This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.mft File: bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.mft (raw, json) Hash identifier: BjWho0AgIikuAGWkjqC2maqlsGbNlz2Z3YHY6PHUmqg= Subject key identifier: A3:DD:F2:6F:9E:48:59:4A:40:E9:0B:DB:58:83:25:C2:84:5E:D0:95 Authority key identifier: 84:E8:EF:79:DB:A6:4A:86:A0:4D:00:AF:77:74:EB:DD:84:72:0E:E5 Certificate issuer: /CN=bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf Certificate serial: 010D0C9F4328584C445E8B6394604DE57C880940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.mft Manifest number: 010D0C9F4328584323BBE4AA1C0F3FC53E1B6459 Signing time: Mon 22 Dec 2025 03:00:03 +0000 Manifest this update: Mon 22 Dec 2025 03:00:03 +0000 Manifest next update: Wed 24 Dec 2025 03:00:00 +0000 Files and hashes: 1: bbf5c1df-a6de-3aef-8e6f-3ca0a226c46f.roa (hash: J8CtKbj5F3Xd/HXurcmbOoRt+35XqtSA8Fru8p4xuTY=) 2: bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.crl (hash: sLpSHkYKHKbdnsJ4/T/oHrJPQdAsIybPxzeTw1B9qs4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:44:5e:8b:63:94:60:4d:e5:7c:88:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf Validity Not Before: Dec 22 03:00:03 2025 GMT Not After : Dec 24 03:00:00 2025 GMT Subject: CN=378c3038-b567-4b2b-b9f2-4ec7d973ac25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f1:77:0d:fb:64:cc:f4:e7:c3:56:4e:13:75: fc:6d:97:89:db:e7:3d:59:23:d1:b5:6e:d9:88:3b: 79:c0:4b:d4:c8:35:ec:a5:af:03:23:f2:26:c4:8e: 4f:d6:f5:4e:e2:6e:a7:bd:f6:d2:07:4b:f6:7f:76: 4a:4e:32:38:6c:56:01:ef:cc:38:55:64:19:10:e5: 49:8f:29:ad:d5:fd:55:ad:59:27:e8:04:97:5c:e0: 09:e1:91:e2:ac:7e:d4:87:fb:91:e8:c3:76:79:d1: c9:b9:a9:35:a8:42:e9:15:94:db:dc:e4:62:40:75: 79:ef:c6:0d:33:ec:f9:63:eb:f2:d9:67:82:b6:f7: 02:09:ac:70:00:08:d8:dc:f8:38:94:28:63:e8:71: 01:d4:f4:f8:d9:ac:41:85:5e:c5:fc:f7:77:f5:6e: c4:29:48:6b:ff:c6:1f:35:55:09:72:f3:6d:d1:3f: 45:ae:ea:23:e5:5a:d0:79:38:89:d5:63:47:48:6a: d1:6f:2b:0f:31:c2:4c:f1:4f:7d:71:94:53:36:96: 21:e8:ce:8b:42:3c:75:0e:58:0d:2f:9d:95:2c:e0: 98:53:fb:c3:70:35:bd:79:6c:3f:24:a3:23:8e:d4: 54:d7:23:d5:ee:c6:ce:c3:bf:e2:e6:00:43:75:87: 4c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DD:F2:6F:9E:48:59:4A:40:E9:0B:DB:58:83:25:C2:84:5E:D0:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.crl X509v3 Authority Key Identifier: keyid:84:E8:EF:79:DB:A6:4A:86:A0:4D:00:AF:77:74:EB:DD:84:72:0E:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bd4d0fa5-95c5-4ba6-8452-b00bfbaf42bf.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b4:15:eb:e7:ef:ab:db:ff:c1:5f:14:33:48:fb:f5:68:d0: 81:9a:49:96:3d:13:17:9b:3e:ea:6d:89:ee:3a:bd:42:d9:ab: d8:25:c2:d1:35:7c:b2:f7:d3:7b:bc:73:0b:75:7c:ae:5a:d2: 25:dc:c6:56:cd:4c:ac:8a:4b:6d:55:07:14:cf:75:50:17:01: 5e:b8:c6:ed:d1:e2:8b:e5:fb:ed:9e:5d:17:9d:79:82:14:e1: 2f:ab:8b:e0:a1:82:4b:dc:72:9e:62:ce:30:88:ee:6b:65:5b: 8b:34:93:d2:1c:50:32:1d:6c:09:22:01:b8:f6:4a:b7:e0:5a: 42:e7:90:76:6e:76:8c:58:eb:2f:73:d2:b9:f4:ea:ae:73:23: 51:8e:05:ee:85:27:a7:ef:9c:e7:62:05:53:ea:be:34:01:82: b7:3a:8f:fb:7d:b0:99:df:42:60:ad:97:a4:9b:ee:83:dd:b4: 8b:42:ca:95:bf:b2:21:7e:c1:18:6e:03:61:a7:b6:87:a8:16: 46:ea:93:97:3d:ec:09:fa:f7:3c:39:c9:bc:3a:61:57:ff:f2: f9:6a:90:96:96:47:a5:8c:20:9a:1d:77:01:d9:c3:96:d3:cc: b4:f1:a3:c0:b1:d2:c6:e1:7e:a1:a6:fe:61:b6:dc:57:ed:7d: 96:00:26:73 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExEXotjlGBN5XyICUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ0ZDBmYTUtOTVjNS00YmE2LTg0NTItYjAwYmZiYWY0 MmJmMB4XDTI1MTIyMjAzMDAwM1oXDTI1MTIyNDAzMDAwMFowLzEtMCsGA1UEAxMk Mzc4YzMwMzgtYjU2Ny00YjJiLWI5ZjItNGVjN2Q5NzNhYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfF3DftkzPTnw1ZOE3X8bZeJ2+c9WSPRtW7Z iDt5wEvUyDXspa8DI/ImxI5P1vVO4m6nvfbSB0v2f3ZKTjI4bFYB78w4VWQZEOVJ jymt1f1VrVkn6ASXXOAJ4ZHirH7Uh/uR6MN2edHJuak1qELpFZTb3ORiQHV578YN M+z5Y+vy2WeCtvcCCaxwAAjY3Pg4lChj6HEB1PT42axBhV7F/Pd39W7EKUhr/8Yf NVUJcvNt0T9Fruoj5VrQeTiJ1WNHSGrRbysPMcJM8U99cZRTNpYh6M6LQjx1DlgN L52VLOCYU/vDcDW9eWw/JKMjjtRU1yPV7sbOw7/i5gBDdYdMRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKPd8m+eSFlKQOkL21iDJcKEXtCVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iZDRk MGZhNS05NWM1LTRiYTYtODQ1Mi1iMDBiZmJhZjQyYmYvYmQ0ZDBmYTUtOTVjNS00 YmE2LTg0NTItYjAwYmZiYWY0MmJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmQ0ZDBmYTUtOTVjNS00YmE2LTg0 NTItYjAwYmZiYWY0MmJmL2JkNGQwZmE1LTk1YzUtNGJhNi04NDUyLWIwMGJmYmFm NDJiZi5jcmwwHwYDVR0jBBgwFoAUhOjvedumSoagTQCvd3Tr3YRyDuUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iZDRkMGZhNS05NWM1LTRiYTYtODQ1Mi1iMDBi ZmJhZjQyYmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBytBXr5++r2//BXxQzSPv1 aNCBmkmWPRMXmz7qbYnuOr1C2avYJcLRNXyy99N7vHMLdXyuWtIl3MZWzUysiktt VQcUz3VQFwFeuMbt0eKL5fvtnl0XnXmCFOEvq4vgoYJL3HKeYs4wiO5rZVuLNJPS HFAyHWwJIgG49kq34FpC55B2bnaMWOsvc9K59OqucyNRjgXuhSen75znYgVT6r40 AYK3Oo/7fbCZ30JgrZekm+6D3bSLQsqVv7IhfsEYbgNhp7aHqBZG6pOXPewJ+vc8 Ocm8OmFX//L5apCWlkeljCCaHXcB2cOW08y08aPAsdLG4X6hpv5httxX7X2WACZz -----END CERTIFICATE-----Generated at Mon Dec 22 09:42:25 2025 by rpki-client