This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: IuKm99/XYuJ/TTJonzxooeF6xoYE3/cM8W5wgV5OOws= Subject key identifier: D5:90:83:8C:BD:02:C7:AD:9B:9D:5E:D8:35:B5:39:64:8C:C4:8F:9A Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 6B3D4453BAABD12881F9A89CBC73A402D5B5D01D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0220 Signing time: Sat 06 Dec 2025 10:09:07 +0000 Manifest this update: Sat 06 Dec 2025 10:04:07 +0000 Manifest next update: Sun 07 Dec 2025 11:34:07 +0000 Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: wbT2cMIUgZSZjCxFHyML+L38CtjIbty4Km3c1rTOSLQ=) 2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3d:44:53:ba:ab:d1:28:81:f9:a8:9c:bc:73:a4:02:d5:b5:d0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Dec 6 10:04:07 2025 GMT Not After : Dec 7 11:34:07 2025 GMT Subject: CN=D590838CBD02C7AD9B9D5ED835B539648CC48F9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7b:93:70:48:86:5a:93:e7:12:92:61:2e:da: bf:13:99:87:6c:b5:86:64:32:cd:4d:de:4b:00:2b: c2:09:e4:f9:05:16:99:59:2c:dd:08:e3:82:4d:07: 2b:c9:c1:59:88:47:3f:aa:a5:a3:96:f1:b3:36:8e: 76:73:9e:a9:cb:60:97:a6:74:e6:0d:f5:32:ed:28: 18:57:a0:41:73:ea:cf:ff:a3:ec:9a:34:22:89:37: 89:41:e4:5f:98:ce:02:74:b0:6b:a2:2a:d3:59:64: 8e:30:4a:9d:46:37:63:84:e9:3b:8e:5e:48:90:f9: 7f:e1:da:3c:94:26:2b:98:d1:c7:06:85:c9:2d:35: 16:a2:c8:50:d5:ac:8a:15:20:38:7e:d8:49:7a:9e: f9:ae:34:54:2c:97:ab:e7:2f:d3:b1:83:a7:37:68: 2c:eb:cd:9e:86:b8:4b:8b:4b:eb:14:01:62:31:36: 07:9a:8b:28:d7:9d:5b:1a:f2:65:fd:fc:61:49:dd: d1:48:2c:5e:0d:d8:eb:5f:cb:3d:3f:a5:7e:f6:97: 5c:1a:d2:62:9e:64:9c:d8:3b:fa:7a:d9:1b:5e:25: bb:2c:0d:7a:b0:f0:53:2e:95:3d:8d:62:59:34:ae: 6d:64:fd:d1:bb:96:ad:af:d6:a9:db:a6:b9:7d:e3: b9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:90:83:8C:BD:02:C7:AD:9B:9D:5E:D8:35:B5:39:64:8C:C4:8F:9A X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3c:96:ea:0c:e4:5b:f7:7c:4b:58:af:43:3f:da:fa:d5:86: 44:bb:3b:c5:fc:db:94:e8:16:49:d1:3d:d7:e6:66:ab:1d:b3: a3:63:e3:aa:c7:d8:ce:fd:4d:9a:ac:a3:7c:aa:e1:e1:ef:c9: bd:b4:df:ad:ad:55:5b:1d:60:3e:0b:6d:d8:2a:b9:dc:52:46: e3:c4:c2:e3:2c:95:bd:c4:45:81:b7:e9:85:bc:f8:45:2a:66: 9a:04:93:5d:f4:89:28:3e:9e:5b:aa:4f:26:93:dc:a7:f8:4a: f7:1e:91:74:f9:a3:cc:be:15:6f:cd:c2:7a:3d:3f:b0:30:dd: 1f:0a:7e:b7:42:22:f9:6c:c8:03:2d:ec:51:12:d6:7a:72:1b: b3:51:12:c5:28:00:1f:87:70:9c:68:36:86:61:b9:14:80:38: b8:8a:4b:ac:92:20:d6:b5:52:48:76:1d:b3:3f:8c:fb:da:b0: c3:be:b2:e4:89:26:b4:50:66:d3:d8:04:7b:73:e0:b8:93:34: 09:6e:69:ab:36:48:53:bd:c8:ef:8f:16:8e:2c:4d:f9:6a:07: 2b:11:77:2e:f7:e2:96:31:85:81:cb:1c:59:17:fd:3e:ad:ee: d3:9c:07:2f:f7:5e:8f:5e:23:0f:e3:c1:39:df:a1:be:4f:f7: 9c:60:0f:b5 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUaz1EU7qr0SiB+aicvHOkAtW10B0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTEyMDYxMDA0MDdaFw0yNTEyMDcxMTM0MDdaMDMxMTAvBgNV BAMTKEQ1OTA4MzhDQkQwMkM3QUQ5QjlENUVEODM1QjUzOTY0OENDNDhGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4e5NwSIZak+cSkmEu2r8TmYds tYZkMs1N3ksAK8IJ5PkFFplZLN0I44JNByvJwVmIRz+qpaOW8bM2jnZznqnLYJem dOYN9TLtKBhXoEFz6s//o+yaNCKJN4lB5F+YzgJ0sGuiKtNZZI4wSp1GN2OE6TuO XkiQ+X/h2jyUJiuY0ccGhcktNRaiyFDVrIoVIDh+2El6nvmuNFQsl6vnL9Oxg6c3 aCzrzZ6GuEuLS+sUAWIxNgeaiyjXnVsa8mX9/GFJ3dFILF4N2Otfyz0/pX72l1wa 0mKeZJzYO/p62RteJbssDXqw8FMulT2NYlk0rm1k/dG7lq2v1qnbprl947lPAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU1ZCDjL0Cx62bnV7YNbU5ZIzEj5owHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEATTyW6gzkW/d8S1ivQz/a+tWGRLs7xfzblOgWSdE91+Zmqx2zo2PjqsfY zv1NmqyjfKrh4e/JvbTfra1VWx1gPgtt2Cq53FJG48TC4yyVvcRFgbfphbz4RSpm mgSTXfSJKD6eW6pPJpPcp/hK9x6RdPmjzL4Vb83Cej0/sDDdHwp+t0Ii+WzIAy3s URLWenIbs1ESxSgAH4dwnGg2hmG5FIA4uIpLrJIg1rVSSHYdsz+M+9qww76y5Ikm tFBm09gEe3PguJM0CW5pqzZIU73I748WjixN+WoHKxF3LvfiljGFgcscWRf9Pq3u 05wHL/dej14jD+PBOd+hvk/3nGAPtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:36:33 2025 by rpki-client