This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft File: 89f46e33-a45d-4efe-8e7f-94df4343f1be.mft (raw, json) Hash identifier: YhGcP9PovN67IQb78Xpd9P/KF735dkEI4spf+k1gD94= Subject key identifier: 16:36:EB:88:99:CB:C5:A9:89:C5:75:2E:E2:74:EE:EC:C0:C4:A0:BF Authority key identifier: BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 Certificate issuer: /CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Certificate serial: 010D0C9F4328584C404C5DCB49C0B4F1EE4A7100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft Manifest number: 010D0C9F432858419BA974F3424D7851A3CF4932 Signing time: Sat 20 Dec 2025 16:00:09 +0000 Manifest this update: Sat 20 Dec 2025 16:00:09 +0000 Manifest next update: Tue 23 Dec 2025 16:00:00 +0000 Files and hashes: 1: 706b4db8-fc63-33bf-b4f5-b238f5d6b79a.roa (hash: iq+Fezaum+OCJxW7g9Qs8/bMZFpnSKyPRHL5japSZkc=) 2: 89f46e33-a45d-4efe-8e7f-94df4343f1be.crl (hash: E6LcONBUw1QLkF7bsVpdw99s+X++LVjc/PuNZNjTF2o=) 3: 9cb53c35-155a-321e-9b30-bc285e3dd43f.roa (hash: 9YzjkcOO8ikVECYjejaVD+960W1G6Jre65/601bCgsQ=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:4c:5d:cb:49:c0:b4:f1:ee:4a:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f46e33-a45d-4efe-8e7f-94df4343f1be Validity Not Before: Dec 20 16:00:09 2025 GMT Not After : Dec 23 16:00:00 2025 GMT Subject: CN=f9e99d33-f5c2-4a60-8309-f6255638ef73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1d:eb:5b:42:51:d5:55:53:09:f6:e6:19:f4: 0b:2b:f0:64:1d:9a:51:34:a9:53:a9:1c:d3:52:68: c3:fa:e3:18:2a:2a:55:78:10:f1:1a:66:d4:ec:dd: 12:55:2b:bc:b3:db:9d:ef:57:13:99:c7:64:cc:74: 90:24:bd:9a:63:cf:d6:e5:9f:2c:c8:a9:d8:28:5c: 55:09:66:d5:60:a5:be:9a:0d:ec:5b:a1:26:c9:71: ed:59:a6:ac:be:45:34:3c:57:19:47:9c:ee:92:0e: 98:db:72:a5:2f:da:09:99:80:ec:33:ca:e4:62:cd: ce:0d:03:e5:f7:6e:d3:ab:88:0a:3a:bc:2f:48:a9: 91:87:d1:dd:57:2c:d5:3d:51:c5:3d:18:db:2f:3a: b0:09:a1:59:81:d4:88:74:ae:c0:47:5a:5b:95:d3: 0b:14:d3:51:59:ed:15:09:42:03:fa:cd:f5:cf:fd: cd:7d:73:e1:7f:0b:70:a4:e3:6e:31:5c:e1:86:68: 50:19:50:02:ce:75:52:bd:5b:57:98:a3:69:fb:a5: cd:a9:3a:9f:95:64:f5:9c:cf:c1:9a:b2:8d:00:c2: 3d:d1:f0:bb:bd:a7:fd:33:68:ce:ad:ba:e7:70:b6: c6:e4:e9:69:63:13:54:5a:82:04:22:ef:e5:cb:1a: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:36:EB:88:99:CB:C5:A9:89:C5:75:2E:E2:74:EE:EC:C0:C4:A0:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be/89f46e33-a45d-4efe-8e7f-94df4343f1be.crl X509v3 Authority Key Identifier: keyid:BF:D7:76:5C:AE:7C:7E:99:13:39:08:73:6B:FC:47:70:CC:A2:0B:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89f46e33-a45d-4efe-8e7f-94df4343f1be.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:43:01:b8:2f:3c:13:78:c7:0d:6e:1c:6a:ce:f7:2f:55:c9: 88:d0:2d:fe:d8:39:1f:95:45:60:e8:45:81:07:df:75:76:c0: 8f:0a:18:a0:83:f1:3f:65:83:89:54:06:94:00:b7:ca:69:2b: 61:42:d5:9a:1c:32:f2:06:99:4b:01:b8:b7:bd:33:3e:d8:d6: f5:c8:f6:7a:46:51:ad:1d:e0:df:ec:7f:c3:0f:d6:09:7a:ba: f1:c3:c7:f9:eb:c8:c9:35:c6:ac:f8:f8:d7:d5:d0:1f:e3:0d: 05:e1:ea:0c:15:b4:9d:a3:c8:15:89:41:4a:f1:7c:91:6a:f9: 50:57:f6:66:7a:1e:58:d9:c7:21:25:2d:5c:11:6d:64:25:94: 02:a0:53:f4:cf:3b:e9:04:53:1b:02:f1:9c:d3:97:e5:03:43: 5b:81:87:03:90:21:00:29:bc:be:7e:af:d8:26:7d:d4:05:5e: d3:64:3d:4e:f5:56:0a:57:fd:3b:e1:6c:30:ba:9c:dd:f9:69: 23:83:77:5f:59:10:95:9a:88:6f:20:31:af:f2:63:3a:a0:c0: e6:7c:57:fb:81:8b:5d:93:97:18:04:6e:20:05:16:77:aa:d9: ab:b7:92:c7:65:a0:0c:1a:7a:da:9f:35:28:06:e5:28:42:60: 25:a4:36:2a -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExATF3LScC08e5KcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlmNDZlMzMtYTQ1ZC00ZWZlLThlN2YtOTRkZjQzNDNm MWJlMB4XDTI1MTIyMDE2MDAwOVoXDTI1MTIyMzE2MDAwMFowLzEtMCsGA1UEAxMk ZjllOTlkMzMtZjVjMi00YTYwLTgzMDktZjYyNTU2MzhlZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR3rW0JR1VVTCfbmGfQLK/BkHZpRNKlTqRzT UmjD+uMYKipVeBDxGmbU7N0SVSu8s9ud71cTmcdkzHSQJL2aY8/W5Z8syKnYKFxV CWbVYKW+mg3sW6EmyXHtWaasvkU0PFcZR5zukg6Y23KlL9oJmYDsM8rkYs3ODQPl 927Tq4gKOrwvSKmRh9HdVyzVPVHFPRjbLzqwCaFZgdSIdK7AR1pbldMLFNNRWe0V CUID+s31z/3NfXPhfwtwpONuMVzhhmhQGVACznVSvVtXmKNp+6XNqTqflWT1nM/B mrKNAMI90fC7vaf9M2jOrbrncLbG5OlpYxNUWoIEIu/lyxqyMwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBY264iZy8WpicV1LuJ07uzAxKC/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWY0 NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRmNDM0M2YxYmUvODlmNDZlMzMtYTQ1ZC00 ZWZlLThlN2YtOTRkZjQzNDNmMWJlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlmNDZlMzMtYTQ1ZC00ZWZlLThl N2YtOTRkZjQzNDNmMWJlLzg5ZjQ2ZTMzLWE0NWQtNGVmZS04ZTdmLTk0ZGY0MzQz ZjFiZS5jcmwwHwYDVR0jBBgwFoAUv9d2XK58fpkTOQhza/xHcMyiC9MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84OWY0NmUzMy1hNDVkLTRlZmUtOGU3Zi05NGRm NDM0M2YxYmUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5QwG4LzwTeMcNbhxqzvcv VcmI0C3+2DkflUVg6EWBB991dsCPChigg/E/ZYOJVAaUALfKaSthQtWaHDLyBplL Abi3vTM+2Nb1yPZ6RlGtHeDf7H/DD9YJerrxw8f568jJNcas+PjX1dAf4w0F4eoM FbSdo8gViUFK8XyRavlQV/Zmeh5Y2cchJS1cEW1kJZQCoFP0zzvpBFMbAvGc05fl A0NbgYcDkCEAKby+fq/YJn3UBV7TZD1O9VYKV/074Wwwupzd+Wkjg3dfWRCVmohv IDGv8mM6oMDmfFf7gYtdk5cYBG4gBRZ3qtmrt5LHZaAMGnranzUoBuUoQmAlpDYq -----END CERTIFICATE-----Generated at Sun Dec 21 17:07:36 2025 by rpki-client