This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
File: E9EB50E364277CEB063DCA8C371364FE1CC98844.mft (raw, json)
Hash identifier: JDGj94UHQEjE7Flc98IipA6zdcWSDU+pAJ8a2P8vci4=
Subject key identifier: 07:89:AB:2C:EE:37:8C:2C:3E:46:9E:81:B7:82:CA:C1:19:40:43:B2
Authority key identifier: E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
Certificate issuer: /CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Certificate serial: 22D9B13A5FB7D7614511174D77244BFA6D099895
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
Manifest number: D2
Signing time: Sat 06 Dec 2025 05:57:50 +0000
Manifest this update: Sat 06 Dec 2025 05:52:50 +0000
Manifest next update: Sun 07 Dec 2025 06:59:50 +0000
Files and hashes: 1: 326130613a363034343a613834303a3a2f34362d3436203d3e203533333433.roa (hash: K5I4cRIERA7dRNGahq9lka9oTRhszkIRCdPhlO48i7g=)
2: 326130613a363034343a613830303a3a2f34362d3436203d3e203533333433.roa (hash: cKqMdpDpNZeTs1zZYtMh7ZzpU6gFPVvUC9QJ/l/EB4c=)
3: E9EB50E364277CEB063DCA8C371364FE1CC98844.crl (hash: YcOpsYOb05mGoww1X+I5m8ieex+oOkwc/QYUCmTmoqU=)
4: 326130613a363034343a613830303a3a2f34332d3433203d3e203533333433.roa (hash: 1AS9kktYm6E1YYts/FKhRmEDrmEx5mjh3ZBgDRukxtY=)
5: 326130613a363034343a613838303a3a2f34342d3434203d3e203533333433.roa (hash: G0zoH/bSXVa8bPsjD+KTz7+M5ISsfMbmvIPi6yzb9tA=)
6: 326130613a363034343a613838303a3a2f34332d3433203d3e203533333433.roa (hash: aVrMh8neYSAJZJNMsJHXuG1FOsph/b6J1zm/1t3TlUc=)
7: 326130613a363034343a613834303a3a2f34332d3433203d3e203533333433.roa (hash: YwN5VXKRuA2ytsXsaIhEWVD7EcVizXTIn2zeRxkXdwE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d9:b1:3a:5f:b7:d7:61:45:11:17:4d:77:24:4b:fa:6d:09:98:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9EB50E364277CEB063DCA8C371364FE1CC98844
Validity
Not Before: Dec 6 05:52:50 2025 GMT
Not After : Dec 7 06:59:50 2025 GMT
Subject: CN=0789AB2CEE378C2C3E469E81B782CAC1194043B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:c3:6c:bc:4d:92:8e:e5:2e:65:f2:24:fb:
5d:d9:40:82:b2:d1:30:27:bd:95:86:9e:d0:6d:b1:
ed:c7:78:61:34:32:87:39:2f:1b:1f:1a:be:e6:8f:
23:b1:80:c7:58:df:70:c4:60:de:59:ef:6e:c8:bd:
fa:34:5b:7f:e7:87:a9:11:97:58:a9:66:53:fa:76:
f4:df:be:52:33:db:5e:b2:f5:48:9f:8b:05:58:05:
3f:68:e8:fc:02:e2:64:7f:87:4c:4f:ff:5f:2f:65:
cb:79:ee:fb:71:9a:a8:b8:58:df:0f:4e:8d:81:19:
18:9a:a2:e5:4c:25:b5:d4:9a:4e:2a:b1:ad:1e:4c:
4e:cf:2f:43:19:2c:5f:b2:e9:47:53:f6:8d:05:49:
34:68:4b:e8:23:0d:78:88:8b:16:a4:f6:a8:33:48:
91:4b:1e:69:41:06:4a:be:c0:da:e8:9d:df:a1:61:
53:1b:3b:81:38:12:7c:00:fe:2b:6b:e1:f9:80:93:
db:40:37:9d:93:a6:e7:57:a8:cb:7d:ff:f5:0f:91:
1b:7b:0e:cc:0c:23:ca:a2:ff:aa:ac:b9:3c:98:ae:
6b:81:af:1d:8c:b5:a2:9c:71:cc:98:cd:59:e9:fb:
fd:68:ea:cb:cd:11:00:b1:04:fb:b6:a3:6d:3d:13:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:AB:2C:EE:37:8C:2C:3E:46:9E:81:B7:82:CA:C1:19:40:43:B2
X509v3 Authority Key Identifier:
keyid:E9:EB:50:E3:64:27:7C:EB:06:3D:CA:8C:37:13:64:FE:1C:C9:88:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/E9EB50E364277CEB063DCA8C371364FE1CC98844.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d8401943d5836ff1b29/4/E9EB50E364277CEB063DCA8C371364FE1CC98844.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:28:6a:de:b2:97:22:5d:c8:59:46:75:49:02:69:15:c8:fb:
53:cd:bb:6a:da:ec:fe:a3:e3:b8:90:48:b9:e0:b7:a3:b0:cc:
ad:ac:7a:2d:37:fd:be:ba:a8:8e:05:8b:8c:08:ee:3c:32:8f:
c4:63:ae:11:44:f8:0d:4d:95:ae:a0:76:fe:d8:2b:9a:71:8d:
e3:6b:b3:81:5d:06:77:e8:40:ca:1b:56:95:ba:c4:11:53:5f:
06:b9:bd:b3:82:ac:ea:d8:9d:36:43:d4:e7:e5:f2:77:98:23:
83:6e:92:20:ea:af:c7:74:40:df:fe:27:f9:26:fe:26:ad:0d:
93:3b:48:c0:80:d4:d7:8d:77:72:23:81:bc:67:4c:f2:c0:76:
7b:41:7c:b6:83:b1:9c:ea:3c:26:53:e4:cb:a8:f0:3e:a1:b0:
cf:d0:6b:f5:21:4a:0c:c0:ac:0a:33:1c:b4:15:f6:c9:8f:6e:
ec:c0:f6:d9:1f:75:28:06:20:59:ca:92:65:11:fd:21:9d:aa:
33:25:4f:c2:0d:ed:35:a9:77:a8:e1:fb:3b:aa:77:ad:26:28:
a5:9e:90:b3:b7:4c:a1:fe:58:21:62:52:e5:5e:6f:f8:e3:83:
a0:fe:ef:b4:63:f1:07:32:e4:75:7f:95:ff:e2:41:b6:7f:0c:
a6:0f:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:58:25 2025 by rpki-client