This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft File: cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft (raw, json) Hash identifier: E/COO2kS2/8L0V7uhAPthOoTFzorEScqrcczRsz2uJQ= Subject key identifier: 8E:62:3C:BC:64:7E:5B:0A:DC:B6:C1:BB:56:26:D4:71:EE:42:79:25 Authority key identifier: 99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA Certificate issuer: /CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Certificate serial: 010D0C9F4328584C7AB21BEEB1C6FB4E08828380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft Manifest number: 010D0C9F43285847FFF5B47570110AB43EE70AA5 Signing time: Sat 10 Jan 2026 14:02:04 +0000 Manifest this update: Sat 10 Jan 2026 14:02:04 +0000 Manifest next update: Mon 12 Jan 2026 22:00:00 +0000 Files and hashes: 1: 0f86af8f-3122-34df-ae7e-04811d8c8ab9.roa (hash: CMS6QdmKBoB8G4S++W6bleXArQZ1a0W2GAJsRrENVSA=) 2: 3f4559cd-55eb-3ee4-96a6-22d37db39638.roa (hash: UF1cBpSq5fZZHH3rCe6EVpARVczHdct6KG69+tffFpE=) 3: cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl (hash: ucauvf+LEPGR/EgFGAoB1Hb/CyLrj/Z3kqiVvlRXZJ0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Jan 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:7a:b2:1b:ee:b1:c6:fb:4e:08:82:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa0ce23-32cb-46ff-8af9-825de64f20a1 Validity Not Before: Jan 10 14:02:04 2026 GMT Not After : Jan 12 22:00:00 2026 GMT Subject: CN=5e4af277-9fd3-4506-a8a4-026b8f730765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e3:bc:26:7a:16:7d:75:f4:d1:99:a8:13:f3: e3:c7:a4:55:ed:39:e5:47:d4:a7:43:14:ec:6c:3e: 28:68:19:79:9a:ea:04:d4:d7:55:05:7e:a4:50:72: cd:1b:36:00:4d:61:71:e0:2b:5d:37:ac:59:0e:c3: 5e:36:fa:db:fb:7c:49:0c:db:3b:11:1b:ef:b2:0b: 14:39:59:e9:e7:08:8d:e6:6f:8f:02:d2:bd:b0:13: 58:83:b8:da:06:61:b4:98:af:c1:11:41:1a:72:b3: 04:f6:cc:1e:fd:9f:36:ab:3b:fd:79:84:91:9d:7f: 50:90:88:6f:ab:6c:a9:08:39:59:8e:bb:dc:4e:48: b5:9e:d9:89:90:be:d5:7e:67:9f:41:0b:b4:ae:57: f8:ba:c2:f1:de:5b:e4:e3:cb:ac:20:2a:a7:86:39: 64:22:5b:f3:52:a5:95:88:a5:1e:3c:3f:b2:8e:fe: 9b:90:76:40:09:ee:2d:5f:2c:02:8c:dc:36:da:83: 60:52:ff:68:c6:4f:94:48:56:e5:94:0c:aa:61:48: d1:7e:d7:32:c5:5f:58:fc:1a:1f:a6:79:2f:a5:d1: f6:df:f7:56:6e:5d:cd:7c:a7:f2:8e:dd:3d:6d:20: 58:c7:84:ad:d6:02:2d:d5:65:d2:c7:c4:d0:70:20: 90:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:62:3C:BC:64:7E:5B:0A:DC:B6:C1:BB:56:26:D4:71:EE:42:79:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1/cfa0ce23-32cb-46ff-8af9-825de64f20a1.crl X509v3 Authority Key Identifier: keyid:99:5C:A1:6E:3B:E6:C5:E6:89:20:A2:01:92:2A:45:E5:1D:B5:0A:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cfa0ce23-32cb-46ff-8af9-825de64f20a1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:7b:2c:af:b2:e1:c8:e8:bc:3e:ce:b3:48:56:af:3f:4a:72: 43:43:7c:28:f9:22:7e:63:0f:b2:1f:34:11:ca:b8:6e:24:c6: 35:e6:ec:16:c8:68:a2:5f:4e:8e:a3:86:39:6f:1b:32:89:20: d3:80:74:bc:ea:5a:95:94:35:9a:c3:36:92:a1:b4:d1:81:3b: f2:2c:07:a7:00:fa:1d:ea:84:a8:13:2a:cb:fd:2c:67:5c:58: 6a:eb:fc:14:86:8e:43:2f:12:d6:7a:30:13:1f:c6:22:46:61: 02:2d:25:62:75:4f:f4:d3:cc:59:bd:ec:bf:0a:fc:cf:fd:44: 3d:61:50:7a:e1:08:8b:c5:78:04:c2:89:1d:96:eb:53:9f:ad: 02:a4:f9:6b:87:e3:c9:0c:b6:46:7a:12:9b:82:33:c3:1e:8e: 55:20:6f:29:6e:0c:57:7c:20:1b:b9:e4:03:f6:d6:4a:45:3a: 2c:f1:f9:ab:32:1a:71:97:25:a1:79:30:f0:05:7c:ec:0f:b1: b0:dd:f9:85:21:9f:95:1e:61:15:72:39:17:b6:fb:24:f3:31: 03:c7:4f:2d:29:d0:e6:57:77:74:db:0e:87:43:4a:f2:78:cb: fe:58:ca:07:a9:c5:f6:21:d9:cc:ce:45:fa:8f:84:7a:c3:3b: 2a:bd:48:c0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx6shvuscb7TgiCg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhMGNlMjMtMzJjYi00NmZmLThhZjktODI1ZGU2NGYy MGExMB4XDTI2MDExMDE0MDIwNFoXDTI2MDExMjIyMDAwMFowLzEtMCsGA1UEAxMk NWU0YWYyNzctOWZkMy00NTA2LWE4YTQtMDI2YjhmNzMwNzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uO8JnoWfXX00ZmoE/Pjx6RV7TnlR9SnQxTs bD4oaBl5muoE1NdVBX6kUHLNGzYATWFx4CtdN6xZDsNeNvrb+3xJDNs7ERvvsgsU OVnp5wiN5m+PAtK9sBNYg7jaBmG0mK/BEUEacrME9swe/Z82qzv9eYSRnX9QkIhv q2ypCDlZjrvcTki1ntmJkL7VfmefQQu0rlf4usLx3lvk48usICqnhjlkIlvzUqWV iKUePD+yjv6bkHZACe4tXywCjNw22oNgUv9oxk+USFbllAyqYUjRftcyxV9Y/Bof pnkvpdH23/dWbl3NfKfyjt09bSBYx4St1gIt1WXSx8TQcCCQzQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI5iPLxkflsK3LbBu1Ym1HHuQnklMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jZmEw Y2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVkZTY0ZjIwYTEvY2ZhMGNlMjMtMzJjYi00 NmZmLThhZjktODI1ZGU2NGYyMGExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2ZhMGNlMjMtMzJjYi00NmZmLThh ZjktODI1ZGU2NGYyMGExL2NmYTBjZTIzLTMyY2ItNDZmZi04YWY5LTgyNWRlNjRm MjBhMS5jcmwwHwYDVR0jBBgwFoAUmVyhbjvmxeaJIKIBkipF5R21CrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jZmEwY2UyMy0zMmNiLTQ2ZmYtOGFmOS04MjVk ZTY0ZjIwYTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKeyyvsuHI6Lw+zrNIVq8/ SnJDQ3wo+SJ+Yw+yHzQRyrhuJMY15uwWyGiiX06Oo4Y5bxsyiSDTgHS86lqVlDWa wzaSobTRgTvyLAenAPod6oSoEyrL/SxnXFhq6/wUho5DLxLWejATH8YiRmECLSVi dU/008xZvey/CvzP/UQ9YVB64QiLxXgEwokdlutTn60CpPlrh+PJDLZGehKbgjPD Ho5VIG8pbgxXfCAbueQD9tZKRTos8fmrMhpxlyWheTDwBXzsD7Gw3fmFIZ+VHmEV cjkXtvsk8zEDx08tKdDmV3d02w6HQ0ryeMv+WMoHqcX2IdnMzkX6j4R6wzsqvUjA -----END CERTIFICATE-----Generated at Sat Jan 10 22:20:30 2026 by rpki-client