This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft (raw, json) Hash identifier: SRSi51/1zJ1w3CO4Jz1DkRxgaLIr3VD3HnaZH+V/4jk= Subject key identifier: 2B:1F:50:CB:9E:78:F7:F3:BD:9A:61:5E:D8:95:F9:FC:7E:9B:3F:DF Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Certificate issuer: /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Certificate serial: 010D0C9F4328584C18FB2A2E575E29659DB63280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft Manifest number: 010D0C9F4328584073A8581DA0CBF23298DB1F1B Signing time: Sat 06 Dec 2025 14:00:03 +0000 Manifest this update: Sat 06 Dec 2025 14:00:03 +0000 Manifest next update: Mon 08 Dec 2025 14:00:00 +0000 Files and hashes: 1: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (hash: um7x/JYlBzX90Z2XbTx+kXcIkiOQbFo+CcTcYyoS91g=) 2: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (hash: EpkLBuS+KrF1F57PROY2IMKomgYPtYW6CSBxz9FPKcc=) 3: bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl (hash: MNYeHWB1laOUNUiIlSKpqqt35yXmBh24/JO+DomO500=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:fb:2a:2e:57:5e:29:65:9d:b6:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Validity Not Before: Dec 6 14:00:03 2025 GMT Not After : Dec 8 14:00:00 2025 GMT Subject: CN=1ae2fed4-e33e-4264-8d0c-63a8676c217e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:36:0f:60:e4:ab:e7:12:10:bf:c8:55:96: 40:77:25:9f:5a:58:8c:30:b1:83:20:4d:f8:96:0a: ef:e4:cc:f7:2e:ba:0d:07:bd:f8:35:f7:25:78:c3: 1d:89:d2:90:ee:7b:81:db:fa:cc:81:b5:3e:ea:f4: 86:eb:6c:81:cb:74:d8:f5:eb:19:3c:c3:a8:fe:4a: 09:25:2d:a8:a2:4d:2a:50:69:41:87:61:83:52:d8: da:9f:66:a3:97:5e:b6:5e:ac:0b:80:b1:ae:e0:e0: 53:05:f7:89:2c:08:cc:56:65:79:e2:63:4b:10:e3: bb:5c:07:2e:e3:d0:2d:ef:4a:93:cc:ea:08:10:d5: 81:ff:d7:49:6a:db:75:f0:b0:7c:7c:9c:17:f1:4a: 5d:a8:f6:99:5a:49:38:ce:90:1a:76:4b:53:be:73: 25:64:60:11:4f:3c:45:ca:8c:47:9a:3d:7e:22:40: 3e:8f:c6:da:52:2f:30:8e:5d:86:cc:7a:32:e0:1a: 37:06:ef:1d:21:53:34:46:35:61:df:87:58:1e:75: a6:25:92:42:69:76:ae:0e:f6:be:d2:e5:54:c2:ee: 20:8c:5a:86:ce:26:0e:df:fe:1e:7a:f7:e0:12:ac: fa:85:84:fc:8f:80:69:01:9d:f5:ac:c8:56:f2:ca: c2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:1F:50:CB:9E:78:F7:F3:BD:9A:61:5E:D8:95:F9:FC:7E:9B:3F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl X509v3 Authority Key Identifier: keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:96:06:26:63:97:e1:d2:dc:50:dd:74:3a:bc:46:d0:27:6d: fe:8b:d2:77:64:7a:a9:ee:79:a6:03:23:81:c5:8f:67:fc:26: bf:77:73:72:33:48:d5:8e:6a:2b:e0:1e:7e:70:5d:20:f2:eb: 72:a1:c9:2c:5c:f6:64:69:8d:d0:45:9d:64:4d:53:ee:a1:39: 8e:9e:51:7e:c8:4d:9a:98:ff:06:b5:c7:80:30:ac:09:10:df: d5:4a:2d:08:ae:d8:e3:3d:97:75:22:c1:44:57:51:fd:c8:76: 73:aa:e2:6a:f3:dd:59:1e:db:3e:6e:5d:2d:5f:d0:01:62:f5: 24:51:97:8e:46:13:26:ae:28:f7:90:3f:40:e1:9c:d5:10:b5: ed:c2:2d:c4:75:a4:81:d8:3c:05:1c:f0:88:73:6f:53:76:3d: eb:81:4b:6e:86:32:6e:b8:97:15:30:fd:15:14:25:55:16:43: 35:8a:8a:c0:7b:fd:4e:a1:6f:5e:b6:33:46:71:ab:7d:ba:05: d6:53:ae:53:c0:d5:6c:c7:3d:c1:80:bd:d8:31:b3:d4:e2:5a: 7d:86:15:0c:51:4d:df:be:37:fd:be:94:88:96:2d:18:f2:11: 0d:9d:dd:6d:ec:c6:61:aa:81:5d:a5:78:e8:bd:94:82:c3:f1: 3f:0d:10:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwY+youV14pZZ22MoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRl NDk0MB4XDTI1MTIwNjE0MDAwM1oXDTI1MTIwODE0MDAwMFowLzEtMCsGA1UEAxMk MWFlMmZlZDQtZTMzZS00MjY0LThkMGMtNjNhODY3NmMyMTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqY2D2Dkq+cSEL/IVZZAdyWfWliMMLGDIE34 lgrv5Mz3LroNB734NfcleMMdidKQ7nuB2/rMgbU+6vSG62yBy3TY9esZPMOo/koJ JS2ook0qUGlBh2GDUtjan2ajl162XqwLgLGu4OBTBfeJLAjMVmV54mNLEOO7XAcu 49At70qTzOoIENWB/9dJatt18LB8fJwX8UpdqPaZWkk4zpAadktTvnMlZGARTzxF yoxHmj1+IkA+j8baUi8wjl2GzHoy4Bo3Bu8dIVM0RjVh34dYHnWmJZJCaXauDva+ 0uVUwu4gjFqGziYO3/4eevfgEqz6hYT8j4BpAZ31rMhW8srCVwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFCsfUMueePfzvZphXtiV+fx+mz/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNj M2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvYmYzYzNiZDUtM2I5NC00 N2UyLTgxZmMtZjQ5MDA4MTRlNDk0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYmYzYzNiZDUtM2I5NC00N2UyLTgx ZmMtZjQ5MDA4MTRlNDk0L2JmM2MzYmQ1LTNiOTQtNDdlMi04MWZjLWY0OTAwODE0 ZTQ5NC5jcmwwHwYDVR0jBBgwFoAUv27gzbQvdJZGDC7Ndgx/FlpcgW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkw MDgxNGU0OTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHlgYmY5fh0txQ3XQ6vEbQ J23+i9J3ZHqp7nmmAyOBxY9n/Ca/d3NyM0jVjmor4B5+cF0g8utyocksXPZkaY3Q RZ1kTVPuoTmOnlF+yE2amP8GtceAMKwJEN/VSi0IrtjjPZd1IsFEV1H9yHZzquJq 891ZHts+bl0tX9ABYvUkUZeORhMmrij3kD9A4ZzVELXtwi3EdaSB2DwFHPCIc29T dj3rgUtuhjJuuJcVMP0VFCVVFkM1iorAe/1OoW9etjNGcat9ugXWU65TwNVsxz3B gL3YMbPU4lp9hhUMUU3fvjf9vpSIli0Y8hENnd1t7MZhqoFdpXjovZSCw/E/DRDB -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:38 2025 by rpki-client