This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft (raw, json) Hash identifier: yYx5BaUv4U9H705/ya84d98BTpuwUcxtsCEGx2Yd1A0= Subject key identifier: C2:86:53:2B:7C:D8:25:21:76:A3:64:D7:F3:AC:17:F4:21:0C:A7:13 Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584C5930E5E48B90D05E0EA82780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft Manifest number: 010D0C9F4328584073A8581DA0CBF23298DB1F33 Signing time: Mon 29 Dec 2025 14:00:03 +0000 Manifest this update: Mon 29 Dec 2025 14:00:03 +0000 Manifest next update: Thu 01 Jan 2026 14:00:00 +0000 Files and hashes: 1: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (hash: um7x/JYlBzX90Z2XbTx+kXcIkiOQbFo+CcTcYyoS91g=) 2: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (hash: EpkLBuS+KrF1F57PROY2IMKomgYPtYW6CSBxz9FPKcc=) 3: bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl (hash: 1qN0mVEClF6DHfMNYd+6uOCsrrdgslRFuHWLnnEtfoE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:30:e5:e4:8b:90:d0:5e:0e:a8:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Dec 29 14:00:03 2025 GMT Not After : Jan 1 14:00:00 2026 GMT Subject: CN=0354f3a7-bb3f-4e9a-b0de-a0dac15efba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:9f:b7:91:62:94:d3:20:23:db:8d:e0:36: 30:c8:7b:76:85:e6:ff:72:a2:04:59:d2:7c:28:37: f9:e9:fb:d3:03:86:17:95:15:35:16:8d:3b:41:98: e2:ca:46:b0:1f:a2:82:2f:87:4b:00:21:82:98:05: cc:50:ef:c1:13:00:5f:12:19:22:5e:7a:76:ae:ec: 25:4a:71:9c:8a:1a:ea:d0:ed:01:a5:42:f3:2c:7e: 08:53:67:42:8a:48:93:2f:10:38:83:2f:03:eb:7c: d9:a1:d2:2e:15:12:ae:08:eb:0b:4b:87:6c:19:bb: c5:b1:48:59:b6:e7:18:0d:01:0a:a8:32:e8:e6:bc: 73:2c:64:c8:08:b0:fc:37:ed:50:7b:f0:18:8e:f2: f2:58:1e:21:cc:09:4e:1c:cb:17:56:30:30:b6:2a: 9c:e0:70:d3:01:f8:5b:7f:46:19:64:fc:ee:8f:d8: 59:3b:6b:45:df:c0:0a:9b:35:c6:ab:78:0c:ae:57: 0f:00:0c:ee:61:95:a7:37:06:a3:01:23:8e:47:e8: e7:8f:33:bd:cf:25:6e:ac:ec:f1:3b:95:82:ea:46: eb:3a:fb:a1:43:18:c1:fa:5e:3a:f7:3a:51:34:a6: 6b:d7:c3:29:bb:86:7c:9f:c7:e5:0f:18:05:3f:d8: a1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:86:53:2B:7C:D8:25:21:76:A3:64:D7:F3:AC:17:F4:21:0C:A7:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:92:bc:a1:12:2d:8c:06:47:cd:e6:f3:f6:a1:ac:36:17:46: e6:88:7a:40:10:cf:f9:0c:d1:ac:8d:f3:df:8f:c3:e9:3d:de: d3:73:d9:3a:98:9b:4b:d8:49:00:ab:96:19:95:59:ea:d1:8e: cc:af:17:ab:d7:e6:92:99:ea:83:44:29:ad:05:6a:ad:4c:2f: 9b:45:5e:7e:a9:63:48:d0:42:3c:17:9b:7b:15:09:3b:e1:63: 52:b0:f1:54:b1:fe:8e:6e:1f:09:38:16:e8:26:10:f1:03:6a: a6:85:2e:b0:cc:65:49:ab:e3:a5:ab:a8:93:8c:4c:d3:58:cb: 3d:fc:86:6d:f3:7e:49:91:90:3e:e2:2f:f5:3f:d3:ec:b0:90: df:ad:41:ef:4a:ef:0c:70:da:8d:82:da:fe:25:2d:56:18:4a: 47:d4:e1:44:e4:70:11:9b:79:54:35:fb:e3:db:9d:9a:73:35: 1c:59:c9:2f:46:03:95:7c:fa:ca:12:f0:2c:53:a4:35:9c:61: fe:55:ff:3c:9c:3c:ff:92:2a:cc:01:0f:6b:0b:40:d7:4e:89: 60:b9:24:49:ff:8f:93:e6:a9:96:fb:a5:99:3c:57:b7:11:20: c5:bd:8d:76:92:0e:2b:8f:d9:8d:f9:1f:71:82:bc:bf:c5:bf: 08:ad:a3:7f -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExZMOXki5DQXg6oJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MTIyOTE0MDAwM1oXDTI2MDEwMTE0MDAwMFowLzEtMCsGA1UEAxMk MDM1NGYzYTctYmIzZi00ZTlhLWIwZGUtYTBkYWMxNWVmYmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtqft5FilNMgI9uN4DYwyHt2heb/cqIEWdJ8 KDf56fvTA4YXlRU1Fo07QZjiykawH6KCL4dLACGCmAXMUO/BEwBfEhkiXnp2ruwl SnGcihrq0O0BpULzLH4IU2dCikiTLxA4gy8D63zZodIuFRKuCOsLS4dsGbvFsUhZ tucYDQEKqDLo5rxzLGTICLD8N+1Qe/AYjvLyWB4hzAlOHMsXVjAwtiqc4HDTAfhb f0YZZPzuj9hZO2tF38AKmzXGq3gMrlcPAAzuYZWnNwajASOOR+jnjzO9zyVurOzx O5WC6kbrOvuhQxjB+l469zpRNKZr18Mpu4Z8n8flDxgFP9ih3QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMKGUyt82CUhdqNk1/OsF/QhDKcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmYzYzNiZDUtM2I5NC00 N2UyLTgxZmMtZjQ5MDA4MTRlNDk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAxkryhEi2MBkfN5vP2oaw2 F0bmiHpAEM/5DNGsjfPfj8PpPd7Tc9k6mJtL2EkAq5YZlVnq0Y7Mrxer1+aSmeqD RCmtBWqtTC+bRV5+qWNI0EI8F5t7FQk74WNSsPFUsf6Obh8JOBboJhDxA2qmhS6w zGVJq+Olq6iTjEzTWMs9/IZt835JkZA+4i/1P9PssJDfrUHvSu8McNqNgtr+JS1W GEpH1OFE5HARm3lUNfvj252aczUcWckvRgOVfPrKEvAsU6Q1nGH+Vf88nDz/kirM AQ9rC0DXTolguSRJ/4+T5qmW+6WZPFe3ESDFvY12kg4rj9mN+R9xgry/xb8IraN/ -----END CERTIFICATE-----Generated at Mon Dec 29 22:43:14 2025 by rpki-client