This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft File: 21428d3a-0040-4c60-9202-cd68b2fd51de.mft (raw, json) Hash identifier: f8H8J+O1LTxN6HXGkKlwBJ8qag5PeZoWsgEVOZLLtFA= Subject key identifier: 44:23:3D:E2:6F:AE:27:BB:53:94:11:17:53:3A:0D:50:6C:0B:CD:54 Authority key identifier: 3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD Certificate issuer: /CN=21428d3a-0040-4c60-9202-cd68b2fd51de Certificate serial: 010D0C9F4328584C78B6E4B4BE438574F973A800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft Manifest number: 010D0C9F43285849095C568CC434510E452459C3 Signing time: Fri 09 Jan 2026 21:00:03 +0000 Manifest this update: Fri 09 Jan 2026 21:00:03 +0000 Manifest next update: Sun 11 Jan 2026 21:00:00 +0000 Files and hashes: 1: 21428d3a-0040-4c60-9202-cd68b2fd51de.crl (hash: BSm5SCk8HJ9hpquCLFoPadeeJxfR/OmTHU19eMlA7tQ=) 2: 298e19e8-b0ac-38aa-82ff-af63bd135582.roa (hash: B/fXTfeSP5nz69mBHCwEAufkZo7mpP3WJm5k2llEAb0=) 3: d0a2e19b-797c-3dcd-bfa3-7bfc5eb8d4d4.roa (hash: h6mq6cZpHjkpdt87yB3WzDormW30hScxXCrXxzVhipM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:78:b6:e4:b4:be:43:85:74:f9:73:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21428d3a-0040-4c60-9202-cd68b2fd51de Validity Not Before: Jan 9 21:00:03 2026 GMT Not After : Jan 11 21:00:00 2026 GMT Subject: CN=d3abfbd9-5717-4d74-aa0d-c3a7ad1dcbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:16:d6:d8:14:5b:75:ee:95:68:ad:78:74: b0:c0:6d:2d:61:ba:49:6d:5c:ab:2e:91:8f:c0:d2: ba:7e:d2:54:b4:5e:20:c4:90:35:c3:6c:36:64:46: a4:33:60:a0:33:14:52:8c:cf:e9:14:a4:69:04:59: 29:4a:f2:ea:80:00:e8:5d:9f:df:b7:7b:4d:de:dc: a9:a1:2f:0d:82:2a:f5:ea:3a:9b:fd:39:1c:a4:87: 60:ba:76:e1:ed:9e:c2:f0:12:e5:09:80:9c:7b:d8: 3c:04:9f:a5:d5:f2:da:2f:72:1a:4b:04:21:89:54: fa:84:e2:a0:41:ef:b1:ba:4f:a1:ae:54:d8:8b:8f: 13:25:19:12:ed:4f:9d:fe:a9:bd:0e:19:52:42:4d: d4:21:c6:f4:2e:71:fe:d5:d6:84:89:02:84:b8:cc: 03:76:67:2d:73:15:8a:42:8d:6c:e6:1b:dc:58:11: 02:44:3b:39:f9:e3:0b:48:80:73:cc:64:3a:9b:8a: b5:e0:e5:6d:f2:ed:b1:06:f1:fc:a1:e7:8f:d0:d6: 42:48:6b:3e:ad:05:0d:ca:20:e9:cd:b7:ee:f4:55: 8b:3f:ef:3e:a6:5a:50:f6:fd:69:be:d5:bb:29:7b: de:9d:77:f8:13:5d:6a:f1:3f:ff:a2:d3:4b:70:e5: ed:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:23:3D:E2:6F:AE:27:BB:53:94:11:17:53:3A:0D:50:6C:0B:CD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de/21428d3a-0040-4c60-9202-cd68b2fd51de.crl X509v3 Authority Key Identifier: keyid:3A:AB:39:2A:FD:92:FC:E2:7B:FA:D0:E7:DF:2A:44:C7:3E:38:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/21428d3a-0040-4c60-9202-cd68b2fd51de.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:6b:40:ef:38:0b:e9:31:76:e6:cb:e2:0f:38:a1:28:90:4c: e9:1e:48:0c:fb:ed:87:ca:2e:d0:a4:b3:62:21:7d:8d:ea:47: 88:b0:23:ca:3f:32:4b:23:f6:1f:d5:4c:06:53:5f:89:95:3c: b9:fb:91:41:f3:98:16:7b:0d:81:fa:cb:6a:19:6c:81:e1:53: 55:17:28:ac:08:40:ea:95:c8:21:c2:11:f3:84:6d:c2:eb:52: 95:62:e4:bd:a7:e2:4e:c2:05:07:b3:c0:a7:6e:ba:c9:8e:42: 43:bc:32:82:7c:0f:02:01:c6:45:5a:cc:41:7e:fc:f6:66:a3: d7:46:c9:62:dd:cb:af:c5:1f:e0:d3:6b:57:4d:04:af:87:71: 38:c9:1f:41:1f:30:c9:11:70:97:be:08:cc:b4:c6:b8:29:96: 02:61:5e:a8:78:4c:26:87:c3:56:1f:2b:e5:80:b6:a2:37:e0: 30:be:3a:22:fb:57:76:4b:7c:5b:23:da:01:a4:bd:be:89:73: 91:c5:e6:a9:21:f0:7c:0a:74:ab:f4:23:98:ae:95:8d:f4:f0: 44:3c:0d:0f:63:67:2f:86:4e:26:9e:24:63:5d:a7:6a:1a:ba: 9f:b4:f4:d5:de:20:b9:1a:8f:3b:5f:34:b6:40:9e:f0:ea:90: ba:0f:da:c8 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx4tuS0vkOFdPlzqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE0MjhkM2EtMDA0MC00YzYwLTkyMDItY2Q2OGIyZmQ1 MWRlMB4XDTI2MDEwOTIxMDAwM1oXDTI2MDExMTIxMDAwMFowLzEtMCsGA1UEAxMk ZDNhYmZiZDktNTcxNy00ZDc0LWFhMGQtYzNhN2FkMWRjYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplUW1tgUW3XulWiteHSwwG0tYbpJbVyrLpGP wNK6ftJUtF4gxJA1w2w2ZEakM2CgMxRSjM/pFKRpBFkpSvLqgADoXZ/ft3tN3typ oS8Ngir16jqb/TkcpIdgunbh7Z7C8BLlCYCce9g8BJ+l1fLaL3IaSwQhiVT6hOKg Qe+xuk+hrlTYi48TJRkS7U+d/qm9DhlSQk3UIcb0LnH+1daEiQKEuMwDdmctcxWK Qo1s5hvcWBECRDs5+eMLSIBzzGQ6m4q14OVt8u2xBvH8oeeP0NZCSGs+rQUNyiDp zbfu9FWLP+8+plpQ9v1pvtW7KXvenXf4E11q8T//otNLcOXtWQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEQjPeJvrie7U5QRF1M6DVBsC81UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTQy OGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4YjJmZDUxZGUvMjE0MjhkM2EtMDA0MC00 YzYwLTkyMDItY2Q2OGIyZmQ1MWRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE0MjhkM2EtMDA0MC00YzYwLTky MDItY2Q2OGIyZmQ1MWRlLzIxNDI4ZDNhLTAwNDAtNGM2MC05MjAyLWNkNjhiMmZk NTFkZS5jcmwwHwYDVR0jBBgwFoAUOqs5Kv2S/OJ7+tDn3ypExz44Pv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTQyOGQzYS0wMDQwLTRjNjAtOTIwMi1jZDY4 YjJmZDUxZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCEa0DvOAvpMXbmy+IPOKEo kEzpHkgM++2Hyi7QpLNiIX2N6keIsCPKPzJLI/Yf1UwGU1+JlTy5+5FB85gWew2B +stqGWyB4VNVFyisCEDqlcghwhHzhG3C61KVYuS9p+JOwgUHs8CnbrrJjkJDvDKC fA8CAcZFWsxBfvz2ZqPXRsli3cuvxR/g02tXTQSvh3E4yR9BHzDJEXCXvgjMtMa4 KZYCYV6oeEwmh8NWHyvlgLaiN+Awvjoi+1d2S3xbI9oBpL2+iXORxeapIfB8CnSr 9COYrpWN9PBEPA0PY2cvhk4mniRjXadqGrqftPTV3iC5Go87XzS2QJ7w6pC6D9rI -----END CERTIFICATE-----Generated at Sat Jan 10 22:20:09 2026 by rpki-client