This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          NKXONrxlymbqy4ciPEQI5Oc5DwwMV7LXUGnn7A16ShE=
Subject key identifier:   05:48:25:1C:28:5F:1E:2C:B7:EE:7F:42:11:48:5D:E2:4C:2E:2B:4E
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       30954A65A24B6CA62014DAAE0BAB00EAFEBF128F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          0243
Signing time:             Thu 01 Jan 2026 14:00:01 +0000
Manifest this update:     Thu 01 Jan 2026 13:55:01 +0000
Manifest next update:     Fri 02 Jan 2026 17:47:01 +0000
Files and hashes:         1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
                          2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: aw6o1QRvuY08jXm60IxCsI1V1INOK+UakyPXu+U/pUE=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 17:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:95:4a:65:a2:4b:6c:a6:20:14:da:ae:0b:ab:00:ea:fe:bf:12:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Jan  1 13:55:01 2026 GMT
            Not After : Jan  2 17:47:01 2026 GMT
        Subject: CN=0548251C285F1E2CB7EE7F4211485DE24C2E2B4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:77:61:5b:aa:b5:92:64:f0:74:bd:62:c0:fb:
                    a8:bd:d3:aa:07:8e:89:bf:12:00:63:ff:17:da:8d:
                    ad:c6:19:90:ce:e3:71:a6:eb:e9:08:f9:6b:ad:02:
                    db:7a:d9:2f:82:d4:68:2a:6f:80:85:e3:0b:24:b6:
                    82:5d:50:6e:bf:9e:cf:bd:cc:9e:7d:52:42:18:0d:
                    51:c3:46:6c:a2:68:06:39:6a:7b:0f:d5:ae:f1:fd:
                    7c:c0:1b:8b:a3:db:4c:8d:46:98:f0:85:e3:01:c3:
                    5a:bd:0e:96:81:72:8d:5a:7d:17:fd:6b:fd:f7:79:
                    f8:b8:75:58:ea:ed:1c:8d:da:ad:47:72:84:98:0f:
                    b6:5e:f9:25:f4:58:20:28:1d:d0:73:41:ec:31:a6:
                    3d:31:9e:59:88:81:8c:cd:eb:76:d9:d6:af:e9:e3:
                    64:bc:fd:e3:85:7d:b7:e9:2f:e7:7d:f7:7f:35:d9:
                    6b:f5:d0:55:d8:cf:c7:02:96:68:24:47:e1:c2:88:
                    cc:99:ee:cb:8f:87:99:bf:12:9a:39:c7:e6:ba:0a:
                    47:c5:7d:e4:c5:ee:36:e2:e3:91:c6:d3:57:13:13:
                    1f:2d:52:38:73:fc:93:79:4b:bf:78:10:29:9f:95:
                    00:4f:6c:50:d9:6f:f4:ba:5a:b1:05:8f:34:bf:22:
                    8c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:48:25:1C:28:5F:1E:2C:B7:EE:7F:42:11:48:5D:E2:4C:2E:2B:4E
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b5:04:48:de:52:9e:2b:b5:1d:bf:e8:4a:8e:64:df:0a:67:
         14:ee:90:61:f9:1c:04:c3:2c:44:02:ee:af:fa:8f:26:c8:61:
         25:15:4a:24:f4:a8:89:3a:b2:82:a1:0a:46:1a:bb:49:b3:6c:
         31:e2:ce:44:b2:ca:1c:8c:29:32:03:6f:33:72:71:85:e0:32:
         c5:b6:7b:e9:f3:ec:6c:89:8c:ee:80:f0:96:76:1c:6c:b2:97:
         89:ba:68:2c:09:54:04:29:70:6d:60:67:ea:77:34:92:41:fb:
         16:a7:a8:79:3d:22:3f:4b:6b:c1:0c:da:25:5d:37:86:fd:64:
         fd:19:17:74:3f:7b:ab:96:93:5c:7a:fa:49:b5:e8:d2:81:f5:
         ed:09:fc:b7:26:68:d9:ca:b0:12:59:04:af:1e:b2:23:b6:60:
         f5:26:27:49:49:dc:f2:49:cb:85:30:0b:df:8c:82:8c:b2:f4:
         9d:dd:02:01:7e:4c:ee:ec:5a:d6:73:b5:79:e7:9f:73:0b:58:
         a8:7f:40:21:40:7a:b5:2d:3a:e5:93:9f:96:33:12:f3:57:8b:
         4b:c7:db:07:19:01:20:e7:4b:f5:04:ed:ea:65:76:8e:b5:11:
         d4:8d:15:7b:8f:3e:c2:75:26:74:c9:4c:98:cf:a1:b2:f0:2d:
         e3:ee:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 23:33:48 2026 by rpki-client