This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: EcsEeg+lc6+Z4lZK5hfWWBDCmOM9zmYWbrWwt5tx2z4= Subject key identifier: 9F:2A:2E:69:59:EB:E5:57:A9:4C:51:42:40:0F:AD:B0:D3:58:4F:30 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 2E3E05F94A81DCB4A0C7335670B5F7016DAFCEB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 022A Signing time: Sat 13 Dec 2025 18:44:18 +0000 Manifest this update: Sat 13 Dec 2025 18:39:18 +0000 Manifest next update: Sun 14 Dec 2025 21:30:18 +0000 Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: AcjzM6f1mDRBBxnvfLJEKP+lTbDDqrLW7KdPoDhsL+0=) 2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3e:05:f9:4a:81:dc:b4:a0:c7:33:56:70:b5:f7:01:6d:af:ce:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Dec 13 18:39:18 2025 GMT Not After : Dec 14 21:30:18 2025 GMT Subject: CN=9F2A2E6959EBE557A94C5142400FADB0D3584F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ff:e1:22:31:b6:4a:c3:e2:20:7a:d8:ca:83: 52:b5:05:97:42:36:6d:c1:4c:04:e7:d3:c8:60:f8: 51:a4:ea:ed:c7:07:84:d6:23:05:c8:0f:91:47:18: dc:93:34:32:cb:fb:e1:65:91:f1:49:af:62:ba:5c: 24:37:2c:e4:45:d2:d5:3e:5e:21:7c:1c:6a:be:dc: b3:dc:2b:23:4c:0e:92:bb:18:6a:f5:81:a6:ce:3a: 34:25:69:7d:9d:a1:bc:c8:ff:b9:5d:74:44:a1:66: e9:0d:1c:f6:82:f4:a1:ba:ec:8f:61:36:35:dc:a7: bf:18:38:aa:c1:b0:12:d1:f6:6e:2d:18:72:53:15: 3d:9b:8a:4b:f5:a3:a8:84:77:6d:91:86:48:54:9d: c3:6b:91:ef:45:ac:2d:00:a8:8d:77:56:ce:7e:d9: 9f:b0:1d:9a:7d:78:55:e3:ca:3a:87:6a:36:d0:07: 81:aa:b3:e2:fd:44:6d:02:65:6d:51:d8:23:ac:3b: db:ed:75:e5:3f:00:6d:fc:81:f1:d5:c3:b6:27:cb: 4c:ae:13:63:a5:54:b9:83:73:73:1a:53:a1:9e:ba: 4f:a7:e5:4d:ef:d6:b8:25:f6:c7:e1:2d:f1:34:c9: b3:56:90:c7:a8:0a:bf:be:a6:e4:59:d4:dc:ed:1d: b7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:2A:2E:69:59:EB:E5:57:A9:4C:51:42:40:0F:AD:B0:D3:58:4F:30 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c2:ff:66:7b:47:e0:99:6f:ec:7c:0b:fb:22:3f:50:8f:0b: bc:fd:0b:c5:f5:f5:ec:c4:27:79:86:e6:cf:b3:3b:83:87:15: a0:9e:ff:ce:f7:09:d2:5d:d7:b0:c6:76:92:35:6e:24:fc:d5: 66:97:92:bb:92:1b:9a:e4:07:ca:b8:a5:a9:38:bc:4f:f5:fb: e6:d3:13:13:79:f1:23:61:37:e2:ca:18:b0:42:9f:b1:86:51: 02:db:9e:b5:21:0f:b2:59:b4:bf:8f:bf:49:09:de:e0:88:79: 00:fa:41:58:74:e9:b5:86:30:b8:44:c9:f5:a8:2d:21:a6:cf: dd:29:21:d6:be:c8:e1:a7:b7:96:83:ef:e1:1f:6c:0c:cb:68: ab:69:72:8e:22:df:e2:7c:55:6e:0e:ae:d5:94:36:03:c8:70: b2:ea:72:cd:95:ca:41:28:56:29:21:2d:55:39:fe:a6:ae:7e: 79:c3:75:c1:ef:31:0e:e0:84:7a:2e:9b:b3:c1:6e:a3:97:62: d4:07:7c:5c:a2:0c:d0:7c:20:5f:db:9d:cd:90:1c:16:4e:41: 7e:8f:0b:9d:f4:c9:24:45:2e:7d:a7:dd:08:ed:db:d7:71:fc: e2:51:45:a5:de:b0:16:1c:43:70:90:ee:78:3e:c5:41:3a:a3: 02:7a:cc:65 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIULj4F+UqB3LSgxzNWcLX3AW2vzrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTEyMTMxODM5MThaFw0yNTEyMTQyMTMwMThaMDMxMTAvBgNV BAMTKDlGMkEyRTY5NTlFQkU1NTdBOTRDNTE0MjQwMEZBREIwRDM1ODRGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV/+EiMbZKw+IgetjKg1K1BZdC Nm3BTATn08hg+FGk6u3HB4TWIwXID5FHGNyTNDLL++FlkfFJr2K6XCQ3LORF0tU+ XiF8HGq+3LPcKyNMDpK7GGr1gabOOjQlaX2dobzI/7lddEShZukNHPaC9KG67I9h NjXcp78YOKrBsBLR9m4tGHJTFT2bikv1o6iEd22RhkhUncNrke9FrC0AqI13Vs5+ 2Z+wHZp9eFXjyjqHajbQB4Gqs+L9RG0CZW1R2COsO9vtdeU/AG38gfHVw7Yny0yu E2OlVLmDc3MaU6Geuk+n5U3v1rgl9sfhLfE0ybNWkMeoCr++puRZ1NztHbf7AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUnyouaVnr5VepTFFCQA+tsNNYTzAwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAW8L/ZntH4Jlv7HwL+yI/UI8LvP0LxfX17MQneYbmz7M7g4cVoJ7/zvcJ 0l3XsMZ2kjVuJPzVZpeSu5IbmuQHyrilqTi8T/X75tMTE3nxI2E34soYsEKfsYZR AtuetSEPslm0v4+/SQne4Ih5APpBWHTptYYwuETJ9agtIabP3Skh1r7I4ae3loPv 4R9sDMtoq2lyjiLf4nxVbg6u1ZQ2A8hwsupyzZXKQShWKSEtVTn+pq5+ecN1we8x DuCEei6bs8Fuo5di1Ad8XKIM0HwgX9udzZAcFk5Bfo8LnfTJJEUufafdCO3b13H8 4lFFpd6wFhxDcJDueD7FQTqjAnrMZQ== -----END CERTIFICATE-----Generated at Sat Dec 13 22:53:35 2025 by rpki-client