This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: HRXUOPTSbsuD0MujkhiG2FZLWE8NYEP3ZiGaS18X1tk= Subject key identifier: 68:6E:D1:F6:F3:7C:7E:4C:CD:69:D2:64:8E:7C:0F:78:4E:A1:81:AC Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 1FE1EBD2DF091EB386764DF9EF7E51B2DD590124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0216 Signing time: Sat 29 Nov 2025 01:03:44 +0000 Manifest this update: Sat 29 Nov 2025 00:58:44 +0000 Manifest next update: Sun 30 Nov 2025 03:27:44 +0000 Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: PjnqBGGB3Wty5s6YrunKd0jtIgphRAMRT4iAGNOMzaA=) 2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e1:eb:d2:df:09:1e:b3:86:76:4d:f9:ef:7e:51:b2:dd:59:01:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 29 00:58:44 2025 GMT Not After : Nov 30 03:27:44 2025 GMT Subject: CN=686ED1F6F37C7E4CCD69D2648E7C0F784EA181AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:1b:49:85:ce:17:73:a3:cc:d5:40:6c:a8: 67:f8:80:fb:d4:7d:27:3b:3f:69:b0:90:ff:c0:6a: 39:44:60:16:40:02:71:14:b9:37:cd:0a:a2:1d:4a: ec:40:dc:a3:b2:5b:66:2e:f9:4a:6a:f1:73:a6:6f: 96:e0:d6:8d:7f:36:02:5d:04:62:4f:d0:ef:7d:23: d9:32:f2:24:6e:1a:a0:73:56:96:0f:9a:1a:1b:89: bd:31:41:3a:42:05:f0:18:b6:61:31:c5:8e:33:25: c3:54:bd:c5:2d:a7:cc:6e:22:cd:41:37:ac:9c:3e: 7a:7b:6b:b6:4c:cb:00:5f:76:19:bd:0d:89:f6:63: 15:e2:c4:56:1c:12:16:46:d3:6a:e0:a7:78:05:86: 13:bb:ae:ec:a9:dc:c5:ef:a2:10:e7:34:1c:24:20: 9f:8f:24:62:a7:16:fd:70:ce:9a:cf:7d:57:01:fa: e7:3a:2d:ca:40:81:ba:e4:8c:bf:41:cf:46:51:11: bc:9c:5e:ed:93:2c:88:05:ea:32:c2:a4:73:e8:f7: 72:1c:35:31:eb:a3:d4:25:f2:cf:d3:db:dd:4c:76: 7a:5a:42:73:55:c1:3f:eb:9f:cb:1c:89:71:cf:4f: 08:ee:56:f6:b2:e8:94:be:8f:db:33:c3:d6:fe:ef: a7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:6E:D1:F6:F3:7C:7E:4C:CD:69:D2:64:8E:7C:0F:78:4E:A1:81:AC X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:c6:6c:a4:1d:e9:aa:c2:6c:b5:d0:18:98:e4:2f:82:cf:15: 9d:c3:61:57:d7:29:1d:31:a1:5f:b8:a5:8c:94:18:e4:d4:0c: 82:13:5e:95:5d:ce:f1:37:22:2f:bb:9f:6d:6e:a0:3e:9d:12: 82:8a:39:36:0b:8f:cd:e4:93:80:77:77:d6:ac:63:6c:f5:b1: f1:46:dd:2e:d6:c2:a6:2f:44:7a:5c:c6:d8:09:52:4d:89:de: 47:d9:bc:4e:eb:e2:29:7f:f7:8f:2d:cc:6f:08:0c:1a:10:f4: 23:71:50:f8:26:79:2f:5b:b3:ec:ed:52:09:29:ef:30:ba:3c: d5:df:85:56:1a:ec:67:6f:cc:59:f6:7d:a0:a3:b1:ad:64:d3: a2:ac:84:c6:b7:15:c9:3d:eb:e0:a8:35:97:b5:db:7a:2d:d2: cf:51:3b:01:f4:3d:ad:a4:b0:64:f2:34:6f:f8:da:9c:a8:87: 6e:24:47:10:84:80:79:8b:84:6f:db:db:99:80:f6:16:e3:3a: d7:2f:34:82:ff:d3:87:f2:37:b8:ba:a5:16:50:39:fc:7b:4f: 83:39:af:7f:28:02:67:58:a6:f3:58:3c:3f:02:18:8c:21:66: 96:3c:6d:e8:08:e4:81:cf:5f:e7:b3:36:93:75:2a:c4:ea:7f: a3:62:a9:c0 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUH+Hr0t8JHrOGdk35735Rst1ZASQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMjkwMDU4NDRaFw0yNTExMzAwMzI3NDRaMDMxMTAvBgNV BAMTKDY4NkVEMUY2RjM3QzdFNENDRDY5RDI2NDhFN0MwRjc4NEVBMTgxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFihtJhc4Xc6PM1UBsqGf4gPvU fSc7P2mwkP/AajlEYBZAAnEUuTfNCqIdSuxA3KOyW2Yu+Upq8XOmb5bg1o1/NgJd BGJP0O99I9ky8iRuGqBzVpYPmhobib0xQTpCBfAYtmExxY4zJcNUvcUtp8xuIs1B N6ycPnp7a7ZMywBfdhm9DYn2YxXixFYcEhZG02rgp3gFhhO7ruyp3MXvohDnNBwk IJ+PJGKnFv1wzprPfVcB+uc6LcpAgbrkjL9Bz0ZREbycXu2TLIgF6jLCpHPo93Ic NTHro9Ql8s/T291MdnpaQnNVwT/rn8sciXHPTwjuVvay6JS+j9szw9b+76flAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUaG7R9vN8fkzNadJkjnwPeE6hgawwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAtsZspB3pqsJstdAYmOQvgs8VncNhV9cpHTGhX7iljJQY5NQMghNelV3O 8TciL7ufbW6gPp0Sgoo5NguPzeSTgHd31qxjbPWx8UbdLtbCpi9EelzG2AlSTYne R9m8TuviKX/3jy3MbwgMGhD0I3FQ+CZ5L1uz7O1SCSnvMLo81d+FVhrsZ2/MWfZ9 oKOxrWTToqyExrcVyT3r4Kg1l7Xbei3Sz1E7AfQ9raSwZPI0b/janKiHbiRHEISA eYuEb9vbmYD2FuM61y80gv/Th/I3uLqlFlA5/HtPgzmvfygCZ1im81g8PwIYjCFm ljxt6Ajkgc9f57M2k3UqxOp/o2KpwA== -----END CERTIFICATE-----Generated at Sat Nov 29 06:41:51 2025 by rpki-client