This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft File: bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft (raw, json) Hash identifier: KvdNWG0yWYcwhUyCdndDXJVgXrb2LXCDe00vxvdwtHg= Subject key identifier: FF:58:E9:FC:1D:3C:01:99:27:1A:22:5C:CE:F6:B4:BB:5D:CF:E8:49 Authority key identifier: 11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 Certificate issuer: /CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Certificate serial: 010D0C9F4328584C15D72704F3521D8B0569A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft Manifest number: 010D0C9F4328584073A8508522A5167F0D710344 Signing time: Fri 05 Dec 2025 11:00:03 +0000 Manifest this update: Fri 05 Dec 2025 11:00:03 +0000 Manifest next update: Mon 08 Dec 2025 11:00:00 +0000 Files and hashes: 1: 4a34cd9f-1e66-36b9-ae43-e7a939ef4cb5.roa (hash: 5YqqtVHE5hLDuBgZtm3D3CDyuQtSNUxyZS/jJc+1dDM=) 2: bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl (hash: HiqWINt54PTAOr2+zjaoqUCwz7hsRfMfYxLJklY+x90=) 3: f2ad73f3-0f80-3cc2-9399-881a9101068b.roa (hash: cwfMaXV1h5EpwWk9P4a6eIH/0EVPs1a6e4OZTqo2ay0=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:15:d7:27:04:f3:52:1d:8b:05:69:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf10fe75-981f-4a3c-b77a-28e235bed9f1 Validity Not Before: Dec 5 11:00:03 2025 GMT Not After : Dec 8 11:00:00 2025 GMT Subject: CN=5cce087e-1bf7-4172-9c16-80cbf7fd36d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:16:3e:0b:e4:1d:c6:4b:24:c2:e0:9e:26: 69:d6:75:f3:d1:e0:2a:9b:da:23:b9:82:08:b9:6e: 6d:0e:e3:fb:70:02:cd:73:25:b0:16:03:39:5e:52: f7:08:8d:35:38:e1:2c:d7:23:62:81:43:e2:14:6d: df:39:7a:b6:21:3e:5a:5e:3f:ee:99:2b:ac:47:fd: 8e:bb:60:77:02:77:6b:34:71:cd:67:ee:b8:ca:ec: 16:a5:92:3a:64:04:67:c1:ff:6e:ff:e0:b1:0d:8a: 82:ac:9d:fa:d5:23:15:c1:fe:27:84:f1:0d:79:97: 19:5b:4f:e0:6b:6e:ec:c1:70:59:bd:3f:f2:bb:2a: 90:40:9b:7e:1f:4a:fc:25:17:10:da:10:f7:ae:9c: 3a:2e:69:16:84:df:09:7f:78:02:93:fc:c9:74:ef: 53:28:8c:ca:78:ea:86:8f:d2:e1:e2:54:ab:09:b1: c0:d8:84:4c:97:51:f2:4d:72:b3:b8:42:aa:1b:a0: 88:54:7a:60:b1:84:aa:69:86:5f:9b:ef:23:32:9c: 99:16:c7:0b:b6:cc:34:55:ba:5d:e5:37:cd:51:ea: 60:8a:af:73:0e:30:cf:28:be:24:49:21:bc:44:bb: 27:f0:a0:e4:73:85:a4:65:46:06:64:de:cb:ae:30: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:58:E9:FC:1D:3C:01:99:27:1A:22:5C:CE:F6:B4:BB:5D:CF:E8:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1/bf10fe75-981f-4a3c-b77a-28e235bed9f1.crl X509v3 Authority Key Identifier: keyid:11:5E:01:9C:4C:7D:98:BB:75:92:64:5B:8D:DB:0B:38:BE:11:77:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf10fe75-981f-4a3c-b77a-28e235bed9f1.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9a:53:cc:44:60:9d:13:5e:bf:9d:dc:cc:ae:7e:3e:a8:ef: 0f:53:3d:ff:80:b8:55:df:c1:2e:a1:cc:bd:d5:9c:75:28:1d: a8:42:6c:db:ee:51:75:41:bc:07:74:ad:f8:19:df:11:44:52: aa:76:a5:6f:00:bd:22:ff:a0:9d:d5:7a:d8:83:e9:9c:eb:53: 65:4e:0a:1c:18:bc:db:23:a9:06:c8:64:de:3c:54:de:ee:2e: a2:28:78:4a:2c:c5:cf:7a:4c:67:4a:fa:c2:cf:0a:ed:8e:ad: 28:00:0b:07:02:78:66:94:60:76:d4:da:a0:18:83:58:3f:6e: 3d:6c:3f:c3:e8:28:d5:ed:49:15:cd:b9:9f:01:79:4d:2c:f9: 70:c1:cb:8a:1b:03:eb:fc:f3:1a:62:94:3c:73:05:66:e2:db: bc:31:51:3e:d1:6c:43:36:5d:ac:a9:8a:f0:b9:5f:d0:3e:7f: 1a:c0:0c:bf:25:20:a1:99:8a:bf:31:31:5f:0f:de:82:83:ef: 10:e1:76:01:6a:78:4d:f1:b8:ef:b8:81:2a:3c:98:88:66:59: 7a:88:7b:b9:fa:6e:d4:e0:4b:62:1d:42:e9:aa:77:00:83:50: d7:81:27:eb:66:1b:b1:73:9d:1c:35:36:27:4b:7e:54:b3:5c: a7:11:a5:5b -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwV1ycE81IdiwVppYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxMGZlNzUtOTgxZi00YTNjLWI3N2EtMjhlMjM1YmVk OWYxMB4XDTI1MTIwNTExMDAwM1oXDTI1MTIwODExMDAwMFowLzEtMCsGA1UEAxMk NWNjZTA4N2UtMWJmNy00MTcyLTljMTYtODBjYmY3ZmQzNmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKIWPgvkHcZLJMLgniZp1nXz0eAqm9ojuYII uW5tDuP7cALNcyWwFgM5XlL3CI01OOEs1yNigUPiFG3fOXq2IT5aXj/umSusR/2O u2B3AndrNHHNZ+64yuwWpZI6ZARnwf9u/+CxDYqCrJ361SMVwf4nhPENeZcZW0/g a27swXBZvT/yuyqQQJt+H0r8JRcQ2hD3rpw6LmkWhN8Jf3gCk/zJdO9TKIzKeOqG j9Lh4lSrCbHA2IRMl1HyTXKzuEKqG6CIVHpgsYSqaYZfm+8jMpyZFscLtsw0Vbpd 5TfNUepgiq9zDjDPKL4kSSG8RLsn8KDkc4WkZUYGZN7LrjBRUwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFP9Y6fwdPAGZJxoiXM72tLtdz+hJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEw ZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUyMzViZWQ5ZjEvYmYxMGZlNzUtOTgxZi00 YTNjLWI3N2EtMjhlMjM1YmVkOWYxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYxMGZlNzUtOTgxZi00YTNjLWI3 N2EtMjhlMjM1YmVkOWYxL2JmMTBmZTc1LTk4MWYtNGEzYy1iNzdhLTI4ZTIzNWJl ZDlmMS5jcmwwHwYDVR0jBBgwFoAUEV4BnEx9mLt1kmRbjdsLOL4Rd7cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjEwZmU3NS05ODFmLTRhM2MtYjc3YS0yOGUy MzViZWQ5ZjEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhmlPMRGCdE16/ndzMrn4+ qO8PUz3/gLhV38Euocy91Zx1KB2oQmzb7lF1QbwHdK34Gd8RRFKqdqVvAL0i/6Cd 1XrYg+mc61NlTgocGLzbI6kGyGTePFTe7i6iKHhKLMXPekxnSvrCzwrtjq0oAAsH AnhmlGB21NqgGINYP249bD/D6CjV7UkVzbmfAXlNLPlwwcuKGwPr/PMaYpQ8cwVm 4tu8MVE+0WxDNl2sqYrwuV/QPn8awAy/JSChmYq/MTFfD96Cg+8Q4XYBanhN8bjv uIEqPJiIZll6iHu5+m7U4EtiHULpqncAg1DXgSfrZhuxc50cNTYnS35Us1ynEaVb -----END CERTIFICATE-----Generated at Sat Dec 6 09:24:58 2025 by rpki-client