This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft File: ba5e814e-0ab8-4257-8c39-4091cb3be269.mft (raw, json) Hash identifier: snLy8IjDBKKVZCoILj90+jFTcG3Txwc8ifV3mVGZKPI= Subject key identifier: 71:46:02:47:06:89:D1:FB:3C:BA:DB:9D:F6:C6:CC:1A:EC:7F:F8:CF Authority key identifier: 62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 Certificate issuer: /CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Certificate serial: 010D0C9F4328584BF150B370B21667596D62FFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft Manifest number: 010D0C9F4328584AEAF04E87036ADC5F9026D563 Signing time: Sat 22 Nov 2025 09:00:03 +0000 Manifest this update: Sat 22 Nov 2025 09:00:03 +0000 Manifest next update: Tue 25 Nov 2025 09:00:00 +0000 Files and hashes: 1: 2c3ae0d6-7bb1-375d-87b4-f1d9fd95ef10.roa (hash: 9MCXbkPKXaHRLKPAME0cpt1ZMTu0AAApWG3t0bsFBM0=) 2: ba5e814e-0ab8-4257-8c39-4091cb3be269.crl (hash: YEBgC/ICNrmHU4gxZXvuvlsUM0gD5TPCkwMMvsLHs1w=) 3: c06a09fc-2584-35b2-be4c-9069314d842e.roa (hash: hD+oaMnUPB/6ymmXFSR9oM0hj4Zifc85DagWFZaQOK8=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:f1:50:b3:70:b2:16:67:59:6d:62:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5e814e-0ab8-4257-8c39-4091cb3be269 Validity Not Before: Nov 22 09:00:03 2025 GMT Not After : Nov 25 09:00:00 2025 GMT Subject: CN=9e83344c-a2fc-4712-ba9f-104e5d071fa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:98:9f:61:91:f0:e3:b1:f0:9a:de:3c:00: 67:db:ad:ca:5f:78:98:95:8d:d2:ee:fe:bd:ba:42: a2:51:45:86:0e:ae:19:20:cd:e0:0d:a5:99:61:10: b6:d7:c0:ca:b1:e5:85:9b:01:4b:a6:54:0f:bb:2e: 57:2d:e9:37:ad:51:b3:58:1c:d3:cc:e4:18:b8:72: 24:6e:ee:9b:8a:84:7d:3a:fe:a2:58:8e:52:88:b0: f6:98:c2:0e:43:80:3e:24:31:d1:7f:e9:22:7a:4c: b2:98:48:fa:ab:95:1c:10:83:30:4f:77:3d:8a:e3: d9:36:01:bb:cf:3e:a3:41:72:b5:2d:c5:a4:f9:ea: ff:9a:92:5a:86:c0:4e:26:5e:cf:3b:96:f1:c3:a5: ad:67:81:3e:21:5a:d7:b5:02:75:ba:e9:e6:98:76: b2:36:de:3c:e8:17:68:52:88:d5:c3:73:e0:ad:31: bc:62:67:1b:af:1d:5c:44:8c:2b:0c:87:11:93:e4: ea:09:85:b2:0a:94:43:8f:62:8a:8f:5c:c1:a3:3d: bd:2b:d0:61:64:b8:0c:26:35:2e:f7:4a:f3:a7:5e: 7f:b1:4d:89:82:d2:50:85:12:0c:9a:51:90:dc:7b: 28:e8:63:d7:82:fa:1b:0a:ba:11:33:49:fa:2a:a0: 8c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:46:02:47:06:89:D1:FB:3C:BA:DB:9D:F6:C6:CC:1A:EC:7F:F8:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269/ba5e814e-0ab8-4257-8c39-4091cb3be269.crl X509v3 Authority Key Identifier: keyid:62:39:8D:CB:D2:3A:1C:06:4A:D4:6F:96:C8:CC:02:3A:93:C3:15:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba5e814e-0ab8-4257-8c39-4091cb3be269.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:a2:ca:4f:d5:f2:43:7d:42:89:34:b0:a0:31:38:29:41:53: fd:21:ff:d1:96:6a:02:b6:b2:98:38:56:7f:18:29:cd:01:de: bd:d2:35:59:c0:05:91:a2:ab:cd:b4:02:15:bf:da:1f:31:1d: bf:0b:16:87:e7:de:27:37:4b:25:d3:9e:80:0d:16:b1:ac:ae: 62:65:a6:2f:26:46:30:11:52:31:8e:b4:a8:2a:92:0d:0b:e8: e9:5e:ff:a2:aa:33:47:0d:d2:1a:5e:b1:a4:92:2f:3a:ed:1d: 1f:61:9c:54:91:02:72:ff:76:f4:a4:2c:e2:f1:04:41:47:3a: 43:2b:01:b5:d8:34:de:6d:5e:77:18:74:c9:52:c5:79:80:17: 4d:b5:e7:a5:a0:14:48:8e:36:fd:8a:ca:b7:14:84:dc:1c:b7: c7:75:8a:2a:d1:a5:3c:4a:c5:6a:2a:99:db:37:6f:1d:24:7d: bb:2f:9f:07:38:c4:e8:5d:67:f0:1f:3c:7d:02:97:ec:d7:02: 87:f4:01:92:9a:dc:00:86:99:f4:a1:26:d7:fe:82:ab:7e:f4: 9b:71:ec:27:e2:ef:0f:53:f2:c0:d1:60:4a:47:ad:4e:a5:c5: b6:c8:38:35:71:76:34:1d:e4:0f:d9:9a:70:38:e6:79:ab:a8: 8c:8e:dc:cb -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEvxULNwshZnWW1i/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1ZTgxNGUtMGFiOC00MjU3LThjMzktNDA5MWNiM2Jl MjY5MB4XDTI1MTEyMjA5MDAwM1oXDTI1MTEyNTA5MDAwMFowLzEtMCsGA1UEAxMk OWU4MzM0NGMtYTJmYy00NzEyLWJhOWYtMTA0ZTVkMDcxZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiqYn2GR8OOx8JrePABn263KX3iYlY3S7v69 ukKiUUWGDq4ZIM3gDaWZYRC218DKseWFmwFLplQPuy5XLek3rVGzWBzTzOQYuHIk bu6bioR9Ov6iWI5SiLD2mMIOQ4A+JDHRf+kiekyymEj6q5UcEIMwT3c9iuPZNgG7 zz6jQXK1LcWk+er/mpJahsBOJl7PO5bxw6WtZ4E+IVrXtQJ1uunmmHayNt486Bdo UojVw3PgrTG8Ymcbrx1cRIwrDIcRk+TqCYWyCpRDj2KKj1zBoz29K9BhZLgMJjUu 90rzp15/sU2JgtJQhRIMmlGQ3Hso6GPXgvobCroRM0n6KqCMnwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFHFGAkcGidH7PLrbnfbGzBrsf/jPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVl ODE0ZS0wYWI4LTQyNTctOGMzOS00MDkxY2IzYmUyNjkvYmE1ZTgxNGUtMGFiOC00 MjU3LThjMzktNDA5MWNiM2JlMjY5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmE1ZTgxNGUtMGFiOC00MjU3LThj MzktNDA5MWNiM2JlMjY5L2JhNWU4MTRlLTBhYjgtNDI1Ny04YzM5LTQwOTFjYjNi ZTI2OS5jcmwwHwYDVR0jBBgwFoAUYjmNy9I6HAZK1G+WyMwCOpPDFSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYTVlODE0ZS0wYWI4LTQyNTctOGMzOS00MDkx Y2IzYmUyNjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJospP1fJDfUKJNLCgMTgp QVP9If/RlmoCtrKYOFZ/GCnNAd690jVZwAWRoqvNtAIVv9ofMR2/CxaH594nN0sl 056ADRaxrK5iZaYvJkYwEVIxjrSoKpINC+jpXv+iqjNHDdIaXrGkki867R0fYZxU kQJy/3b0pCzi8QRBRzpDKwG12DTebV53GHTJUsV5gBdNteeloBRIjjb9isq3FITc HLfHdYoq0aU8SsVqKpnbN28dJH27L58HOMToXWfwHzx9Apfs1wKH9AGSmtwAhpn0 oSbX/oKrfvSbcewn4u8PU/LA0WBKR61OpcW2yDg1cXY0HeQP2ZpwOOZ5q6iMjtzL -----END CERTIFICATE-----Generated at Sat Nov 22 21:21:10 2025 by rpki-client