This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft File: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft (raw, json) Hash identifier: 0jA5fFwW6VOm+R74opmRAMBaAxPoBTjnsH3+ny2jYAI= Subject key identifier: E0:A6:B2:4A:70:AA:17:E0:77:8E:07:7D:86:72:A3:C6:4D:6E:1E:A9 Authority key identifier: 6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 Certificate issuer: /CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Certificate serial: 010D0C9F4328584C7B0A71F11A92C8FA4FF67A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft Manifest number: 010D0C9F432858492FFDC9CA712E0CA721145737 Signing time: Sat 10 Jan 2026 17:00:03 +0000 Manifest this update: Sat 10 Jan 2026 17:00:03 +0000 Manifest next update: Tue 13 Jan 2026 17:00:00 +0000 Files and hashes: 1: 435854e9-84df-339d-b3dc-d2cf4ace8d7b.roa (hash: 4rYINi66PalfvsDMfM2OIMb1jR3OIdm0wUf9yYgc2pI=) 2: 86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl (hash: u9GIWf3pxjmk5Pt38W8MLUQXuMeK0W1iwT43Vadx6is=) 3: ccf70fcc-40cd-354b-95d0-5ff80f9e5f28.roa (hash: 9vaQDVpBV++7eoLWnNla2WK5S1Ar28FcORm3f9h3lGI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7b:0a:71:f1:1a:92:c8:fa:4f:f6:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f5cd8a-f903-4176-97a7-6671e49b1c9b Validity Not Before: Jan 10 17:00:03 2026 GMT Not After : Jan 13 17:00:00 2026 GMT Subject: CN=0a961dfe-e1bb-45c9-b7df-d3ee1f9a8d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ea:8c:f7:a0:de:76:98:51:81:dd:17:81:18: 92:f7:91:3c:13:90:12:53:e6:a1:f9:9a:58:58:33: 69:34:ee:43:4f:e4:85:66:0c:da:9a:85:8a:23:79: b1:8b:e0:d7:c4:ec:e5:f3:40:97:5b:6c:23:7b:ef: 9d:c9:4c:76:02:70:bd:85:a9:e2:4e:1b:a5:05:dd: e1:e3:ff:f5:71:8f:22:cf:ff:8f:52:12:3d:af:60: 29:0c:da:4b:01:4b:c0:52:1e:45:ea:3e:a3:d4:16: fa:52:b4:fd:7f:36:92:df:93:a2:67:75:63:84:2a: 10:0d:5c:b1:27:93:b9:0a:a9:f2:5c:fc:cb:b3:4f: 0c:50:c2:50:8c:8a:0e:cb:2f:2d:ef:69:12:ce:b1: 19:61:18:2e:f7:cf:36:b9:2d:be:90:4c:74:b8:d3: cc:f4:ef:33:6b:13:79:59:c7:7f:f1:e7:68:49:bf: 85:24:5a:05:c4:da:0e:79:67:d3:a2:a8:11:bd:9e: 37:2b:10:ea:be:6a:76:e8:1a:60:00:85:17:3d:e6: 1b:3b:a3:42:f5:b6:0d:e9:8d:c3:95:23:78:97:21: 91:1b:d3:a9:da:5f:2e:3c:cc:66:55:14:58:38:3a: c1:54:a0:63:a8:f2:0c:76:6d:f9:0c:f3:f7:09:27: fd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A6:B2:4A:70:AA:17:E0:77:8E:07:7D:86:72:A3:C6:4D:6E:1E:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b/86f5cd8a-f903-4176-97a7-6671e49b1c9b.crl X509v3 Authority Key Identifier: keyid:6A:34:CB:D9:75:F2:4B:CA:DB:EF:DD:49:40:52:7B:83:C9:CA:E5:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86f5cd8a-f903-4176-97a7-6671e49b1c9b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:4c:83:b2:7e:9d:6e:7b:1d:93:49:4b:e5:31:61:ce:45:a8: 5b:f3:6b:73:f5:36:a3:a4:98:46:74:80:02:eb:41:8e:2b:66: 21:d4:ab:08:94:71:7b:35:70:79:98:1f:64:d1:c9:d6:99:9d: 1f:a7:35:8b:d2:89:d7:99:51:81:a9:cc:9b:8d:ef:a9:85:9a: 25:6f:84:af:cd:5e:5a:ed:39:f1:fb:7b:58:7d:b6:42:81:bb: 6a:d7:92:3a:58:97:7b:30:8a:64:0a:11:79:03:99:f3:9e:7f: 29:cd:25:34:3b:40:5d:d7:b8:28:41:1d:0c:3d:e0:cd:9a:b4: 8a:17:51:c4:f6:99:98:fa:17:90:fe:f5:1e:cf:1d:71:2a:a6: 2d:97:27:4c:36:34:62:79:67:09:ff:27:f7:34:27:42:ee:d8: 8b:cc:1d:89:88:6a:cd:d1:8d:17:62:74:fd:af:77:de:b8:de: 8b:31:4b:33:5c:06:58:07:eb:d7:b6:2a:0d:1c:fd:35:71:b8: 21:e5:51:4a:82:e7:2d:82:62:c1:41:85:e6:4d:ee:c3:b8:98: a9:02:72:ad:7a:b9:fe:aa:67:76:dc:a9:d9:01:95:a6:de:fc: 3f:97:05:fb:cd:ef:fa:e4:02:f4:0e:92:14:81:62:dd:7d:a5: 0c:fc:8c:40 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx7CnHxGpLI+k/2eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZmNWNkOGEtZjkwMy00MTc2LTk3YTctNjY3MWU0OWIx YzliMB4XDTI2MDExMDE3MDAwM1oXDTI2MDExMzE3MDAwMFowLzEtMCsGA1UEAxMk MGE5NjFkZmUtZTFiYi00NWM5LWI3ZGYtZDNlZTFmOWE4ZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuqM96DedphRgd0XgRiS95E8E5ASU+ah+ZpY WDNpNO5DT+SFZgzamoWKI3mxi+DXxOzl80CXW2wje++dyUx2AnC9haniThulBd3h 4//1cY8iz/+PUhI9r2ApDNpLAUvAUh5F6j6j1Bb6UrT9fzaS35OiZ3VjhCoQDVyx J5O5CqnyXPzLs08MUMJQjIoOyy8t72kSzrEZYRgu9882uS2+kEx0uNPM9O8zaxN5 Wcd/8edoSb+FJFoFxNoOeWfToqgRvZ43KxDqvmp26BpgAIUXPeYbO6NC9bYN6Y3D lSN4lyGRG9Op2l8uPMxmVRRYODrBVKBjqPIMdm35DPP3CSf9cQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOCmskpwqhfgd44HfYZyo8ZNbh6pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmY1 Y2Q4YS1mOTAzLTQxNzYtOTdhNy02NjcxZTQ5YjFjOWIvODZmNWNkOGEtZjkwMy00 MTc2LTk3YTctNjY3MWU0OWIxYzliLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZmNWNkOGEtZjkwMy00MTc2LTk3 YTctNjY3MWU0OWIxYzliLzg2ZjVjZDhhLWY5MDMtNDE3Ni05N2E3LTY2NzFlNDli MWM5Yi5jcmwwHwYDVR0jBBgwFoAUajTL2XXyS8rb791JQFJ7g8nK5UEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmY1Y2Q4YS1mOTAzLTQxNzYtOTdhNy02Njcx ZTQ5YjFjOWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAhTIOyfp1uex2TSUvlMWHO Rahb82tz9TajpJhGdIAC60GOK2Yh1KsIlHF7NXB5mB9k0cnWmZ0fpzWL0onXmVGB qcybje+phZolb4SvzV5a7Tnx+3tYfbZCgbtq15I6WJd7MIpkChF5A5nznn8pzSU0 O0Bd17goQR0MPeDNmrSKF1HE9pmY+heQ/vUezx1xKqYtlydMNjRieWcJ/yf3NCdC 7tiLzB2JiGrN0Y0XYnT9r3feuN6LMUszXAZYB+vXtioNHP01cbgh5VFKguctgmLB QYXmTe7DuJipAnKtern+qmd23KnZAZWm3vw/lwX7ze/65AL0DpIUgWLdfaUM/IxA -----END CERTIFICATE-----Generated at Sun Jan 11 01:38:52 2026 by rpki-client