This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft File: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft (raw, json) Hash identifier: uDeECOCZu/iAQ0vzFgUVtJDKhkX7dP0oTb+xbJyZ0qs= Subject key identifier: 45:48:36:29:16:0D:DA:8D:0D:54:3C:21:AA:04:DA:85:F2:42:C0:D7 Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584C16308A6DFD4E015C8EADEF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft Manifest number: 010D0C9F4328584BC280D5C678E41C6D5255F49E Signing time: Fri 05 Dec 2025 14:00:09 +0000 Manifest this update: Fri 05 Dec 2025 14:00:09 +0000 Manifest next update: Mon 08 Dec 2025 14:00:00 +0000 Files and hashes: 1: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl (hash: 1lBMTe2hSrEcOGWFg1FCAzVu4ai+/Yis2kHyVIs1yT0=) 2: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (hash: EFRpkIThgt4Ym6uet7Z7YYdiO8dCZKqpH6QFzu4p3kI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:8a:6d:fd:4e:01:5c:8e:ad:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: Dec 5 14:00:09 2025 GMT Not After : Dec 8 14:00:00 2025 GMT Subject: CN=4e419d71-d6a2-4826-b3f5-cd8cfcc5f784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ad:35:5f:c9:b5:5f:a5:52:78:8f:d4:34:f0: df:74:95:d9:a8:c7:df:78:a3:ab:55:8b:b5:c3:97: c5:42:0c:99:ce:8a:16:62:d5:2c:80:84:24:cb:ee: 54:03:a8:c2:a2:8e:05:3a:75:22:9d:99:b9:6e:f5: 37:91:19:d0:4b:ed:0f:c9:be:5a:93:ee:3c:44:e5: af:81:ab:ac:62:b1:7f:ea:50:be:97:49:c5:08:0c: 33:42:38:8b:ed:e0:91:8f:c0:36:5c:1c:70:44:3a: 44:c2:f1:37:dd:a2:b6:34:91:be:59:4e:df:9f:af: 11:64:78:f6:9c:f6:3b:42:46:10:4b:01:bc:34:cc: 8d:f1:c0:6c:1e:96:c0:66:28:f1:68:7a:ca:22:dd: 8b:14:36:9a:78:e0:9d:49:50:de:ec:46:d3:b7:7a: eb:3d:66:14:7b:df:51:6d:12:d5:70:0d:30:a5:d1: 2c:b8:6e:77:e9:b7:3f:04:22:cc:bb:8c:ac:64:88: 39:79:41:ea:da:2d:aa:2a:c3:f0:47:1c:6b:c2:34: 6b:a8:e7:24:28:cc:6e:d8:f4:6b:3d:5b:47:2a:a4: 67:f6:ca:3c:13:c2:b0:16:03:84:d1:b7:88:b5:d3: 49:51:6a:46:08:fe:a8:ce:11:c4:95:01:6c:3e:a2: 7c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:48:36:29:16:0D:DA:8D:0D:54:3C:21:AA:04:DA:85:F2:42:C0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:b9:9e:38:de:42:51:52:79:aa:48:1f:bc:4d:3f:d6:da:fe: 9f:81:7b:8e:60:34:46:4f:37:4a:ec:99:f7:63:04:2b:60:56: 04:ab:f1:ac:1e:fc:10:c0:ba:ce:16:5f:c9:17:06:a3:99:64: 98:e8:c0:ac:4b:cb:b1:63:44:f8:09:85:f2:85:5e:eb:33:e4: af:51:4f:f3:71:76:e1:6f:ee:f4:2c:f5:75:3b:13:a1:ce:a4: cc:eb:5a:e4:ce:4b:4b:17:8b:12:8f:21:6e:76:97:a3:3c:4c: 64:d5:a9:cc:5f:af:ac:c6:c4:ed:36:67:41:2f:21:28:2b:3e: 32:55:8c:ec:88:52:89:27:0c:6e:e3:69:7e:6b:80:fd:ad:90: 8d:b2:e4:9f:96:c6:d2:0c:7f:39:90:73:ee:fd:a0:5a:a6:3f: bd:8e:01:d5:1b:aa:b1:bd:aa:11:95:c5:4c:1d:fa:c1:2b:e5: 71:88:b8:60:40:53:b0:51:f6:a9:d1:f6:f7:4b:0e:5b:35:4b: 94:6e:1e:8b:e3:fa:70:d5:dc:0d:66:c8:d0:e6:a2:d6:79:bd: b1:aa:3a:52:2d:12:81:04:1d:3b:63:cd:ff:cc:7e:6e:8e:c5: 28:d1:4c:c3:d7:0d:1d:c4:b8:b7:20:b9:5c:6d:13:c1:90:09: b7:28:09:71 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWMIpt/U4BXI6t70AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI1MTIwNTE0MDAwOVoXDTI1MTIwODE0MDAwMFowLzEtMCsGA1UEAxMk NGU0MTlkNzEtZDZhMi00ODI2LWIzZjUtY2Q4Y2ZjYzVmNzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK01X8m1X6VSeI/UNPDfdJXZqMffeKOrVYu1 w5fFQgyZzooWYtUsgIQky+5UA6jCoo4FOnUinZm5bvU3kRnQS+0Pyb5ak+48ROWv gausYrF/6lC+l0nFCAwzQjiL7eCRj8A2XBxwRDpEwvE33aK2NJG+WU7fn68RZHj2 nPY7QkYQSwG8NMyN8cBsHpbAZijxaHrKIt2LFDaaeOCdSVDe7EbTt3rrPWYUe99R bRLVcA0wpdEsuG536bc/BCLMu4ysZIg5eUHq2i2qKsPwRxxrwjRrqOckKMxu2PRr PVtHKqRn9so8E8KwFgOE0beItdNJUWpGCP6ozhHElQFsPqJ8dwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEVINikWDdqNDVQ8IaoE2oXyQsDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvODliODVkNWEtMjIzNi00 YTZiLTljM2QtMjRiMTQ0NDlmNDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxuZ443kJRUnmqSB+8TT/W 2v6fgXuOYDRGTzdK7Jn3YwQrYFYEq/GsHvwQwLrOFl/JFwajmWSY6MCsS8uxY0T4 CYXyhV7rM+SvUU/zcXbhb+70LPV1OxOhzqTM61rkzktLF4sSjyFudpejPExk1anM X6+sxsTtNmdBLyEoKz4yVYzsiFKJJwxu42l+a4D9rZCNsuSflsbSDH85kHPu/aBa pj+9jgHVG6qxvaoRlcVMHfrBK+VxiLhgQFOwUfap0fb3Sw5bNUuUbh6L4/pw1dwN ZsjQ5qLWeb2xqjpSLRKBBB07Y83/zH5ujsUo0UzD1w0dxLi3ILlcbRPBkAm3KAlx -----END CERTIFICATE-----Generated at Sat Dec 6 12:03:00 2025 by rpki-client