This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft File: bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft (raw, json) Hash identifier: 0edKj9VKxiQtdeOkgeOz5GbcPzffzFYyoaO6TLbN52g= Subject key identifier: 60:A9:7C:C1:ED:B9:8E:5C:69:D2:0C:96:9D:58:D2:E6:FE:B0:6E:6B Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74 Certificate issuer: /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd Certificate serial: 010D0C9F4328584C481781625AB62A2B39257418 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft Manifest number: 010D0C9F4328584481AA90A7F37F162B5DB29F5A Signing time: Tue 23 Dec 2025 11:00:09 +0000 Manifest this update: Tue 23 Dec 2025 11:00:09 +0000 Manifest next update: Thu 25 Dec 2025 11:00:00 +0000 Files and hashes: 1: 0643f9f7-9d02-32fe-847d-014edce56609.roa (hash: jnWPt/rKci906Ko2HWC6vbzI430SrA5rG5sDzCO7S78=) 2: 57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa (hash: Zn13Erdo4faMNHu+1kGbuyD+kQwdey6O5tYPfRclWHc=) 3: bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl (hash: HxuSTrGjnvA0PzNkv+sWmPQyuDRH2Ngj9qYl7MuCelA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:48:17:81:62:5a:b6:2a:2b:39:25:74:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd Validity Not Before: Dec 23 11:00:09 2025 GMT Not After : Dec 25 11:00:00 2025 GMT Subject: CN=a98c3f90-231a-4eb2-b814-34b5e6cc017a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:4e:47:9d:c7:e9:02:f8:8d:6a:93:c6:57: c8:b6:4a:f8:60:2d:b1:c2:38:83:bd:bb:6f:6e:a6: e6:d1:7c:ce:94:ed:ea:02:23:81:a4:31:e5:58:69: 4c:17:3a:1a:ec:93:b1:45:23:a0:3c:8f:0d:0f:28: 8c:97:5d:b7:2c:75:a1:1d:14:3a:aa:ff:20:e5:df: 55:9a:2f:2b:34:c5:95:e4:8c:38:6c:bb:12:5f:15: 98:0f:2b:9b:26:93:24:e8:7b:fc:ca:ef:e0:03:bf: 23:5c:ff:be:a7:3f:a9:4c:19:9d:53:4c:82:7d:73: 4c:c5:d2:d9:bd:5f:d5:b5:4c:09:6c:27:86:5b:aa: 7d:d5:0e:71:71:ec:b8:50:0d:51:a7:d6:ef:56:11: 57:ae:22:14:52:9b:ce:9d:50:20:b7:12:3b:95:50: ed:3f:35:cc:56:d8:5e:20:50:c1:8a:8d:36:d4:43: 20:2a:d4:23:fd:ae:03:09:4b:f1:97:c2:a2:9b:54: 79:8d:1f:46:0e:56:39:ea:33:bb:d0:7c:19:a1:b1: f2:b3:00:f6:05:52:c5:ab:bf:8c:bc:fd:2a:7c:53: 1c:be:d3:8f:bf:e4:c1:39:30:19:45:98:8a:9c:c8: 84:6e:64:53:0c:03:e4:6a:a0:30:0c:31:a7:54:a7: 39:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A9:7C:C1:ED:B9:8E:5C:69:D2:0C:96:9D:58:D2:E6:FE:B0:6E:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl X509v3 Authority Key Identifier: keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a4:5a:35:8a:dd:78:67:06:da:f2:98:f3:d3:c5:9f:38:48: 6c:9d:a6:14:16:a8:35:a9:9a:ef:a2:68:0f:20:79:08:82:79: 2a:13:59:fb:25:81:08:bf:c2:3e:ef:cc:7a:9e:67:94:d7:e0: 55:12:20:3e:b0:04:30:9a:15:19:6b:ed:59:70:32:38:c8:cc: 81:aa:19:35:61:84:c0:c0:fe:35:a6:5d:3d:2f:dd:c4:f5:9f: 79:f8:40:8b:fe:db:56:b7:67:70:14:e6:91:15:50:7e:f0:6c: 11:59:23:99:8a:f0:6f:37:ee:9c:9a:85:65:77:fb:8c:9e:eb: a5:76:64:8a:bf:23:bc:5c:31:79:e0:e7:5d:93:71:1c:7b:2d: 79:44:ac:ea:d9:b5:c3:68:17:0b:bc:17:04:d2:cc:b1:0f:16: b0:93:d9:8a:f2:58:fa:9e:04:e9:e0:2e:6c:2c:21:ed:0c:66: 5d:93:22:64:68:32:1f:4c:fd:f2:b3:c8:fa:c1:39:ab:ad:4f: 7e:47:34:b0:9b:19:6e:ff:63:80:27:26:c2:0b:3e:03:33:20: 35:66:0c:97:f0:3b:00:43:32:52:f7:59:a8:1a:90:39:66:08: 7d:ca:b4:e8:e0:87:c0:ef:d7:78:49:6e:dd:67:0d:d9:e1:e8: d1:b3:e9:46 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExIF4FiWrYqKzkldBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIyMjNmN2YtZjI4Yi00ZGY0LWI2ZGEtY2FiNDg1NThj MmNkMB4XDTI1MTIyMzExMDAwOVoXDTI1MTIyNTExMDAwMFowLzEtMCsGA1UEAxMk YTk4YzNmOTAtMjMxYS00ZWIyLWI4MTQtMzRiNWU2Y2MwMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqClOR53H6QL4jWqTxlfItkr4YC2xwjiDvbtv bqbm0XzOlO3qAiOBpDHlWGlMFzoa7JOxRSOgPI8NDyiMl123LHWhHRQ6qv8g5d9V mi8rNMWV5Iw4bLsSXxWYDyubJpMk6Hv8yu/gA78jXP++pz+pTBmdU0yCfXNMxdLZ vV/VtUwJbCeGW6p91Q5xcey4UA1Rp9bvVhFXriIUUpvOnVAgtxI7lVDtPzXMVthe IFDBio021EMgKtQj/a4DCUvxl8Kim1R5jR9GDlY56jO70HwZobHyswD2BVLFq7+M vP0qfFMcvtOPv+TBOTAZRZiKnMiEbmRTDAPkaqAwDDGnVKc5xQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGCpfMHtuY5cadIMlp1Y0ub+sG5rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIy M2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0ODU1OGMyY2QvYmIyMjNmN2YtZjI4Yi00 ZGY0LWI2ZGEtY2FiNDg1NThjMmNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIyMjNmN2YtZjI4Yi00ZGY0LWI2 ZGEtY2FiNDg1NThjMmNkL2JiMjIzZjdmLWYyOGItNGRmNC1iNmRhLWNhYjQ4NTU4 YzJjZC5jcmwwHwYDVR0jBBgwFoAUHLQAnkcraCaH/sJecmJGH10i5HQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIyM2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0 ODU1OGMyY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmpFo1it14Zwba8pjz08Wf OEhsnaYUFqg1qZrvomgPIHkIgnkqE1n7JYEIv8I+78x6nmeU1+BVEiA+sAQwmhUZ a+1ZcDI4yMyBqhk1YYTAwP41pl09L93E9Z95+ECL/ttWt2dwFOaRFVB+8GwRWSOZ ivBvN+6cmoVld/uMnuuldmSKvyO8XDF54Oddk3Ecey15RKzq2bXDaBcLvBcE0syx Dxawk9mK8lj6ngTp4C5sLCHtDGZdkyJkaDIfTP3ys8j6wTmrrU9+RzSwmxlu/2OA JybCCz4DMyA1ZgyX8DsAQzJS91moGpA5Zgh9yrTo4IfA79d4SW7dZw3Z4ejRs+lG -----END CERTIFICATE-----Generated at Wed Dec 24 02:58:57 2025 by rpki-client