This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft File: bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft (raw, json) Hash identifier: x45PgBXUtqDAlxsMyOP5/pe7uHyEUTnDdjrqGo5S9Rw= Subject key identifier: 8D:0E:02:BA:AD:32:2A:56:DB:BE:CC:01:E8:EC:6E:7C:48:1D:D8:54 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584C428225D2C81279A2D72841EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft Manifest number: 010D0C9F4328584073A8508522A5167F0D710354 Signing time: Sun 21 Dec 2025 11:00:09 +0000 Manifest this update: Sun 21 Dec 2025 11:00:09 +0000 Manifest next update: Wed 24 Dec 2025 11:00:00 +0000 Files and hashes: 1: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (hash: 5YqqtVHE5hLDuBgZtm3D3CDyuQtSNUxyZS/jJc+1dDM=) 2: bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl (hash: bZr2uBRXGnCYFkZJLQhk524OmhDSfHA0gjE6ymF51y4=) 3: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (hash: cwfMaXV1h5EpwWk9P4a6eIH/0EVPs1a6e4OZTqo2ay0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:82:25:d2:c8:12:79:a2:d7:28:41:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Dec 21 11:00:09 2025 GMT Not After : Dec 24 11:00:00 2025 GMT Subject: CN=4a70fdde-7b5b-48b8-94e0-bfa41e73e21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:61:82:fd:65:4d:5d:99:e5:28:63:f6:bd:57: cb:a3:e6:1e:a6:4c:a9:f8:fe:8b:b2:51:c2:74:c4: 23:36:9b:41:5d:24:09:ef:90:c3:57:6e:c4:b7:f0: 1a:8c:6b:f1:e2:2e:8c:4b:0a:08:65:73:65:a9:2d: 41:f9:d5:0d:9d:2c:18:38:14:82:3b:22:85:dd:e9: 24:23:89:06:66:aa:e0:94:3c:6f:3c:f5:7c:1c:c4: ea:9b:fe:e1:8d:bf:f5:ac:6e:04:52:5b:b7:e3:93: d8:03:14:50:12:fc:3f:a5:a0:cf:c2:85:1a:3c:36: 0c:f6:47:5e:f3:65:4d:36:cb:6d:5f:78:d1:ed:27: 35:c9:b8:fe:b5:44:ab:26:03:2f:1e:6d:7b:9d:26: d7:ae:81:fe:8f:ff:62:07:20:1f:82:f4:73:83:9f: 77:1c:e6:6c:c6:86:35:ce:a2:31:3f:df:2d:c6:7a: 3e:6f:d9:a5:67:6a:98:4e:dd:c5:bf:e1:49:11:b1: 1e:98:39:0a:dc:7c:2d:04:b9:cb:8a:be:e1:55:d3: ba:bb:1c:4f:3f:c9:09:cb:3f:1d:b9:bc:8c:7e:04: 7a:b6:f2:0c:ec:8f:15:0a:62:39:47:fb:b4:c4:1d: e5:3b:0f:83:cb:0b:b3:1d:b7:a3:8c:79:74:3e:ab: 50:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0E:02:BA:AD:32:2A:56:DB:BE:CC:01:E8:EC:6E:7C:48:1D:D8:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:66:6d:9a:52:da:32:7a:2e:52:fc:b9:e7:f0:02:16:06:06: 16:ae:3e:2f:1e:5d:e0:ff:98:ca:4a:57:6e:5e:f5:38:10:23: 57:fc:e7:f5:60:23:66:ed:18:a4:c5:72:4d:c9:59:38:2a:fa: c3:8f:70:40:08:bd:ef:94:cf:62:9b:2a:56:98:2e:06:1c:7f: f0:11:dc:49:6c:53:e4:aa:e8:6d:5e:09:9f:ab:63:a0:bb:79: e0:ae:24:c1:1b:18:db:9e:be:f4:54:75:2b:c9:6a:57:8c:1c: 43:87:3a:77:14:11:bb:d5:a9:a1:35:f0:71:2f:8c:7d:20:9b: 2b:ef:9a:f6:85:d7:f1:a7:41:99:4e:87:cb:ac:f9:5a:02:99: e5:1b:1d:6c:29:48:27:50:f3:f3:ab:6b:b7:9f:5f:8c:8b:78: 0f:5f:45:69:32:83:9b:e0:15:c2:d6:80:75:82:df:60:5c:21: df:f3:05:f5:8d:0d:33:2f:0d:6e:42:3b:d0:04:b0:4e:bb:36: 94:92:b7:6e:22:10:53:2e:1a:7a:3c:95:fa:8e:ff:f8:ae:22: fd:cb:50:a4:ab:fb:f4:79:25:16:86:21:33:22:be:a9:05:e5: 61:91:ab:d5:48:16:ff:a5:7c:42:ae:7b:29:d4:92:f1:e4:fa: bc:62:80:98 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExCgiXSyBJ5otcoQewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MTIyMTExMDAwOVoXDTI1MTIyNDExMDAwMFowLzEtMCsGA1UEAxMk NGE3MGZkZGUtN2I1Yi00OGI4LTk0ZTAtYmZhNDFlNzNlMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGGC/WVNXZnlKGP2vVfLo+Yepkyp+P6LslHC dMQjNptBXSQJ75DDV27Et/AajGvx4i6MSwoIZXNlqS1B+dUNnSwYOBSCOyKF3ekk I4kGZqrglDxvPPV8HMTqm/7hjb/1rG4EUlu345PYAxRQEvw/paDPwoUaPDYM9kde 82VNNsttX3jR7Sc1ybj+tUSrJgMvHm17nSbXroH+j/9iByAfgvRzg593HOZsxoY1 zqIxP98txno+b9mlZ2qYTt3Fv+FJEbEemDkK3HwtBLnLir7hVdO6uxxPP8kJyz8d ubyMfgR6tvIM7I8VCmI5R/u0xB3lOw+DywuzHbejjHl0PqtQ3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI0OArqtMipW277MAejsbnxIHdhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvYmYxMGZlNzUtOTgxZi00 YTNjLWI3N2EtMjhlMjM1YmVkOWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAbZm2aUtoyei5S/Lnn8AIW BgYWrj4vHl3g/5jKSlduXvU4ECNX/Of1YCNm7RikxXJNyVk4KvrDj3BACL3vlM9i mypWmC4GHH/wEdxJbFPkquhtXgmfq2Ogu3ngriTBGxjbnr70VHUryWpXjBxDhzp3 FBG71amhNfBxL4x9IJsr75r2hdfxp0GZTofLrPlaApnlGx1sKUgnUPPzq2u3n1+M i3gPX0VpMoOb4BXC1oB1gt9gXCHf8wX1jQ0zLw1uQjvQBLBOuzaUkrduIhBTLhp6 PJX6jv/4riL9y1Ckq/v0eSUWhiEzIr6pBeVhkavVSBb/pXxCrnsp1JLx5Pq8YoCY -----END CERTIFICATE-----Generated at Mon Dec 22 10:42:28 2025 by rpki-client