This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft File: 59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft (raw, json) Hash identifier: QajdM2TaNMTs8dcjAQp30UtQgFcZ3t3CRwAILqwfEPU= Subject key identifier: 51:11:24:44:17:32:28:23:4E:EA:B4:AB:86:C3:30:80:27:8B:11:62 Authority key identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D Certificate issuer: /CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4 Certificate serial: 010D0C9F4328584C3D461F5C37AC6BCCBE813440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft Manifest number: 010D0C9F432858462D15B28A475C1B63259D49D5 Signing time: Fri 19 Dec 2025 14:00:08 +0000 Manifest this update: Fri 19 Dec 2025 14:00:08 +0000 Manifest next update: Mon 22 Dec 2025 14:00:00 +0000 Files and hashes: 1: 2d7d10f7-61f7-301f-80f2-8b88f015e4d8.roa (hash: 1XK7C/A5RyecGeqARK+0fulRTsvC7UKMtq7eoH3jDCc=) 2: 59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl (hash: 3ifbDkos8OjojqoEId/la5VPjtPygqMwcsFxpvyip7I=) 3: 602bdbad-4add-3c5e-b46e-9417aedc7e02.roa (hash: Zcs2DBUsUaYKpVh/c1P/8Wuoi2Kzj23nhYwL5rWvz3k=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:46:1f:5c:37:ac:6b:cc:be:81:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4 Validity Not Before: Dec 19 14:00:08 2025 GMT Not After : Dec 22 14:00:00 2025 GMT Subject: CN=49427c4d-48fe-4a17-923d-e1ed97e16aa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6c:07:9b:b4:25:f7:b8:b3:83:de:19:3a:c7: e0:a1:1b:ff:92:01:60:f1:be:f0:80:3b:59:5c:c5: 59:d3:db:91:00:9b:74:3f:54:b6:48:7c:8c:02:c1: a3:9b:19:b7:5a:0b:cf:2c:df:4a:7c:3c:3c:51:1f: fa:9a:e1:3b:16:76:e3:66:99:49:8a:10:6e:fa:d8: 80:b1:61:87:0d:52:7c:08:4d:52:97:27:63:a1:90: a7:ce:f3:27:31:9d:65:e9:c1:0b:65:9e:86:6c:63: 52:f8:cc:5d:87:d5:95:8d:79:45:57:c7:ae:c4:8e: 85:3e:4c:8b:72:d5:8f:20:0d:9a:df:35:07:52:43: bf:1a:ba:43:ba:f4:f2:52:b0:fb:f0:96:4c:2c:15: dd:2d:6f:e1:70:8f:92:62:63:8c:54:e2:8f:c5:ba: 9d:c3:1b:1e:cf:66:a2:ed:83:0d:1d:84:86:90:3a: c5:a1:c6:c9:e9:43:3d:cc:fb:e4:95:a9:a8:19:a4: c7:87:ec:e6:f8:96:2c:b6:59:61:fe:3e:1f:03:84: bf:97:00:c6:50:3c:31:31:be:17:84:34:7a:19:1c: bd:05:c2:c2:27:31:a1:e3:77:41:5b:d6:df:35:5b: 10:27:38:59:0a:fb:11:bd:00:e8:49:63:4a:0b:91: 1a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:11:24:44:17:32:28:23:4E:EA:B4:AB:86:C3:30:80:27:8B:11:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.crl X509v3 Authority Key Identifier: keyid:5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:03:80:77:a5:e4:fc:c4:c2:0b:ad:9d:a4:98:d2:5e:05:33: 59:04:fa:7a:2c:f5:db:33:06:83:af:0b:c9:72:9f:ba:0d:25: 99:95:ac:9a:a1:38:dd:bc:40:c2:15:86:10:4f:25:ec:48:6b: 11:14:39:55:4a:ce:05:ca:c1:94:4d:78:99:c3:d6:64:e9:5d: cc:fe:82:40:2e:bd:59:cf:71:30:1e:77:a4:bc:a1:af:32:31: 40:09:1b:5c:81:f7:08:14:92:c9:1a:ce:c9:6f:a9:a5:d3:c0: fb:15:14:f3:c7:0c:20:e4:97:5e:ce:da:9f:9a:e7:cf:a3:6d: e4:c7:88:e8:79:46:ab:b7:17:22:b1:ff:0d:d6:73:2d:54:b5: 23:3b:8a:30:37:53:f3:2d:51:b0:0f:ce:6d:b9:22:95:44:9d: 76:48:30:8f:5a:b2:4a:41:0a:26:6c:83:ff:97:d2:c8:be:93: ed:23:f3:fa:fb:fe:36:1b:a9:f7:c9:1c:d2:b0:2a:0f:71:19: 4f:27:2c:f9:a3:f1:da:4e:27:82:2e:ba:05:74:48:4c:cc:b5: b7:0b:92:a6:69:22:de:2a:45:0b:46:55:b2:e7:ff:5c:77:90: 30:b6:e1:07:8a:9f:fa:a2:c2:93:6f:f2:49:3c:64:3f:bb:bb: 83:fc:a8:4e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw9Rh9cN6xrzL6BNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTlmNWM3NjctNWIxZi00YTg1LThmMDUtOTgwYjU4NWZh MmI0MB4XDTI1MTIxOTE0MDAwOFoXDTI1MTIyMjE0MDAwMFowLzEtMCsGA1UEAxMk NDk0MjdjNGQtNDhmZS00YTE3LTkyM2QtZTFlZDk3ZTE2YWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmwHm7Ql97izg94ZOsfgoRv/kgFg8b7wgDtZ XMVZ09uRAJt0P1S2SHyMAsGjmxm3WgvPLN9KfDw8UR/6muE7FnbjZplJihBu+tiA sWGHDVJ8CE1SlydjoZCnzvMnMZ1l6cELZZ6GbGNS+Mxdh9WVjXlFV8euxI6FPkyL ctWPIA2a3zUHUkO/GrpDuvTyUrD78JZMLBXdLW/hcI+SYmOMVOKPxbqdwxsez2ai 7YMNHYSGkDrFocbJ6UM9zPvklamoGaTHh+zm+JYstllh/j4fA4S/lwDGUDwxMb4X hDR6GRy9BcLCJzGh43dBW9bfNVsQJzhZCvsRvQDoSWNKC5EaCwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFFERJEQXMigjTuq0q4bDMIAnixFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OWY1 Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBiNTg1ZmEyYjQvNTlmNWM3NjctNWIxZi00 YTg1LThmMDUtOTgwYjU4NWZhMmI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTlmNWM3NjctNWIxZi00YTg1LThm MDUtOTgwYjU4NWZhMmI0LzU5ZjVjNzY3LTViMWYtNGE4NS04ZjA1LTk4MGI1ODVm YTJiNC5jcmwwHwYDVR0jBBgwFoAUXkkwOuJ1kpAgQPi5HRExgP9Kk20wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OWY1Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBi NTg1ZmEyYjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIA4B3peT8xMILrZ2kmNJe BTNZBPp6LPXbMwaDrwvJcp+6DSWZlayaoTjdvEDCFYYQTyXsSGsRFDlVSs4FysGU TXiZw9Zk6V3M/oJALr1Zz3EwHnekvKGvMjFACRtcgfcIFJLJGs7Jb6ml08D7FRTz xwwg5JdeztqfmufPo23kx4joeUartxcisf8N1nMtVLUjO4owN1PzLVGwD85tuSKV RJ12SDCPWrJKQQombIP/l9LIvpPtI/P6+/42G6n3yRzSsCoPcRlPJyz5o/HaTieC LroFdEhMzLW3C5KmaSLeKkULRlWy5/9cd5AwtuEHip/6osKTb/JJPGQ/u7uD/KhO -----END CERTIFICATE-----Generated at Fri Dec 19 16:51:51 2025 by rpki-client