This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft File: ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft (raw, json) Hash identifier: /7hr2FfiQybWO7Prp0L/euhFLgrki2YymFCv7AsxIc0= Subject key identifier: B3:6A:BD:8D:A8:65:49:B9:87:A6:92:0A:F8:8D:46:D7:19:57:83:F9 Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Certificate serial: 010D0C9F4328584C42DB700C16F60A53D68B64C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft Manifest number: 010D0C9F43285849AD4434DD840AC6C2241E2476 Signing time: Sun 21 Dec 2025 14:00:03 +0000 Manifest this update: Sun 21 Dec 2025 14:00:03 +0000 Manifest next update: Tue 23 Dec 2025 14:00:00 +0000 Files and hashes: 1: 3167000e-cb0e-3c02-8954-911a60c2a9da.roa (hash: dIbnphlXBdQU/9pzeQHkJcAh8tjOnVqq5zeNQMOqD0Q=) 2: b803a2aa-249f-369e-b316-88947c4204b0.roa (hash: EpNuEBPstMHDjlHMa4AOSwAOPjkZlYawlmsxm6TyPMo=) 3: ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl (hash: CVOeUtvJxtwWpLXoAgC2JJcv2Xl/qSWxRCQXCcFqrwk=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 23 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:70:0c:16:f6:0a:53:d6:8b:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Validity Not Before: Dec 21 14:00:03 2025 GMT Not After : Dec 23 14:00:00 2025 GMT Subject: CN=75996f50-d71d-499e-8d9a-164a1e3e35c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:5a:19:28:6f:a1:66:1c:f8:e9:a0:23:bb: 0f:be:62:20:aa:5f:db:0f:3a:2f:34:a6:c9:00:9e: 32:04:d0:0f:05:35:51:a0:1f:8a:eb:98:81:ae:ae: e1:1c:40:88:d2:5e:e9:13:ec:1e:24:8d:b6:ce:8e: 27:ba:74:e2:8b:02:e0:60:1b:02:39:67:22:0a:a3: a7:46:af:94:32:1c:71:07:3c:e7:9c:fe:41:ab:80: 6f:fb:10:5a:e5:ef:a3:f9:0e:48:e2:4d:8f:b0:03: 57:54:bb:6d:a0:6f:2b:76:3a:83:f0:86:81:e2:27: 77:ea:50:4b:e9:8d:d7:c6:83:6c:3e:1f:34:c4:0f: 40:92:79:e8:b9:82:bb:7c:59:c5:32:f8:bb:3b:16: 9a:a1:d5:44:bb:42:49:fa:6d:6f:41:6d:cb:67:78: 3f:c0:80:1d:ce:fd:bb:ea:ee:ef:b8:25:69:93:89: 53:df:71:25:bd:87:d5:b0:6b:25:90:ac:23:41:fa: b2:7f:0b:d2:b5:af:88:ff:2e:03:e0:83:b7:cc:78: 16:a7:56:50:5e:cb:17:84:1a:a5:97:9f:76:dd:3b: ca:23:35:8a:88:61:6d:16:9f:bd:00:0c:98:a0:66: f9:39:b6:08:a6:0f:80:42:87:31:36:49:d4:62:b8: f3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6A:BD:8D:A8:65:49:B9:87:A6:92:0A:F8:8D:46:D7:19:57:83:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl X509v3 Authority Key Identifier: keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4f:46:52:45:f8:c4:fa:cf:9c:36:6e:1d:24:e0:5a:bb:b2: 5a:e7:99:24:71:61:fa:d5:95:21:28:4c:a3:af:36:e7:e4:bb: 5e:a5:7f:46:87:eb:f6:92:59:95:65:bb:69:6f:49:78:38:1d: c8:26:9b:e6:31:ed:a3:90:64:09:17:f9:02:b2:b8:a5:77:c5: ca:ff:45:84:06:85:3b:18:73:4d:bb:ea:fb:a5:c2:26:d9:1e: 58:da:14:31:3d:c5:ff:ab:71:24:35:36:0e:b6:7b:f7:6b:2d: 91:52:4a:d6:f0:3f:a9:ab:c0:c9:ec:b8:ca:b8:81:97:f3:03: 1d:76:33:c8:69:d4:7f:82:32:fe:37:af:b3:64:23:70:53:04: 15:bb:3d:f9:b1:df:cf:1a:1e:57:94:74:82:b9:e3:58:18:d9: ed:25:0a:b9:ae:ac:3f:0d:ec:ec:cc:37:d9:cb:8b:8f:ad:54: 33:de:70:68:19:61:81:46:c4:d3:87:e2:e1:e7:13:a5:a3:25: df:2e:29:37:a9:f2:45:9a:0f:20:e6:91:be:28:69:3d:2b:bf: a0:f7:94:3b:d9:5a:6a:5b:49:01:2b:83:40:a0:42:ec:dd:9a: 1d:d1:e4:86:57:6a:4b:b8:a6:ee:c2:0c:3f:2e:11:75:88:f9: 93:69:26:c1 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExC23AMFvYKU9aLZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3 ZTJmMB4XDTI1MTIyMTE0MDAwM1oXDTI1MTIyMzE0MDAwMFowLzEtMCsGA1UEAxMk NzU5OTZmNTAtZDcxZC00OTllLThkOWEtMTY0YTFlM2UzNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A9aGShvoWYc+OmgI7sPvmIgql/bDzovNKbJ AJ4yBNAPBTVRoB+K65iBrq7hHECI0l7pE+weJI22zo4nunTiiwLgYBsCOWciCqOn Rq+UMhxxBzznnP5Bq4Bv+xBa5e+j+Q5I4k2PsANXVLttoG8rdjqD8IaB4id36lBL 6Y3XxoNsPh80xA9AknnouYK7fFnFMvi7OxaaodVEu0JJ+m1vQW3LZ3g/wIAdzv27 6u7vuCVpk4lT33ElvYfVsGslkKwjQfqyfwvSta+I/y4D4IO3zHgWp1ZQXssXhBql l5923TvKIzWKiGFtFp+9AAyYoGb5ObYIpg+AQocxNknUYrjz9QIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLNqvY2oZUm5h6aSCviNRtcZV4P5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYThj MWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvYmE4YzFkNDEtMmM3Yy00 OTA1LThkZWItYzZhNTBlMWQ3ZTJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmE4YzFkNDEtMmM3Yy00OTA1LThk ZWItYzZhNTBlMWQ3ZTJmL2JhOGMxZDQxLTJjN2MtNDkwNS04ZGViLWM2YTUwZTFk N2UyZi5jcmwwHwYDVR0jBBgwFoAUg4izvCSIzJmP8eh3Bfsqw+mgs84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1 MGUxZDdlMmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNT0ZSRfjE+s+cNm4dJOBa u7Ja55kkcWH61ZUhKEyjrzbn5LtepX9Gh+v2klmVZbtpb0l4OB3IJpvmMe2jkGQJ F/kCsrild8XK/0WEBoU7GHNNu+r7pcIm2R5Y2hQxPcX/q3EkNTYOtnv3ay2RUkrW 8D+pq8DJ7LjKuIGX8wMddjPIadR/gjL+N6+zZCNwUwQVuz35sd/PGh5XlHSCueNY GNntJQq5rqw/DezszDfZy4uPrVQz3nBoGWGBRsTTh+Lh5xOloyXfLik3qfJFmg8g 5pG+KGk9K7+g95Q72VpqW0kBK4NAoELs3Zod0eSGV2pLuKbuwgw/LhF1iPmTaSbB -----END CERTIFICATE-----Generated at Mon Dec 22 01:33:59 2025 by rpki-client