This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft File: 589c840d-5406-45bd-ac1d-d77b3c5c3780.mft (raw, json) Hash identifier: zLf32Jfo3GBDVYODLmnrvL/lR0u+OV8C5p0bw/OK5Jw= Subject key identifier: E3:1A:15:31:BB:4D:E8:39:88:B3:B9:CB:4D:54:18:49:D9:86:F8:53 Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Certificate serial: 010D0C9F4328584C40C368CC7B216150762A2100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft Manifest number: 010D0C9F4328584073A8273D6C0F9AE946A9C63C Signing time: Sat 20 Dec 2025 20:00:03 +0000 Manifest this update: Sat 20 Dec 2025 20:00:03 +0000 Manifest next update: Tue 23 Dec 2025 20:00:00 +0000 Files and hashes: 1: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (hash: qbW5Oe8ZH8LXRkGL+tJMOyuvkonBqhPduSzgcBMu+QY=) 2: 589c840d-5406-45bd-ac1d-d77b3c5c3780.crl (hash: Z+KU/Q+WnAdAEbGi7fF+GaqQAKqjeFbnFfxLwpIA9Kk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:c3:68:cc:7b:21:61:50:76:2a:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Validity Not Before: Dec 20 20:00:03 2025 GMT Not After : Dec 23 20:00:00 2025 GMT Subject: CN=489ffd0e-f308-4ac0-9182-c0e48c31710a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b6:ac:50:09:3c:cd:1c:74:6f:3f:6e:62:f3: 6c:3f:38:a0:b0:83:b3:b3:7e:ac:e0:9d:a5:95:29: 0f:32:04:4e:b4:67:a8:75:29:29:1c:c2:49:46:36: b1:f1:bb:14:34:e0:89:e2:44:58:e6:91:df:89:bd: 59:29:6b:90:4e:8b:7c:33:84:63:c6:56:23:d5:32: 49:bb:12:b4:7b:cb:12:05:0f:02:e5:2d:76:d8:1e: 1d:35:89:aa:3e:c4:a6:d8:1f:9c:d1:59:f2:57:96: d7:0e:72:1b:d0:cf:f1:20:a9:34:dd:3e:9c:16:26: 3a:06:9c:4c:7c:8f:d6:12:f1:44:46:2f:a7:e7:db: 17:5c:d7:8f:00:10:80:76:08:cd:4b:96:b4:78:ae: ed:4e:6a:30:9e:57:e4:69:7c:b9:a8:e8:f9:31:6b: 19:cc:98:ee:09:3d:0c:bf:f2:b9:60:bd:f7:66:b1: 7e:ea:74:92:a8:51:3c:b4:b6:39:a6:4a:bc:55:21: ae:bd:9a:46:8b:14:af:ca:c8:01:14:64:25:0d:45: 81:71:2e:b6:10:e8:76:aa:01:4d:b3:03:05:92:a9: 8f:d3:ad:77:42:af:97:12:44:20:14:f0:72:fc:df: b6:1c:36:19:52:78:19:00:bd:97:84:9a:cb:11:16: 37:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1A:15:31:BB:4D:E8:39:88:B3:B9:CB:4D:54:18:49:D9:86:F8:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl X509v3 Authority Key Identifier: keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ec:bb:57:19:6b:93:d1:c1:f6:1e:03:d0:a5:6c:58:03:1b: 86:61:bd:3b:0b:77:99:9e:a0:d0:7a:f0:85:d2:0c:3d:e2:64: 3f:32:db:56:6d:2d:78:6c:a9:b0:7a:fc:cd:ab:90:dc:11:6d: 7b:06:15:e2:22:83:96:9e:84:72:22:22:57:a5:b6:4c:d2:88: 61:50:7f:61:05:45:94:73:d7:4c:7d:04:e9:50:21:d2:02:dc: fa:5e:97:cf:b2:91:4d:4b:11:35:f2:6a:cd:6b:1d:47:67:6a: 01:e3:fe:be:68:16:f4:94:ba:6a:eb:49:bb:e6:73:5a:e5:04: 2e:4b:c1:01:89:3f:66:98:50:4a:b1:01:30:1d:86:03:be:22: c1:3b:bb:b9:7c:2b:13:0d:d2:c6:b4:d2:75:43:00:16:f6:42: 63:2f:50:ff:97:ee:6e:55:d5:f2:e9:39:ee:26:1f:03:59:fd: 91:00:0c:78:77:71:59:13:98:cd:7f:20:94:d3:d3:8d:ed:6e: 64:77:80:90:96:42:40:85:ce:91:f5:ae:fd:d5:2c:3d:bd:a5: 3e:cb:06:08:28:a3:df:c2:d2:b8:0c:48:76:92:91:00:ff:0c: df:13:f2:8f:33:97:54:25:54:c3:02:9c:67:c4:70:ef:2d:ad: 9c:d8:32:17 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExAw2jMeyFhUHYqIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5Yzg0MGQtNTQwNi00NWJkLWFjMWQtZDc3YjNjNWMz NzgwMB4XDTI1MTIyMDIwMDAwM1oXDTI1MTIyMzIwMDAwMFowLzEtMCsGA1UEAxMk NDg5ZmZkMGUtZjMwOC00YWMwLTkxODItYzBlNDhjMzE3MTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LasUAk8zRx0bz9uYvNsPzigsIOzs36s4J2l lSkPMgROtGeodSkpHMJJRjax8bsUNOCJ4kRY5pHfib1ZKWuQTot8M4RjxlYj1TJJ uxK0e8sSBQ8C5S122B4dNYmqPsSm2B+c0VnyV5bXDnIb0M/xIKk03T6cFiY6BpxM fI/WEvFERi+n59sXXNePABCAdgjNS5a0eK7tTmownlfkaXy5qOj5MWsZzJjuCT0M v/K5YL33ZrF+6nSSqFE8tLY5pkq8VSGuvZpGixSvysgBFGQlDUWBcS62EOh2qgFN swMFkqmP0613Qq+XEkQgFPBy/N+2HDYZUngZAL2XhJrLERY33wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFOMaFTG7Teg5iLO5y01UGEnZhvhTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODlj ODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdiM2M1YzM3ODAvNTg5Yzg0MGQtNTQwNi00 NWJkLWFjMWQtZDc3YjNjNWMzNzgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTg5Yzg0MGQtNTQwNi00NWJkLWFj MWQtZDc3YjNjNWMzNzgwLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC5jcmwwHwYDVR0jBBgwFoAUvBV74rm3Dq1oBqW2qJ8D1OLgRk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODljODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdi M2M1YzM3ODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBT7LtXGWuT0cH2HgPQpWxY AxuGYb07C3eZnqDQevCF0gw94mQ/MttWbS14bKmwevzNq5DcEW17BhXiIoOWnoRy IiJXpbZM0ohhUH9hBUWUc9dMfQTpUCHSAtz6XpfPspFNSxE18mrNax1HZ2oB4/6+ aBb0lLpq60m75nNa5QQuS8EBiT9mmFBKsQEwHYYDviLBO7u5fCsTDdLGtNJ1QwAW 9kJjL1D/l+5uVdXy6TnuJh8DWf2RAAx4d3FZE5jNfyCU09ON7W5kd4CQlkJAhc6R 9a791Sw9vaU+ywYIKKPfwtK4DEh2kpEA/wzfE/KPM5dUJVTDApxnxHDvLa2c2DIX -----END CERTIFICATE-----Generated at Sat Dec 20 22:48:50 2025 by rpki-client