This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft File: 589a433f-d0bb-4ea9-85da-52c4d90317c6.mft (raw, json) Hash identifier: 7xenfvTdx1zwql9IqYObRSSQeaTpyCM4Y8P/JYRol+4= Subject key identifier: C7:AE:6F:4C:8E:B5:B4:35:9F:32:D6:BF:EE:E1:83:16:06:E3:3F:F7 Authority key identifier: 79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 Certificate issuer: /CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Certificate serial: 010D0C9F4328584C75EC322E9CC4D1DB3EF0EEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft Manifest number: 010D0C9F4328584A7CA64F98CF314C61927966BB Signing time: Thu 08 Jan 2026 21:00:03 +0000 Manifest this update: Thu 08 Jan 2026 21:00:03 +0000 Manifest next update: Sat 10 Jan 2026 21:00:00 +0000 Files and hashes: 1: 1e6eef07-a4ae-3176-9245-ab900ddfc551.roa (hash: HYbmC7L2MViVYTN6yTzjt2GzcBjAVeNod/LlppUh/XI=) 2: 589a433f-d0bb-4ea9-85da-52c4d90317c6.crl (hash: QuqOKnv4mphXRmN9C5X3BlDvuEoMvHcpEdU2BQZvl5I=) 3: d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa (hash: KgRbVTvMlT19M6c8Unr4KEys4P8WJg14ZvaCXowzfdI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Jan 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:ec:32:2e:9c:c4:d1:db:3e:f0:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Validity Not Before: Jan 8 21:00:03 2026 GMT Not After : Jan 10 21:00:00 2026 GMT Subject: CN=c797222c-ff3d-4b6b-b7eb-21d8c89f9f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3d:41:77:b8:fa:d5:96:6b:1d:e9:21:24:69: 9c:44:11:2b:89:d9:7d:29:c0:ca:00:c0:cd:a5:8f: 33:84:69:46:2d:1b:ea:a7:e6:05:7e:19:41:8d:00: 19:3b:ee:ae:cc:82:e5:8c:7d:08:e0:36:cc:47:5d: 04:f6:1d:e4:1c:11:dc:c4:2b:99:90:73:f7:3c:8d: de:ad:51:50:f6:17:1d:37:34:5f:28:0d:18:97:25: f5:4d:05:5f:11:07:a0:1b:6f:a8:dd:ae:75:17:64: 37:25:42:4a:70:f0:05:35:0b:b9:7c:00:5c:40:99: de:c4:f2:f2:59:6c:94:a4:f8:5c:d2:e9:03:4d:d0: df:15:93:42:af:b0:7c:b7:5b:96:7d:be:42:82:77: e2:2b:ac:5d:b6:68:ab:03:97:f3:10:30:d4:d2:ff: 21:94:17:eb:e4:4c:16:19:e6:3b:54:8f:23:74:34: 26:a2:d6:0e:29:89:42:7f:b2:70:ee:ce:54:f9:bd: 33:39:65:7c:dc:e5:30:9d:ef:1c:42:21:3f:84:eb: ac:59:7b:17:3c:10:99:cd:36:d2:ea:ae:d4:85:c9: 92:82:63:e7:29:7a:c3:28:27:34:89:40:7d:40:6a: a3:fc:34:b7:ed:03:11:f4:04:8e:08:85:ee:7b:08: 13:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AE:6F:4C:8E:B5:B4:35:9F:32:D6:BF:EE:E1:83:16:06:E3:3F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl X509v3 Authority Key Identifier: keyid:79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:3b:40:75:e9:9c:ce:5e:8a:71:f0:6e:b3:b9:b0:f4:ac:49: a5:51:76:4a:c3:a4:08:2b:62:66:9f:00:f5:1d:f6:10:36:93: c4:d7:33:fc:8e:ce:9c:15:63:2e:95:34:ca:22:a1:2d:fa:80: ca:95:a0:a3:45:54:c7:1b:ec:da:6c:4f:c2:f1:c7:53:5b:e9: 53:77:a3:ce:c4:67:73:29:8d:6c:51:9e:ec:cc:46:31:81:ec: 5f:a3:74:8a:9f:a3:aa:ff:c9:93:be:ff:4c:dc:1c:94:8c:35: 68:3a:fb:e8:1d:a8:86:4c:a1:ad:4b:5c:99:a7:c0:bd:a9:c2: a3:36:4f:83:88:73:b9:76:fb:49:43:e8:c7:fb:f0:0a:bb:88: cb:22:c3:bc:4b:7a:43:a1:6e:a7:ba:9a:2b:bc:62:c4:9d:1d: d3:8c:15:74:f0:4a:51:7d:af:49:5e:a8:e8:ce:26:08:59:11: d1:c1:4c:4a:65:bc:c2:09:37:6a:92:8c:62:62:e4:20:1e:08: 3d:b7:33:6d:61:57:54:c4:08:85:e6:ff:5d:a7:4b:df:9c:1d: a1:8e:0e:ac:b3:61:41:85:d2:5a:69:cd:12:da:20:47:73:bc: 6c:f6:d6:2f:69:cb:ac:2c:2d:d9:57:0f:b9:ab:19:03:ff:67: c1:81:cb:c6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEx17DIunMTR2z7w7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YTQzM2YtZDBiYi00ZWE5LTg1ZGEtNTJjNGQ5MDMx N2M2MB4XDTI2MDEwODIxMDAwM1oXDTI2MDExMDIxMDAwMFowLzEtMCsGA1UEAxMk Yzc5NzIyMmMtZmYzZC00YjZiLWI3ZWItMjFkOGM4OWY5ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz1Bd7j61ZZrHekhJGmcRBEridl9KcDKAMDN pY8zhGlGLRvqp+YFfhlBjQAZO+6uzILljH0I4DbMR10E9h3kHBHcxCuZkHP3PI3e rVFQ9hcdNzRfKA0YlyX1TQVfEQegG2+o3a51F2Q3JUJKcPAFNQu5fABcQJnexPLy WWyUpPhc0ukDTdDfFZNCr7B8t1uWfb5CgnfiK6xdtmirA5fzEDDU0v8hlBfr5EwW GeY7VI8jdDQmotYOKYlCf7Jw7s5U+b0zOWV83OUwne8cQiE/hOusWXsXPBCZzTbS 6q7UhcmSgmPnKXrDKCc0iUB9QGqj/DS37QMR9ASOCIXuewgT8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMeub0yOtbQ1nzLWv+7hgxYG4z/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ODlh NDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkwMzE3YzYvNTg5YTQzM2YtZDBiYi00 ZWE5LTg1ZGEtNTJjNGQ5MDMxN2M2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTg5YTQzM2YtZDBiYi00ZWE5LTg1 ZGEtNTJjNGQ5MDMxN2M2LzU4OWE0MzNmLWQwYmItNGVhOS04NWRhLTUyYzRkOTAz MTdjNi5jcmwwHwYDVR0jBBgwFoAUeWAivjNNGmzb562ED3BKt+mHa/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0 ZDkwMzE3YzYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAO0B16ZzOXopx8G6zubD0 rEmlUXZKw6QIK2JmnwD1HfYQNpPE1zP8js6cFWMulTTKIqEt+oDKlaCjRVTHG+za bE/C8cdTW+lTd6POxGdzKY1sUZ7szEYxgexfo3SKn6Oq/8mTvv9M3ByUjDVoOvvo HaiGTKGtS1yZp8C9qcKjNk+DiHO5dvtJQ+jH+/AKu4jLIsO8S3pDoW6nuporvGLE nR3TjBV08EpRfa9JXqjoziYIWRHRwUxKZbzCCTdqkoxiYuQgHgg9tzNtYVdUxAiF 5v9dp0vfnB2hjg6ss2FBhdJaac0S2iBHc7xs9tYvacusLC3ZVw+5qxkD/2fBgcvG -----END CERTIFICATE-----Generated at Fri Jan 9 01:14:31 2026 by rpki-client