This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft File: bff64bc2-33e0-4980-b94c-1b0369245ea4.mft (raw, json) Hash identifier: 0ZZQ0lWWvq5X/KMIKal4sMszM5GcyB5i9AbP/C1bvAM= Subject key identifier: 6B:B4:AF:D5:3F:ED:44:B4:69:00:84:94:B7:36:86:00:CF:3C:85:A0 Authority key identifier: FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77 Certificate issuer: /CN=bff64bc2-33e0-4980-b94c-1b0369245ea4 Certificate serial: 010D0C9F4328584BF23EEB809636496ECCC8EA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft Manifest number: 010D0C9F4328584A76A2C44F62F6A11836988B0B Signing time: Sat 22 Nov 2025 17:00:03 +0000 Manifest this update: Sat 22 Nov 2025 17:00:03 +0000 Manifest next update: Tue 25 Nov 2025 17:00:00 +0000 Files and hashes: 1: 9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa (hash: EGtS3vrRMubyo0pPcA7lSLzeIwBIFIlkxfPTS8smFxA=) 2: bff64bc2-33e0-4980-b94c-1b0369245ea4.crl (hash: DUGriV1WAPdnlQnQsSTsp4O2DeGgFH48/h20Gcv3b7U=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f2:3e:eb:80:96:36:49:6e:cc:c8:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff64bc2-33e0-4980-b94c-1b0369245ea4 Validity Not Before: Nov 22 17:00:03 2025 GMT Not After : Nov 25 17:00:00 2025 GMT Subject: CN=4a3e797f-8997-46ff-85a0-1a69ff89ebde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:6d:9d:61:fa:3d:98:5d:cf:0c:37:bc:de: 0a:92:18:c8:53:9c:6d:81:27:db:3d:54:8b:ee:d1: 0b:bc:d9:72:c4:88:54:f6:72:34:a1:fa:45:e9:4c: b0:52:f3:18:7e:71:fa:f0:81:a0:a6:7d:5f:62:d0: 12:31:68:ca:59:f2:b0:9d:a9:8c:ac:78:f4:cf:df: b8:04:0a:70:19:fb:35:e2:c6:4b:8b:fb:62:86:c5: 21:57:b3:51:76:8e:9e:7a:ed:b0:bd:c5:af:3e:be: 31:dd:3b:a3:63:06:5a:97:a0:67:9c:3b:e3:61:67: ec:43:a7:7e:5e:de:0d:0f:ec:73:68:a6:33:81:53: 87:a1:b2:21:a2:21:dc:11:b8:f5:02:63:27:55:fb: b3:0e:6e:5c:50:5a:7b:14:98:c2:94:a6:40:a7:2c: 09:36:3c:77:ef:cd:5f:26:f5:f2:a4:64:d3:c9:05: 16:ad:35:8f:8c:0d:14:08:01:70:99:6f:37:a3:10: ea:af:80:5b:f6:a1:26:ce:3f:58:8a:93:5e:86:f1: b3:67:59:3c:81:30:3d:7d:26:81:d0:0a:8a:de:a4: 69:2b:12:f2:8d:51:51:00:cb:69:a6:d9:83:64:f7: aa:b1:ac:f7:fa:e1:44:59:eb:1c:4f:0b:fc:01:75: 14:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B4:AF:D5:3F:ED:44:B4:69:00:84:94:B7:36:86:00:CF:3C:85:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl X509v3 Authority Key Identifier: keyid:FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:3f:44:1e:c6:20:36:dd:2a:0e:01:5d:51:05:3f:4d:ba:22: 12:29:f3:04:94:30:0f:5f:f4:aa:a2:9d:aa:ff:ed:6f:57:66: 0d:35:d8:ca:0b:db:31:07:c7:49:50:c1:5d:d0:e7:cb:18:3d: 0d:73:95:1d:de:80:11:86:e8:27:d6:f1:c1:41:87:57:47:5f: f0:23:0e:bc:42:45:09:a4:b9:8e:41:c9:16:55:ee:dd:52:c7: f8:44:7c:5d:04:58:e6:84:7e:e1:69:b1:bf:2e:d7:7e:f9:de: ef:ab:6c:ae:95:eb:a1:9b:74:15:fe:ac:ab:5c:50:12:07:a6: 12:51:51:d5:8a:a4:04:c7:2c:93:21:d1:9e:eb:ab:71:95:95: b4:41:a7:3c:98:f7:be:6f:e3:8b:31:a0:a5:c5:40:ce:38:67: 1d:55:0d:14:30:a9:4c:a3:63:a8:b9:b8:c3:66:ca:41:c7:a6: 29:c4:56:d4:84:6d:d0:eb:ee:de:4f:73:2a:f5:f6:35:11:09: 66:0c:ca:55:6b:50:9f:e3:6f:99:54:38:26:a4:3d:e5:97:da: e7:e2:65:03:bc:c0:f9:25:31:bb:f8:f3:f6:28:02:81:ec:4b: 77:f2:93:26:fe:b2:9d:86:81:ce:95:9b:61:60:f9:91:9f:6f: 10:bd:52:14 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvyPuuAljZJbszI6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZmNjRiYzItMzNlMC00OTgwLWI5NGMtMWIwMzY5MjQ1 ZWE0MB4XDTI1MTEyMjE3MDAwM1oXDTI1MTEyNTE3MDAwMFowLzEtMCsGA1UEAxMk NGEzZTc5N2YtODk5Ny00NmZmLTg1YTAtMWE2OWZmODllYmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFJtnWH6PZhdzww3vN4KkhjIU5xtgSfbPVSL 7tELvNlyxIhU9nI0ofpF6UywUvMYfnH68IGgpn1fYtASMWjKWfKwnamMrHj0z9+4 BApwGfs14sZLi/tihsUhV7NRdo6eeu2wvcWvPr4x3TujYwZal6BnnDvjYWfsQ6d+ Xt4ND+xzaKYzgVOHobIhoiHcEbj1AmMnVfuzDm5cUFp7FJjClKZApywJNjx3781f JvXypGTTyQUWrTWPjA0UCAFwmW83oxDqr4Bb9qEmzj9YipNehvGzZ1k8gTA9fSaB 0AqK3qRpKxLyjVFRAMtpptmDZPeqsaz3+uFEWescTwv8AXUUNQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGu0r9U/7US0aQCElLc2hgDPPIWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iZmY2 NGJjMi0zM2UwLTQ5ODAtYjk0Yy0xYjAzNjkyNDVlYTQvYmZmNjRiYzItMzNlMC00 OTgwLWI5NGMtMWIwMzY5MjQ1ZWE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmZmNjRiYzItMzNlMC00OTgwLWI5 NGMtMWIwMzY5MjQ1ZWE0L2JmZjY0YmMyLTMzZTAtNDk4MC1iOTRjLTFiMDM2OTI0 NWVhNC5jcmwwHwYDVR0jBBgwFoAU+/JLb1yHY5hObo4gfkVD6eU9DHcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iZmY2NGJjMi0zM2UwLTQ5ODAtYjk0Yy0xYjAz NjkyNDVlYTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBuP0QexiA23SoOAV1RBT9N uiISKfMElDAPX/Sqop2q/+1vV2YNNdjKC9sxB8dJUMFd0OfLGD0Nc5Ud3oARhugn 1vHBQYdXR1/wIw68QkUJpLmOQckWVe7dUsf4RHxdBFjmhH7habG/Ltd++d7vq2yu leuhm3QV/qyrXFASB6YSUVHViqQExyyTIdGe66txlZW0Qac8mPe+b+OLMaClxUDO OGcdVQ0UMKlMo2OoubjDZspBx6YpxFbUhG3Q6+7eT3Mq9fY1EQlmDMpVa1Cf42+Z VDgmpD3ll9rn4mUDvMD5JTG7+PP2KAKB7Et38pMm/rKdhoHOlZthYPmRn28QvVIU -----END CERTIFICATE-----Generated at Sat Nov 22 21:14:59 2025 by rpki-client