This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft File: 590ea78c-91e2-45e2-b596-eeeedd529e3e.mft (raw, json) Hash identifier: jVCIn6PhD7L7gIJO/voDxi5hh8mbx4RTjvxpposvnss= Subject key identifier: 1B:69:05:5C:97:D0:4D:B7:99:5A:22:0B:0D:72:FE:FE:FE:6A:88:B0 Authority key identifier: 73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 Certificate issuer: /CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Certificate serial: 010D0C9F4328584C16308910E0A63C6358BABF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft Manifest number: 010D0C9F4328584073A858FEA04ED8A25C5310C3 Signing time: Fri 05 Dec 2025 14:00:09 +0000 Manifest this update: Fri 05 Dec 2025 14:00:09 +0000 Manifest next update: Mon 08 Dec 2025 14:00:00 +0000 Files and hashes: 1: 590ea78c-91e2-45e2-b596-eeeedd529e3e.crl (hash: FRU5n7uixffaJ4C3IIpUfPwe3hYOKp63L8gwdlKZcF0=) 2: cde559ae-36b8-36bb-aef2-8c01905cbdc7.roa (hash: tLSMBVIq7snWcRSGqeRtz0bmBPrjezcNckTBafbysyA=) 3: d3a7aea3-ba5f-33a7-b00a-306269cc714b.roa (hash: MYVadGem1fm5lAb5X1wgy7MMl7GYJPXc6B+9MG9yJGA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:16:30:89:10:e0:a6:3c:63:58:ba:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=590ea78c-91e2-45e2-b596-eeeedd529e3e Validity Not Before: Dec 5 14:00:09 2025 GMT Not After : Dec 8 14:00:00 2025 GMT Subject: CN=17d5ff1f-238f-4594-9c23-91f0480f06c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d3:d3:1c:db:5b:82:57:61:f3:5d:6a:e4:64: d1:20:bb:92:9d:51:02:5d:5e:cd:49:0f:b5:29:54: 2f:4a:37:0b:b8:b5:53:67:52:69:76:6b:55:d6:89: 3a:cf:7a:29:3b:bb:3e:9e:45:34:1b:79:d4:3e:c2: 55:f5:a5:a6:5b:07:3a:fc:65:e9:30:3d:00:ca:08: e7:22:88:ef:09:f3:0b:3d:b1:25:69:39:08:0a:b2: ee:29:ea:3a:d6:fa:ff:93:93:34:24:2b:f5:85:65: ee:0b:56:cc:b2:97:b9:0e:f4:1a:a4:2d:8e:80:be: 6c:89:bb:cc:cc:01:85:a7:51:f4:e3:d7:66:59:6f: 2a:4e:f4:ad:ff:b9:47:82:4a:f8:1a:76:a9:e7:59: 6e:3d:bf:1f:94:07:cb:39:b1:fb:40:f9:1b:cb:28: a2:58:db:74:9f:73:11:df:bc:e5:1e:1b:95:6e:56: 99:f1:96:c2:9e:d6:8e:4b:c1:4a:c8:14:1d:b2:0b: 66:78:42:77:ab:41:dd:b7:1b:fb:39:3f:45:9d:4b: 2c:46:e3:a2:5a:52:29:5b:e0:b3:c2:4f:ef:8d:00: f2:fd:74:97:5b:df:80:f8:96:13:15:e9:d8:95:9c: ba:cb:cc:89:8d:e0:a8:7a:44:fd:b8:1d:6f:91:b8: 7e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:69:05:5C:97:D0:4D:B7:99:5A:22:0B:0D:72:FE:FE:FE:6A:88:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e/590ea78c-91e2-45e2-b596-eeeedd529e3e.crl X509v3 Authority Key Identifier: keyid:73:2F:57:E7:CB:97:A7:EA:DB:36:22:D0:66:0D:3B:E9:8B:82:6E:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/590ea78c-91e2-45e2-b596-eeeedd529e3e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:09:0b:bc:23:bd:a5:dd:1f:11:2c:49:7d:7d:90:a6:c1:4a: 5b:4d:a4:9c:3c:b4:78:50:2f:2b:04:7c:83:03:52:f9:e2:34: 6b:db:72:18:85:45:87:f6:11:22:4d:22:3f:9d:9c:e9:33:be: 25:91:37:00:cf:e8:ef:e8:ca:33:2b:4e:26:9b:7f:25:03:0b: 97:d9:70:2d:6b:cd:46:33:61:47:49:a3:9c:74:f3:c5:c4:70: 34:22:23:35:7d:3e:6f:c5:9c:56:f7:9d:79:88:62:3c:ad:f7: c2:d5:e6:f5:7d:11:7f:38:dd:34:7c:a9:32:79:f9:70:34:f3: dc:c9:1f:35:57:bf:5f:ad:88:91:74:5c:d5:5c:35:ab:b1:15: 99:8e:05:83:5c:02:f8:f5:13:cd:c6:32:7e:fe:94:3a:15:0e: d4:10:18:cc:79:99:94:ba:e5:1b:4b:57:86:ed:de:f8:6d:83: f1:e0:30:bf:78:24:93:f3:80:a8:76:34:a1:fe:a0:5a:89:90: 83:7a:a8:a3:3b:1b:38:ee:46:06:8f:8e:59:c7:8a:2e:e5:c6: 18:ec:58:98:bb:3b:ef:07:96:aa:95:9c:7b:ed:a4:54:12:03: 84:0e:7f:cf:19:0d:d6:78:af:0b:8f:bc:58:0d:0a:24:f7:54: 8b:83:92:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwWMIkQ4KY8Y1i6vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkwZWE3OGMtOTFlMi00NWUyLWI1OTYtZWVlZWRkNTI5 ZTNlMB4XDTI1MTIwNTE0MDAwOVoXDTI1MTIwODE0MDAwMFowLzEtMCsGA1UEAxMk MTdkNWZmMWYtMjM4Zi00NTk0LTljMjMtOTFmMDQ4MGYwNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29PTHNtbgldh811q5GTRILuSnVECXV7NSQ+1 KVQvSjcLuLVTZ1JpdmtV1ok6z3opO7s+nkU0G3nUPsJV9aWmWwc6/GXpMD0Aygjn IojvCfMLPbElaTkICrLuKeo61vr/k5M0JCv1hWXuC1bMspe5DvQapC2OgL5sibvM zAGFp1H049dmWW8qTvSt/7lHgkr4Gnap51luPb8flAfLObH7QPkbyyiiWNt0n3MR 37zlHhuVblaZ8ZbCntaOS8FKyBQdsgtmeEJ3q0Hdtxv7OT9FnUssRuOiWlIpW+Cz wk/vjQDy/XSXW9+A+JYTFenYlZy6y8yJjeCoekT9uB1vkbh+0wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBtpBVyX0E23mVoiCw1y/v7+aoiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81OTBl YTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVlZGQ1MjllM2UvNTkwZWE3OGMtOTFlMi00 NWUyLWI1OTYtZWVlZWRkNTI5ZTNlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNTkwZWE3OGMtOTFlMi00NWUyLWI1 OTYtZWVlZWRkNTI5ZTNlLzU5MGVhNzhjLTkxZTItNDVlMi1iNTk2LWVlZWVkZDUy OWUzZS5jcmwwHwYDVR0jBBgwFoAUcy9X58uXp+rbNiLQZg076YuCboUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81OTBlYTc4Yy05MWUyLTQ1ZTItYjU5Ni1lZWVl ZGQ1MjllM2UuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCICQu8I72l3R8RLEl9fZCm wUpbTaScPLR4UC8rBHyDA1L54jRr23IYhUWH9hEiTSI/nZzpM74lkTcAz+jv6Moz K04mm38lAwuX2XAta81GM2FHSaOcdPPFxHA0IiM1fT5vxZxW9515iGI8rffC1eb1 fRF/ON00fKkyeflwNPPcyR81V79frYiRdFzVXDWrsRWZjgWDXAL49RPNxjJ+/pQ6 FQ7UEBjMeZmUuuUbS1eG7d74bYPx4DC/eCST84CodjSh/qBaiZCDeqijOxs47kYG j45Zx4ou5cYY7FiYuzvvB5aqlZx77aRUEgOEDn/PGQ3WeK8Lj7xYDQok91SLg5Li -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:13 2025 by rpki-client