This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft File: ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft (raw, json) Hash identifier: OcYwy/P96UGlUaPNOqAOHQRBswq3W1b3iuMhzdEF+Og= Subject key identifier: C7:08:25:16:25:7E:6B:B9:45:E5:78:C8:80:3D:EA:C0:D9:BC:84:67 Authority key identifier: 83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE Certificate issuer: /CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Certificate serial: 010D0C9F4328584C5931E5973FABE56B2C2F0900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft Manifest number: 010D0C9F43285849AD4434DD840AC6C2241E247F Signing time: Mon 29 Dec 2025 14:02:03 +0000 Manifest this update: Mon 29 Dec 2025 14:02:03 +0000 Manifest next update: Wed 31 Dec 2025 14:00:00 +0000 Files and hashes: 1: 3167000e-cb0e-3c02-8954-911a60c2a9da.roa (hash: Vyz3Q7/D8CKnR5EFkFcMQDS2c4iPZGxXzjDetCQGEvM=) 2: b803a2aa-249f-369e-b316-88947c4204b0.roa (hash: JaA0LY9T0ay0dfY97o6ELsl99a0E0UM8vqSs07N/N/0=) 3: ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl (hash: sRG7yAVgkG/ZQWt2Eul4mrIQP/9mbCzS/IqM+HIJgiU=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 31 Dec 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:59:31:e5:97:3f:ab:e5:6b:2c:2f:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f Validity Not Before: Dec 29 14:02:03 2025 GMT Not After : Dec 31 14:00:00 2025 GMT Subject: CN=f7969969-3424-4292-a583-37a98ce123b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8e:05:10:59:7b:9d:2a:b5:b0:30:5f:29:f4: a1:c8:d7:97:29:2e:7f:2f:c0:da:f7:c7:67:0c:c1: ad:9e:47:9c:23:d6:71:46:9c:9e:67:e8:a6:76:05: 5e:0f:8f:f3:3f:fc:74:87:8b:cb:cd:d5:fe:81:ce: 56:e8:93:7a:28:48:bc:c8:3b:89:39:e9:cc:84:a3: 9a:d0:cf:2c:e3:42:1c:d9:25:0f:fa:13:50:84:57: 6b:e5:00:c4:2a:d9:36:fa:95:80:ae:8f:e3:27:9b: 5a:88:c5:3c:f6:7e:8f:c5:a3:96:4d:dc:a1:09:90: 81:ec:55:9f:7a:fd:9f:56:b1:a8:d1:44:74:0e:f0: 4f:6f:f6:1c:00:6d:9d:03:28:42:9c:ea:df:86:ed: de:19:72:2d:84:61:1e:38:7e:f5:1a:92:f3:5e:07: e8:ca:a7:19:5b:c9:5a:e1:a4:c9:52:7d:55:20:54: cb:f1:b0:4f:48:d2:e0:cd:16:60:06:2a:c3:82:56: c0:16:2f:0e:4b:29:6e:07:06:aa:18:c0:c9:95:01: bf:c2:bd:92:19:37:1c:3f:f2:f4:54:c4:f6:27:95: 8c:c8:a6:cf:91:a8:a0:de:d6:51:6d:28:aa:e2:25: 16:c6:a6:20:b1:31:37:9c:55:86:7f:e0:ac:32:24: 87:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:08:25:16:25:7E:6B:B9:45:E5:78:C8:80:3D:EA:C0:D9:BC:84:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.crl X509v3 Authority Key Identifier: keyid:83:88:B3:BC:24:88:CC:99:8F:F1:E8:77:05:FB:2A:C3:E9:A0:B3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ba8c1d41-2c7c-4905-8deb-c6a50e1d7e2f.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:40:da:b8:be:6d:6b:20:ed:cf:30:e0:9b:27:6a:77:f9:6a: 16:f5:5a:88:fb:bd:60:d0:fd:d9:20:dd:bf:b8:68:2f:91:06: 2f:bb:61:17:4b:4f:22:56:43:fa:26:d1:1b:3f:b4:54:fd:51: a8:de:6c:6b:76:b7:5e:5a:b8:fb:e9:d2:0c:c2:8e:1c:6d:5b: 1d:6e:dd:3c:7a:28:ee:23:11:5d:75:f3:f5:84:d5:0b:9d:95: 32:e1:96:6e:e3:c0:3e:69:81:07:7e:58:3a:4f:86:ba:05:25: 35:d8:10:4d:32:2e:fe:c8:a8:c9:05:1d:90:e1:c8:96:03:64: 33:44:22:a5:7c:c1:ca:b0:7f:c2:47:fe:97:47:9c:8f:34:89: a8:a1:2c:54:0a:f2:c4:48:cf:3c:7b:40:91:26:08:30:ab:83: 92:38:19:27:ae:d7:f4:55:a1:a5:56:6d:c9:23:19:b8:a5:62: e7:33:86:c7:d8:ae:7b:d7:24:26:cb:bd:c4:6b:6f:fa:2b:64: e9:41:14:39:87:ee:06:3b:86:0e:fc:63:12:76:f8:4b:90:b1: 30:01:e6:7e:06:6d:d9:e6:cf:e2:e1:1a:3b:f9:9f:64:ba:01: 2e:78:2a:d8:e7:4b:8d:26:ea:4f:53:8b:4a:0c:5e:16:df:34: 89:0a:48:e2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWExZMeWXP6vlaywvCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4YzFkNDEtMmM3Yy00OTA1LThkZWItYzZhNTBlMWQ3 ZTJmMB4XDTI1MTIyOTE0MDIwM1oXDTI1MTIzMTE0MDAwMFowLzEtMCsGA1UEAxMk Zjc5Njk5NjktMzQyNC00MjkyLWE1ODMtMzdhOThjZTEyM2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY4FEFl7nSq1sDBfKfShyNeXKS5/L8Da98dn DMGtnkecI9ZxRpyeZ+imdgVeD4/zP/x0h4vLzdX+gc5W6JN6KEi8yDuJOenMhKOa 0M8s40Ic2SUP+hNQhFdr5QDEKtk2+pWAro/jJ5taiMU89n6PxaOWTdyhCZCB7FWf ev2fVrGo0UR0DvBPb/YcAG2dAyhCnOrfhu3eGXIthGEeOH71GpLzXgfoyqcZW8la 4aTJUn1VIFTL8bBPSNLgzRZgBirDglbAFi8OSyluBwaqGMDJlQG/wr2SGTccP/L0 VMT2J5WMyKbPkaig3tZRbSiq4iUWxqYgsTE3nFWGf+CsMiSHkwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMcIJRYlfmu5ReV4yIA96sDZvIRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iYThj MWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1MGUxZDdlMmYvYmE4YzFkNDEtMmM3Yy00 OTA1LThkZWItYzZhNTBlMWQ3ZTJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYmE4YzFkNDEtMmM3Yy00OTA1LThk ZWItYzZhNTBlMWQ3ZTJmL2JhOGMxZDQxLTJjN2MtNDkwNS04ZGViLWM2YTUwZTFk N2UyZi5jcmwwHwYDVR0jBBgwFoAUg4izvCSIzJmP8eh3Bfsqw+mgs84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iYThjMWQ0MS0yYzdjLTQ5MDUtOGRlYi1jNmE1 MGUxZDdlMmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAiQNq4vm1rIO3PMOCbJ2p3 +WoW9VqI+71g0P3ZIN2/uGgvkQYvu2EXS08iVkP6JtEbP7RU/VGo3mxrdrdeWrj7 6dIMwo4cbVsdbt08eijuIxFddfP1hNULnZUy4ZZu48A+aYEHflg6T4a6BSU12BBN Mi7+yKjJBR2Q4ciWA2QzRCKlfMHKsH/CR/6XR5yPNImooSxUCvLESM88e0CRJggw q4OSOBknrtf0VaGlVm3JIxm4pWLnM4bH2K571yQmy73Ea2/6K2TpQRQ5h+4GO4YO /GMSdvhLkLEwAeZ+Bm3Z5s/i4Ro7+Z9kugEueCrY50uNJupPU4tKDF4W3zSJCkji -----END CERTIFICATE-----Generated at Mon Dec 29 23:44:39 2025 by rpki-client