This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft File: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft (raw, json) Hash identifier: IJkxcdWIWZ6/rzMGmckNl8QvODa3RjKvUmHpJl6XB20= Subject key identifier: 1B:09:B3:AB:3C:F6:64:7D:FB:7E:EF:93:BD:CC:63:04:73:2D:CE:5A Authority key identifier: 0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B Certificate issuer: /CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Certificate serial: 010D0C9F4328584C794BC461230B737548760CB8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft Manifest number: 010D0C9F4328584B4BCFD881B87CBE90580D31EC Signing time: Sat 10 Jan 2026 02:00:03 +0000 Manifest this update: Sat 10 Jan 2026 02:00:03 +0000 Manifest next update: Tue 13 Jan 2026 02:00:00 +0000 Files and hashes: 1: 2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl (hash: cydNV04gN6JTn71lu5mSLA00s7Qe9DjkawHPYp1HEVk=) 2: 4fb32fadfe6194122d0f228351afceae2f7be96b055a5cce33.cer (hash: YQB3ja0LD/RpPSpiFOvhsYwRInhxQQNy5l8nfauLYkE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:79:4b:c4:61:23:0b:73:75:48:76:0c:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2954b8a1-69de-4630-8006-4dc8ffe23bdd Validity Not Before: Jan 10 02:00:03 2026 GMT Not After : Jan 13 02:00:00 2026 GMT Subject: CN=0fd4b2a8-c077-4d63-ba2e-103d612d321d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8f:39:a4:1b:ae:4d:cf:90:37:eb:13:76:0c: d4:15:5c:d1:f8:5f:27:ca:57:6d:ca:0f:0e:a0:11: a8:03:b0:cf:c7:d6:7d:47:62:2a:3b:c4:f1:2f:80: 8a:75:78:5b:db:c9:cb:d3:74:76:87:7f:cd:d0:68: 5c:0f:85:b9:ea:45:c8:6f:57:b3:be:50:0a:50:d9: 53:15:83:85:7f:62:d3:ce:15:38:5b:93:24:02:ac: fe:65:21:01:38:70:54:bd:bd:08:29:78:b5:09:45: 48:5f:fb:8f:54:72:0c:27:dd:e7:1a:ff:9f:59:73: 9e:1c:fd:81:1e:72:e8:c7:d2:b3:36:96:53:57:f3: 67:31:65:06:d9:61:73:f1:56:a5:a4:55:57:dc:6e: d0:f6:38:97:b4:95:53:f0:eb:de:68:b5:c1:dd:31: d1:cb:1c:3a:64:89:49:5e:8d:7e:af:5b:77:93:87: 4a:94:58:51:fe:03:7c:32:70:ef:0b:c3:24:f2:51: 51:75:91:f2:6b:80:64:6c:05:de:7c:e0:8b:73:d8: f3:f7:0c:df:05:f9:d6:0f:51:ce:9a:6e:98:f0:e6: 11:1d:8d:d3:18:6f:56:57:02:4d:d4:f5:d0:c2:4f: ab:c0:00:97:cc:e0:24:06:20:4a:8b:36:5e:77:7a: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:09:B3:AB:3C:F6:64:7D:FB:7E:EF:93:BD:CC:63:04:73:2D:CE:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd/2954b8a1-69de-4630-8006-4dc8ffe23bdd.crl X509v3 Authority Key Identifier: keyid:0A:D5:7A:7A:DB:6D:CD:CD:03:EB:DB:95:F3:D1:33:AE:19:C7:06:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2954b8a1-69de-4630-8006-4dc8ffe23bdd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:b1:3e:87:5b:72:2d:f5:18:46:58:ee:7c:3d:bd:dc:09:d4: 96:01:a3:15:30:f5:72:e9:9b:d1:1d:26:6d:b7:f4:17:b6:b8: c7:11:01:87:00:02:1b:9c:d1:55:6c:23:d7:b2:d4:47:0f:02: dd:5c:44:01:f9:fe:d5:03:05:ed:0b:f1:6c:ac:dc:dc:7d:80: 43:3e:f2:f5:95:76:a4:84:2e:94:e2:dd:05:fa:94:59:a2:b7: b3:ba:27:fd:e6:fc:39:97:ce:08:b0:a4:63:60:18:9d:d0:d2: 61:eb:5e:67:1e:ca:80:ec:f7:9f:d5:ce:62:21:24:c3:64:36: 15:80:da:7a:82:cc:79:97:52:58:87:da:41:21:bb:6b:d9:76: bf:6f:f7:c3:45:39:81:fe:2d:f4:de:0b:fc:61:89:46:bb:76: 94:d6:8b:05:e6:19:7e:8c:68:9c:08:f2:6b:3c:03:58:37:86: 53:0f:4d:c8:35:9b:c9:08:fa:2f:f7:7a:a5:f0:b7:c9:99:cb: d9:5b:0d:26:02:b0:ce:5d:8c:d1:2e:ea:4f:56:09:ad:38:27: 52:98:f7:1e:6f:9e:2d:af:e3:59:13:3b:c3:16:6f:67:96:9e: 07:be:77:72:c9:5c:41:95:6b:e6:ea:fe:fe:18:67:74:9d:04: 87:09:1e:3e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx5S8RhIwtzdUh2DLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjk1NGI4YTEtNjlkZS00NjMwLTgwMDYtNGRjOGZmZTIz YmRkMB4XDTI2MDExMDAyMDAwM1oXDTI2MDExMzAyMDAwMFowLzEtMCsGA1UEAxMk MGZkNGIyYTgtYzA3Ny00ZDYzLWJhMmUtMTAzZDYxMmQzMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY85pBuuTc+QN+sTdgzUFVzR+F8nyldtyg8O oBGoA7DPx9Z9R2IqO8TxL4CKdXhb28nL03R2h3/N0GhcD4W56kXIb1ezvlAKUNlT FYOFf2LTzhU4W5MkAqz+ZSEBOHBUvb0IKXi1CUVIX/uPVHIMJ93nGv+fWXOeHP2B HnLox9KzNpZTV/NnMWUG2WFz8ValpFVX3G7Q9jiXtJVT8OveaLXB3THRyxw6ZIlJ Xo1+r1t3k4dKlFhR/gN8MnDvC8Mk8lFRdZHya4BkbAXefOCLc9jz9wzfBfnWD1HO mm6Y8OYRHY3TGG9WVwJN1PXQwk+rwACXzOAkBiBKizZed3pCgwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBsJs6s89mR9+37vk73MYwRzLc5aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0 YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4ZmZlMjNiZGQvMjk1NGI4YTEtNjlkZS00 NjMwLTgwMDYtNGRjOGZmZTIzYmRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjk1NGI4YTEtNjlkZS00NjMwLTgw MDYtNGRjOGZmZTIzYmRkLzI5NTRiOGExLTY5ZGUtNDYzMC04MDA2LTRkYzhmZmUy M2JkZC5jcmwwHwYDVR0jBBgwFoAUCtV6etttzc0D69uV89EzrhnHBgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yOTU0YjhhMS02OWRlLTQ2MzAtODAwNi00ZGM4 ZmZlMjNiZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBJsT6HW3It9RhGWO58Pb3c CdSWAaMVMPVy6ZvRHSZtt/QXtrjHEQGHAAIbnNFVbCPXstRHDwLdXEQB+f7VAwXt C/FsrNzcfYBDPvL1lXakhC6U4t0F+pRZorezuif95vw5l84IsKRjYBid0NJh615n HsqA7Pef1c5iISTDZDYVgNp6gsx5l1JYh9pBIbtr2Xa/b/fDRTmB/i303gv8YYlG u3aU1osF5hl+jGicCPJrPANYN4ZTD03INZvJCPov93ql8LfJmcvZWw0mArDOXYzR LupPVgmtOCdSmPceb54tr+NZEzvDFm9nlp4HvndyyVxBlWvm6v7+GGd0nQSHCR4+ -----END CERTIFICATE-----Generated at Sat Jan 10 14:05:52 2026 by rpki-client