This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft File: 589a433f-d0bb-4ea9-85da-52c4d90317c6.mft (raw, json) Hash identifier: 2hRiTc+2sOtEXDNUeXRDImXCwCa+CgiBTkP+0FJ8xvQ= Subject key identifier: FE:37:B5:36:EC:3D:DB:60:2F:49:27:EE:A3:BB:24:AC:E8:46:41:C4 Authority key identifier: 79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 Certificate issuer: /CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Certificate serial: 010D0C9F4328584C3E169144602F838B004D4600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft Manifest number: 010D0C9F4328584A7CA64F98CF314C61927966A6 Signing time: Fri 19 Dec 2025 21:00:08 +0000 Manifest this update: Fri 19 Dec 2025 21:00:08 +0000 Manifest next update: Sun 21 Dec 2025 21:00:00 +0000 Files and hashes: 1: 1e6eef07-a4ae-3176-9245-ab900ddfc551.roa (hash: HYbmC7L2MViVYTN6yTzjt2GzcBjAVeNod/LlppUh/XI=) 2: 589a433f-d0bb-4ea9-85da-52c4d90317c6.crl (hash: fQpU+f3tl2sl865PMMSrjgsfnVNZ5xBleICcy3gkn5Q=) 3: d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa (hash: KgRbVTvMlT19M6c8Unr4KEys4P8WJg14ZvaCXowzfdI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:16:91:44:60:2f:83:8b:00:4d:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Validity Not Before: Dec 19 21:00:08 2025 GMT Not After : Dec 21 21:00:00 2025 GMT Subject: CN=94b5f749-074c-49d9-a8f7-188462f4e684 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:49:9d:28:56:ed:41:d0:8a:64:4e:71:ae:a6: 5a:0b:7c:49:5c:c3:5b:2c:9c:0c:b3:84:f5:55:24: 57:95:76:a1:a4:06:02:d1:0b:3e:01:86:d3:12:78: bf:6b:ab:36:45:98:0e:0b:a1:58:68:82:b7:f4:ec: 6e:81:fa:ea:ef:9a:1a:64:0e:65:42:71:7f:36:83: 02:86:0a:5a:9e:b8:42:9d:88:e8:88:10:2b:f6:e3: 3e:da:8f:11:b5:72:b8:f6:04:f2:87:26:fe:08:16: 5a:aa:12:17:dc:5b:1e:99:ff:ed:e4:e8:ef:77:f2: cf:e8:de:e4:5f:74:6d:69:3e:99:a4:ff:63:a0:b0: 83:28:28:d6:74:ea:96:cf:79:66:f8:cf:d2:64:54: 9d:3f:b5:cf:9f:64:81:cf:30:a4:66:46:b2:db:05: c8:f5:02:44:f1:f7:9c:ee:8d:41:7e:7f:72:0e:cc: 94:d4:e5:84:21:1f:04:4f:63:9d:fa:62:bf:f8:53: ab:ce:4c:af:da:c5:c2:5d:e3:a6:3e:02:eb:b7:ce: 9f:37:f1:10:23:4f:6a:5d:ec:68:43:ce:05:ab:3d: e7:c5:f0:33:c8:fa:57:2f:70:1b:16:be:b9:b5:d0: 0d:03:bb:1a:2c:f2:f1:26:4b:76:8c:6d:65:c1:9e: 62:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:37:B5:36:EC:3D:DB:60:2F:49:27:EE:A3:BB:24:AC:E8:46:41:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl X509v3 Authority Key Identifier: keyid:79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:4e:a0:f3:2d:a8:ef:0a:25:04:80:10:67:37:f0:d2:71:87: 34:36:e3:0e:4f:97:b7:af:ec:2a:7a:7f:aa:07:21:89:8d:ed: 8a:fe:ec:e8:8e:74:36:cd:26:87:d7:e1:a3:b1:66:87:c9:d4: 5d:8a:b7:be:b9:39:e5:8d:15:b1:8c:36:5f:03:af:a4:4e:82: d1:d8:32:22:a1:ec:b7:bf:76:cc:e7:61:7b:6a:05:cb:4b:26: d5:ca:5e:10:56:18:2e:c5:04:1a:6b:06:19:e2:bf:55:df:2f: 36:19:45:b2:94:07:38:24:60:ca:c5:70:ba:3e:7a:1a:47:01: 8c:13:1b:ee:4c:e8:ab:b3:0e:e0:f1:dc:69:a2:14:29:60:9d: 23:c2:fc:50:7c:7c:ec:26:63:2c:a7:c2:ae:28:2d:5c:d8:07: 25:56:f1:de:7e:cc:16:b8:f9:81:64:fe:e3:3b:6a:63:d5:34: ce:ff:0e:8c:31:76:e9:4c:af:fe:0f:c7:25:ba:7a:6f:56:00: 96:b3:0a:df:12:ff:b3:1b:95:66:58:d5:dd:dd:cd:cd:22:13: a4:2e:0f:5d:9b:04:9d:01:c8:df:18:ae:08:e2:3b:a5:ea:80: 68:0e:c5:0e:b5:09:67:84:b8:87:05:a3:20:fb:0e:57:1f:df: 9b:c3:2e:78 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw+FpFEYC+DiwBNRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YTQzM2YtZDBiYi00ZWE5LTg1ZGEtNTJjNGQ5MDMx N2M2MB4XDTI1MTIxOTIxMDAwOFoXDTI1MTIyMTIxMDAwMFowLzEtMCsGA1UEAxMk OTRiNWY3NDktMDc0Yy00OWQ5LWE4ZjctMTg4NDYyZjRlNjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkmdKFbtQdCKZE5xrqZaC3xJXMNbLJwMs4T1 VSRXlXahpAYC0Qs+AYbTEni/a6s2RZgOC6FYaIK39Oxugfrq75oaZA5lQnF/NoMC hgpanrhCnYjoiBAr9uM+2o8RtXK49gTyhyb+CBZaqhIX3Fsemf/t5Ojvd/LP6N7k X3RtaT6ZpP9joLCDKCjWdOqWz3lm+M/SZFSdP7XPn2SBzzCkZkay2wXI9QJE8fec 7o1Bfn9yDsyU1OWEIR8ET2Od+mK/+FOrzkyv2sXCXeOmPgLrt86fN/EQI09qXexo Q84Fqz3nxfAzyPpXL3AbFr65tdANA7saLPLxJkt2jG1lwZ5iXQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP43tTbsPdtgL0kn7qO7JKzoRkHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ODlh NDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkwMzE3YzYvNTg5YTQzM2YtZDBiYi00 ZWE5LTg1ZGEtNTJjNGQ5MDMxN2M2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTg5YTQzM2YtZDBiYi00ZWE5LTg1 ZGEtNTJjNGQ5MDMxN2M2LzU4OWE0MzNmLWQwYmItNGVhOS04NWRhLTUyYzRkOTAz MTdjNi5jcmwwHwYDVR0jBBgwFoAUeWAivjNNGmzb562ED3BKt+mHa/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0 ZDkwMzE3YzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmTqDzLajvCiUEgBBnN/DS cYc0NuMOT5e3r+wqen+qByGJje2K/uzojnQ2zSaH1+GjsWaHydRdire+uTnljRWx jDZfA6+kToLR2DIioey3v3bM52F7agXLSybVyl4QVhguxQQaawYZ4r9V3y82GUWy lAc4JGDKxXC6PnoaRwGMExvuTOirsw7g8dxpohQpYJ0jwvxQfHzsJmMsp8KuKC1c 2AclVvHefswWuPmBZP7jO2pj1TTO/w6MMXbpTK/+D8clunpvVgCWswrfEv+zG5Vm WNXd3c3NIhOkLg9dmwSdAcjfGK4I4jul6oBoDsUOtQlnhLiHBaMg+w5XH9+bwy54 -----END CERTIFICATE-----Generated at Sat Dec 20 10:01:35 2025 by rpki-client