This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft File: 589a433f-d0bb-4ea9-85da-52c4d90317c6.mft (raw, json) Hash identifier: knAvSFqZTWkuxoygiGLJfRiOxpQUye8tcducBI0Yfwk= Subject key identifier: 00:58:EE:7C:D3:CE:73:16:2E:C9:8C:79:DF:DC:1F:2D:AF:99:27:08 Authority key identifier: 79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 Certificate issuer: /CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Certificate serial: 010D0C9F4328584C1C965B971D497CD0581D1F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft Manifest number: 010D0C9F4328584A7CA64F98CF314C6192796699 Signing time: Sun 07 Dec 2025 21:00:09 +0000 Manifest this update: Sun 07 Dec 2025 21:00:09 +0000 Manifest next update: Tue 09 Dec 2025 21:00:00 +0000 Files and hashes: 1: 1e6eef07-a4ae-3176-9245-ab900ddfc551.roa (hash: d7nKVWzIORIloi9Zy6/vHsxlEOYC9LZ3BZ1WRxIdGCM=) 2: 589a433f-d0bb-4ea9-85da-52c4d90317c6.crl (hash: mHz8Gge3jD3RCf7tXKy5ikHQT3N644N+aIaHYtRNsi8=) 3: d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa (hash: KgRbVTvMlT19M6c8Unr4KEys4P8WJg14ZvaCXowzfdI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Dec 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:1c:96:5b:97:1d:49:7c:d0:58:1d:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Validity Not Before: Dec 7 21:00:09 2025 GMT Not After : Dec 9 21:00:00 2025 GMT Subject: CN=e66ced65-88d9-402e-bd06-ccd3f581e35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:74:9f:a7:82:74:87:ad:66:88:c5:53:25:ef: 08:25:19:4f:46:8e:b5:f8:ae:4a:42:a7:fa:d1:e3: 90:1f:72:3f:eb:93:8b:5d:20:3f:5d:ea:6d:4a:f8: cf:26:2b:f4:ec:64:46:d3:5f:e1:7a:f7:a0:c5:b5: a2:3e:24:5f:87:8a:8b:71:0b:df:85:5c:6d:5f:ff: bd:d1:d5:f8:4a:d1:bd:7b:12:7d:8c:a7:72:2b:ca: 66:29:1c:5f:ed:a1:a5:c8:94:0e:2b:84:ef:0d:b6: da:31:aa:9c:8e:18:b4:1b:84:1a:db:91:8e:5e:24: cd:21:7c:93:40:b6:8f:c1:21:99:56:04:10:07:8e: cc:4f:db:61:9b:7e:55:d1:a8:e9:00:ec:5b:64:6a: d5:2b:0c:6f:ae:9d:93:5a:12:a1:4f:8b:b9:42:53: 4c:fb:43:91:d4:be:4d:c6:dd:29:9b:5d:3a:7b:85: 96:99:af:7a:5e:f4:8c:eb:98:ed:3b:d5:bd:ff:14: 90:ff:93:4b:d6:f4:9f:15:ad:ec:8b:c1:17:8a:a2: ca:18:b5:c4:13:d8:f8:2b:6e:46:fe:f7:eb:4f:eb: e1:2e:fe:fa:a3:27:04:e4:a1:1e:de:22:5e:62:f6: ad:4a:25:08:e7:a1:f7:2a:50:c9:2e:9e:61:eb:08: f5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:58:EE:7C:D3:CE:73:16:2E:C9:8C:79:DF:DC:1F:2D:AF:99:27:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl X509v3 Authority Key Identifier: keyid:79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:37:06:21:18:df:e7:ed:99:b0:45:8d:30:7d:e7:04:30:55: 30:81:ad:1d:62:aa:52:1a:73:da:40:8a:2a:15:63:c3:11:7b: d1:cc:34:f2:25:25:27:a8:b1:ee:6b:da:71:16:8c:a0:e9:3b: 38:c3:41:18:33:c9:70:ce:a6:ff:0a:86:e0:3e:ad:e7:36:10: 89:9d:10:fb:d5:d3:80:db:8a:07:4f:59:f1:03:b8:eb:ea:03: ab:fb:bb:8e:13:ff:71:d1:d1:b7:35:a8:76:92:9f:92:33:c6: f6:48:70:7c:1f:a8:e9:b2:84:86:38:9d:2e:49:12:7f:04:2e: 33:df:0f:82:9c:86:da:4e:fa:ae:98:2b:d7:67:e9:3a:5c:56: 16:87:42:6f:e0:3c:4c:1b:b9:7a:c6:83:c6:21:e2:c9:82:9e: f9:c8:0f:5e:01:40:49:d7:1f:ab:67:b8:a9:7f:a6:69:d4:88: bf:b5:14:ab:be:32:e4:d0:20:b4:af:e9:3a:6c:7f:d1:89:e9: 31:d2:e4:b5:1e:10:7f:49:df:c8:e3:a5:e4:5e:2c:66:fe:aa: 6c:16:e4:d6:00:72:dc:04:39:b5:58:98:ad:83:3d:22:9c:1d: 77:23:62:70:30:c2:e9:33:d2:81:be:54:65:c8:e4:9b:55:fe: d6:c9:68:ae -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwclluXHUl80FgdH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YTQzM2YtZDBiYi00ZWE5LTg1ZGEtNTJjNGQ5MDMx N2M2MB4XDTI1MTIwNzIxMDAwOVoXDTI1MTIwOTIxMDAwMFowLzEtMCsGA1UEAxMk ZTY2Y2VkNjUtODhkOS00MDJlLWJkMDYtY2NkM2Y1ODFlMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Sfp4J0h61miMVTJe8IJRlPRo61+K5KQqf6 0eOQH3I/65OLXSA/XeptSvjPJiv07GRG01/hevegxbWiPiRfh4qLcQvfhVxtX/+9 0dX4StG9exJ9jKdyK8pmKRxf7aGlyJQOK4TvDbbaMaqcjhi0G4Qa25GOXiTNIXyT QLaPwSGZVgQQB47MT9thm35V0ajpAOxbZGrVKwxvrp2TWhKhT4u5QlNM+0OR1L5N xt0pm106e4WWma96XvSM65jtO9W9/xSQ/5NL1vSfFa3si8EXiqLKGLXEE9j4K25G /vfrT+vhLv76oycE5KEe3iJeYvatSiUI56H3KlDJLp5h6wj1owIDAQABo4IDbjCC A2owHQYDVR0OBBYEFABY7nzTznMWLsmMed/cHy2vmScIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ODlh NDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkwMzE3YzYvNTg5YTQzM2YtZDBiYi00 ZWE5LTg1ZGEtNTJjNGQ5MDMxN2M2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTg5YTQzM2YtZDBiYi00ZWE5LTg1 ZGEtNTJjNGQ5MDMxN2M2LzU4OWE0MzNmLWQwYmItNGVhOS04NWRhLTUyYzRkOTAz MTdjNi5jcmwwHwYDVR0jBBgwFoAUeWAivjNNGmzb562ED3BKt+mHa/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0 ZDkwMzE3YzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNNwYhGN/n7ZmwRY0wfecE MFUwga0dYqpSGnPaQIoqFWPDEXvRzDTyJSUnqLHua9pxFoyg6Ts4w0EYM8lwzqb/ CobgPq3nNhCJnRD71dOA24oHT1nxA7jr6gOr+7uOE/9x0dG3Nah2kp+SM8b2SHB8 H6jpsoSGOJ0uSRJ/BC4z3w+CnIbaTvqumCvXZ+k6XFYWh0Jv4DxMG7l6xoPGIeLJ gp75yA9eAUBJ1x+rZ7ipf6Zp1Ii/tRSrvjLk0CC0r+k6bH/Riekx0uS1HhB/Sd/I 46XkXixm/qpsFuTWAHLcBDm1WJitgz0inB13I2JwMMLpM9KBvlRlyOSbVf7WyWiu -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:44 2025 by rpki-client