This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft File: 589c840d-5406-45bd-ac1d-d77b3c5c3780.mft (raw, json) Hash identifier: T7OCgXDEHWmOoGPYsAX91+Gduy/nXCYaqPtQvoTdFGU= Subject key identifier: F1:A0:4E:7F:A8:47:98:1A:1F:4C:10:99:EE:EB:A3:1D:2D:45:E1:8D Authority key identifier: BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F Certificate issuer: /CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Certificate serial: 010D0C9F4328584C16E33BC8CB69A0D9DD6EA4A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft Manifest number: 010D0C9F4328584073A8273D6C0F9AE946A9C62D Signing time: Fri 05 Dec 2025 20:00:09 +0000 Manifest this update: Fri 05 Dec 2025 20:00:09 +0000 Manifest next update: Sun 07 Dec 2025 20:00:00 +0000 Files and hashes: 1: 0da65ef0eb63c8789dabda39951af100771d9ee1304558fdbf.cer (hash: qbW5Oe8ZH8LXRkGL+tJMOyuvkonBqhPduSzgcBMu+QY=) 2: 589c840d-5406-45bd-ac1d-d77b3c5c3780.crl (hash: StFnm4uDsULzuvHeSZsAuGkTxBp0ue99q5kiKy/jbso=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:e3:3b:c8:cb:69:a0:d9:dd:6e:a4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589c840d-5406-45bd-ac1d-d77b3c5c3780 Validity Not Before: Dec 5 20:00:09 2025 GMT Not After : Dec 7 20:00:00 2025 GMT Subject: CN=5c46c1c6-0ba2-4230-bfac-3038f6e8704c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:63:07:f1:2b:58:31:28:4a:fb:b4:14:31: a9:e3:03:e6:f0:62:66:ca:45:41:e5:00:ff:9c:55: 53:67:48:ca:23:92:33:4b:44:d2:be:55:20:40:da: a3:ff:54:15:e8:78:68:a0:00:0e:dc:00:27:5b:22: 11:2a:0e:ee:98:9f:85:15:ca:4c:bd:2c:d1:ec:9f: 8b:78:e1:2a:ea:12:7b:80:d6:f9:2c:50:fe:ec:f2: bd:f2:7c:af:79:e1:fc:66:37:c1:9d:17:7a:8e:3a: 16:4a:1b:2a:aa:fb:00:41:75:80:7f:50:45:e4:90: 4b:a4:20:ee:e8:95:a6:69:cb:0f:65:fd:4f:41:7f: 9d:f5:b7:0e:97:10:ba:b6:a9:55:02:c4:46:6f:63: 89:4b:c2:68:a6:25:df:8f:53:7a:32:ea:d1:52:62: 4e:96:77:00:ca:98:d3:51:21:a8:ed:6d:57:bc:b7: 0f:cb:a7:2c:5e:84:79:2f:61:3e:6d:b8:6c:70:23: 1c:f6:5f:a2:cf:8d:7d:45:2c:7a:23:13:7d:b4:92: f8:93:1d:95:b7:83:e1:21:3c:b3:27:b4:18:29:33: fa:45:96:70:89:f0:5b:7e:1b:b9:2f:ee:1a:c5:4c: d9:35:61:67:17:8a:64:48:0d:d7:b7:54:22:06:9c: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A0:4E:7F:A8:47:98:1A:1F:4C:10:99:EE:EB:A3:1D:2D:45:E1:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780/589c840d-5406-45bd-ac1d-d77b3c5c3780.crl X509v3 Authority Key Identifier: keyid:BC:15:7B:E2:B9:B7:0E:AD:68:06:A5:B6:A8:9F:03:D4:E2:E0:46:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/589c840d-5406-45bd-ac1d-d77b3c5c3780.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:3d:93:e7:5b:78:50:f4:ec:6a:a1:cf:54:03:61:90:98:98: a2:56:bb:cd:1e:0b:0b:4f:0a:6f:84:02:7d:08:ae:61:e5:1a: 8f:a6:17:c9:f8:ce:b6:01:36:b2:48:28:77:64:3f:22:7c:dc: 02:78:fd:36:af:47:b1:2c:9d:6f:79:72:6f:3f:f0:f1:36:21: b4:47:c7:ec:78:b6:d0:76:eb:c3:ea:81:ea:0b:77:56:83:18: f5:bc:7f:12:9b:af:f3:a6:d3:fd:31:65:d6:30:be:39:a6:fe: 55:be:90:a1:82:f4:87:d7:5b:bd:13:15:7a:d6:8c:10:55:7a: 73:47:83:ef:17:b1:d3:b3:85:e8:67:86:a7:73:8a:e3:46:88: bd:29:d0:15:28:fd:48:34:38:1d:be:48:0e:d7:3c:41:b4:2a: 60:e1:ed:2d:16:50:59:0c:1d:cc:7e:9b:e7:47:dc:73:38:4e: e4:6c:38:b3:15:48:78:86:3d:fa:3a:e2:a1:92:69:23:f0:86: 06:0c:15:ea:98:28:14:7b:cd:9f:8e:fb:81:a7:8d:2a:df:fe: da:3a:52:fb:1d:a4:92:48:8f:58:95:5d:5c:49:e9:51:1c:cc: f9:ba:ba:57:17:62:97:30:78:6c:5f:95:f7:c4:c3:a1:8c:e1: 4a:d7:df:ed -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwW4zvIy2mg2d1upKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5Yzg0MGQtNTQwNi00NWJkLWFjMWQtZDc3YjNjNWMz NzgwMB4XDTI1MTIwNTIwMDAwOVoXDTI1MTIwNzIwMDAwMFowLzEtMCsGA1UEAxMk NWM0NmMxYzYtMGJhMi00MjMwLWJmYWMtMzAzOGY2ZTg3MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppljB/ErWDEoSvu0FDGp4wPm8GJmykVB5QD/ nFVTZ0jKI5IzS0TSvlUgQNqj/1QV6HhooAAO3AAnWyIRKg7umJ+FFcpMvSzR7J+L eOEq6hJ7gNb5LFD+7PK98nyveeH8ZjfBnRd6jjoWShsqqvsAQXWAf1BF5JBLpCDu 6JWmacsPZf1PQX+d9bcOlxC6tqlVAsRGb2OJS8JopiXfj1N6MurRUmJOlncAypjT USGo7W1XvLcPy6csXoR5L2E+bbhscCMc9l+iz419RSx6IxN9tJL4kx2Vt4PhITyz J7QYKTP6RZZwifBbfhu5L+4axUzZNWFnF4pkSA3Xt1QiBpxQaQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPGgTn+oR5gaH0wQme7rox0tReGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODlj ODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdiM2M1YzM3ODAvNTg5Yzg0MGQtNTQwNi00 NWJkLWFjMWQtZDc3YjNjNWMzNzgwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTg5Yzg0MGQtNTQwNi00NWJkLWFj MWQtZDc3YjNjNWMzNzgwLzU4OWM4NDBkLTU0MDYtNDViZC1hYzFkLWQ3N2IzYzVj Mzc4MC5jcmwwHwYDVR0jBBgwFoAUvBV74rm3Dq1oBqW2qJ8D1OLgRk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODljODQwZC01NDA2LTQ1YmQtYWMxZC1kNzdi M2M1YzM3ODAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCiPZPnW3hQ9Oxqoc9UA2GQ mJiiVrvNHgsLTwpvhAJ9CK5h5RqPphfJ+M62ATaySCh3ZD8ifNwCeP02r0exLJ1v eXJvP/DxNiG0R8fseLbQduvD6oHqC3dWgxj1vH8Sm6/zptP9MWXWML45pv5VvpCh gvSH11u9ExV61owQVXpzR4PvF7HTs4XoZ4anc4rjRoi9KdAVKP1INDgdvkgO1zxB tCpg4e0tFlBZDB3MfpvnR9xzOE7kbDizFUh4hj36OuKhkmkj8IYGDBXqmCgUe82f jvuBp40q3/7aOlL7HaSSSI9YlV1cSelRHMz5urpXF2KXMHhsX5X3xMOhjOFK19/t -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:37 2025 by rpki-client