This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft File: b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft (raw, json) Hash identifier: fDSwFFzVEFOFq0+tLFLHKBM8pg3DgxZ2nFca6Xlsqf0= Subject key identifier: 1F:0B:01:CB:4C:66:7A:1F:A2:E0:55:A3:68:3E:AC:03:D5:37:3C:D5 Authority key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 Certificate issuer: /CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Certificate serial: 010D0C9F4328584C3BFE7E1A5391754CBD7C1D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft Manifest number: 010D0C9F4328584073A83B02781622D167094BE2 Signing time: Fri 19 Dec 2025 03:00:03 +0000 Manifest this update: Fri 19 Dec 2025 03:00:03 +0000 Manifest next update: Mon 22 Dec 2025 03:00:00 +0000 Files and hashes: 1: 0d00392d-06ad-38f3-b449-d981399ddfac.roa (hash: 3FrV284xfQx+RcoBYq7URnr6qSFBSPMlihRlCsqXTWc=) 2: 5e224ae1-808a-3754-8044-eaca79be6972.roa (hash: nzJAzYTD3nenSlMEpucn4q9zzGUhr5Y7tB30jQ6W5Fs=) 3: b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl (hash: FGrPLAfPgXRCqI7qwLZAHI0et8GXYdPLr8gyl+zF8Pw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3b:fe:7e:1a:53:91:75:4c:bd:7c:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Validity Not Before: Dec 19 03:00:03 2025 GMT Not After : Dec 22 03:00:00 2025 GMT Subject: CN=ac936712-b8ef-492e-9478-4f8352290677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:92:0c:fd:c2:e4:c0:60:20:ba:3d:d0:62: 24:37:6e:5b:14:a7:f2:49:be:4a:60:f0:7b:55:e4: 99:0b:be:e5:7f:4d:04:ef:95:50:b3:51:f8:ef:9c: 33:75:09:21:23:71:d1:b7:37:28:c1:0d:7c:d4:d3: df:9b:7f:45:a7:ca:cc:da:b8:97:40:7f:b7:84:e0: 66:87:33:15:b1:fd:49:3a:3a:55:81:5b:4a:24:b9: 07:9d:2e:3d:54:e3:18:7f:4f:78:56:ef:00:98:cb: 05:00:b4:a4:d6:c2:c4:1b:12:67:f6:2d:8c:2b:a3: e4:e4:ac:c4:12:62:79:81:06:c4:47:82:62:f5:af: f9:7b:42:0f:5a:f5:bd:76:e0:6d:d3:8d:53:56:43: 42:6b:c0:42:73:87:07:d1:79:ea:7a:01:a7:c4:72: 3e:67:93:b8:15:70:d1:f3:9f:f2:95:75:3d:e2:7c: 2c:ed:35:ab:e0:69:84:a6:ef:87:c3:24:1b:ec:e5: e0:e4:c3:2b:a0:f5:e5:7d:c6:ed:eb:f2:c7:da:7b: 5a:ed:53:35:4b:c2:f2:d1:26:ae:f8:4c:a0:d2:db: 85:e7:f6:7c:c7:32:a3:f6:d8:13:67:cc:a4:72:22: 4e:8a:83:71:46:64:0a:eb:46:b6:8f:4b:65:d0:d7: aa:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:0B:01:CB:4C:66:7A:1F:A2:E0:55:A3:68:3E:AC:03:D5:37:3C:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.crl X509v3 Authority Key Identifier: keyid:B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c0:b3:c3:ec:af:01:5c:0a:9f:78:2f:92:bb:db:54:0b:fb: af:c7:54:dd:29:c6:65:3b:56:46:fb:5a:f7:5c:be:b0:2b:4c: 29:23:98:a2:e1:73:3b:1b:9c:54:25:8a:d5:93:f1:9e:69:d7: c2:5d:0d:6f:55:4a:d2:69:3b:71:e7:be:84:c0:38:5e:90:49: f5:e4:a3:2d:0d:32:c5:25:19:2d:7b:48:9b:01:89:04:8b:f7: 82:10:8f:15:66:ad:6a:e1:67:78:b5:80:ce:3f:58:3e:10:0f: fe:5b:91:a5:83:c7:e4:d3:5e:bc:13:cc:ca:19:21:21:28:4c: c0:62:30:dd:54:19:d7:ad:b6:ba:79:00:5f:25:12:24:c4:35: 7a:41:40:e6:6a:85:30:03:6f:55:1b:08:3d:d0:00:23:16:e5: e7:b4:2f:ef:a6:b1:ca:77:62:a9:bf:48:d9:32:cc:32:fe:6f: 2c:b3:b9:5c:97:58:22:f1:7c:1c:16:41:23:10:99:05:81:51: b2:26:3f:e1:b7:8b:1d:a1:61:13:88:a5:79:54:98:7e:12:20: 37:7d:26:8a:3c:c0:57:b3:10:e6:da:0a:d1:07:19:48:88:60: 63:91:d5:d4:6f:be:f2:7a:85:f2:1b:e2:36:f8:b8:19:bf:c5: 9a:c6:76:cd -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw7/n4aU5F1TL18HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjE3Y2UyMmItNjFhMC00YWU5LTljYzAtZjUwZjNiYjc1 MzBkMB4XDTI1MTIxOTAzMDAwM1oXDTI1MTIyMjAzMDAwMFowLzEtMCsGA1UEAxMk YWM5MzY3MTItYjhlZi00OTJlLTk0NzgtNGY4MzUyMjkwNjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBmSDP3C5MBgILo90GIkN25bFKfySb5KYPB7 VeSZC77lf00E75VQs1H475wzdQkhI3HRtzcowQ181NPfm39Fp8rM2riXQH+3hOBm hzMVsf1JOjpVgVtKJLkHnS49VOMYf094Vu8AmMsFALSk1sLEGxJn9i2MK6Pk5KzE EmJ5gQbER4Ji9a/5e0IPWvW9duBt041TVkNCa8BCc4cH0XnqegGnxHI+Z5O4FXDR 85/ylXU94nws7TWr4GmEpu+HwyQb7OXg5MMroPXlfcbt6/LH2nta7VM1S8Ly0Sau +Eyg0tuF5/Z8xzKj9tgTZ8ykciJOioNxRmQK60a2j0tl0NeqVQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFB8LActMZnofouBVo2g+rAPVNzzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdj ZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2JiNzUzMGQvYjE3Y2UyMmItNjFhMC00 YWU5LTljYzAtZjUwZjNiYjc1MzBkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjE3Y2UyMmItNjFhMC00YWU5LTlj YzAtZjUwZjNiYjc1MzBkL2IxN2NlMjJiLTYxYTAtNGFlOS05Y2MwLWY1MGYzYmI3 NTMwZC5jcmwwHwYDVR0jBBgwFoAUt2tfGIphWyOCw/KpdRRVpSGxh+EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBm M2JiNzUzMGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5wLPD7K8BXAqfeC+Su9tU C/uvx1TdKcZlO1ZG+1r3XL6wK0wpI5ii4XM7G5xUJYrVk/GeadfCXQ1vVUrSaTtx 576EwDhekEn15KMtDTLFJRkte0ibAYkEi/eCEI8VZq1q4Wd4tYDOP1g+EA/+W5Gl g8fk0168E8zKGSEhKEzAYjDdVBnXrba6eQBfJRIkxDV6QUDmaoUwA29VGwg90AAj FuXntC/vprHKd2Kpv0jZMswy/m8ss7lcl1gi8XwcFkEjEJkFgVGyJj/ht4sdoWET iKV5VJh+EiA3fSaKPMBXsxDm2grRBxlIiGBjkdXUb77yeoXyG+I2+LgZv8WaxnbN -----END CERTIFICATE-----Generated at Fri Dec 19 08:48:45 2025 by rpki-client