This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft File: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft (raw, json) Hash identifier: r/lznHeuw0dIrPPD71+PPI4zVmkBku9fnHIIeWc3b3g= Subject key identifier: B5:A3:DF:5D:18:79:E9:BC:A3:F4:BF:F0:CD:E0:9E:AF:BE:4A:68:A9 Authority key identifier: 1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A Certificate issuer: /CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Certificate serial: 010D0C9F4328584BFFDB01F90F7C127953F9A080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft Manifest number: 010D0C9F4328584BC280D5C678E41C6D5255F496 Signing time: Thu 27 Nov 2025 14:00:03 +0000 Manifest this update: Thu 27 Nov 2025 14:00:03 +0000 Manifest next update: Sun 30 Nov 2025 14:00:00 +0000 Files and hashes: 1: 89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl (hash: Vkqs7i2YeLPqITs8b8hExqX4BKyFcMg88Phh+QgZSnw=) 2: 8cff6b99-a9b0-3f5b-9218-895e0175ffc1.roa (hash: EFRpkIThgt4Ym6uet7Z7YYdiO8dCZKqpH6QFzu4p3kI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ff:db:01:f9:0f:7c:12:79:53:f9:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89b85d5a-2236-4a6b-9c3d-24b14449f49d Validity Not Before: Nov 27 14:00:03 2025 GMT Not After : Nov 30 14:00:00 2025 GMT Subject: CN=1c7f07ed-160c-4fef-9619-32d6264f225d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4d:8c:b4:53:c7:a2:c3:63:f4:1a:03:76:a8: 1a:59:03:55:10:cf:fe:2f:b4:65:21:f2:18:46:c4: e7:05:0d:99:be:80:90:d3:04:ab:2e:62:e4:49:c7: af:df:63:5d:4c:73:24:03:c5:fe:bf:85:e1:dd:5a: e8:ae:b9:92:e2:d7:7c:c6:a3:4d:2f:72:22:49:f5: 61:05:95:5c:db:9f:67:b5:ab:b0:53:57:71:da:0a: 65:15:ac:b5:2f:0f:9b:f5:3d:ab:74:aa:83:81:0e: d3:23:20:87:f0:75:3d:15:7f:40:13:32:f6:ec:98: 34:e1:cf:3b:16:0e:4f:95:f6:e4:7e:1e:1b:c9:33: 71:e9:50:49:09:da:c3:cd:6e:d1:48:15:54:0a:8e: 71:ea:26:ba:7c:99:c6:37:5e:a3:3e:5d:7a:0b:fa: 3a:cc:7a:6d:5e:41:a2:bf:72:30:1b:48:0e:65:25: eb:00:de:7c:58:05:c5:85:e4:3e:68:69:ad:69:5d: cf:e9:60:74:10:b7:b7:dc:4f:2a:22:d3:f6:64:5d: 12:02:8b:e9:f2:4f:45:8f:51:3c:e2:be:30:27:08: 0a:77:fa:0a:bb:e4:4a:0b:c0:ae:89:36:8a:22:82: 3b:09:73:34:6f:b7:31:34:e5:5b:8d:98:3f:b7:93: 77:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A3:DF:5D:18:79:E9:BC:A3:F4:BF:F0:CD:E0:9E:AF:BE:4A:68:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d/89b85d5a-2236-4a6b-9c3d-24b14449f49d.crl X509v3 Authority Key Identifier: keyid:1D:10:A0:92:E3:D0:0A:A9:5A:3F:04:83:5F:39:A1:FF:82:C9:07:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89b85d5a-2236-4a6b-9c3d-24b14449f49d.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:52:ca:8b:78:5c:04:3b:42:d0:6e:59:72:e8:4d:de:6d:ad: cc:bf:a4:e3:df:47:d7:60:3d:a1:14:ed:2a:d3:1c:d7:e1:2e: f8:14:68:c2:c6:6b:0b:7f:eb:38:24:76:54:ce:62:e3:e2:2a: 64:0e:47:ec:e6:41:56:4c:83:bb:18:38:8b:38:a4:ba:04:a0: 8f:b9:2e:6d:e7:20:96:db:d1:76:c8:ce:1c:3a:4c:42:78:8a: 2f:3f:3f:13:7e:54:a1:df:51:03:4e:93:a5:14:01:c0:6d:46: 88:0e:97:8e:ff:76:75:4e:ad:6d:d9:a4:df:e4:a1:3b:6c:0e: 59:a0:c7:28:07:cc:b9:d9:a5:64:79:c4:53:b1:fa:fd:2a:99: 88:e2:ca:c1:90:b1:0b:e9:f0:f1:08:b0:6c:11:a3:74:ee:9f: 5e:06:b8:35:c2:c1:d2:a3:0d:e8:df:55:9f:e5:a0:be:34:cc: b7:29:58:85:0c:1f:2b:67:f3:af:84:ad:3c:08:97:ff:b7:da: ae:67:58:4c:64:18:26:b0:a4:1b:39:ce:d3:5f:38:66:f8:6f: 40:d4:11:fb:01:f6:49:2e:50:dc:02:63:00:5b:a7:6d:2b:a6: f2:cd:c2:c9:5a:6b:de:49:0b:3d:aa:70:db:ca:79:06:03:b0: be:45:df:16 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEv/2wH5D3wSeVP5oIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODliODVkNWEtMjIzNi00YTZiLTljM2QtMjRiMTQ0NDlm NDlkMB4XDTI1MTEyNzE0MDAwM1oXDTI1MTEzMDE0MDAwMFowLzEtMCsGA1UEAxMk MWM3ZjA3ZWQtMTYwYy00ZmVmLTk2MTktMzJkNjI2NGYyMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhk2MtFPHosNj9BoDdqgaWQNVEM/+L7RlIfIY RsTnBQ2ZvoCQ0wSrLmLkScev32NdTHMkA8X+v4Xh3VrorrmS4td8xqNNL3IiSfVh BZVc259ntauwU1dx2gplFay1Lw+b9T2rdKqDgQ7TIyCH8HU9FX9AEzL27Jg04c87 Fg5Plfbkfh4byTNx6VBJCdrDzW7RSBVUCo5x6ia6fJnGN16jPl16C/o6zHptXkGi v3IwG0gOZSXrAN58WAXFheQ+aGmtaV3P6WB0ELe33E8qItP2ZF0SAovp8k9Fj1E8 4r4wJwgKd/oKu+RKC8CuiTaKIoI7CXM0b7cxNOVbjZg/t5N3mwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLWj310Yeem8o/S/8M3gnq++SmipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4 NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIxNDQ0OWY0OWQvODliODVkNWEtMjIzNi00 YTZiLTljM2QtMjRiMTQ0NDlmNDlkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODliODVkNWEtMjIzNi00YTZiLTlj M2QtMjRiMTQ0NDlmNDlkLzg5Yjg1ZDVhLTIyMzYtNGE2Yi05YzNkLTI0YjE0NDQ5 ZjQ5ZC5jcmwwHwYDVR0jBBgwFoAUHRCgkuPQCqlaPwSDXzmh/4LJB5owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OWI4NWQ1YS0yMjM2LTRhNmItOWMzZC0yNGIx NDQ0OWY0OWQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSUsqLeFwEO0LQblly6E3e ba3Mv6Tj30fXYD2hFO0q0xzX4S74FGjCxmsLf+s4JHZUzmLj4ipkDkfs5kFWTIO7 GDiLOKS6BKCPuS5t5yCW29F2yM4cOkxCeIovPz8TflSh31EDTpOlFAHAbUaIDpeO /3Z1Tq1t2aTf5KE7bA5ZoMcoB8y52aVkecRTsfr9KpmI4srBkLEL6fDxCLBsEaN0 7p9eBrg1wsHSow3o31Wf5aC+NMy3KViFDB8rZ/OvhK08CJf/t9quZ1hMZBgmsKQb Oc7TXzhm+G9A1BH7AfZJLlDcAmMAW6dtK6byzcLJWmveSQs9qnDbynkGA7C+Rd8W -----END CERTIFICATE-----Generated at Fri Nov 28 06:47:34 2025 by rpki-client