This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft File: a295a695-e91a-4c5a-8a31-a920a42ea44d.mft (raw, json) Hash identifier: O5hmQtq0XWAYp0eUUd+Jv6y2lGg2xjnioNGcQ1q3yhI= Subject key identifier: 4D:CD:E8:A8:76:1A:46:38:6C:47:23:A0:20:CC:5E:CB:7F:1C:D6:78 Authority key identifier: C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C Certificate issuer: /CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Certificate serial: 010D0C9F4328584C5A787639F5A9086EB20A4AE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft Manifest number: 010D0C9F43285849ABC8124D60A5EBB8636DE110 Signing time: Tue 30 Dec 2025 01:00:04 +0000 Manifest this update: Tue 30 Dec 2025 01:00:04 +0000 Manifest next update: Fri 02 Jan 2026 01:00:00 +0000 Files and hashes: 1: 8f2c507f-9880-3a0a-8e6a-2d9cc5d1e911.roa (hash: 0kr8XYrbUDr24Qoi9f5QHf0U+2Q0ahZW+LGizjUPB44=) 2: a295a695-e91a-4c5a-8a31-a920a42ea44d.crl (hash: r3s5WEx/XkvPcVN0gYWLNrCp3xmjGONN040tCpiH44M=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 31 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:78:76:39:f5:a9:08:6e:b2:0a:4a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a295a695-e91a-4c5a-8a31-a920a42ea44d Validity Not Before: Dec 30 01:00:04 2025 GMT Not After : Jan 2 01:00:00 2026 GMT Subject: CN=1596f57c-790e-4f0f-8114-2bd04617a95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:76:12:8b:dd:10:cc:69:d5:d0:27:f8:73:88: 7c:6d:09:9e:7d:fc:96:61:1b:f2:60:96:8b:a5:bd: f1:48:c7:79:ea:49:91:fa:57:9b:42:4a:44:23:13: 10:b6:a7:c1:0b:3d:be:f9:fc:b1:7d:a0:c2:d0:71: 5c:11:e5:b6:bd:9a:09:c9:0c:76:a2:67:0d:c6:d0: 98:00:36:8c:03:8c:8f:54:b3:c7:f1:bf:30:03:26: 59:d3:d7:99:df:fc:14:d3:2c:9f:3b:b7:ae:e4:52: 3c:98:16:54:48:2f:e7:b4:60:2e:a4:37:a6:62:94: 12:d7:f0:96:39:26:61:84:74:a0:d0:78:08:d4:da: b6:ac:e9:73:b6:7c:34:aa:2e:5a:38:06:90:df:8e: 4a:97:0d:62:76:48:27:99:9e:ca:f7:4f:12:f5:8a: dd:df:9f:dc:3e:1d:29:20:5d:f7:e6:97:e3:b9:c8: 91:20:71:f9:8f:a9:f7:d7:b7:a8:2f:99:f3:75:51: 6e:49:49:f0:a7:4f:81:1e:66:96:99:7f:b2:40:e7: cf:b9:cd:ee:38:9c:93:2a:ac:76:f6:b7:66:7e:3c: 49:a7:82:c0:78:ba:32:0b:f1:c4:89:0e:21:52:bf: 5a:3a:ed:c2:09:f1:82:e5:46:2e:ed:0c:ce:0e:23: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CD:E8:A8:76:1A:46:38:6C:47:23:A0:20:CC:5E:CB:7F:1C:D6:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d/a295a695-e91a-4c5a-8a31-a920a42ea44d.crl X509v3 Authority Key Identifier: keyid:C6:B7:63:90:9D:99:42:6E:16:F5:9E:92:2D:20:F5:88:30:C1:AA:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a295a695-e91a-4c5a-8a31-a920a42ea44d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ae:7f:64:a2:36:15:d3:12:70:44:99:79:11:20:51:b5:89: b1:48:4f:63:7f:7b:03:a2:ca:02:de:17:12:18:d9:29:f5:19: c7:20:53:f1:57:02:0d:2d:93:03:ab:83:d3:6b:07:b8:c6:5f: 62:6b:4b:ce:c5:b1:0b:c5:1c:7b:c2:54:81:38:fd:57:e6:14: 5b:9c:50:22:5c:d0:de:11:3a:01:b2:9f:b0:bf:3a:dd:36:f7: 7d:64:7d:de:72:64:23:12:c7:73:63:99:69:96:8a:6c:30:6b: 06:54:3f:95:3f:62:8c:92:d1:fe:96:3c:45:a6:62:50:e5:81: 67:2f:80:d0:44:96:42:44:9c:98:dc:ce:6d:d8:74:2d:b0:57: 21:11:e4:a9:39:04:cf:79:e0:47:df:5e:ee:23:6c:96:c1:d6: 14:f7:a6:f4:37:e5:a3:a2:f9:52:5b:43:11:d4:5c:7e:bf:7b: 0e:ab:c1:da:6d:0f:dd:8e:a2:da:41:b9:bb:49:96:f1:1a:90: e9:1e:2d:6c:fc:6f:43:64:9a:5e:55:cc:c6:94:7e:18:a5:c8: 4e:ec:fa:a0:aa:07:6c:32:0a:30:d5:c9:9a:c0:80:78:65:7f: c8:f4:9f:94:52:04:07:7c:62:eb:87:68:d7:6f:d2:b7:ea:76: 43:a9:e5:1a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExaeHY59akIbrIKSuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI5NWE2OTUtZTkxYS00YzVhLThhMzEtYTkyMGE0MmVh NDRkMB4XDTI1MTIzMDAxMDAwNFoXDTI2MDEwMjAxMDAwMFowLzEtMCsGA1UEAxMk MTU5NmY1N2MtNzkwZS00ZjBmLTgxMTQtMmJkMDQ2MTdhOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nYSi90QzGnV0Cf4c4h8bQmeffyWYRvyYJaL pb3xSMd56kmR+lebQkpEIxMQtqfBCz2++fyxfaDC0HFcEeW2vZoJyQx2omcNxtCY ADaMA4yPVLPH8b8wAyZZ09eZ3/wU0yyfO7eu5FI8mBZUSC/ntGAupDemYpQS1/CW OSZhhHSg0HgI1Nq2rOlztnw0qi5aOAaQ345Klw1idkgnmZ7K908S9Yrd35/cPh0p IF335pfjuciRIHH5j6n317eoL5nzdVFuSUnwp0+BHmaWmX+yQOfPuc3uOJyTKqx2 9rdmfjxJp4LAeLoyC/HEiQ4hUr9aOu3CCfGC5UYu7QzODiPklQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFE3N6Kh2GkY4bEcjoCDMXst/HNZ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1 YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIwYTQyZWE0NGQvYTI5NWE2OTUtZTkxYS00 YzVhLThhMzEtYTkyMGE0MmVhNDRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTI5NWE2OTUtZTkxYS00YzVhLThh MzEtYTkyMGE0MmVhNDRkL2EyOTVhNjk1LWU5MWEtNGM1YS04YTMxLWE5MjBhNDJl YTQ0ZC5jcmwwHwYDVR0jBBgwFoAUxrdjkJ2ZQm4W9Z6SLSD1iDDBqmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hMjk1YTY5NS1lOTFhLTRjNWEtOGEzMS1hOTIw YTQyZWE0NGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOrn9kojYV0xJwRJl5ESBR tYmxSE9jf3sDosoC3hcSGNkp9RnHIFPxVwINLZMDq4PTawe4xl9ia0vOxbELxRx7 wlSBOP1X5hRbnFAiXNDeEToBsp+wvzrdNvd9ZH3ecmQjEsdzY5lplopsMGsGVD+V P2KMktH+ljxFpmJQ5YFnL4DQRJZCRJyY3M5t2HQtsFchEeSpOQTPeeBH317uI2yW wdYU96b0N+WjovlSW0MR1Fx+v3sOq8HabQ/djqLaQbm7SZbxGpDpHi1s/G9DZJpe VczGlH4YpchO7PqgqgdsMgow1cmawIB4ZX/I9J+UUgQHfGLrh2jXb9K36nZDqeUa -----END CERTIFICATE-----Generated at Tue Dec 30 03:17:07 2025 by rpki-client