This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
File: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft (raw, json)
Hash identifier: kG0wZbbvp/pEHlJPTC9r3hLThOS3r/EDZQB5KUQJ7h8=
Subject key identifier: 85:21:85:8C:47:A3:A5:35:AC:34:9B:21:ED:B4:3C:AB:83:3B:B2:25
Authority key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9
Certificate issuer: /CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
Certificate serial: 7310ADB436B787E8F3DE6266571B6ED69F610ECA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
Manifest number: 4B
Signing time: Sun 25 Jan 2026 04:06:48 +0000
Manifest this update: Sun 25 Jan 2026 04:01:48 +0000
Manifest next update: Mon 26 Jan 2026 05:16:48 +0000
Files and hashes: 1: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl (hash: K0DKLcTMy8RKZR0ER+vw0+BDaqIt7lfZvwgoWE2IoCc=)
2: 326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa (hash: Ehn6pGTxKobCbcqHXhYXu7JSWP4YzSgJi4eDlDBkLxc=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl
rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 21:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:10:ad:b4:36:b7:87:e8:f3:de:62:66:57:1b:6e:d6:9f:61:0e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9
Validity
Not Before: Jan 25 04:01:48 2026 GMT
Not After : Jan 26 05:16:48 2026 GMT
Subject: CN=8521858C47A3A535AC349B21EDB43CAB833BB225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:64:e0:10:c7:c2:70:ab:ca:7d:3b:31:a4:
75:eb:1c:6f:5a:fd:8d:43:6d:83:82:d5:17:28:73:
a8:08:00:f3:dc:7d:d6:a8:ec:19:03:79:bb:d9:d4:
33:9d:a8:ce:fa:95:79:ee:8c:86:d0:05:3c:e4:7b:
0d:43:89:3c:82:3b:ad:ce:45:7a:1b:2a:b2:bb:b7:
a3:6d:30:f5:11:b6:d3:e3:e2:eb:e5:f9:65:e0:c3:
bc:f6:4b:ac:92:6d:ad:0a:7c:b8:5f:03:9e:bc:60:
47:34:75:3e:78:63:76:61:98:84:86:f8:46:0c:1d:
65:9c:88:41:20:70:34:6c:0b:c8:fb:55:0e:a1:db:
ee:cf:5e:58:3a:37:e2:0c:7f:bc:52:18:1f:68:4c:
8d:4a:c3:2f:d8:cd:cd:52:da:ab:c1:2c:8e:27:50:
98:33:b4:e1:17:c5:60:16:a3:ab:ff:ad:1b:02:04:
58:7f:a4:4f:d9:46:77:29:73:ff:b2:03:2f:2c:16:
a0:69:19:52:a7:e3:bb:4c:0b:87:18:37:c5:2e:de:
1b:d4:2a:38:a5:58:0e:83:e2:4d:7b:54:c4:78:d5:
5c:00:1f:b8:56:eb:f6:cb:aa:92:26:1c:e8:ad:fd:
c0:d5:10:14:09:54:44:8e:a4:25:51:19:32:dc:cc:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:21:85:8C:47:A3:A5:35:AC:34:9B:21:ED:B4:3C:AB:83:3B:B2:25
X509v3 Authority Key Identifier:
keyid:ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:85:31:90:50:f6:2e:02:bb:a4:a0:63:72:4d:78:bd:df:e6:
72:47:20:07:61:9a:12:18:cf:df:70:a0:a7:43:fd:32:72:88:
c3:4f:fd:a5:d1:3b:cf:c0:3b:d3:54:a3:ce:44:69:fc:c1:5d:
48:84:a2:fc:aa:a1:ac:8f:a9:50:6b:35:d4:c7:ba:4b:eb:0c:
95:54:6b:75:e4:bb:bd:8a:b9:92:18:56:38:0f:da:a7:25:2c:
40:b4:13:33:74:b6:96:22:e0:80:0d:9a:b8:8e:56:f9:f7:1f:
ed:c2:36:91:8f:91:fb:46:37:85:10:14:84:47:50:e9:0f:6c:
85:4f:36:1b:89:f5:54:30:c8:38:d4:a8:47:87:b5:f9:36:e8:
cb:f9:22:bc:c8:b3:61:42:11:bd:49:02:7c:6e:c8:da:90:08:
3a:ce:52:d2:49:73:c5:ce:b6:b1:ed:28:90:bd:00:fc:b1:9d:
4f:78:69:02:04:b1:9e:eb:67:47:f7:bd:1b:54:40:df:0a:c5:
41:03:3c:48:ba:0a:1c:59:b5:a2:9b:92:8e:a7:63:bb:14:ce:
0f:0e:ad:79:08:72:cf:69:f6:a4:02:b8:76:e4:d5:a5:f4:83:
90:70:ee:51:6b:a7:f6:8f:9d:5f:2c:43:74:ec:4a:2c:e4:2d:
5e:24:6f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:33:29 2026 by rpki-client