This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft File: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft (raw, json) Hash identifier: oqryFnga4PyOq2+xBiTC2HcMNjbPGNStBoa8W6JaZT4= Subject key identifier: AD:31:3D:7A:B9:BD:FC:C1:55:75:AF:7F:DC:4C:33:C0:0D:4B:A9:FD Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584C3292723C30080D5CDE3C94A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft Manifest number: 010D0C9F43285848565C3129D3EC730D3401F943 Signing time: Mon 15 Dec 2025 18:00:03 +0000 Manifest this update: Mon 15 Dec 2025 18:00:03 +0000 Manifest next update: Thu 18 Dec 2025 18:00:00 +0000 Files and hashes: 1: 25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl (hash: fVlKIJvPFZUAaBD3sBqtRaPIUlfXF0mWYslYY4a3pr4=) 2: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (hash: NNMMU+pOI8OgyPDKaXXTlh/Mlf9BiwfXOYf3RzBh0VE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:32:92:72:3c:30:08:0d:5c:de:3c:94:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Dec 15 18:00:03 2025 GMT Not After : Dec 18 18:00:00 2025 GMT Subject: CN=20a971ea-450a-43db-a307-f076b9db7aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2a:d6:de:3f:3d:fb:5c:0a:80:5b:e3:73:09: 5d:64:e2:4b:3b:77:6c:68:97:f5:e0:9a:9d:81:25: e0:7d:83:b7:59:90:b3:aa:ac:da:74:91:77:e0:66: 02:7a:f7:e1:b0:c4:40:a0:88:53:1c:c6:e2:e6:2c: a9:aa:e2:07:01:26:b7:c0:e2:18:2c:ac:c8:ac:6e: 8d:64:93:83:63:ab:5e:5c:b6:18:08:3b:4a:55:47: f1:f1:6d:59:0e:c1:50:81:3a:d2:12:db:03:42:83: 95:61:18:79:53:2b:3b:7d:c0:ab:44:3a:bb:5d:47: fd:70:c6:81:5a:20:8c:d9:e4:ff:09:f0:b8:4b:36: 21:de:bc:31:01:7b:44:69:8b:2d:31:6a:de:7d:96: b6:e2:fd:7c:cd:9e:aa:4a:ab:fc:a8:95:b3:75:b1: 50:40:02:1f:08:26:b0:2f:c5:f5:25:df:42:a6:60: 1f:56:e9:7e:24:e3:b7:2b:85:5d:1c:07:65:62:77: ae:af:d4:9e:6e:28:6e:83:5f:b2:77:65:81:11:08: 3e:1e:45:64:f0:d5:42:56:53:1d:3a:81:55:82:62: 82:04:ff:7d:5b:e2:6b:f6:82:d4:84:be:57:bf:2b: 79:a8:e3:7a:10:6e:cf:38:bf:a0:2a:a4:a1:43:b9: aa:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:31:3D:7A:B9:BD:FC:C1:55:75:AF:7F:DC:4C:33:C0:0D:4B:A9:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:40:12:b2:9e:7c:1a:6f:8f:06:2d:3c:80:5b:15:bd:70:f6: fa:77:02:31:44:1a:8c:66:be:f6:41:88:da:bd:05:fd:18:83: 7c:5e:be:89:83:26:1b:1b:11:5b:68:f3:77:8d:ac:7f:e7:d2: 3e:c5:1e:e5:d8:c8:b5:49:06:7c:77:94:c4:91:37:28:d1:db: 10:8d:5b:6f:6f:59:88:c8:d8:7d:99:a9:45:7f:7b:de:cf:7b: 86:95:82:5b:61:b5:a2:2a:22:18:ab:14:ce:f4:37:3e:df:01: 99:fd:03:90:29:ef:9d:44:b1:cd:30:ff:5f:ca:7d:34:00:8f: 12:00:99:88:9c:31:91:68:ae:57:9b:24:f4:33:94:4a:22:59: 98:cb:3a:f9:2e:de:6f:2c:1b:d3:2e:30:8a:fd:e0:64:c6:c5: 23:83:8d:b1:40:bd:98:42:fb:e6:4c:16:53:90:96:a8:92:6a: 34:b6:75:49:71:d3:15:a7:15:1e:e0:30:4e:f8:f2:dc:ec:11: f2:ac:a3:ba:a1:82:ea:34:3f:17:e5:b0:38:76:47:4d:34:7c: aa:98:99:d3:04:42:2f:52:f6:80:32:81:6f:88:43:28:e6:af: a7:76:86:9d:5e:d7:31:84:a8:41:4c:70:80:22:c7:33:0f:65: ac:14:2b:86 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwyknI8MAgNXN48lKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI1MTIxNTE4MDAwM1oXDTI1MTIxODE4MDAwMFowLzEtMCsGA1UEAxMk MjBhOTcxZWEtNDUwYS00M2RiLWEzMDctZjA3NmI5ZGI3YWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtirW3j89+1wKgFvjcwldZOJLO3dsaJf14Jqd gSXgfYO3WZCzqqzadJF34GYCevfhsMRAoIhTHMbi5iypquIHASa3wOIYLKzIrG6N ZJODY6teXLYYCDtKVUfx8W1ZDsFQgTrSEtsDQoOVYRh5Uys7fcCrRDq7XUf9cMaB WiCM2eT/CfC4SzYh3rwxAXtEaYstMWrefZa24v18zZ6qSqv8qJWzdbFQQAIfCCaw L8X1Jd9CpmAfVul+JOO3K4VdHAdlYneur9Sebihug1+yd2WBEQg+HkVk8NVCVlMd OoFVgmKCBP99W+Jr9oLUhL5Xvyt5qON6EG7POL+gKqShQ7mqyQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK0xPXq5vfzBVXWvf9xMM8ANS6n9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvMjUzOTdjMzMtODRkMS00 YTk1LTlkNGMtNDIxYzdkOTVkMGY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/QBKynnwab48GLTyAWxW9 cPb6dwIxRBqMZr72QYjavQX9GIN8Xr6JgyYbGxFbaPN3jax/59I+xR7l2Mi1SQZ8 d5TEkTco0dsQjVtvb1mIyNh9malFf3vez3uGlYJbYbWiKiIYqxTO9Dc+3wGZ/QOQ Ke+dRLHNMP9fyn00AI8SAJmInDGRaK5XmyT0M5RKIlmYyzr5Lt5vLBvTLjCK/eBk xsUjg42xQL2YQvvmTBZTkJaokmo0tnVJcdMVpxUe4DBO+PLc7BHyrKO6oYLqND8X 5bA4dkdNNHyqmJnTBEIvUvaAMoFviEMo5q+ndoadXtcxhKhBTHCAIsczD2WsFCuG -----END CERTIFICATE-----Generated at Tue Dec 16 16:05:12 2025 by rpki-client