This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft File: ba2a1fed-6973-4607-a297-20f3f241a739.mft (raw, json) Hash identifier: l6mNNfVWYSnRTVYlKcm72CMKms2WBVaxtwEiJN4YCo0= Subject key identifier: D6:59:9E:5D:BC:77:76:E6:F7:CE:18:93:77:DD:A8:FF:19:61:89:34 Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 Certificate issuer: /CN=ba2a1fed-6973-4607-a297-20f3f241a739 Certificate serial: 010D0C9F4328584C1796D086F9BADA6806C84B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft Manifest number: 010D0C9F43285840BF4A16296741E0B61796E62D Signing time: Sat 06 Dec 2025 02:02:03 +0000 Manifest this update: Sat 06 Dec 2025 02:02:03 +0000 Manifest next update: Mon 08 Dec 2025 18:00:00 +0000 Files and hashes: 1: 9bba60d3-0bdd-3615-9dee-42f9533f7786.roa (hash: nnlWrilp75WX3EH6N1ZcVkc6oIKrv2GjhevAAKy0rOc=) 2: ba2a1fed-6973-4607-a297-20f3f241a739.crl (hash: rmwdeua+8PptfOa1fA7LwPABlVlzxcHieCIeMqdhCB0=) 3: c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa (hash: uZIr9Cfr02GFibI8SoPxXhzbFhzz7Q3gRTqk+RUok1w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:17:96:d0:86:f9:ba:da:68:06:c8:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739 Validity Not Before: Dec 6 02:02:03 2025 GMT Not After : Dec 8 18:00:00 2025 GMT Subject: CN=1f7e71ac-b9f5-44ee-bd13-905790bb2f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:81:71:d4:30:c0:40:89:80:db:85:20:eb:7a: e7:c7:42:05:a5:cb:16:a7:92:6d:a3:12:76:a7:19: 72:5c:df:d7:73:77:b7:55:7c:e4:12:da:3d:1d:a8: 1c:e7:53:3b:89:0c:e8:f9:89:52:30:40:c9:fc:97: ef:7d:b4:10:06:26:3e:7e:c1:aa:62:65:35:bf:3b: 31:d0:5f:61:d4:08:92:21:c7:2f:e4:02:87:b0:28: 08:ab:20:ea:26:2c:55:1f:29:67:a9:4b:ae:db:0c: 98:a3:24:72:7e:4b:cc:fc:d3:b5:b4:d6:58:57:5a: 84:af:75:4e:5a:32:6a:7d:89:f9:43:77:a2:fa:91: a1:8e:31:b7:33:ae:a7:6f:0d:4a:43:6e:0a:07:74: 88:b5:ff:ca:32:c3:a5:05:7c:20:1c:c1:dc:78:2c: 5f:82:28:15:03:21:86:5c:c3:95:b1:76:0b:79:f6: 29:b6:cc:da:f5:24:83:46:d1:37:29:d8:3d:d6:e8: eb:0a:54:5d:17:29:d8:c7:7f:0e:c4:20:0c:ac:e2: b8:1f:77:e3:6e:d5:14:c5:63:23:1f:b8:7f:64:0c: 73:3a:54:50:4c:2c:bd:b1:bb:d2:35:05:78:f9:f0: e3:89:bb:5d:09:43:24:1e:ca:ca:7c:84:81:db:ef: 20:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:59:9E:5D:BC:77:76:E6:F7:CE:18:93:77:DD:A8:FF:19:61:89:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl X509v3 Authority Key Identifier: keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:7e:f4:ab:6f:e8:a4:44:de:d7:1a:3c:9f:86:e9:80:6d:a7: ad:8e:67:a1:30:85:18:98:0a:68:f7:ac:78:d5:a7:e0:2e:33: c4:da:72:34:ad:9e:f5:9d:57:05:59:55:c6:8b:84:cf:f9:99: e9:b0:08:53:70:14:97:d5:4b:45:48:3a:b2:c2:56:2c:9f:40: d0:ce:65:80:08:dd:3b:77:ce:c0:25:ed:a9:76:2b:27:cd:9c: 99:79:fc:13:8d:8f:b3:86:3b:86:38:bd:1b:09:a4:9d:d2:50: c2:a0:ac:0f:77:48:35:fa:dc:fb:93:a7:5a:0d:f3:19:9c:49: c8:07:23:3f:29:c0:f1:b1:9d:a5:29:8a:21:9a:31:9b:43:3f: 6e:6b:45:02:2e:8e:b0:6b:0e:63:ea:dd:6e:b5:01:97:8c:64: de:65:21:88:4c:e5:71:06:ce:5c:2f:a5:b7:8e:b2:f2:e1:c9: a2:ad:ca:bc:3f:46:8a:51:d4:34:0d:6c:89:64:d3:0d:d2:02: 09:69:d4:4f:5c:72:66:79:3d:40:1c:de:00:c7:5d:21:99:9f: 8f:52:bf:38:2d:04:ad:b9:83:1b:fb:4e:1e:b1:52:58:84:c4: 01:83:d4:34:56:28:1b:cd:84:f3:f6:0c:68:7c:fd:cd:d1:e1: 8a:57:32:e0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEwXltCG+braaAbIS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyYTFmZWQtNjk3My00NjA3LWEyOTctMjBmM2YyNDFh NzM5MB4XDTI1MTIwNjAyMDIwM1oXDTI1MTIwODE4MDAwMFowLzEtMCsGA1UEAxMk MWY3ZTcxYWMtYjlmNS00NGVlLWJkMTMtOTA1NzkwYmIyZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIFx1DDAQImA24Ug63rnx0IFpcsWp5JtoxJ2 pxlyXN/Xc3e3VXzkEto9Hagc51M7iQzo+YlSMEDJ/JfvfbQQBiY+fsGqYmU1vzsx 0F9h1AiSIccv5AKHsCgIqyDqJixVHylnqUuu2wyYoyRyfkvM/NO1tNZYV1qEr3VO WjJqfYn5Q3ei+pGhjjG3M66nbw1KQ24KB3SItf/KMsOlBXwgHMHceCxfgigVAyGG XMOVsXYLefYptsza9SSDRtE3Kdg91ujrClRdFynYx38OxCAMrOK4H3fjbtUUxWMj H7h/ZAxzOlRQTCy9sbvSNQV4+fDjibtdCUMkHsrKfISB2+8gwQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFNZZnl28d3bm984Yk3fdqP8ZYYk0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTJh MWZlZC02OTczLTQ2MDctYTI5Ny0yMGYzZjI0MWE3MzkvYmEyYTFmZWQtNjk3My00 NjA3LWEyOTctMjBmM2YyNDFhNzM5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmEyYTFmZWQtNjk3My00NjA3LWEy OTctMjBmM2YyNDFhNzM5L2JhMmExZmVkLTY5NzMtNDYwNy1hMjk3LTIwZjNmMjQx YTczOS5jcmwwHwYDVR0jBBgwFoAUlrqf3KvN2czFyO1vDzA9ccCNIbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTJhMWZlZC02OTczLTQ2MDctYTI5Ny0yMGYz ZjI0MWE3MzkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmfvSrb+ikRN7XGjyfhumA baetjmehMIUYmApo96x41afgLjPE2nI0rZ71nVcFWVXGi4TP+ZnpsAhTcBSX1UtF SDqywlYsn0DQzmWACN07d87AJe2pdisnzZyZefwTjY+zhjuGOL0bCaSd0lDCoKwP d0g1+tz7k6daDfMZnEnIByM/KcDxsZ2lKYohmjGbQz9ua0UCLo6waw5j6t1utQGX jGTeZSGITOVxBs5cL6W3jrLy4cmircq8P0aKUdQ0DWyJZNMN0gIJadRPXHJmeT1A HN4Ax10hmZ+PUr84LQStuYMb+04esVJYhMQBg9Q0VigbzYTz9gxofP3N0eGKVzLg -----END CERTIFICATE-----Generated at Sat Dec 6 18:30:14 2025 by rpki-client