This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft File: bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft (raw, json) Hash identifier: I9YpnZ4Vrp7xL72fxWleZqWr/l9dVNL/C7a03qkma1w= Subject key identifier: C3:11:5B:03:83:68:12:FE:C2:D7:2E:FD:6D:BC:38:73:5C:BA:C5:E5 Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74 Certificate issuer: /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd Certificate serial: 010D0C9F4328584C18A1DF2827F819018EF56F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft Manifest number: 010D0C9F4328584481AA90A7F37F162B5DB29F49 Signing time: Sat 06 Dec 2025 11:00:09 +0000 Manifest this update: Sat 06 Dec 2025 11:00:09 +0000 Manifest next update: Tue 09 Dec 2025 11:00:00 +0000 Files and hashes: 1: 0643f9f7-9d02-32fe-847d-014edce56609.roa (hash: jnWPt/rKci906Ko2HWC6vbzI430SrA5rG5sDzCO7S78=) 2: 57c5f4f5-c728-3a3e-ad36-b77b88ab34ea.roa (hash: Zn13Erdo4faMNHu+1kGbuyD+kQwdey6O5tYPfRclWHc=) 3: bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl (hash: NZ2VDsNX9RQrkKuUykMoR6clcPa+58beDUJeIP/XI3g=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:18:a1:df:28:27:f8:19:01:8e:f5:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd Validity Not Before: Dec 6 11:00:09 2025 GMT Not After : Dec 9 11:00:00 2025 GMT Subject: CN=822f54b7-e72a-4a92-bda1-788a4bc63d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fb:46:94:b4:c2:55:8a:ac:b0:f9:28:79:a0: 7c:f6:ad:ed:2f:11:d2:9d:02:86:92:e0:7e:00:89: e7:2a:91:b0:ac:7e:85:14:c0:1b:59:5a:78:0d:ca: f7:4d:24:49:88:29:30:f8:26:0b:9d:65:63:eb:c2: a5:2d:42:c6:e0:15:0b:54:7e:86:78:1a:12:0d:07: 01:b1:1c:8b:ec:7c:ac:12:e1:0b:82:a5:d4:10:87: 57:c3:05:9f:8b:0d:a6:07:02:e2:fd:63:ad:12:bf: 81:ff:6c:97:3f:0d:c1:f4:98:87:0d:aa:78:b6:00: 7d:c6:61:43:3a:98:48:2b:7c:6e:26:20:7c:86:31: fb:76:d1:d9:97:8c:62:1a:bb:28:4a:9f:b9:22:6d: 1b:a1:e9:97:b2:b2:33:c0:dc:1c:80:fc:cf:94:a7: 20:b9:4d:17:3c:85:9e:1b:ad:16:1e:b9:4f:3e:01: 06:a2:9b:82:a7:36:b2:e3:7a:4c:64:1f:86:4f:ed: 49:45:84:87:6b:01:7b:ef:2d:4e:d5:04:61:1d:5f: 0c:45:78:d4:a1:6e:1e:3a:02:07:7d:81:a1:9e:18: bd:45:32:a9:3d:d1:43:d3:59:9c:cd:fd:17:1e:51: 0b:48:84:95:95:61:28:66:77:d1:fe:e0:b6:58:a6: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:11:5B:03:83:68:12:FE:C2:D7:2E:FD:6D:BC:38:73:5C:BA:C5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl X509v3 Authority Key Identifier: keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:76:95:cd:d2:6a:df:d9:a4:ca:97:a3:c3:e8:f2:80:f6:c7: 35:b3:32:3c:2c:2b:a1:b0:fe:7e:52:76:77:fb:58:5b:cc:dc: c6:b5:11:5a:e9:fb:46:2c:47:7f:7b:63:0a:c6:1a:00:9f:ec: 53:07:e2:0e:70:8f:03:5f:11:2e:37:81:54:18:59:5a:6e:29: be:51:0a:55:8b:a8:4d:ff:83:03:48:c4:08:7b:14:4d:c8:7b: 6a:67:e7:ee:35:d4:31:40:2f:19:a4:97:3b:82:d2:bf:e4:5a: ff:66:7c:20:ca:bd:c4:38:0b:b5:07:e3:58:01:78:5d:94:86: 48:bf:ab:fd:1e:62:35:fc:04:5d:fb:3b:0e:f6:f6:38:ff:f5: f6:ac:6e:74:4a:6e:01:7b:25:77:a8:12:57:e8:8a:c8:c1:ea: 7e:ea:0b:df:d2:ef:2a:3e:6e:34:10:8c:1d:ee:76:53:f8:95: 76:fe:60:2c:8b:8e:31:1e:c6:4a:3d:b5:29:f7:76:9e:a2:e9: 79:08:d8:a2:24:a9:a9:e2:01:5c:bf:8c:4d:a5:8f:05:96:61: d0:cc:b1:6a:f3:6b:29:fe:7f:8a:ec:a5:bd:55:3d:b8:7e:98: 39:42:9f:28:95:1f:c8:3a:3e:0b:d0:c1:05:53:24:32:c9:f1: 8b:64:56:49 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwYod8oJ/gZAY71bwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIyMjNmN2YtZjI4Yi00ZGY0LWI2ZGEtY2FiNDg1NThj MmNkMB4XDTI1MTIwNjExMDAwOVoXDTI1MTIwOTExMDAwMFowLzEtMCsGA1UEAxMk ODIyZjU0YjctZTcyYS00YTkyLWJkYTEtNzg4YTRiYzYzZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ftGlLTCVYqssPkoeaB89q3tLxHSnQKGkuB+ AInnKpGwrH6FFMAbWVp4Dcr3TSRJiCkw+CYLnWVj68KlLULG4BULVH6GeBoSDQcB sRyL7HysEuELgqXUEIdXwwWfiw2mBwLi/WOtEr+B/2yXPw3B9JiHDap4tgB9xmFD OphIK3xuJiB8hjH7dtHZl4xiGrsoSp+5Im0boemXsrIzwNwcgPzPlKcguU0XPIWe G60WHrlPPgEGopuCpzay43pMZB+GT+1JRYSHawF77y1O1QRhHV8MRXjUoW4eOgIH fYGhnhi9RTKpPdFD01mczf0XHlELSISVlWEoZnfR/uC2WKZb+wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMMRWwODaBL+wtcu/W28OHNcusXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIy M2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0ODU1OGMyY2QvYmIyMjNmN2YtZjI4Yi00 ZGY0LWI2ZGEtY2FiNDg1NThjMmNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmIyMjNmN2YtZjI4Yi00ZGY0LWI2 ZGEtY2FiNDg1NThjMmNkL2JiMjIzZjdmLWYyOGItNGRmNC1iNmRhLWNhYjQ4NTU4 YzJjZC5jcmwwHwYDVR0jBBgwFoAUHLQAnkcraCaH/sJecmJGH10i5HQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iYjIyM2Y3Zi1mMjhiLTRkZjQtYjZkYS1jYWI0 ODU1OGMyY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAndpXN0mrf2aTKl6PD6PKA 9sc1szI8LCuhsP5+UnZ3+1hbzNzGtRFa6ftGLEd/e2MKxhoAn+xTB+IOcI8DXxEu N4FUGFlabim+UQpVi6hN/4MDSMQIexRNyHtqZ+fuNdQxQC8ZpJc7gtK/5Fr/Znwg yr3EOAu1B+NYAXhdlIZIv6v9HmI1/ARd+zsO9vY4//X2rG50Sm4BeyV3qBJX6IrI wep+6gvf0u8qPm40EIwd7nZT+JV2/mAsi44xHsZKPbUp93aeoul5CNiiJKmp4gFc v4xNpY8FlmHQzLFq82sp/n+K7KW9VT24fpg5Qp8olR/IOj4L0MEFUyQyyfGLZFZJ -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:32 2025 by rpki-client