This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft File: D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json) Hash identifier: 0+oM0Rei7kted0ZjUwoPNRHVUPE/Wff4ewWuXdsLnig= Subject key identifier: 41:0C:B2:27:FF:0B:AA:83:9E:D6:68:C8:D4:88:BE:B4:CD:2F:D2:9D Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A Certificate issuer: /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a Certificate serial: 3BCE3865F620D84C1477A04C95153AA619AD0FD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft Manifest number: 0312 Signing time: Sat 20 Dec 2025 04:08:49 +0000 Manifest this update: Sat 20 Dec 2025 04:03:49 +0000 Manifest next update: Sun 21 Dec 2025 05:41:49 +0000 Files and hashes: 1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: uLRTUYndlJfMm2IvZ9rr+PS2MFC6RGPnunfvmHHkKno=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ce:38:65:f6:20:d8:4c:14:77:a0:4c:95:15:3a:a6:19:ad:0f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a Validity Not Before: Dec 20 04:03:49 2025 GMT Not After : Dec 21 05:41:49 2025 GMT Subject: CN=410CB227FF0BAA839ED668C8D488BEB4CD2FD29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:85:57:00:11:5b:7a:8e:7f:5d:4f:72:6f:78: d5:6b:5b:86:d5:c9:53:98:3d:c2:4e:c3:18:b8:67: d5:0b:81:17:c4:86:6e:67:19:0c:24:86:e5:e5:c6: 9a:b1:66:81:24:49:76:2a:be:3b:5a:cc:b3:d9:e4: 5f:db:70:22:9f:63:ef:c1:53:7e:ca:7f:dc:c0:c2: f2:8b:4d:9d:1c:fe:b9:6b:f5:24:97:da:30:e1:f1: ec:b5:f9:a7:a2:79:8d:3b:86:23:a1:f2:f2:6b:3a: f6:3f:76:c6:be:82:61:88:cc:ca:10:42:f6:8a:90: 71:bd:52:e8:d5:fd:f4:7a:bb:1c:0e:38:cb:bb:ee: 99:d1:7b:c5:fd:c9:86:00:5e:0b:bc:e0:03:c5:39: 1e:5d:63:bd:7f:cd:aa:20:8e:93:ea:60:16:9f:4f: 1a:fc:73:58:05:e9:e2:42:59:ba:a7:2f:8d:2b:47: 61:94:73:83:c5:9a:c6:21:cc:3d:7f:9a:a3:be:ee: 81:71:2b:a2:74:1a:90:d4:57:05:86:cc:8e:5c:ac: 02:a2:95:9d:d9:5e:f1:97:3a:ce:64:a9:5c:62:5b: 3f:3a:37:1c:70:8d:d6:ca:f7:e2:2f:7c:1d:cd:2f: b8:8b:5b:c5:47:b8:f1:57:11:9a:63:6d:11:45:49: d4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:0C:B2:27:FF:0B:AA:83:9E:D6:68:C8:D4:88:BE:B4:CD:2F:D2:9D X509v3 Authority Key Identifier: keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:d4:bf:23:c8:5a:b6:77:34:0e:2d:48:9e:92:4a:79:74:37: 55:10:ed:d9:cf:34:12:8f:0c:38:0e:fc:28:e1:71:0c:26:b3: 4d:3a:94:37:d6:09:8a:5d:b0:21:46:c3:6d:c1:70:d1:ea:b9: 4c:06:d6:20:bd:f4:f8:a8:95:f2:98:7f:8a:08:13:88:6d:66: a9:3c:b5:ec:2e:55:20:46:f8:e0:1e:f5:22:48:04:14:d1:dd: 0d:2f:4a:ab:8e:8d:db:45:3f:be:81:5b:de:16:67:99:59:18: 2c:d0:8c:c4:53:2b:c3:f2:07:c7:d8:4a:c4:87:a3:fe:67:aa: 5a:e0:40:08:14:49:a4:49:33:0a:31:8e:db:a6:70:a2:9f:3f: 13:00:2d:c7:21:c7:1d:9a:bc:f0:50:6e:23:f1:cd:39:bf:11: f4:7a:f4:83:69:aa:d2:ef:fc:01:b8:b2:e4:ba:d0:0c:ce:3e: 95:51:2f:38:9d:53:08:8b:da:f9:b9:ac:50:ce:37:8f:9c:e7: 55:d8:6e:ca:17:c3:b7:75:d2:8d:cf:1f:91:97:cd:e0:93:ae: 55:b5:30:4a:cc:3d:c5:89:ab:2b:b0:f2:8d:d0:ca:71:80:78: fd:75:97:ae:89:dd:3a:c4:96:f7:f6:0b:43:e1:0f:d8:1c:b3: d5:a9:2a:5e -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUO844ZfYg2EwUd6BMlRU6phmtD9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJkZDA3ODYxMGFhZWM0N2I1NDAzZjI5N2Y5MjA4Yjdh NThmYjMzYTAeFw0yNTEyMjAwNDAzNDlaFw0yNTEyMjEwNTQxNDlaMDMxMTAvBgNV BAMTKDQxMENCMjI3RkYwQkFBODM5RUQ2NjhDOEQ0ODhCRUI0Q0QyRkQyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCChVcAEVt6jn9dT3JveNVrW4bV yVOYPcJOwxi4Z9ULgRfEhm5nGQwkhuXlxpqxZoEkSXYqvjtazLPZ5F/bcCKfY+/B U37Kf9zAwvKLTZ0c/rlr9SSX2jDh8ey1+aeieY07hiOh8vJrOvY/dsa+gmGIzMoQ QvaKkHG9UujV/fR6uxwOOMu77pnRe8X9yYYAXgu84APFOR5dY71/zaogjpPqYBaf Txr8c1gF6eJCWbqnL40rR2GUc4PFmsYhzD1/mqO+7oFxK6J0GpDUVwWGzI5crAKi lZ3ZXvGXOs5kqVxiWz86NxxwjdbK9+IvfB3NL7iLW8VHuPFXEZpjbRFFSdR9AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUQQyyJ/8LqoOe1mjI1Ii+tM0v0p0wHwYDVR0j BBgwFoAU0t0HhhCq7Ee1QD8pf5IIt6WPszowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIvMS9EMkREMDc4NjEw QUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMHQwSGhoQ3E3RWUxUUQ4cGY1SUl0NldQc3pvLmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIv MS9EMkREMDc4NjEwQUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAiNS/I8hatnc0Di1InpJKeXQ3VRDt2c80Eo8MOA78KOFxDCazTTqUN9YJ il2wIUbDbcFw0eq5TAbWIL30+KiV8ph/iggTiG1mqTy17C5VIEb44B71IkgEFNHd DS9Kq46N20U/voFb3hZnmVkYLNCMxFMrw/IHx9hKxIej/meqWuBACBRJpEkzCjGO 26Zwop8/EwAtxyHHHZq88FBuI/HNOb8R9Hr0g2mq0u/8Abiy5LrQDM4+lVEvOJ1T CIva+bmsUM43j5znVdhuyhfDt3XSjc8fkZfN4JOuVbUwSsw9xYmrK7DyjdDKcYB4 /XWXrondOsSW9/YLQ+EP2Byz1akqXg== -----END CERTIFICATE-----Generated at Sat Dec 20 08:19:17 2025 by rpki-client