This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft File: ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft (raw, json) Hash identifier: TGegEp2s6h4adX+Vr10qMLxiiZGQepz55idlIAdU54Y= Subject key identifier: F8:EE:9D:37:F6:2C:68:0F:EC:ED:A6:13:CD:30:C4:92:1C:A6:BB:47 Authority key identifier: E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD Certificate issuer: /CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Certificate serial: 010D0C9F4328584C305CA7584A4F5ADA6B5947E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft Manifest number: 010D0C9F4328584A04D37939CAB001ACD19ABC51 Signing time: Sun 14 Dec 2025 23:00:03 +0000 Manifest this update: Sun 14 Dec 2025 23:00:03 +0000 Manifest next update: Tue 16 Dec 2025 23:00:00 +0000 Files and hashes: 1: 2145dd7e-ab65-3c98-bc0d-77196940761e.roa (hash: 8r3Hnrbas+Cmpca/SqQadKrfT+VtdiT0HuB5198N+Dc=) 2: a5aae8bc-a6ed-382f-af18-c5e191e02393.roa (hash: KWNqgLdI57KTsHyp74KShdIpow44mkX/mEsg169JoAs=) 3: ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl (hash: 3xpBNog+jcJm3gzQIRhHacmWHUetySEYIYl+L635CSA=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:30:5c:a7:58:4a:4f:5a:da:6b:59:47:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7 Validity Not Before: Dec 14 23:00:03 2025 GMT Not After : Dec 16 23:00:00 2025 GMT Subject: CN=cc4e397d-92d4-4852-a102-9d6ad88cfd38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:b8:42:0b:bd:e9:ec:c1:dd:ad:21:32:ae: 35:42:d7:3b:8a:4c:fb:5d:da:5f:73:16:de:46:73: 2d:48:07:6f:e8:48:31:13:41:3f:87:b9:a5:76:42: 0f:f4:38:64:d1:5e:cd:17:11:2e:ac:00:49:7c:70: d1:5b:e1:90:2c:38:a6:e8:09:df:6f:ed:d7:ee:a8: 3e:f9:0e:b0:df:56:d7:9a:10:aa:d5:12:79:66:f6: c0:96:7a:75:bc:13:cb:1e:2d:8f:36:03:82:07:d4: c2:b3:69:6e:57:cc:aa:b4:5d:42:ba:f9:82:14:ee: 09:90:67:87:46:67:98:ad:d3:19:65:3f:83:36:59: b7:28:4b:00:de:64:cc:9c:81:02:4b:20:90:31:4a: 8e:fb:d9:03:9d:2f:30:1a:21:c2:89:50:7f:87:d2: 59:98:3c:ef:99:7b:a5:89:e2:39:96:40:cb:0d:0f: 07:ab:11:93:4d:ed:13:7a:1b:3c:39:58:ef:62:c3: 78:38:a3:c5:fd:36:37:60:78:d4:ec:05:5a:39:75: 2c:7e:b9:35:95:26:0b:82:d7:9b:27:48:8d:91:d4: d2:e8:57:45:af:94:02:92:d7:46:e7:57:ef:b2:b1: 24:6d:b2:dd:df:ef:75:aa:d3:45:b6:1e:86:dd:d1: dc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:EE:9D:37:F6:2C:68:0F:EC:ED:A6:13:CD:30:C4:92:1C:A6:BB:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.crl X509v3 Authority Key Identifier: keyid:E8:1E:15:0B:75:76:40:58:B6:9A:14:2D:A7:91:10:D7:B8:85:D2:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba368dc2-dd8a-40d2-bc53-0fe87e9d9dd7.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5e:8f:f5:a3:34:f9:65:b6:1e:ba:6c:2b:57:6e:45:99:a6: e2:97:f0:0b:0a:b5:9b:a1:f0:04:82:05:45:db:06:4e:23:fb: ff:fb:2a:1d:82:83:1b:92:6c:0d:9b:b4:06:c8:4f:01:cf:e0: bc:68:79:73:87:cb:6e:b3:5a:e9:37:53:00:85:d4:50:9f:f7: 53:91:97:c6:ec:39:8e:e6:91:5c:ea:a5:72:b7:4e:f9:49:7f: 04:fd:7f:23:57:0b:86:60:90:8a:3f:32:14:fa:3c:f6:40:03: 09:29:96:9e:dc:9f:13:e7:21:3c:95:79:de:aa:59:2e:4f:40: cf:e0:46:91:e2:11:11:8e:b7:89:1d:f0:3e:3c:53:fa:66:da: b7:e9:22:a4:6c:1e:5f:ac:c5:a5:a3:da:e8:55:6a:f8:e0:e0: 99:be:85:40:43:49:2c:66:0f:8b:25:2b:31:97:f0:f6:24:5f: 88:14:ea:24:ed:ff:44:ab:62:de:f2:c5:5d:ed:78:1b:75:48: fe:e8:cd:af:f6:47:17:68:95:c2:4a:2f:6f:2b:09:50:e4:a5: fa:01:b7:f3:19:3c:b4:4b:5f:4f:3d:09:88:07:f3:0d:32:7e: 4a:ed:a1:c0:29:93:af:ef:c9:fd:cf:13:88:10:d9:35:73:b3: 43:d0:bb:2d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwwXKdYSk9a2mtZR+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEzNjhkYzItZGQ4YS00MGQyLWJjNTMtMGZlODdlOWQ5 ZGQ3MB4XDTI1MTIxNDIzMDAwM1oXDTI1MTIxNjIzMDAwMFowLzEtMCsGA1UEAxMk Y2M0ZTM5N2QtOTJkNC00ODUyLWExMDItOWQ2YWQ4OGNmZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMe4Qgu96ezB3a0hMq41Qtc7ikz7Xdpfcxbe RnMtSAdv6EgxE0E/h7mldkIP9Dhk0V7NFxEurABJfHDRW+GQLDim6Anfb+3X7qg+ +Q6w31bXmhCq1RJ5ZvbAlnp1vBPLHi2PNgOCB9TCs2luV8yqtF1CuvmCFO4JkGeH RmeYrdMZZT+DNlm3KEsA3mTMnIECSyCQMUqO+9kDnS8wGiHCiVB/h9JZmDzvmXul ieI5lkDLDQ8HqxGTTe0Tehs8OVjvYsN4OKPF/TY3YHjU7AVaOXUsfrk1lSYLgteb J0iNkdTS6FdFr5QCktdG51fvsrEkbbLd3+91qtNFth6G3dHcqwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFPjunTf2LGgP7O2mE80wxJIcprtHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2 OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4N2U5ZDlkZDcvYmEzNjhkYzItZGQ4YS00 MGQyLWJjNTMtMGZlODdlOWQ5ZGQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmEzNjhkYzItZGQ4YS00MGQyLWJj NTMtMGZlODdlOWQ5ZGQ3L2JhMzY4ZGMyLWRkOGEtNDBkMi1iYzUzLTBmZTg3ZTlk OWRkNy5jcmwwHwYDVR0jBBgwFoAU6B4VC3V2QFi2mhQtp5EQ17iF0t0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYTM2OGRjMi1kZDhhLTQwZDItYmM1My0wZmU4 N2U5ZDlkZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgXo/1ozT5ZbYeumwrV25F mabil/ALCrWbofAEggVF2wZOI/v/+yodgoMbkmwNm7QGyE8Bz+C8aHlzh8tus1rp N1MAhdRQn/dTkZfG7DmO5pFc6qVyt075SX8E/X8jVwuGYJCKPzIU+jz2QAMJKZae 3J8T5yE8lXneqlkuT0DP4EaR4hERjreJHfA+PFP6Ztq36SKkbB5frMWlo9roVWr4 4OCZvoVAQ0ksZg+LJSsxl/D2JF+IFOok7f9Eq2Le8sVd7XgbdUj+6M2v9kcXaJXC Si9vKwlQ5KX6AbfzGTy0S19PPQmIB/MNMn5K7aHAKZOv78n9zxOIENk1c7ND0Lst -----END CERTIFICATE-----Generated at Mon Dec 15 12:11:31 2025 by rpki-client