This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft File: ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft (raw, json) Hash identifier: iadCA5HQNttfiVh7auftpkz2Ib2mbRrqzmCMKOEOD0Q= Subject key identifier: C4:D5:FF:D8:52:6D:16:26:0A:D5:F9:F7:E2:14:70:8B:3A:7C:D8:CE Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584C3E5211451775448DF6D27500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft Manifest number: 010D0C9F4328584A04D37939CAB001ACD19ABC56 Signing time: Fri 19 Dec 2025 23:00:03 +0000 Manifest this update: Fri 19 Dec 2025 23:00:03 +0000 Manifest next update: Mon 22 Dec 2025 23:00:00 +0000 Files and hashes: 1: 2145dd7e-ab65-3c98-bc0d-77196940761e.roa (hash: 8r3Hnrbas+Cmpca/SqQadKrfT+VtdiT0HuB5198N+Dc=) 2: a5aae8bc-a6ed-382f-af18-c5e191e02393.roa (hash: KWNqgLdI57KTsHyp74KShdIpow44mkX/mEsg169JoAs=) 3: ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl (hash: YoJUXfDJyBFvys2d75M54/rBa7dB+UzShwhpK4SJMvw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:3e:52:11:45:17:75:44:8d:f6:d2:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: Dec 19 23:00:03 2025 GMT Not After : Dec 22 23:00:00 2025 GMT Subject: CN=bba8179f-7f5e-4454-8cac-52cd4c9043a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6d:13:e9:2d:67:b4:03:31:5d:30:77:81:e0: 17:97:95:57:45:3d:da:7c:4a:f8:42:d1:50:b4:13: 88:e9:06:19:bd:18:a6:5f:3f:07:a6:9c:94:6b:3c: 08:f1:ef:49:59:68:f2:3d:15:88:f8:41:61:9e:b2: f9:1b:fa:c6:62:d8:76:a9:fe:21:d5:68:29:15:ef: 7e:f1:0b:c3:a6:65:04:c2:53:37:63:d4:a1:9f:45: 7b:34:68:73:b6:0f:30:96:f8:b0:79:81:62:dd:9f: 51:47:53:16:8f:3f:18:78:ae:91:a6:6a:ce:9b:62: d9:58:72:38:72:f6:f8:03:b0:cc:fe:d5:2b:b1:8b: 7e:ae:b8:82:66:60:08:1a:ff:50:c2:14:42:c4:d7: 8a:79:e1:97:c0:ff:aa:b8:77:30:49:9f:ef:55:b2: fb:c9:a5:6c:30:00:1d:95:f6:d2:ad:96:bb:73:38: 6c:d8:83:72:a9:71:a5:88:3a:76:7b:0b:b7:2a:c1: d1:ae:22:68:d0:ec:be:53:8b:dd:5a:c2:53:db:fb: e7:99:8f:77:cd:dc:28:89:da:17:65:25:f7:a2:2d: 7e:d8:e0:f1:6e:26:d6:26:d6:4f:1a:05:83:0a:26: 0b:46:d1:d6:b6:ef:31:5a:c5:4a:8f:46:7a:5f:29: ba:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D5:FF:D8:52:6D:16:26:0A:D5:F9:F7:E2:14:70:8B:3A:7C:D8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:87:91:61:b3:9d:0b:db:ef:e8:31:63:9f:12:d3:11:44:f5: 60:8c:b2:a5:0d:b2:18:8b:da:4c:3e:94:2d:d1:a1:0c:19:15: c7:9e:89:8b:45:69:58:ee:12:41:34:83:3f:64:07:0b:a8:a4: 45:b3:a3:a8:b2:7a:f1:b1:eb:0e:8e:a7:c0:9e:7d:e9:5f:cb: 67:2f:dd:c9:a0:63:65:ea:16:36:9d:de:65:9b:93:25:6a:de: ee:8c:68:dc:6b:b7:c6:b9:32:86:c1:3e:66:6c:b4:81:a7:b8: d9:18:c9:7d:ce:c5:e7:57:5e:f6:87:16:b3:b6:8d:c6:0b:64: 98:07:c0:a2:6e:8c:bc:1f:72:61:52:cd:63:47:97:9e:a7:7b: 2d:d1:83:16:98:45:4b:83:e4:61:b0:e7:08:13:76:1b:07:3e: 43:d3:0c:15:16:95:f7:3e:5c:e3:8b:23:b0:6e:e5:66:b8:12: 64:13:e5:22:f9:f7:a8:8b:8c:d4:73:b8:31:e2:63:ae:af:48: 2f:e2:a8:df:10:82:32:15:2b:fd:57:aa:07:8f:0c:d1:5b:95: 47:03:dd:ec:0b:d5:cd:ba:1c:66:d8:7e:79:39:2d:9e:8d:ed: ec:a9:87:84:f0:0c:06:fc:c3:8c:b8:0e:94:c1:62:c8:35:c6: 06:85:c3:9c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEw+UhFFF3VEjfbSdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI1MTIxOTIzMDAwM1oXDTI1MTIyMjIzMDAwMFowLzEtMCsGA1UEAxMk YmJhODE3OWYtN2Y1ZS00NDU0LThjYWMtNTJjZDRjOTA0M2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm0T6S1ntAMxXTB3geAXl5VXRT3afEr4QtFQ tBOI6QYZvRimXz8HppyUazwI8e9JWWjyPRWI+EFhnrL5G/rGYth2qf4h1WgpFe9+ 8QvDpmUEwlM3Y9Shn0V7NGhztg8wlviweYFi3Z9RR1MWjz8YeK6RpmrOm2LZWHI4 cvb4A7DM/tUrsYt+rriCZmAIGv9QwhRCxNeKeeGXwP+quHcwSZ/vVbL7yaVsMAAd lfbSrZa7czhs2INyqXGliDp2ewu3KsHRriJo0Oy+U4vdWsJT2/vnmY93zdwoidoX ZSX3oi1+2ODxbibWJtZPGgWDCiYLRtHWtu8xWsVKj0Z6Xym63QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMTV/9hSbRYmCtX59+IUcIs6fNjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvYmEzNjhkYzItZGQ4YS00 MGQyLWJjNTMtMGZlODdlOWQ5ZGQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnh5Fhs50L2+/oMWOfEtMR RPVgjLKlDbIYi9pMPpQt0aEMGRXHnomLRWlY7hJBNIM/ZAcLqKRFs6OosnrxsesO jqfAnn3pX8tnL93JoGNl6hY2nd5lm5Mlat7ujGjca7fGuTKGwT5mbLSBp7jZGMl9 zsXnV172hxazto3GC2SYB8Ciboy8H3JhUs1jR5eep3st0YMWmEVLg+RhsOcIE3Yb Bz5D0wwVFpX3PlzjiyOwbuVmuBJkE+Ui+feoi4zUc7gx4mOur0gv4qjfEIIyFSv9 V6oHjwzRW5VHA93sC9XNuhxm2H55OS2eje3sqYeE8AwG/MOMuA6UwWLINcYGhcOc -----END CERTIFICATE-----Generated at Sat Dec 20 13:01:54 2025 by rpki-client