This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft File: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft (raw, json) Hash identifier: IB3eOKqiaASRhGSNb/qvKL7vY4zJSUJJaLTi9oUqKvw= Subject key identifier: 59:6D:25:5E:0B:D1:5D:4E:8C:40:10:B6:84:B0:C8:43:BF:B6:90:AC Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584CA32E04E607ED5424D5EF5B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft Manifest number: 010D0C9F4328584BC280D5C678E41C6D5255F4D1 Signing time: Sun 25 Jan 2026 02:04:03 +0000 Manifest this update: Sun 25 Jan 2026 02:04:03 +0000 Manifest next update: Tue 27 Jan 2026 14:00:00 +0000 Files and hashes: 1: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl (hash: VVBHI04wImxsQA0hollmBbuizX+/Qg7RNE0YGyqsnkg=) 2: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (hash: jbvxQnjl/8tFqpMklA56Ox5/GSlBBBIbUbldzBNiCRo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a3:2e:04:e6:07:ed:54:24:d5:ef:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: Jan 25 02:04:03 2026 GMT Not After : Jan 27 14:00:00 2026 GMT Subject: CN=3b909407-6ddd-4dc1-a608-f871d69dec79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0f:c2:0f:0a:28:0c:33:61:a2:03:69:f9:bc: 04:36:4a:93:cb:02:34:7c:9d:72:88:08:7e:ff:75: 54:13:cb:c4:5a:52:e6:92:38:c4:93:c9:6c:9e:11: e4:fd:ba:11:f3:de:cc:8a:cb:5f:8a:a8:98:e8:93: 58:65:22:d0:b1:e2:dc:ca:e1:8c:0b:52:6c:56:59: bf:62:f0:1a:02:91:ba:0a:96:9e:e3:ec:59:fc:e3: b6:0c:3e:85:19:65:90:ba:14:5c:be:69:06:5c:15: f1:b5:e7:d4:c1:c6:33:e1:58:2b:42:bb:10:e7:3c: bf:13:0f:4c:53:58:ed:ec:7f:4b:52:96:7b:cb:de: 2e:82:d5:a4:b3:c8:ba:ab:5e:a8:ee:f5:a1:04:94: 78:31:f9:53:66:f9:ae:91:76:b7:28:0a:20:a4:15: e1:89:22:e5:58:06:5c:e9:70:af:e8:9f:a1:d9:76: 4c:72:37:6e:4f:a2:a4:a0:d3:4f:c1:1b:a3:95:2b: 0a:75:61:9c:1f:92:95:a2:50:0f:3d:87:ca:34:80: f9:db:d8:13:fb:40:29:88:fa:7b:e3:01:33:f4:5d: bc:bc:61:af:5d:33:59:dd:1b:bd:5f:9c:7d:25:72: 88:30:0d:bd:31:b1:de:6e:f7:53:94:c2:f9:f1:6e: eb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6D:25:5E:0B:D1:5D:4E:8C:40:10:B6:84:B0:C8:43:BF:B6:90:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:91:87:1f:32:74:1f:26:30:45:ac:3b:21:32:6b:7d:1c:b6: b7:88:1f:7c:0f:36:1a:58:8b:d0:04:54:c8:5d:49:da:a4:03: 75:d2:18:01:2c:47:c7:51:66:19:64:02:b7:a9:4c:86:1b:ce: d7:6f:51:08:a1:bd:68:d9:37:28:d6:fb:8d:23:df:e3:ce:69: 1f:10:4c:9c:c0:61:87:d0:9b:1c:a4:e4:e7:ae:36:c2:c6:bd: ff:50:58:0c:d4:ba:d7:f0:c5:a4:70:d7:18:a6:2a:50:5b:5d: 99:76:e0:87:15:ef:8b:c9:e5:78:04:aa:b2:63:16:5a:19:2e: 52:f2:59:57:bc:b6:35:2e:0a:1a:4a:53:19:67:ce:7b:58:b4: 71:75:bf:23:6e:5a:e1:85:1e:2f:d3:c8:a7:33:5e:30:a0:62: f0:b5:51:87:6f:af:6d:0a:5b:fb:bc:95:0a:ab:c4:8a:b9:87: 1e:a6:a1:cf:ce:cf:2e:eb:ec:bd:75:c9:d3:db:a8:40:c7:40: 83:55:f0:17:05:ea:b1:7f:bf:c9:8a:ba:30:a6:bd:7d:5c:85: 40:bc:7d:14:0e:91:7f:aa:19:23:39:6d:2c:a3:8d:7a:7e:ea: cc:b1:86:75:b9:c2:99:c5:5a:29:2b:19:a2:ab:bc:14:da:6e: 10:c5:33:1d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyjLgTmB+1UJNXvW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI2MDEyNTAyMDQwM1oXDTI2MDEyNzE0MDAwMFowLzEtMCsGA1UEAxMk M2I5MDk0MDctNmRkZC00ZGMxLWE2MDgtZjg3MWQ2OWRlYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA/CDwooDDNhogNp+bwENkqTywI0fJ1yiAh+ /3VUE8vEWlLmkjjEk8lsnhHk/boR897MistfiqiY6JNYZSLQseLcyuGMC1JsVlm/ YvAaApG6Cpae4+xZ/OO2DD6FGWWQuhRcvmkGXBXxtefUwcYz4VgrQrsQ5zy/Ew9M U1jt7H9LUpZ7y94ugtWks8i6q16o7vWhBJR4MflTZvmukXa3KAogpBXhiSLlWAZc 6XCv6J+h2XZMcjduT6KkoNNPwRujlSsKdWGcH5KVolAPPYfKNID529gT+0ApiPp7 4wEz9F28vGGvXTNZ3Ru9X5x9JXKIMA29MbHebvdTlML58W7r2QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFltJV4L0V1OjEAQtoSwyEO/tpCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvODliODVkNWEtMjIzNi00 YTZiLTljM2QtMjRiMTQ0NDlmNDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANkYcfMnQfJjBFrDshMmt9 HLa3iB98DzYaWIvQBFTIXUnapAN10hgBLEfHUWYZZAK3qUyGG87Xb1EIob1o2Tco 1vuNI9/jzmkfEEycwGGH0JscpOTnrjbCxr3/UFgM1LrX8MWkcNcYpipQW12ZduCH Fe+LyeV4BKqyYxZaGS5S8llXvLY1LgoaSlMZZ857WLRxdb8jblrhhR4v08inM14w oGLwtVGHb69tClv7vJUKq8SKuYcepqHPzs8u6+y9dcnT26hAx0CDVfAXBeqxf7/J irowpr19XIVAvH0UDpF/qhkjOW0so416furMsYZ1ucKZxVopKxmiq7wU2m4QxTMd -----END CERTIFICATE-----Generated at Sun Jan 25 08:56:51 2026 by rpki-client