNiqHcEj7VzxOF2xnb555klHm9GjmgKY7M0jB/7vkqs LdC6xbCM1BxxIa7dP+ITDwSxiHIv3pRPpDNUHQfXYnIA9d8iobMVlltV+crXra+8 WqzdNIzYS77O7vJ7DQEsXfzynJSjqZzosG5PBbmHhCcqnK/BTWDVuuXLvE/v5WS8 vPpHQzmhHXHoNxe+xDavo060BBfX3FxrJtT6DcceXIlQrjPwt4gUkyAWVMBt5CDE -----END CERTIFICATE-----Generated at Fri Dec 19 14:44:31 2025 by rpki-client