This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft File: D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json) Hash identifier: hI8O6WxKSzLVq9NXVAeIViT1n53oXaAFIcRN8CZQzhk= Subject key identifier: 10:A4:D2:9C:5D:D9:E0:14:9E:0F:94:64:57:35:E3:95:DB:80:FD:8C Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A Certificate issuer: /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a Certificate serial: 7A1EFC91A8096C3EE18CBE6386933AA6D51FDF2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft Manifest number: 031A Signing time: Fri 26 Dec 2025 02:23:23 +0000 Manifest this update: Fri 26 Dec 2025 02:18:23 +0000 Manifest next update: Sat 27 Dec 2025 05:22:23 +0000 Files and hashes: 1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: OYJv8Peai9ze9batfvQQJnN/TOaYKwk22iXPNzLMsKg=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:1e:fc:91:a8:09:6c:3e:e1:8c:be:63:86:93:3a:a6:d5:1f:df:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a Validity Not Before: Dec 26 02:18:23 2025 GMT Not After : Dec 27 05:22:23 2025 GMT Subject: CN=10A4D29C5DD9E0149E0F94645735E395DB80FD8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:79:e6:4b:e5:c4:20:7c:dd:c0:39:2e:9b:fc: 2a:5d:9d:97:39:dd:5d:55:2d:7a:b8:75:c0:81:36: 0c:3d:41:72:d4:fd:df:b0:a7:f7:fc:b7:68:5e:a9: 8b:2f:b4:4c:b1:bf:1a:87:56:b3:b1:8f:d0:e7:59: e5:7c:6c:7b:3c:2b:a7:74:12:7a:c0:e8:07:c1:1d: 56:f2:ba:71:02:3f:e6:9d:58:21:cb:ca:e6:c6:9f: b2:e3:ea:f0:fe:ee:cd:39:4a:8a:53:eb:16:c0:70: 63:61:a7:cd:d6:a9:c7:4b:2d:6d:63:49:95:8f:d4: ef:81:1b:02:9d:87:75:e1:54:db:13:a9:d3:1b:55: 48:94:e8:65:2c:39:17:18:45:60:51:ec:11:5b:bb: 4c:89:a5:87:9e:c1:57:83:03:d1:dd:c6:14:ee:51: 15:f7:c2:7d:79:0a:6a:9a:3f:69:a3:ba:7b:a3:96: a5:33:7c:f6:12:74:38:cf:e0:a5:90:0c:0e:44:c7: f7:1e:5f:4d:79:11:7c:64:e7:0c:7c:99:01:89:68: 32:f8:6c:c1:f8:6d:6c:ba:3e:6d:12:c9:15:97:1f: e7:59:c1:1a:e8:84:04:b8:c6:e8:1d:07:65:a4:0e: c1:fe:c1:cb:ad:c0:1b:bb:37:f3:fa:ef:da:30:b0: 99:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:A4:D2:9C:5D:D9:E0:14:9E:0F:94:64:57:35:E3:95:DB:80:FD:8C X509v3 Authority Key Identifier: keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:97:7b:d5:44:31:0e:d2:45:77:0d:84:31:4e:44:26:2f:3e: 9c:68:84:70:cc:d0:49:5e:44:78:42:00:4a:1a:98:28:84:39: d9:b1:a6:1d:02:f2:60:a1:67:73:54:ae:e9:3b:c9:c4:8c:be: 1a:2e:bd:bd:7f:3c:3b:0c:47:91:03:ab:50:a4:bd:03:91:c0: 69:4a:54:b1:ab:49:e6:bd:f4:7b:75:92:2b:2d:fa:f5:91:70: 44:3d:55:24:16:2d:3c:f8:ba:7f:9c:1a:3c:3e:40:b3:18:a3: f3:dd:74:77:25:4b:a8:33:43:2b:13:58:de:71:be:99:c6:08: ad:f2:5e:d9:86:49:25:05:bd:88:de:61:18:35:d9:25:87:f6: 14:3d:93:e0:59:97:f8:6d:19:8d:f9:13:25:40:91:77:39:21: ae:5a:96:61:18:f3:32:e3:11:ac:92:25:8d:ae:e3:a0:fe:b0: b9:43:6a:3b:ba:11:70:4b:fd:6d:13:b9:4e:5d:e9:54:44:99: 83:b4:91:1c:39:45:81:16:0e:9a:ff:03:cd:72:e6:6c:a0:fc: 36:0b:7d:1b:a9:a5:04:bd:65:5f:7a:43:26:ac:3f:ea:2e:31: e4:0c:c6:10:ab:78:f4:3a:a1:64:17:9f:2b:80:2f:38:d9:aa: 0e:98:6a:bd -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUeh78kagJbD7hjL5jhpM6ptUf3y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJkZDA3ODYxMGFhZWM0N2I1NDAzZjI5N2Y5MjA4Yjdh NThmYjMzYTAeFw0yNTEyMjYwMjE4MjNaFw0yNTEyMjcwNTIyMjNaMDMxMTAvBgNV BAMTKDEwQTREMjlDNUREOUUwMTQ5RTBGOTQ2NDU3MzVFMzk1REI4MEZEOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeeZL5cQgfN3AOS6b/CpdnZc5 3V1VLXq4dcCBNgw9QXLU/d+wp/f8t2heqYsvtEyxvxqHVrOxj9DnWeV8bHs8K6d0 EnrA6AfBHVbyunECP+adWCHLyubGn7Lj6vD+7s05SopT6xbAcGNhp83WqcdLLW1j SZWP1O+BGwKdh3XhVNsTqdMbVUiU6GUsORcYRWBR7BFbu0yJpYeewVeDA9HdxhTu URX3wn15CmqaP2mjunujlqUzfPYSdDjP4KWQDA5Ex/ceX015EXxk5wx8mQGJaDL4 bMH4bWy6Pm0SyRWXH+dZwRrohAS4xugdB2WkDsH+wcutwBu7N/P679owsJnrAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUEKTSnF3Z4BSeD5RkVzXjlduA/YwwHwYDVR0j BBgwFoAU0t0HhhCq7Ee1QD8pf5IIt6WPszowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIvMS9EMkREMDc4NjEw QUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMHQwSGhoQ3E3RWUxUUQ4cGY1SUl0NldQc3pvLmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIv MS9EMkREMDc4NjEwQUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAG5d71UQxDtJFdw2EMU5EJi8+nGiEcMzQSV5EeEIAShqYKIQ52bGmHQLy YKFnc1Su6TvJxIy+Gi69vX88OwxHkQOrUKS9A5HAaUpUsatJ5r30e3WSKy369ZFw RD1VJBYtPPi6f5waPD5Asxij8910dyVLqDNDKxNY3nG+mcYIrfJe2YZJJQW9iN5h GDXZJYf2FD2T4FmX+G0ZjfkTJUCRdzkhrlqWYRjzMuMRrJIlja7joP6wuUNqO7oR cEv9bRO5Tl3pVESZg7SRHDlFgRYOmv8DzXLmbKD8Ngt9G6mlBL1lX3pDJqw/6i4x 5AzGEKt49DqhZBefK4AvONmqDphqvQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:59:00 2025 by rpki-client