This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.mft File: ba89a4c5-d662-4e9c-8467-d7f93161ba38.mft (raw, json) Hash identifier: NQf0qkBTFKLJjHiRnVIBBAtI0F88bF/y6PZTd8a6kog= Subject key identifier: 1C:54:F4:60:FB:6D:8C:AC:E5:27:3D:7F:C7:B8:EA:76:56:D3:B4:62 Authority key identifier: 2A:8E:5E:86:39:C9:1A:14:55:FB:FA:63:74:3E:D3:96:D9:91:59:6F Certificate issuer: /CN=ba89a4c5-d662-4e9c-8467-d7f93161ba38 Certificate serial: 010D0C9F4328584C3D63D77B706733B38AC992C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.mft Manifest number: 010D0C9F4328584BB49C4A6D2DF939E1595837F1 Signing time: Fri 19 Dec 2025 15:00:04 +0000 Manifest this update: Fri 19 Dec 2025 15:00:04 +0000 Manifest next update: Sun 21 Dec 2025 15:00:00 +0000 Files and hashes: 1: ba89a4c5-d662-4e9c-8467-d7f93161ba38.crl (hash: yZg5Er+OeVKYV8r0nH3/sDBFuYU8XJ9lyg4KIi8gcRA=) 2: ef026883-ef75-38c5-acba-ea4ec3754770.roa (hash: 9imJ5GocUD81Z+Kvp0Sit5L+JgzbFhPpUvlKFfEsieo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3d:63:d7:7b:70:67:33:b3:8a:c9:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba89a4c5-d662-4e9c-8467-d7f93161ba38 Validity Not Before: Dec 19 15:00:04 2025 GMT Not After : Dec 21 15:00:00 2025 GMT Subject: CN=9e5cd1ab-e3ba-44e4-adff-62380a14cd2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3e:4d:11:af:25:38:55:c8:18:49:ab:91:95: 34:aa:5f:7b:bb:37:fc:ae:82:d5:2a:53:4a:b9:88: 76:ba:b7:d4:83:35:ad:3e:2d:66:43:27:86:28:ec: 9e:e2:96:7a:a3:47:df:8f:71:df:ad:ef:5d:ec:5b: 4e:b8:c5:c6:9b:0b:7b:3a:f3:c6:00:d9:85:44:e8: c5:19:70:ea:74:60:06:28:e1:48:02:40:4b:c3:81: 2e:86:c8:54:38:5f:06:8c:9a:fa:0c:45:f2:68:a1: 3d:42:16:f9:1d:19:55:a6:14:c3:55:44:1f:9f:3c: 30:04:6c:c5:b4:23:61:95:b0:de:77:3e:f3:cd:1a: 03:d1:01:c9:39:80:96:66:54:e7:be:45:f6:ae:fc: fc:cd:e9:d5:19:0a:3d:07:a0:b8:c5:ce:f3:e6:16: 6b:83:7d:33:55:a0:46:a3:40:cc:49:87:ec:06:e4: a8:28:ab:bb:d5:29:3f:52:27:89:11:38:e5:49:99: 5e:33:05:af:f4:0e:d9:9a:16:22:ff:6f:71:ae:7d: 99:5f:d9:d7:1d:4d:f3:aa:ab:4d:95:92:94:af:18: 89:71:7e:8a:77:e9:2b:c0:f5:4b:00:cc:66:7b:a7: 2c:c7:72:cc:9f:68:90:17:7a:0c:d2:16:28:a0:a9: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:54:F4:60:FB:6D:8C:AC:E5:27:3D:7F:C7:B8:EA:76:56:D3:B4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38/ba89a4c5-d662-4e9c-8467-d7f93161ba38.crl X509v3 Authority Key Identifier: keyid:2A:8E:5E:86:39:C9:1A:14:55:FB:FA:63:74:3E:D3:96:D9:91:59:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ba89a4c5-d662-4e9c-8467-d7f93161ba38.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:25:4f:fa:8d:98:f1:a8:ba:9e:05:6a:db:c2:88:89:e5:e5: 2c:65:60:68:f8:f6:4f:0c:92:e8:c4:8e:77:90:d2:84:48:c9: 8c:a0:80:5c:70:0b:7b:a6:6d:54:8c:df:31:23:d5:46:ad:0c: 36:a4:33:3d:e8:36:b8:80:46:cc:d9:8f:2d:88:d4:7f:6e:1e: 7b:67:83:64:74:49:57:3a:9e:ed:9c:a7:28:4c:dc:92:ac:b0: fc:ec:bc:cf:6c:15:d9:da:54:15:9b:df:7b:d5:bf:9f:8e:cf: f7:45:17:50:97:ae:55:b7:3e:74:00:8b:97:65:f6:1f:8b:8c: b3:3d:6f:60:7c:8f:4c:3b:4b:60:65:04:44:28:8a:8c:b7:6a: fd:94:5f:91:13:85:11:c3:d0:60:ff:73:ec:b2:4d:98:40:44: 4c:11:ea:7b:32:60:15:da:cf:69:ba:c9:6b:90:38:92:aa:b2: 79:09:a9:6f:dc:0b:e1:f7:a8:3f:96:8d:fa:db:7e:3f:c3:6c: 54:ab:97:2f:30:dd:57:f5:e3:18:07:38:11:bb:df:e1:30:73: e6:38:06:38:79:a3:2f:e4:0b:83:02:cf:b3:c4:ec:21:a2:03: 2b:3a:b8:91:d4:e1:0e:14:fb:91:18:75:96:a2:19:99:80:e1: 9e:29:f7:05 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw9Y9d7cGczs4rJksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4OWE0YzUtZDY2Mi00ZTljLTg0NjctZDdmOTMxNjFi YTM4MB4XDTI1MTIxOTE1MDAwNFoXDTI1MTIyMTE1MDAwMFowLzEtMCsGA1UEAxMk OWU1Y2QxYWItZTNiYS00NGU0LWFkZmYtNjIzODBhMTRjZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT5NEa8lOFXIGEmrkZU0ql97uzf8roLVKlNK uYh2urfUgzWtPi1mQyeGKOye4pZ6o0ffj3Hfre9d7FtOuMXGmwt7OvPGANmFROjF GXDqdGAGKOFIAkBLw4EuhshUOF8GjJr6DEXyaKE9Qhb5HRlVphTDVUQfnzwwBGzF tCNhlbDedz7zzRoD0QHJOYCWZlTnvkX2rvz8zenVGQo9B6C4xc7z5hZrg30zVaBG o0DMSYfsBuSoKKu71Sk/UieJETjlSZleMwWv9A7ZmhYi/29xrn2ZX9nXHU3zqqtN lZKUrxiJcX6Kd+krwPVLAMxme6csx3LMn2iQF3oM0hYooKl/UQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFBxU9GD7bYys5Sc9f8e46nZW07RiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTg5 YTRjNS1kNjYyLTRlOWMtODQ2Ny1kN2Y5MzE2MWJhMzgvYmE4OWE0YzUtZDY2Mi00 ZTljLTg0NjctZDdmOTMxNjFiYTM4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmE4OWE0YzUtZDY2Mi00ZTljLTg0 NjctZDdmOTMxNjFiYTM4L2JhODlhNGM1LWQ2NjItNGU5Yy04NDY3LWQ3ZjkzMTYx YmEzOC5jcmwwHwYDVR0jBBgwFoAUKo5ehjnJGhRV+/pjdD7TltmRWW8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iYTg5YTRjNS1kNjYyLTRlOWMtODQ2Ny1kN2Y5 MzE2MWJhMzguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqJU/6jZjxqLqeBWrbwoiJ 5eUsZWBo+PZPDJLoxI53kNKESMmMoIBccAt7pm1UjN8xI9VGrQw2pDM96Da4gEbM 2Y8tiNR/bh57Z4NkdElXOp7tnKcoTNySrLD87LzPbBXZ2lQVm9971b+fjs/3RRdQ l65Vtz50AIuXZfYfi4yzPW9gfI9MO0tgZQREKIqMt2r9lF+RE4URw9Bg/3Pssk2Y QERMEep7MmAV2s9puslrkDiSqrJ5Calv3Avh96g/lo36234/w2xUq5cvMN1X9eMY BzgRu9/hMHPmOAY4eaMv5AuDAs+zxOwhogMrOriR1OEOFPuRGHWWohmZgOGeKfcF -----END CERTIFICATE-----Generated at Fri Dec 19 20:23:11 2025 by rpki-client