This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: qQLza5snAVj+g/P2cMMhoRvK4zyzKvHT8nWqNbC8XgM= Subject key identifier: 8D:1B:80:76:D5:78:B6:6F:E2:18:65:F8:7E:9D:26:28:54:F5:3E:69 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 2ABC1EE52FC4E49521A24D287D8A36E2EF6D3D26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0254 Signing time: Wed 14 Jan 2026 16:11:01 +0000 Manifest this update: Wed 14 Jan 2026 16:06:01 +0000 Manifest next update: Thu 15 Jan 2026 17:06:01 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: k6WezjeEsM+iIUjC/HQ5Q5KCcHva561fWvPWHy0ptUw=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 14:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:bc:1e:e5:2f:c4:e4:95:21:a2:4d:28:7d:8a:36:e2:ef:6d:3d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Jan 14 16:06:01 2026 GMT Not After : Jan 15 17:06:01 2026 GMT Subject: CN=8D1B8076D578B66FE21865F87E9D262854F53E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5f:c9:42:39:1a:da:c0:7d:0c:54:45:12:96: a9:05:37:80:8e:2d:33:cd:31:89:37:cb:0f:b3:30: da:f2:6d:54:5a:f4:78:4f:28:bd:0a:3e:29:79:2e: dc:88:bf:24:67:2e:6a:38:5d:17:d4:28:89:3a:3d: 87:57:1e:56:d9:5f:32:30:2d:14:ab:6b:06:9b:0b: 71:d3:80:24:ba:67:eb:13:c8:c9:1a:ae:88:1a:06: 5a:79:7a:16:72:13:cc:69:9f:b8:71:2f:07:56:d8: 31:ac:28:7d:b9:94:97:06:ff:35:40:20:87:df:89: 76:49:09:2f:56:64:de:ec:ff:e1:ae:eb:65:c1:e3: 55:27:e5:b0:fc:b7:a2:c2:69:23:ae:29:20:3a:4c: ef:bd:85:12:8b:8b:89:c8:22:a7:52:fa:72:ac:b0: d9:4c:c3:c4:73:d8:c1:90:93:fb:4b:f1:28:cb:e0: d1:81:95:b0:38:b6:8b:d8:8a:61:bb:61:49:7d:10: 08:04:c0:53:ae:05:18:36:55:38:41:1c:c9:7e:01: d5:0e:34:08:09:d2:31:e2:ab:d3:37:6d:6b:fb:85: e8:aa:f1:b3:53:7d:ba:df:a5:aa:e2:df:14:47:9c: 69:b2:d6:87:f4:a3:49:ba:01:5d:87:60:af:ee:1d: df:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1B:80:76:D5:78:B6:6F:E2:18:65:F8:7E:9D:26:28:54:F5:3E:69 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:07:f4:20:eb:28:e0:47:4a:98:a7:cf:32:e2:84:11:00:a0: 80:5f:ed:79:d2:1e:0a:10:04:fe:9d:6d:2c:e7:50:5b:37:9d: bd:f5:a6:ae:6b:e6:76:e3:98:0b:96:ed:fb:a3:14:51:11:44: 2a:37:28:af:85:4f:d3:f3:02:c1:83:86:bb:ae:cd:5b:c6:f2: 7f:69:f2:32:21:ce:96:dc:68:4b:de:6a:e7:ac:ca:d3:ad:68: 54:b4:f2:d1:45:99:d4:50:b0:11:18:b4:49:3b:37:bf:4a:e9: 75:b4:c8:57:5b:a8:cd:aa:15:58:90:05:f7:ba:59:01:61:d5: 90:38:87:9b:cc:bd:44:87:db:fe:ae:c0:6f:f6:b5:65:bd:10: 61:2f:83:6e:8f:44:e9:d9:13:09:c5:47:29:59:61:b9:af:c8: 54:de:e4:9c:42:61:49:7e:9e:c9:ea:29:56:c0:ea:4f:f1:31: e3:ba:be:39:12:0c:f7:f1:77:f4:35:e1:91:a5:d7:7a:b8:61: b7:59:d7:a5:52:c7:a2:c7:10:8f:96:68:0d:24:30:17:4f:3d: 49:66:da:73:d4:ce:d9:56:22:f2:46:b0:f1:36:cd:75:29:48: 85:43:2b:90:49:d9:c8:86:02:24:55:11:f9:bc:82:34:c6:7b: 25:62:1d:ae -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUKrwe5S/E5JUhok0ofYo24u9tPSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNjAxMTQxNjA2MDFaFw0yNjAxMTUxNzA2MDFaMDMxMTAvBgNV BAMTKDhEMUI4MDc2RDU3OEI2NkZFMjE4NjVGODdFOUQyNjI4NTRGNTNFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvX8lCORrawH0MVEUSlqkFN4CO LTPNMYk3yw+zMNrybVRa9HhPKL0KPil5LtyIvyRnLmo4XRfUKIk6PYdXHlbZXzIw LRSrawabC3HTgCS6Z+sTyMkarogaBlp5ehZyE8xpn7hxLwdW2DGsKH25lJcG/zVA IIffiXZJCS9WZN7s/+Gu62XB41Un5bD8t6LCaSOuKSA6TO+9hRKLi4nIIqdS+nKs sNlMw8Rz2MGQk/tL8SjL4NGBlbA4tovYimG7YUl9EAgEwFOuBRg2VThBHMl+AdUO NAgJ0jHiq9M3bWv7heiq8bNTfbrfpari3xRHnGmy1of0o0m6AV2HYK/uHd97AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUjRuAdtV4tm/iGGX4fp0mKFT1PmkwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAIQf0IOso4EdKmKfPMuKEEQCggF/tedIeChAE/p1tLOdQWzedvfWmrmvm duOYC5bt+6MUURFEKjcor4VP0/MCwYOGu67NW8byf2nyMiHOltxoS95q56zK061o VLTy0UWZ1FCwERi0STs3v0rpdbTIV1uozaoVWJAF97pZAWHVkDiHm8y9RIfb/q7A b/a1Zb0QYS+Dbo9E6dkTCcVHKVlhua/IVN7knEJhSX6eyeopVsDqT/Ex47q+ORIM 9/F39DXhkaXXerhht1nXpVLHoscQj5ZoDSQwF089SWbac9TO2VYi8kaw8TbNdSlI hUMrkEnZyIYCJFUR+byCNMZ7JWIdrg== -----END CERTIFICATE-----Generated at Wed Jan 14 18:43:55 2026 by rpki-client