This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft (raw, json) Hash identifier: uYpdkd0JF51oXn/uP3uKJf1HUhozAdU65PrtJ++VcWs= Subject key identifier: 45:1D:87:18:47:38:A4:50:E0:6E:BD:FC:11:BE:D3:B8:7C:02:DF:9E Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584CA1C6AF37757234C162C0B1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft Manifest number: 010D0C9F4328584073A8581DA0CBF23298DB1F4E Signing time: Sat 24 Jan 2026 14:00:04 +0000 Manifest this update: Sat 24 Jan 2026 14:00:04 +0000 Manifest next update: Tue 27 Jan 2026 14:00:00 +0000 Files and hashes: 1: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (hash: um7x/JYlBzX90Z2XbTx+kXcIkiOQbFo+CcTcYyoS91g=) 2: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (hash: KvJNgCtxaaGXThxHxudS54F8kmrg5teJ7QK8PDKWUUI=) 3: bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl (hash: uCjcKAuMv8z/wpEwTaTJh3bPuadwyVfg6I12LWe6h5Q=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a1:c6:af:37:75:72:34:c1:62:c0:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Jan 24 14:00:04 2026 GMT Not After : Jan 27 14:00:00 2026 GMT Subject: CN=d35386dc-12ea-40fb-9d2d-ab1122b958b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:d7:4a:f6:01:8c:1a:ab:60:2c:eb:6d:b9: 07:d0:8c:78:ca:88:bc:c1:c3:62:9c:38:3f:65:b6: d0:be:96:9c:07:33:7b:c9:c7:85:2d:d3:ee:25:3c: bc:d1:43:68:11:18:32:d8:33:0f:90:22:ca:6a:64: d8:c4:0b:5f:7c:23:d6:17:8c:89:0b:11:8f:f9:f2: 5f:00:d9:97:5f:64:a3:01:e3:a0:29:bd:16:5b:e3: fd:08:e2:9e:ff:06:b5:39:e9:40:b4:71:d6:b6:89: 86:4d:59:b2:9a:2b:04:fb:5a:a4:43:62:78:9b:62: 37:a2:58:84:57:7c:73:b3:d0:2f:0a:3c:d5:be:f4: 4d:35:15:2f:c1:c1:a9:7a:9d:e1:19:25:fe:8b:75: 3d:e5:81:87:04:48:82:10:24:44:ea:d7:8c:3a:6d: 99:f9:62:55:c1:b3:ad:af:b0:85:c9:51:0d:7f:89: b6:8f:02:36:46:61:c9:69:30:e3:1d:e9:35:ae:0d: c2:66:42:8c:9e:63:0c:31:da:28:20:16:2c:53:6c: 41:7d:67:82:b6:f5:28:a4:37:9b:fa:6d:f6:0a:24: 90:f1:22:03:e2:69:ad:ad:1e:07:85:5d:5b:11:e6: d8:bf:95:76:c7:a2:9b:74:3d:b9:ee:55:92:9d:98: b7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:1D:87:18:47:38:A4:50:E0:6E:BD:FC:11:BE:D3:B8:7C:02:DF:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f4:7e:64:60:1c:21:fd:06:cb:3c:37:19:f2:4a:ce:08:25: eb:1e:1e:02:bd:30:61:75:16:9c:cd:72:51:4a:a6:b3:2f:20: 59:2e:8c:4a:81:5b:72:41:e5:c1:32:05:b8:7d:f7:e2:de:61: f4:b5:82:9e:5b:44:45:54:e6:fc:3b:8b:f1:59:f6:d0:1b:06: 81:4e:e7:26:ea:02:a9:6e:b9:1b:b9:66:99:30:b8:ce:3d:ea: 1e:b9:f9:7d:e1:79:79:dc:7d:ea:90:4c:9c:1f:2e:48:89:71: ce:f2:2b:cb:98:f6:da:4f:6b:b9:6e:3f:29:7e:29:96:27:79: 99:1d:3c:7f:75:37:02:47:3a:64:dc:c4:d7:f9:ce:ca:63:30: fc:95:b9:40:19:74:50:2a:6b:1e:25:2f:09:8f:dd:39:6d:99: 37:42:5a:dc:13:41:15:ac:93:3d:e7:88:c7:76:af:54:de:05: ff:a8:12:f3:99:dc:13:9d:3b:6e:89:03:ad:5b:63:48:8c:49: 6a:f2:0b:c4:6f:f2:9f:a5:80:55:12:b1:35:7b:da:e0:84:fe: 4e:f0:e4:1f:11:fc:06:79:0b:39:fc:f1:e2:98:5d:67:bf:5a: 38:f4:a4:76:3c:4b:85:d3:e6:f9:4d:fc:ab:e4:89:2c:99:09: 16:bd:5a:ff -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEyhxq83dXI0wWLAscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI2MDEyNDE0MDAwNFoXDTI2MDEyNzE0MDAwMFowLzEtMCsGA1UEAxMk ZDM1Mzg2ZGMtMTJlYS00MGZiLTlkMmQtYWIxMTIyYjk1OGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiafXSvYBjBqrYCzrbbkH0Ix4yoi8wcNinDg/ ZbbQvpacBzN7yceFLdPuJTy80UNoERgy2DMPkCLKamTYxAtffCPWF4yJCxGP+fJf ANmXX2SjAeOgKb0WW+P9COKe/wa1OelAtHHWtomGTVmymisE+1qkQ2J4m2I3oliE V3xzs9AvCjzVvvRNNRUvwcGpep3hGSX+i3U95YGHBEiCECRE6teMOm2Z+WJVwbOt r7CFyVENf4m2jwI2RmHJaTDjHek1rg3CZkKMnmMMMdooIBYsU2xBfWeCtvUopDeb +m32CiSQ8SID4mmtrR4HhV1bEebYv5V2x6KbdD257lWSnZi33wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEUdhxhHOKRQ4G69/BG+07h8At+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmYzYzNiZDUtM2I5NC00 N2UyLTgxZmMtZjQ5MDA4MTRlNDk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAa9H5kYBwh/QbLPDcZ8krO CCXrHh4CvTBhdRaczXJRSqazLyBZLoxKgVtyQeXBMgW4fffi3mH0tYKeW0RFVOb8 O4vxWfbQGwaBTucm6gKpbrkbuWaZMLjOPeoeufl94Xl53H3qkEycHy5IiXHO8ivL mPbaT2u5bj8pfimWJ3mZHTx/dTcCRzpk3MTX+c7KYzD8lblAGXRQKmseJS8Jj905 bZk3QlrcE0EVrJM954jHdq9U3gX/qBLzmdwTnTtuiQOtW2NIjElq8gvEb/KfpYBV ErE1e9rghP5O8OQfEfwGeQs5/PHimF1nv1o49KR2PEuF0+b5Tfyr5IksmQkWvVr/ -----END CERTIFICATE-----Generated at Sun Jan 25 11:04:22 2026 by rpki-client