This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: Ri1REMzWetHzx58qBbGQ/RCqWO2GqGPQu8AM0M5WoxQ= Subject key identifier: 50:8E:22:C4:D3:55:63:9F:9F:48:F3:E1:C1:78:3F:F2:EF:D2:C2:A7 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 366E934D2B755DEF0D517FFC9C6BD9AD1AA150E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 020D Signing time: Sat 22 Nov 2025 05:43:38 +0000 Manifest this update: Sat 22 Nov 2025 05:38:38 +0000 Manifest next update: Sun 23 Nov 2025 06:11:38 +0000 Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 5vDkW31veHJC5CLSC9ilMNjrdS4dF21zaVKlFFNMA9s=) 2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 03:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:6e:93:4d:2b:75:5d:ef:0d:51:7f:fc:9c:6b:d9:ad:1a:a1:50:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 22 05:38:38 2025 GMT Not After : Nov 23 06:11:38 2025 GMT Subject: CN=508E22C4D355639F9F48F3E1C1783FF2EFD2C2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:56:1e:a4:84:c7:36:11:eb:4c:65:54:57:8c: db:20:b2:d7:84:c0:46:f2:83:d1:d2:3f:b1:36:29: be:21:d8:32:33:d9:fa:77:e2:ef:ce:70:5d:89:85: 75:1c:90:f7:ba:f5:5f:c2:ce:ae:4c:a0:d6:05:7e: bf:1e:5f:ef:e0:f2:0b:51:8c:b2:32:fe:90:c4:08: 43:ab:08:0b:9a:be:3d:c2:55:68:10:65:52:e8:52: 70:4b:6a:9d:ef:04:c2:9a:55:f1:6f:dc:83:f0:67: 1c:e5:85:af:7a:d9:34:1e:69:90:36:ef:b3:4e:19: 93:5b:23:87:38:29:c5:8b:2d:7c:41:13:0e:81:3e: 9f:ca:77:2f:5d:d1:80:f2:4b:ec:71:ff:da:02:fc: ec:04:ff:11:b9:63:e9:3f:d5:2f:3d:e1:42:04:9e: 04:16:12:5b:b9:cc:12:0f:7c:60:dc:26:40:87:18: 2d:cc:5e:14:00:ba:46:3f:1c:9b:f1:d3:e9:85:df: b1:f3:f9:d5:24:77:1a:57:10:59:35:3e:e5:7b:53: 6f:31:e4:08:06:f7:c9:df:32:37:5f:79:71:83:5c: 36:2b:91:5b:96:cb:d2:a6:87:39:64:f5:66:eb:9d: b8:7c:71:01:78:08:b3:cd:be:74:fc:5f:df:94:32: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8E:22:C4:D3:55:63:9F:9F:48:F3:E1:C1:78:3F:F2:EF:D2:C2:A7 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:8a:0b:a4:25:c4:80:d2:36:24:75:f5:7c:b1:0b:af:ad:85: 58:9c:4a:78:3d:03:45:86:18:41:a5:50:54:e4:eb:0d:c9:3f: 05:bf:a6:9d:aa:79:06:4b:89:28:23:35:eb:fa:c7:1a:a8:c0: b7:46:89:96:0d:48:72:f7:25:6d:cb:10:6d:52:d3:46:56:47: 0e:16:e3:18:2d:b9:74:ae:f6:b0:17:9e:80:ef:d4:a6:1b:84: da:05:ef:06:6c:66:7d:e1:94:8b:cb:c4:34:f3:72:0e:33:13: aa:0e:ac:8e:2c:e2:8b:62:e0:2c:d4:d7:82:01:26:e2:05:34: be:fe:ad:bf:e8:e0:f6:42:5b:d8:1f:00:ca:00:9a:f5:7e:97: cf:2e:94:a2:41:24:47:7e:05:b3:b1:70:75:bd:2c:d7:cd:aa: ed:e9:d4:70:6e:37:dd:ad:b2:25:0f:84:c5:46:5e:db:66:c4: b4:ab:42:4f:fb:65:51:8f:c1:10:f4:c2:7f:3c:d7:84:56:b5: f7:29:67:57:fe:3c:7a:cb:cf:5c:16:36:78:a3:34:a2:02:90: cc:4c:e1:81:af:7f:6b:bc:34:1d:5f:8a:3d:20:3a:3a:94:99: d0:4c:4e:b8:2c:5e:5e:31:5a:76:bb:29:18:c8:97:a0:b4:56: b0:8a:6e:9f -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUNm6TTSt1Xe8NUX/8nGvZrRqhUOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMjIwNTM4MzhaFw0yNTExMjMwNjExMzhaMDMxMTAvBgNV BAMTKDUwOEUyMkM0RDM1NTYzOUY5RjQ4RjNFMUMxNzgzRkYyRUZEMkMyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Vh6khMc2EetMZVRXjNsgsteE wEbyg9HSP7E2Kb4h2DIz2fp34u/OcF2JhXUckPe69V/Czq5MoNYFfr8eX+/g8gtR jLIy/pDECEOrCAuavj3CVWgQZVLoUnBLap3vBMKaVfFv3IPwZxzlha962TQeaZA2 77NOGZNbI4c4KcWLLXxBEw6BPp/Kdy9d0YDyS+xx/9oC/OwE/xG5Y+k/1S894UIE ngQWElu5zBIPfGDcJkCHGC3MXhQAukY/HJvx0+mF37Hz+dUkdxpXEFk1PuV7U28x 5AgG98nfMjdfeXGDXDYrkVuWy9Kmhzlk9Wbrnbh8cQF4CLPNvnT8X9+UMlXBAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUUI4ixNNVY5+fSPPhwXg/8u/SwqcwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAq4oLpCXEgNI2JHX1fLELr62FWJxKeD0DRYYYQaVQVOTrDck/Bb+mnap5 BkuJKCM16/rHGqjAt0aJlg1IcvclbcsQbVLTRlZHDhbjGC25dK72sBeegO/UphuE 2gXvBmxmfeGUi8vENPNyDjMTqg6sjizii2LgLNTXggEm4gU0vv6tv+jg9kJb2B8A ygCa9X6Xzy6UokEkR34Fs7Fwdb0s182q7enUcG433a2yJQ+ExUZe22bEtKtCT/tl UY/BEPTCfzzXhFa19ylnV/48esvPXBY2eKM0ogKQzEzhga9/a7w0HV+KPSA6OpSZ 0ExOuCxeXjFadrspGMiXoLRWsIpunw== -----END CERTIFICATE-----Generated at Sat Nov 22 12:28:03 2025 by rpki-client