This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.mft File: bd417297-965f-4fd0-82f0-a774a3ef359e.mft (raw, json) Hash identifier: g9+AQ+r6r+SnTZKFBoRe4prQxEp9cdt4AfNZZSFDrtU= Subject key identifier: 8E:1B:C4:E7:C9:B7:AD:90:21:9C:38:75:DE:8F:0A:A1:88:7F:72:AF Authority key identifier: 0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 Certificate issuer: /CN=bd417297-965f-4fd0-82f0-a774a3ef359e Certificate serial: 010D0C9F4328584C415851FD1FD1805C46924080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.mft Manifest number: 010D0C9F4328584BBB5C6FEF1A94E9C8E9EC3E32 Signing time: Sun 21 Dec 2025 01:00:04 +0000 Manifest this update: Sun 21 Dec 2025 01:00:04 +0000 Manifest next update: Wed 24 Dec 2025 01:00:00 +0000 Files and hashes: 1: 756951e5-3465-3d7c-ac71-7a43f0d596f6.roa (hash: QQUwiT4TRBwoocrcgGeW/8WNKxed+NqNGEyNHnY1YBQ=) 2: bd417297-965f-4fd0-82f0-a774a3ef359e.crl (hash: NFJQrIXU01hAS+xgz2Y0Guu4BcBxOYcKFCKTWKD92Ws=) 3: c99a2f69-fb2e-38e3-8cf1-417e5a016273.roa (hash: AZf7ZIIbYDhNSXoC8bG1N75YV8Fvn1ZeoQ4WuLxsjKI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:41:58:51:fd:1f:d1:80:5c:46:92:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd417297-965f-4fd0-82f0-a774a3ef359e Validity Not Before: Dec 21 01:00:04 2025 GMT Not After : Dec 24 01:00:00 2025 GMT Subject: CN=b9bec268-5641-473d-be47-a7baf8a47ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3e:94:21:85:ec:28:4d:b5:09:5a:64:21:39: 07:7e:99:df:89:70:e4:ea:28:b6:6c:34:23:68:d1: 35:58:36:3b:58:f0:44:f3:78:42:20:ab:76:fa:11: 96:42:42:9d:96:31:f9:5e:81:1e:9e:0d:69:be:f4: cb:43:48:d3:71:a9:50:29:32:7e:70:d5:33:36:dd: f8:1b:a2:d8:80:b6:eb:34:9f:3b:e7:85:72:53:c0: d2:c7:21:73:19:46:dc:d5:c1:82:bd:94:c6:84:7a: 77:df:d6:af:03:9f:34:61:98:d6:e5:bc:95:23:6e: 9b:3d:56:cd:9c:06:5d:1b:46:cd:e1:39:08:c5:21: ca:80:e1:45:30:56:45:1b:1b:76:d5:c2:be:84:dd: c5:f2:36:27:aa:9f:cb:20:a1:ee:52:04:ff:a0:d0: 3f:87:fc:c2:f2:81:47:c9:2c:d2:ce:28:2e:fe:f9: af:48:1b:9f:50:cb:71:78:ca:f4:43:ea:77:d7:eb: 79:ac:3e:46:58:0a:8d:9f:00:06:fd:4b:53:26:b5: 58:46:47:7c:5a:1b:b4:88:0f:4c:3c:58:fd:cf:3d: 8a:80:20:87:10:14:e2:a0:0a:d0:9d:45:a2:15:d1: 9d:2d:30:d9:4a:ef:e4:a3:25:69:0e:5a:10:db:00: 92:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1B:C4:E7:C9:B7:AD:90:21:9C:38:75:DE:8F:0A:A1:88:7F:72:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e/bd417297-965f-4fd0-82f0-a774a3ef359e.crl X509v3 Authority Key Identifier: keyid:0A:80:7F:AB:80:5F:13:AD:6A:5F:43:6A:DD:D3:AB:2C:84:B0:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bd417297-965f-4fd0-82f0-a774a3ef359e.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:85:d0:d2:88:1b:a7:b6:05:39:28:ed:3f:4c:bd:89:04:6e: b8:00:38:4c:38:69:e6:20:d7:2b:db:70:dd:11:05:4e:fe:0d: 1b:87:e8:c5:c0:f7:56:43:f9:d2:bb:f8:d7:04:21:f9:4d:01: 6e:b6:d3:ef:1b:b7:7e:73:02:71:34:3f:fe:d3:df:63:8c:19: 56:9c:b6:27:a1:5d:97:96:10:43:26:bd:e8:dd:13:74:16:2b: 2d:31:4c:d9:16:f4:99:f5:60:36:b5:07:c0:e5:90:56:f7:e9: 8a:62:27:63:a5:0f:c3:1f:69:65:1a:fe:16:d8:55:b7:03:1f: b5:df:93:e1:2c:cd:ac:69:c2:f6:f2:54:0f:40:5a:36:26:aa: c0:90:93:b4:b1:d2:14:07:d9:e7:4c:21:61:f4:3c:00:00:69: 7b:35:95:53:38:a6:b5:f9:7d:92:b6:0e:eb:80:d8:75:a8:12: b3:98:24:81:68:93:29:1d:0f:7d:32:a1:3b:f2:69:14:4b:ae: fc:82:b0:bf:30:75:ee:a2:a2:be:14:d2:b6:51:de:5e:81:10: c0:74:53:bc:07:64:e2:3e:52:9f:40:23:4b:a3:84:ec:dc:53: fc:e7:f1:48:c6:7d:af:46:51:b3:0f:31:d1:f1:3a:84:f1:0b: e9:4c:bb:72 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExBWFH9H9GAXEaSQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmQ0MTcyOTctOTY1Zi00ZmQwLTgyZjAtYTc3NGEzZWYz NTllMB4XDTI1MTIyMTAxMDAwNFoXDTI1MTIyNDAxMDAwMFowLzEtMCsGA1UEAxMk YjliZWMyNjgtNTY0MS00NzNkLWJlNDctYTdiYWY4YTQ3YmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT6UIYXsKE21CVpkITkHfpnfiXDk6ii2bDQj aNE1WDY7WPBE83hCIKt2+hGWQkKdljH5XoEeng1pvvTLQ0jTcalQKTJ+cNUzNt34 G6LYgLbrNJ8754VyU8DSxyFzGUbc1cGCvZTGhHp339avA580YZjW5byVI26bPVbN nAZdG0bN4TkIxSHKgOFFMFZFGxt21cK+hN3F8jYnqp/LIKHuUgT/oNA/h/zC8oFH ySzSzigu/vmvSBufUMtxeMr0Q+p31+t5rD5GWAqNnwAG/UtTJrVYRkd8Whu0iA9M PFj9zz2KgCCHEBTioArQnUWiFdGdLTDZSu/koyVpDloQ2wCSuQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFI4bxOfJt62QIZw4dd6PCqGIf3KvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZDQx NzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0YTNlZjM1OWUvYmQ0MTcyOTctOTY1Zi00 ZmQwLTgyZjAtYTc3NGEzZWYzNTllLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmQ0MTcyOTctOTY1Zi00ZmQwLTgy ZjAtYTc3NGEzZWYzNTllL2JkNDE3Mjk3LTk2NWYtNGZkMC04MmYwLWE3NzRhM2Vm MzU5ZS5jcmwwHwYDVR0jBBgwFoAUCoB/q4BfE61qX0Nq3dOrLISw87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZDQxNzI5Ny05NjVmLTRmZDAtODJmMC1hNzc0 YTNlZjM1OWUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCfhdDSiBuntgU5KO0/TL2J BG64ADhMOGnmINcr23DdEQVO/g0bh+jFwPdWQ/nSu/jXBCH5TQFuttPvG7d+cwJx ND/+099jjBlWnLYnoV2XlhBDJr3o3RN0FistMUzZFvSZ9WA2tQfA5ZBW9+mKYidj pQ/DH2llGv4W2FW3Ax+135PhLM2sacL28lQPQFo2JqrAkJO0sdIUB9nnTCFh9DwA AGl7NZVTOKa1+X2Stg7rgNh1qBKzmCSBaJMpHQ99MqE78mkUS678grC/MHXuoqK+ FNK2Ud5egRDAdFO8B2TiPlKfQCNLo4Ts3FP85/FIxn2vRlGzDzHR8TqE8QvpTLty -----END CERTIFICATE-----Generated at Sun Dec 21 04:10:37 2025 by rpki-client