This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft (raw, json) Hash identifier: LgoMGEJMx/iuz9bp0eOECIQ66eT+THBZBTJR2M8Oy74= Subject key identifier: 17:40:E8:36:77:B5:A7:21:30:E4:B8:F8:8B:05:F0:16:9B:A1:97:5A Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584C4E062C9BEE0BB4F7AC6FA180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft Manifest number: 010D0C9F4328584073A8581DA0CBF23298DB1F2F Signing time: Thu 25 Dec 2025 14:00:03 +0000 Manifest this update: Thu 25 Dec 2025 14:00:03 +0000 Manifest next update: Sun 28 Dec 2025 14:00:00 +0000 Files and hashes: 1: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (hash: um7x/JYlBzX90Z2XbTx+kXcIkiOQbFo+CcTcYyoS91g=) 2: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (hash: EpkLBuS+KrF1F57PROY2IMKomgYPtYW6CSBxz9FPKcc=) 3: bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl (hash: q/67BXHSVMxiRPTr3SbRFaPkAJBgPbndSB/u1OMLeyU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:2c:9b:ee:0b:b4:f7:ac:6f:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Dec 25 14:00:03 2025 GMT Not After : Dec 28 14:00:00 2025 GMT Subject: CN=a6c8bc38-c7b5-4601-b329-e8729f755d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9d:13:7c:f7:31:1a:31:f5:d9:a7:b3:03:87: f4:b3:57:63:7f:54:91:5b:b0:46:bf:fb:c0:31:48: 05:b2:cd:48:8d:ef:d2:1f:df:b9:22:5f:25:76:a4: 80:e7:c4:1c:e2:04:16:ec:31:0e:72:80:5b:27:26: f6:79:5a:15:34:11:3b:1b:83:df:4e:b4:08:8b:dd: 15:01:7e:a0:18:c4:9d:2b:c8:ca:60:3c:7a:af:eb: 1b:e9:3c:f6:1e:0e:61:86:3a:20:c4:99:c3:77:63: 5a:e2:9e:5e:e6:73:37:8a:61:88:1c:85:f1:f1:11: 65:7c:0a:62:0f:d3:12:1e:2f:16:6a:64:97:8d:a9: 1f:d9:74:c7:42:76:ef:5f:03:82:cc:1f:e2:f2:2c: 02:c6:36:ea:8c:e6:35:07:21:2f:bb:f3:12:69:40: 59:8b:8e:13:57:4d:c9:d4:8e:04:a2:ea:23:e5:07: fb:bd:08:b8:5b:f3:ed:e5:ff:f3:31:57:17:52:1a: b2:c2:25:11:a0:0f:91:91:c4:a5:c2:13:e7:ac:34: 0a:f1:4c:a0:47:7a:c1:d5:1a:c1:c5:e8:6a:da:6c: 13:a7:75:f0:f4:53:26:93:1f:11:22:4f:b8:7f:15: 1c:26:08:a4:c3:b0:3f:08:20:99:62:02:de:8d:8a: 3b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:40:E8:36:77:B5:A7:21:30:E4:B8:F8:8B:05:F0:16:9B:A1:97:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b5:75:ba:1a:9f:5d:81:ac:fa:4a:18:d2:e1:a2:a2:6f:c0: 85:21:0f:ad:4c:73:cf:bd:4c:d4:83:b4:59:6a:38:8a:94:21: 9b:1d:b1:7d:f6:5d:ca:07:63:ba:62:28:e6:28:93:49:9c:54: 49:b0:ac:b2:75:dd:25:f1:01:20:fc:dc:ed:22:17:8c:6a:c7: 76:86:8e:ab:bb:6b:a0:85:80:6e:9b:f4:cd:c0:94:c7:a5:c8: 56:c3:f9:bc:b0:18:1f:f9:2e:19:ec:c2:b3:76:42:f1:68:c5: 8b:f7:35:ae:e5:9f:c5:25:92:8f:b2:52:60:30:91:cd:8f:91: 07:a9:f5:5d:52:92:05:1d:24:12:c9:86:bd:24:af:67:e0:a8: 48:bb:27:83:d0:74:dd:22:ef:02:15:76:92:20:61:38:1b:34: c9:6c:2c:ef:39:aa:49:98:ce:50:2b:d7:15:7b:08:d5:c9:8c: bf:ab:f7:dc:86:c3:fb:5c:f5:94:d9:cc:9e:3f:13:dd:07:03: bb:77:f5:7e:32:a2:35:c8:da:58:52:2e:ca:83:a2:51:1d:33: 94:99:80:e2:ef:04:41:de:9b:34:bd:49:eb:f0:29:31:f4:bb: 4e:73:8c:2d:1f:f7:1f:87:a2:c2:dc:d6:14:65:28:0a:cc:84: 7a:d8:db:5c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExOBiyb7gu096xvoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MTIyNTE0MDAwM1oXDTI1MTIyODE0MDAwMFowLzEtMCsGA1UEAxMk YTZjOGJjMzgtYzdiNS00NjAxLWIzMjktZTg3MjlmNzU1ZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZ0TfPcxGjH12aezA4f0s1djf1SRW7BGv/vA MUgFss1Ije/SH9+5Il8ldqSA58Qc4gQW7DEOcoBbJyb2eVoVNBE7G4PfTrQIi90V AX6gGMSdK8jKYDx6r+sb6Tz2Hg5hhjogxJnDd2Na4p5e5nM3imGIHIXx8RFlfApi D9MSHi8WamSXjakf2XTHQnbvXwOCzB/i8iwCxjbqjOY1ByEvu/MSaUBZi44TV03J 1I4Eouoj5Qf7vQi4W/Pt5f/zMVcXUhqywiURoA+RkcSlwhPnrDQK8UygR3rB1RrB xehq2mwTp3Xw9FMmkx8RIk+4fxUcJgikw7A/CCCZYgLejYo7AQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBdA6DZ3tachMOS4+IsF8BaboZdaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmYzYzNiZDUtM2I5NC00 N2UyLTgxZmMtZjQ5MDA4MTRlNDk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARtXW6Gp9dgaz6ShjS4aKi b8CFIQ+tTHPPvUzUg7RZajiKlCGbHbF99l3KB2O6YijmKJNJnFRJsKyydd0l8QEg /NztIheMasd2ho6ru2ughYBum/TNwJTHpchWw/m8sBgf+S4Z7MKzdkLxaMWL9zWu 5Z/FJZKPslJgMJHNj5EHqfVdUpIFHSQSyYa9JK9n4KhIuyeD0HTdIu8CFXaSIGE4 GzTJbCzvOapJmM5QK9cVewjVyYy/q/fchsP7XPWU2cyePxPdBwO7d/V+MqI1yNpY Ui7Kg6JRHTOUmYDi7wRB3ps0vUnr8Ckx9LtOc4wtH/cfh6LC3NYUZSgKzIR62Ntc -----END CERTIFICATE-----Generated at Fri Dec 26 09:39:03 2025 by rpki-client