This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          qbjCKO04BK7IHeAVO+TQUvofl9lE0OXOHCHttmmMQXE=
Subject key identifier:   A7:62:2D:DC:2D:3A:4B:37:1F:5F:58:6F:34:E4:54:96:E4:B5:44:92
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       02757BF84FBC1258B4B12349930268C5AC78F816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          0244
Signing time:             Fri 02 Jan 2026 09:50:02 +0000
Manifest this update:     Fri 02 Jan 2026 09:45:02 +0000
Manifest next update:     Sat 03 Jan 2026 10:52:02 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: C5VwOC/U1L80KgHkQa4yaolW1m+uBSOr7RF+NHnu9hM=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:75:7b:f8:4f:bc:12:58:b4:b1:23:49:93:02:68:c5:ac:78:f8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Jan  2 09:45:02 2026 GMT
            Not After : Jan  3 10:52:02 2026 GMT
        Subject: CN=A7622DDC2D3A4B371F5F586F34E45496E4B54492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:82:bb:e9:70:d6:b5:11:58:ad:9b:a2:e8:30:
                    ad:db:7e:90:b4:4d:10:3f:5d:af:19:87:c9:8e:50:
                    61:2c:0c:94:a8:3a:60:bd:4f:5f:31:b5:66:ff:07:
                    92:ae:2c:2f:23:d6:be:da:bd:6a:ca:3e:f0:ab:6c:
                    64:3e:77:5f:cb:4e:10:b9:90:65:8c:d4:e9:09:d2:
                    3e:13:cf:48:08:5f:b1:ad:16:53:a3:16:6c:55:25:
                    9a:1e:0f:34:21:d6:9e:60:cc:46:ec:31:02:cc:7c:
                    a9:da:1e:21:eb:60:85:e9:b6:68:88:36:28:12:d0:
                    84:8c:80:3f:52:7c:71:27:f1:e6:d1:cd:a5:72:c8:
                    cd:cd:59:fc:ee:95:c9:17:5c:fa:cc:2a:f3:b7:95:
                    92:68:42:75:de:cd:4f:1b:8c:11:be:41:4b:f1:af:
                    df:6e:aa:02:b3:71:40:d3:32:d8:4c:b9:75:2d:c1:
                    38:ea:a3:d2:d3:67:a9:65:7e:6d:90:a8:1b:62:c8:
                    45:27:87:bd:af:5f:a6:c0:f5:d0:a9:a2:3c:2a:ec:
                    91:e1:68:b2:8b:38:28:57:a0:b4:47:6b:6a:63:68:
                    5d:41:f2:d0:8f:c3:3c:c1:8d:16:31:7e:24:f7:e0:
                    ee:47:dc:3a:27:c4:a4:1c:88:4e:30:2d:ae:cc:42:
                    a0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:62:2D:DC:2D:3A:4B:37:1F:5F:58:6F:34:E4:54:96:E4:B5:44:92
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5e:d3:98:ef:fd:a0:1d:e3:86:64:c2:38:89:ca:f5:32:59:
         02:da:47:d0:40:71:1b:6b:e1:17:ca:44:7a:48:0c:9b:b1:98:
         74:e2:3d:a0:95:bf:19:5d:d2:93:21:a3:c2:3f:80:a9:86:71:
         a6:9c:1b:83:0e:0f:11:bd:31:b6:4f:7b:95:1f:91:dc:58:8e:
         27:d8:48:0b:38:41:98:17:d9:06:89:7b:6f:59:fe:54:0d:07:
         44:cf:89:be:04:5a:d7:b5:98:c8:43:a3:1a:a3:4e:ad:09:74:
         21:ce:85:49:ce:6a:df:26:d5:27:4e:10:4d:7c:e3:0a:6e:06:
         f3:cf:3c:f1:3c:88:d4:1c:a4:d6:71:e3:74:3a:20:fe:e0:df:
         e4:ec:18:ea:0e:4a:b7:a9:58:e3:d4:46:1b:78:f7:b2:99:31:
         4d:3e:7f:3f:be:19:2e:4c:3b:b8:f2:13:fa:bc:c3:c0:2d:43:
         54:ed:86:5b:a0:e9:38:8b:1f:f7:08:a9:74:53:2f:af:55:8c:
         c9:34:4e:e0:82:db:df:68:23:83:22:78:72:4b:e4:03:54:ef:
         1a:43:41:20:eb:53:fc:c9:34:1d:0c:36:7b:63:b1:0f:f4:65:
         a3:ea:1a:a3:05:52:fb:eb:5b:55:4c:3d:75:40:43:b3:85:b7:
         f4:4b:5a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 2 13:09:19 2026 by rpki-client