This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft File: bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft (raw, json) Hash identifier: TaBF4J2AjjBzUDTVrrsjFegcbYR5UJrML7i5Z4F0A30= Subject key identifier: 17:E2:EA:84:AF:73:3C:F6:0E:B3:BB:EC:73:D5:91:BA:1F:25:53:7D Authority key identifier: CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49 Certificate issuer: /CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd Certificate serial: 010D0C9F4328584C404C584B712FC8BFE4369120 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft Manifest number: 010D0C9F43285842FB60BBE0D6EC48E7CF651A67 Signing time: Sat 20 Dec 2025 16:00:09 +0000 Manifest this update: Sat 20 Dec 2025 16:00:09 +0000 Manifest next update: Tue 23 Dec 2025 16:00:00 +0000 Files and hashes: 1: 9438e3b6-c8b0-3562-828e-38e2e3227244.roa (hash: YJrVBeDqk1G9wBQhIFFLeloc6Vvb5GOav0nB4+ZYciY=) 2: bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl (hash: DclEy6/ezfmnwYRz9XQzOfFPIYuTcg0Q+fvpeYWNNnU=) 3: bf0d8f5a-37be-31d2-bc71-22237b74a3e6.roa (hash: ihar2reXT68s6zn9IcKo8jAw6TDY2QmwdFt04Jf7RdM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:4c:58:4b:71:2f:c8:bf:e4:36:91:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc3bcc6d-6679-419c-8300-bdebdffc8ffd Validity Not Before: Dec 20 16:00:09 2025 GMT Not After : Dec 23 16:00:00 2025 GMT Subject: CN=2adf1303-1bae-4972-a0a5-06c07dda032a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7e:8a:56:0c:ed:98:87:2b:21:42:dd:17:20: 12:db:b7:30:63:b1:ef:90:4b:1c:88:b8:ca:23:8f: a9:9e:41:4f:f4:3f:38:03:fa:94:ff:79:a3:20:7f: 75:f0:47:1f:42:fb:f5:60:cf:d8:27:b7:6e:b2:fc: af:12:d6:c2:49:13:db:e2:87:54:41:74:5e:1f:aa: 1e:55:e8:0f:a7:cd:f5:6a:e9:7c:f6:54:e4:2a:c5: c0:a2:76:da:d4:88:d8:bb:96:7a:47:bc:86:ab:09: b1:65:6b:fd:f7:4e:e6:73:6d:a7:5f:9e:26:07:54: 9b:26:cc:52:28:c6:d6:a2:7f:f8:21:06:92:72:d3: 1c:8b:cb:c2:4a:cb:fe:da:69:7e:25:c9:22:ee:d5: 4e:06:df:23:9c:22:9d:43:76:57:4c:d0:53:f1:c0: a4:e5:d5:a2:74:90:2d:1f:a3:74:e0:0b:20:57:02: 74:c5:df:bb:ea:77:0f:a5:c2:09:69:7c:4c:3d:22: df:15:96:e2:65:ae:8d:6d:8f:ca:ff:f8:b0:ed:cd: 5c:e1:c0:47:7f:bb:2e:13:1d:5e:aa:d1:7d:b0:69: 0e:09:00:b7:57:3f:11:ab:d8:f9:08:a3:59:fa:c0: b8:85:89:9d:c8:12:38:1a:23:68:02:fe:04:b1:fb: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E2:EA:84:AF:73:3C:F6:0E:B3:BB:EC:73:D5:91:BA:1F:25:53:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.crl X509v3 Authority Key Identifier: keyid:CC:59:79:C9:D5:F2:E0:6A:F8:9F:25:4F:78:84:1B:76:E3:65:E4:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bc3bcc6d-6679-419c-8300-bdebdffc8ffd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b1:72:5f:39:30:c7:1d:fa:a7:c9:b5:42:7b:4d:26:67:9b: 99:a3:4e:52:82:5b:4d:79:76:c6:7f:0a:af:42:71:e0:3e:06: ef:45:04:ef:df:2d:05:b0:e7:a3:e2:4a:13:76:12:90:ff:17: 96:d5:e7:63:cd:b4:8e:f9:7b:08:b8:5f:1f:d4:ae:74:06:64: 9a:bf:b8:da:13:65:b0:0c:51:46:9f:2c:b6:7a:5e:30:c1:d1: a3:da:cb:d0:7a:14:a8:7a:2c:89:81:96:db:58:84:b5:26:ea: 19:fa:e5:42:de:e2:0d:c4:73:e6:0b:d2:67:41:6d:b3:12:73: d4:09:02:7d:ba:40:fd:40:fa:04:45:c1:52:0f:22:84:94:29: f5:51:11:fb:c0:72:69:48:19:5a:a4:f3:70:45:e6:f8:c1:d6: 42:27:a5:9b:fc:50:31:9b:7e:62:4e:24:b4:58:9e:a6:de:45: ee:52:d5:fc:14:df:c5:ee:af:cf:45:ab:cb:d7:9c:00:22:e1: 17:2d:48:c9:e6:a0:dd:df:de:1b:dc:09:84:00:e6:09:c5:f6: 02:6f:4a:66:fb:e5:91:91:20:a9:39:13:50:29:27:09:46:58: 7a:31:ec:ef:6d:ad:7f:01:33:aa:d7:a7:50:2a:23:38:13:fa: 2f:bc:bd:03 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExATFhLcS/Iv+Q2kSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmMzYmNjNmQtNjY3OS00MTljLTgzMDAtYmRlYmRmZmM4 ZmZkMB4XDTI1MTIyMDE2MDAwOVoXDTI1MTIyMzE2MDAwMFowLzEtMCsGA1UEAxMk MmFkZjEzMDMtMWJhZS00OTcyLWEwYTUtMDZjMDdkZGEwMzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0H6KVgztmIcrIULdFyAS27cwY7HvkEsciLjK I4+pnkFP9D84A/qU/3mjIH918EcfQvv1YM/YJ7dusvyvEtbCSRPb4odUQXReH6oe VegPp831aul89lTkKsXAonba1IjYu5Z6R7yGqwmxZWv9907mc22nX54mB1SbJsxS KMbWon/4IQaSctMci8vCSsv+2ml+Jcki7tVOBt8jnCKdQ3ZXTNBT8cCk5dWidJAt H6N04AsgVwJ0xd+76ncPpcIJaXxMPSLfFZbiZa6NbY/K//iw7c1c4cBHf7suEx1e qtF9sGkOCQC3Vz8Rq9j5CKNZ+sC4hYmdyBI4GiNoAv4EsfsnQwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBfi6oSvczz2DrO77HPVkbofJVN9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iYzNi Y2M2ZC02Njc5LTQxOWMtODMwMC1iZGViZGZmYzhmZmQvYmMzYmNjNmQtNjY3OS00 MTljLTgzMDAtYmRlYmRmZmM4ZmZkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYmMzYmNjNmQtNjY3OS00MTljLTgz MDAtYmRlYmRmZmM4ZmZkL2JjM2JjYzZkLTY2NzktNDE5Yy04MzAwLWJkZWJkZmZj OGZmZC5jcmwwHwYDVR0jBBgwFoAUzFl5ydXy4Gr4nyVPeIQbduNl5EkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iYzNiY2M2ZC02Njc5LTQxOWMtODMwMC1iZGVi ZGZmYzhmZmQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmsXJfOTDHHfqnybVCe00m Z5uZo05SgltNeXbGfwqvQnHgPgbvRQTv3y0FsOej4koTdhKQ/xeW1edjzbSO+XsI uF8f1K50BmSav7jaE2WwDFFGnyy2el4wwdGj2svQehSoeiyJgZbbWIS1JuoZ+uVC 3uINxHPmC9JnQW2zEnPUCQJ9ukD9QPoERcFSDyKElCn1URH7wHJpSBlapPNwReb4 wdZCJ6Wb/FAxm35iTiS0WJ6m3kXuUtX8FN/F7q/PRavL15wAIuEXLUjJ5qDd394b 3AmEAOYJxfYCb0pm++WRkSCpORNQKScJRlh6Mezvba1/ATOq16dQKiM4E/ovvL0D -----END CERTIFICATE-----Generated at Sun Dec 21 14:10:28 2025 by rpki-client