This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: esFrOoCNdWBhmN8CFesYCDaA+2OePDjb4/lE/ft7p3k= Subject key identifier: A7:B9:FF:5A:CB:8C:3D:3E:71:AA:8B:1F:9C:3B:F8:32:D0:AB:20:37 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 422E0FABCC15A74BB296D9B2C17C92A5003D7A6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 023A Signing time: Thu 25 Dec 2025 21:14:55 +0000 Manifest this update: Thu 25 Dec 2025 21:09:55 +0000 Manifest next update: Fri 26 Dec 2025 21:41:55 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: nLmj5tBdPKb8pXTeJDIivm7qcBpg6dPPk6RDDi2mG8o=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 21:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:2e:0f:ab:cc:15:a7:4b:b2:96:d9:b2:c1:7c:92:a5:00:3d:7a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Dec 25 21:09:55 2025 GMT Not After : Dec 26 21:41:55 2025 GMT Subject: CN=A7B9FF5ACB8C3D3E71AA8B1F9C3BF832D0AB2037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:71:9e:9f:47:8d:3f:11:1b:25:f0:79:3a:a9: 5a:6f:c0:24:92:56:ea:51:d1:9e:10:7d:39:d7:8a: 8a:b5:53:0d:45:ce:51:72:40:14:b9:39:ce:a7:16: c1:ee:14:f9:2a:80:05:fb:a2:0b:b5:24:c8:cc:e4: b3:7e:7d:e9:d9:cb:78:36:61:04:0e:f9:17:4e:57: 7b:3b:13:da:f4:47:71:4c:d7:1b:c6:67:a1:b8:bc: 5c:4d:22:c0:fe:91:11:01:e9:7b:25:f1:64:bd:7d: e3:3c:6f:3a:c1:78:79:f0:34:c3:73:36:21:c4:55: 8c:61:37:7c:d3:1d:90:e7:71:3f:ef:cf:f8:8f:e7: 5f:64:16:fc:ae:a9:7b:11:18:11:9e:7b:23:49:0a: 01:22:0c:c1:b0:e6:a6:75:93:52:5d:22:e5:8a:7e: 4f:46:24:2d:4a:bd:6b:e8:97:bd:e0:84:0e:52:a1: 8f:6a:fb:73:e2:e1:7d:49:f8:4a:7c:3d:6f:c1:37: d8:b8:a1:f5:0a:1f:92:8b:0d:5d:91:ad:8b:fb:75: ad:14:21:52:66:3a:21:6f:0d:54:cb:4e:81:36:d9: b2:65:90:53:d5:9a:ed:52:0e:52:c8:40:e1:84:16: 4d:bb:cb:f6:a2:a6:ef:1d:29:40:af:df:24:97:0d: 24:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B9:FF:5A:CB:8C:3D:3E:71:AA:8B:1F:9C:3B:F8:32:D0:AB:20:37 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4e:57:7e:1a:ab:4c:f2:ae:ae:47:ad:a6:c6:d5:33:13:ac: 3f:18:2d:9d:cd:28:aa:a1:2b:16:8f:47:11:cd:3c:9d:84:9e: 82:f0:80:c5:8c:1c:e1:fc:f6:c3:38:8b:ca:9b:ee:57:83:f4: 53:31:45:08:45:ca:21:8b:64:8d:43:92:29:f3:3a:ac:68:f2: 1c:9a:1b:40:70:5d:4a:f0:f0:a1:1e:01:9a:48:6d:74:74:c1: d6:ec:8d:2b:60:d7:60:3c:6a:e4:4b:ba:ce:f8:fc:64:e6:ef: 5b:07:27:1e:b5:07:ff:29:17:14:6c:0b:bc:1f:f3:95:15:ea: 4e:6d:62:54:a5:90:4e:12:10:8f:15:cf:e6:aa:a8:7b:33:38: 7d:47:29:3a:2e:36:20:18:40:7c:33:c5:b5:bd:8a:f6:16:b9: 49:9e:b1:4f:3b:b0:e9:8d:91:a2:ff:0a:1b:9c:a8:c7:3e:21: 9d:97:c2:73:ad:32:fa:d2:66:5b:88:84:9c:e2:64:e1:bb:c3: e8:57:92:4d:68:55:48:21:31:54:37:27:57:0b:e6:b4:55:e7: 14:4c:35:2d:45:46:01:df:0e:ce:2e:44:6b:56:0d:12:34:31: df:1b:fa:0d:57:d0:0f:89:0e:87:c7:a2:f8:bc:c3:4b:96:e6: 84:86:fa:bf -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUQi4Pq8wVp0uyltmywXySpQA9emswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTEyMjUyMTA5NTVaFw0yNTEyMjYyMTQxNTVaMDMxMTAvBgNV BAMTKEE3QjlGRjVBQ0I4QzNEM0U3MUFBOEIxRjlDM0JGODMyRDBBQjIwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cZ6fR40/ERsl8Hk6qVpvwCSS VupR0Z4QfTnXioq1Uw1FzlFyQBS5Oc6nFsHuFPkqgAX7ogu1JMjM5LN+fenZy3g2 YQQO+RdOV3s7E9r0R3FM1xvGZ6G4vFxNIsD+kREB6Xsl8WS9feM8bzrBeHnwNMNz NiHEVYxhN3zTHZDncT/vz/iP519kFvyuqXsRGBGeeyNJCgEiDMGw5qZ1k1JdIuWK fk9GJC1KvWvol73ghA5SoY9q+3Pi4X1J+Ep8PW/BN9i4ofUKH5KLDV2RrYv7da0U IVJmOiFvDVTLToE22bJlkFPVmu1SDlLIQOGEFk27y/aipu8dKUCv3ySXDST1AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUp7n/WsuMPT5xqosfnDv4MtCrIDcwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAgE5XfhqrTPKurketpsbVMxOsPxgtnc0oqqErFo9HEc08nYSegvCAxYwc 4fz2wziLypvuV4P0UzFFCEXKIYtkjUOSKfM6rGjyHJobQHBdSvDwoR4BmkhtdHTB 1uyNK2DXYDxq5Eu6zvj8ZObvWwcnHrUH/ykXFGwLvB/zlRXqTm1iVKWQThIQjxXP 5qqoezM4fUcpOi42IBhAfDPFtb2K9ha5SZ6xTzuw6Y2Rov8KG5yoxz4hnZfCc60y +tJmW4iEnOJk4bvD6FeSTWhVSCExVDcnVwvmtFXnFEw1LUVGAd8Ozi5Ea1YNEjQx 3xv6DVfQD4kOh8ei+LzDS5bmhIb6vw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:02:58 2025 by rpki-client