This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft File: bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft (raw, json) Hash identifier: 1aVQwrOr6+U/nsiU5sN0742KIjDgqm3iZS7TsLRWrSw= Subject key identifier: AE:A3:DF:6C:DA:00:41:C9:68:7E:D0:72:37:14:CA:B9:90:99:F2:0E Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584C3CECBB15F883B0339480A0DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft Manifest number: 010D0C9F4328584073A8508522A5167F0D710352 Signing time: Fri 19 Dec 2025 11:00:04 +0000 Manifest this update: Fri 19 Dec 2025 11:00:04 +0000 Manifest next update: Mon 22 Dec 2025 11:00:00 +0000 Files and hashes: 1: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (hash: 5YqqtVHE5hLDuBgZtm3D3CDyuQtSNUxyZS/jJc+1dDM=) 2: bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl (hash: vFR+7vXx1QyOe1ud6JPDRborWveVx7Xd7lTbyKURyU8=) 3: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (hash: cwfMaXV1h5EpwWk9P4a6eIH/0EVPs1a6e4OZTqo2ay0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3c:ec:bb:15:f8:83:b0:33:94:80:a0:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Dec 19 11:00:04 2025 GMT Not After : Dec 22 11:00:00 2025 GMT Subject: CN=8b3c27f7-e89a-41f6-b38b-ba91318c4e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:c0:5f:8d:0f:ff:16:67:15:43:f8:e7:2a: 2c:67:41:df:81:76:c2:dd:b8:68:15:ac:5e:d6:4d: 7a:df:cc:f4:0a:06:d4:ba:e0:ef:81:00:cf:71:31: 0f:9c:3e:ed:ca:77:90:59:5a:01:20:6e:d3:48:c6: 71:00:c1:8d:b3:8b:50:26:b1:67:0e:7d:7c:e0:6e: 75:f5:09:96:97:ff:bf:4b:e6:91:6a:9a:66:2f:f7: 23:f1:cd:fe:16:b4:26:db:20:e7:ee:01:fd:73:70: e7:73:bf:03:4a:43:e8:30:e0:76:14:1e:71:1e:f6: 64:5d:2e:0a:e2:f4:c1:76:b3:81:90:87:77:84:ee: 42:c9:da:a0:0d:be:32:15:8f:cc:8e:88:38:b3:57: 2f:b8:99:9e:ee:f0:30:c2:45:ab:1e:1e:45:03:d7: 5d:06:66:b8:f4:f3:22:69:1a:83:3a:78:bd:73:fd: 9f:a5:69:61:6f:e3:44:cf:a9:5a:b6:c0:2a:5e:37: 65:43:57:74:bb:13:fd:fa:5e:b2:33:40:33:f0:a9: e4:a8:89:ec:e5:e8:c8:e1:b1:7f:a6:1b:8a:f2:3e: b5:41:ea:05:8e:7c:c4:55:4e:b7:ff:b5:c0:18:a3: d9:b8:1c:bd:94:5c:5c:68:d0:a2:d6:a5:79:94:b5: ea:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:DF:6C:DA:00:41:C9:68:7E:D0:72:37:14:CA:B9:90:99:F2:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:b1:46:ce:2b:ea:1b:c3:5b:16:7b:4f:f5:17:ea:37:52:71: 26:39:e8:81:3b:c2:84:49:2e:ed:c8:f5:e3:2d:39:6d:5d:41: 47:01:d4:28:1e:bd:c6:b2:6f:56:1e:d6:b1:d2:c5:a8:bf:00: 50:67:ed:4d:b4:97:03:f6:6b:6f:cc:6d:c0:e9:b1:e5:ad:ad: c0:73:d8:b3:18:cf:fd:c3:f2:06:cf:bf:ff:7a:78:6e:db:10: cf:f7:04:88:cc:48:88:cf:d8:c6:a6:cd:83:82:f3:3b:83:63: 3d:1b:87:fb:ad:2b:6d:29:01:ed:8f:6f:fe:c2:fe:96:66:3b: d2:ab:ec:cf:2b:91:12:d2:8c:b8:c3:2a:6d:5d:37:f7:cc:77: da:16:55:f8:68:f3:31:7f:1b:09:be:41:a4:32:a8:69:a5:63: 40:8b:b3:26:e0:83:b1:3f:68:68:3b:7c:92:ba:a7:a1:60:bd: 69:08:31:45:79:42:52:6e:8d:99:c6:ad:98:35:bd:95:ec:0b: 9e:d1:47:dc:b6:9a:fd:67:43:7b:ce:3b:aa:fc:76:31:07:a1: 7b:cc:47:b6:ae:ec:34:01:e7:68:86:6b:d0:df:c5:6c:06:12: 16:23:32:22:2f:a5:b0:94:7a:86:dd:2f:d9:e0:27:78:d7:63: 54:1b:66:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw87LsV+IOwM5SAoNowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MTIxOTExMDAwNFoXDTI1MTIyMjExMDAwMFowLzEtMCsGA1UEAxMk OGIzYzI3ZjctZTg5YS00MWY2LWIzOGItYmE5MTMxOGM0ZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlLAX40P/xZnFUP45yosZ0HfgXbC3bhoFaxe 1k1638z0CgbUuuDvgQDPcTEPnD7tyneQWVoBIG7TSMZxAMGNs4tQJrFnDn184G51 9QmWl/+/S+aRappmL/cj8c3+FrQm2yDn7gH9c3Dnc78DSkPoMOB2FB5xHvZkXS4K 4vTBdrOBkId3hO5CydqgDb4yFY/Mjog4s1cvuJme7vAwwkWrHh5FA9ddBma49PMi aRqDOni9c/2fpWlhb+NEz6latsAqXjdlQ1d0uxP9+l6yM0Az8KnkqIns5ejI4bF/ phuK8j61QeoFjnzEVU63/7XAGKPZuBy9lFxcaNCi1qV5lLXqjwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFK6j32zaAEHJaH7QcjcUyrmQmfIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvYmYxMGZlNzUtOTgxZi00 YTNjLWI3N2EtMjhlMjM1YmVkOWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCtsUbOK+obw1sWe0/1F+o3 UnEmOeiBO8KESS7tyPXjLTltXUFHAdQoHr3Gsm9WHtax0sWovwBQZ+1NtJcD9mtv zG3A6bHlra3Ac9izGM/9w/IGz7//enhu2xDP9wSIzEiIz9jGps2DgvM7g2M9G4f7 rSttKQHtj2/+wv6WZjvSq+zPK5ES0oy4wyptXTf3zHfaFlX4aPMxfxsJvkGkMqhp pWNAi7Mm4IOxP2hoO3ySuqehYL1pCDFFeUJSbo2Zxq2YNb2V7Aue0Ufctpr9Z0N7 zjuq/HYxB6F7zEe2ruw0AedohmvQ38VsBhIWIzIiL6WwlHqG3S/Z4Cd412NUG2Zz -----END CERTIFICATE-----Generated at Fri Dec 19 16:40:10 2025 by rpki-client