This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: LV529TdcDXHRju5IoUW15Qa+szF5J9fpmA5ZH8zXfgo=
Subject key identifier: 4C:F6:8A:50:CD:4E:EE:BB:1E:46:4D:2F:B3:92:2F:72:E1:A8:04:62
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 258891F66C015B982CADB64A0949D47C8BA55DDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0257
Signing time: Fri 16 Jan 2026 23:46:15 +0000
Manifest this update: Fri 16 Jan 2026 23:41:15 +0000
Manifest next update: Sun 18 Jan 2026 02:16:15 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: knUbwH4swK+iHG0AfN6cJjGPXqvj0BolN8uB9BT0Ets=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 02:16:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:88:91:f6:6c:01:5b:98:2c:ad:b6:4a:09:49:d4:7c:8b:a5:5d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jan 16 23:41:15 2026 GMT
Not After : Jan 18 02:16:15 2026 GMT
Subject: CN=4CF68A50CD4EEEBB1E464D2FB3922F72E1A80462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:35:c7:7c:cf:6c:e7:93:ca:e8:d9:0f:45:
34:42:c7:19:5b:fd:02:8c:15:ef:fa:27:17:86:78:
f0:29:ff:58:85:4e:9e:a8:66:fc:46:7b:0b:dd:74:
4e:a6:88:6b:35:b2:93:84:6a:de:23:d9:68:a5:e6:
d0:93:c5:ee:68:f2:15:79:a5:ba:ae:c7:f2:49:1b:
fc:64:ab:e4:d5:a3:ef:dd:14:3d:f1:fc:3b:e2:48:
50:bd:0d:d2:7f:01:f6:49:54:c2:82:51:62:b9:90:
80:46:7b:df:9b:e4:48:c7:4c:6e:e6:30:e1:2c:f8:
cd:98:9b:24:0a:14:d2:f8:96:16:24:20:46:4d:b3:
26:5c:1b:63:93:ee:76:50:5d:2b:c2:27:17:87:78:
a1:95:ee:76:d2:b0:64:b5:ed:01:f0:26:24:b0:96:
7c:71:6f:58:15:92:3b:d6:e5:b3:58:87:a9:b0:0a:
35:29:75:0a:cc:5e:f2:c0:34:57:3c:10:f9:d6:31:
5a:6b:8e:fc:7f:0a:93:c0:02:fe:bc:24:44:b3:b0:
3e:d7:7e:22:b5:e4:10:3d:32:b9:79:9e:0e:0a:1f:
15:6a:6e:df:de:80:6b:f9:17:8d:b3:54:0c:7d:88:
2f:74:63:de:a7:bc:72:05:22:b5:9a:46:af:b2:5e:
52:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F6:8A:50:CD:4E:EE:BB:1E:46:4D:2F:B3:92:2F:72:E1:A8:04:62
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:6a:e3:be:5d:48:98:09:b2:5f:14:34:a2:f3:30:85:ac:f0:
21:f0:eb:c3:30:e4:d2:37:72:a0:41:e7:29:a0:dc:e3:fe:0b:
9e:9f:6a:93:c5:77:0b:d6:09:b7:f1:65:a5:2d:fb:4c:2e:09:
95:be:e9:b2:5e:e3:85:1d:b3:d0:37:48:a9:ce:66:78:c8:b0:
7b:90:3e:2c:9b:14:7d:93:3c:cd:91:f5:43:14:35:9d:14:fa:
ee:33:31:99:a8:6d:d7:20:c5:b8:66:e4:cf:36:d5:7a:bf:21:
05:db:46:c2:d9:cc:6e:ca:3a:eb:49:91:00:7b:60:8e:cf:e4:
df:90:34:55:c0:e1:60:f2:5f:a5:b5:f3:14:f5:7d:cf:55:94:
b9:62:82:71:23:8c:f1:3e:24:5a:96:73:0a:7a:e7:60:6f:f5:
8b:12:c0:51:0f:06:34:4f:e3:47:1d:44:bb:80:6d:8a:ca:7f:
ac:ac:c4:8e:95:df:65:de:a9:e1:a8:12:c7:67:18:be:b8:e7:
ca:7c:4d:d4:da:63:ce:53:5b:1a:83:06:9d:54:c7:e3:fd:e0:
91:de:cd:21:05:10:48:01:7c:cd:91:7a:02:bb:a2:e3:fe:9d:
85:25:30:9f:95:95:dd:a2:e3:ed:09:07:bc:2f:3b:76:bf:e2:
4b:89:ec:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 17 19:53:09 2026 by rpki-client