This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft (raw, json) Hash identifier: gmPrSo3UYnPDuFcFJOY3VexSpHWf6Op70TeoA3XpDkw= Subject key identifier: B1:EB:4C:A7:2B:3B:5A:80:A8:5F:89:73:54:A1:E3:F4:A5:85:CA:B7 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584C2C85F47B74DC9FF9CECC19C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft Manifest number: 010D0C9F4328584073A8581DA0CBF23298DB1F23 Signing time: Sat 13 Dec 2025 14:00:03 +0000 Manifest this update: Sat 13 Dec 2025 14:00:03 +0000 Manifest next update: Tue 16 Dec 2025 14:00:00 +0000 Files and hashes: 1: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (hash: um7x/JYlBzX90Z2XbTx+kXcIkiOQbFo+CcTcYyoS91g=) 2: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (hash: EpkLBuS+KrF1F57PROY2IMKomgYPtYW6CSBxz9FPKcc=) 3: bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl (hash: 1ht7L5mKncSKEHF5DqoOr+JUtCArNOqclrcSTn+3CUA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:2c:85:f4:7b:74:dc:9f:f9:ce:cc:19:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Dec 13 14:00:03 2025 GMT Not After : Dec 16 14:00:00 2025 GMT Subject: CN=cbc55f91-d09f-456c-93b9-8d9fe2be3bed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b0:03:93:23:8c:cf:3b:89:8a:12:bb:5e:dc: f4:ed:32:79:f2:b0:76:3b:37:1b:da:54:c6:3e:7a: 00:5d:13:c0:fe:63:62:e8:c6:26:a5:5e:86:62:88: 30:f9:36:4d:0f:6e:81:92:37:64:b9:51:77:34:f1: 79:ac:1c:e4:b4:91:fa:d3:e8:ad:27:9c:78:28:a7: 02:e5:93:b3:a7:df:53:ca:69:d7:da:70:1f:6c:3f: c9:ad:2c:66:c0:d7:0d:a9:cc:f3:12:27:10:da:10: 88:9d:d7:79:0c:f5:05:b9:f5:bf:c6:e2:26:92:4a: cf:b9:45:bc:20:64:6a:85:24:68:98:ad:0b:b3:30: a1:5a:5a:ec:c1:61:e0:ef:4c:58:07:eb:9e:27:7c: 32:8d:42:87:05:af:b1:34:a1:1a:ac:15:73:3d:83: 3f:ac:f7:05:94:6c:2c:99:f1:c5:6f:7a:4a:ae:ad: 9a:31:a8:67:0e:3d:02:6b:95:22:21:7b:de:88:47: 35:8d:ed:75:e2:a3:9c:55:03:cd:cb:ca:07:77:24: cf:9d:55:d9:07:bc:dd:e9:f0:aa:4e:48:0f:f6:c4: 91:79:cb:f3:a0:20:99:df:64:bc:e3:07:3e:12:ee: 4d:f4:9c:1c:93:9a:73:44:19:70:96:a5:33:91:b3: c7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EB:4C:A7:2B:3B:5A:80:A8:5F:89:73:54:A1:E3:F4:A5:85:CA:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ad:5e:5c:63:e1:16:e4:6d:e7:41:db:f9:07:c0:23:06:6f: f5:26:d9:b1:8b:11:64:ba:89:3b:bc:30:19:7a:9b:b6:ca:db: 55:72:77:b8:2b:fc:5e:01:a9:b3:05:dc:25:78:31:c7:7c:c1: 34:de:55:e9:32:14:99:56:2b:f4:fa:4f:65:be:94:64:a3:46: 80:37:1e:1b:cd:9c:d4:cf:bc:3e:62:41:be:4c:b1:cf:49:06: 79:12:64:ad:3b:80:32:29:47:1e:28:7c:80:b3:a7:91:12:52: d6:77:7d:43:35:ec:e2:75:6f:d9:09:39:0e:c0:df:b0:0e:57: 4c:b0:b0:63:aa:b4:26:54:68:f2:28:de:88:c0:3e:99:9e:4b: 44:62:7f:62:ee:34:46:ec:c3:8e:b5:66:a4:61:9b:2a:9e:f2: 26:58:83:5d:c2:2d:0b:b2:8a:3c:36:e6:0b:13:5f:8d:54:bc: 37:65:2b:1a:3a:35:4e:f3:1e:f0:39:ef:73:e6:ca:e1:50:2d: a1:24:1f:47:69:f9:e5:8b:dc:ac:5b:7a:71:0a:d5:8f:28:5a: 5b:c3:ac:89:39:8f:e2:fc:0c:25:d3:ca:2d:13:26:7f:c4:bf: b9:76:06:50:8a:11:2e:47:8b:b4:9f:23:ec:01:b0:2b:a6:f0: 05:2f:ff:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwshfR7dNyf+c7MGcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MTIxMzE0MDAwM1oXDTI1MTIxNjE0MDAwMFowLzEtMCsGA1UEAxMk Y2JjNTVmOTEtZDA5Zi00NTZjLTkzYjktOGQ5ZmUyYmUzYmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7ADkyOMzzuJihK7Xtz07TJ58rB2Ozcb2lTG PnoAXRPA/mNi6MYmpV6GYogw+TZND26BkjdkuVF3NPF5rBzktJH60+itJ5x4KKcC 5ZOzp99TymnX2nAfbD/JrSxmwNcNqczzEicQ2hCIndd5DPUFufW/xuImkkrPuUW8 IGRqhSRomK0LszChWlrswWHg70xYB+ueJ3wyjUKHBa+xNKEarBVzPYM/rPcFlGws mfHFb3pKrq2aMahnDj0Ca5UiIXveiEc1je114qOcVQPNy8oHdyTPnVXZB7zd6fCq TkgP9sSRecvzoCCZ32S84wc+Eu5N9Jwck5pzRBlwlqUzkbPHxQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLHrTKcrO1qAqF+Jc1Sh4/Slhcq3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmYzYzNiZDUtM2I5NC00 N2UyLTgxZmMtZjQ5MDA4MTRlNDk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqrV5cY+EW5G3nQdv5B8Aj Bm/1JtmxixFkuok7vDAZepu2yttVcne4K/xeAamzBdwleDHHfME03lXpMhSZViv0 +k9lvpRko0aANx4bzZzUz7w+YkG+TLHPSQZ5EmStO4AyKUceKHyAs6eRElLWd31D NezidW/ZCTkOwN+wDldMsLBjqrQmVGjyKN6IwD6ZnktEYn9i7jRG7MOOtWakYZsq nvImWINdwi0Lsoo8NuYLE1+NVLw3ZSsaOjVO8x7wOe9z5srhUC2hJB9Hafnli9ys W3pxCtWPKFpbw6yJOY/i/Awl08otEyZ/xL+5dgZQihEuR4u0nyPsAbArpvAFL//S -----END CERTIFICATE-----Generated at Sun Dec 14 10:20:13 2025 by rpki-client