This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: rwn/wYhjfdk58FJMmGBcmNrEvcn7uzR7oADSNbozI2o= Subject key identifier: 40:E4:BF:1F:F4:51:EB:AF:4C:E6:83:02:FC:B8:76:1B:B9:76:55:72 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 459ECDBE10311AF8DB8FC67DF3FC656E76B8ADFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0209 Signing time: Wed 19 Nov 2025 07:28:38 +0000 Manifest this update: Wed 19 Nov 2025 07:23:38 +0000 Manifest next update: Thu 20 Nov 2025 07:45:38 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: bP1m2FF0UUk3wM/oXzO7OFVNoRtzlQZZaDPuNx0BjYg=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Nov 2025 07:45:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:9e:cd:be:10:31:1a:f8:db:8f:c6:7d:f3:fc:65:6e:76:b8:ad:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 19 07:23:38 2025 GMT Not After : Nov 20 07:45:38 2025 GMT Subject: CN=40E4BF1FF451EBAF4CE68302FCB8761BB9765572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:56:08:45:36:27:91:00:1a:a4:fc:7e:6e: 9c:87:3e:08:79:6a:91:a1:af:61:e7:fd:2d:c3:d5: ed:99:fb:18:2c:d5:6f:d4:54:39:9f:65:13:86:ae: a2:98:d2:90:ed:ff:f9:36:bf:2a:e4:13:95:be:53: 6d:31:9f:03:db:cf:69:f9:16:bc:dc:52:32:5f:c4: b6:6e:41:f6:11:d6:f2:1f:74:ad:1b:cf:97:c3:1f: fb:4b:9f:1e:50:57:a6:2d:d1:44:28:e9:3f:26:a1: 28:6f:76:2f:10:d5:64:9e:ed:9e:76:cb:e9:38:82: 9a:f2:d5:6d:89:36:99:f9:5b:c6:67:43:61:09:77: bc:19:5e:f8:85:96:c5:d7:e7:79:8e:0e:5d:36:26: 2a:1b:0e:33:d4:57:fe:e8:eb:75:23:bb:cc:46:52: 22:34:7f:82:ff:ea:f9:ac:d0:f3:54:0e:a2:5d:35: 90:36:ed:bb:31:c3:8c:c3:5d:cb:a7:97:57:85:5a: ce:fb:1c:28:ad:6e:47:e6:6e:40:81:d5:64:91:e3: 41:66:02:13:dd:25:57:94:74:2d:c7:85:64:19:b3: 3b:04:25:d9:82:61:14:87:7d:07:58:9c:8d:f4:8a: 92:03:ce:7a:01:79:cd:6d:85:32:20:c7:d0:90:02: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:BF:1F:F4:51:EB:AF:4C:E6:83:02:FC:B8:76:1B:B9:76:55:72 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a0:e0:34:b4:27:ad:50:19:70:6d:62:cf:b3:33:ff:9d:3f: 09:33:b5:a9:1a:9d:d3:04:56:e1:88:6f:62:bc:49:1b:03:15: ad:56:f3:ae:c3:54:f6:5f:e1:4b:90:96:2c:f3:81:e9:b4:48: 83:c5:06:09:37:49:a2:92:fe:14:69:a6:c3:33:1f:60:c3:02: e0:9c:5e:44:30:bb:e1:6f:cb:75:f5:ac:07:4f:8e:01:44:83: 23:7d:98:17:5d:30:30:c5:e2:7e:8b:38:fe:5b:7a:e8:b9:fc: 16:42:74:af:90:4a:59:5f:1f:57:da:9f:7e:65:59:73:52:53: c3:ba:ef:c0:e0:17:8c:4f:dc:8f:16:30:e8:ec:cc:bd:0e:5c: 93:f4:74:93:a2:ee:d4:41:3d:d0:93:19:6a:c9:10:b8:f9:fe: bc:9c:28:98:dd:15:ba:7c:aa:28:17:ff:6e:c1:01:ce:30:5a: 18:92:4a:37:1a:2b:a1:d2:f5:03:38:0d:ce:4e:c7:36:50:61: a7:ec:bd:71:fb:4a:65:2d:e3:15:5c:b4:e4:1a:1d:d5:9e:1f: 2a:fe:1f:66:38:56:3a:30:82:6a:34:1b:85:78:ca:44:3f:58: c1:c1:ed:10:6c:da:0e:49:63:e0:86:c8:b8:3d:74:0c:c3:73: c2:7a:62:34 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIURZ7NvhAxGvjbj8Z98/xlbna4rf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMTkwNzIzMzhaFw0yNTExMjAwNzQ1MzhaMDMxMTAvBgNV BAMTKDQwRTRCRjFGRjQ1MUVCQUY0Q0U2ODMwMkZDQjg3NjFCQjk3NjU1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3VYIRTYnkQAapPx+bpyHPgh5 apGhr2Hn/S3D1e2Z+xgs1W/UVDmfZROGrqKY0pDt//k2vyrkE5W+U20xnwPbz2n5 FrzcUjJfxLZuQfYR1vIfdK0bz5fDH/tLnx5QV6Yt0UQo6T8moShvdi8Q1WSe7Z52 y+k4gpry1W2JNpn5W8ZnQ2EJd7wZXviFlsXX53mODl02JiobDjPUV/7o63Uju8xG UiI0f4L/6vms0PNUDqJdNZA27bsxw4zDXcunl1eFWs77HCitbkfmbkCB1WSR40Fm AhPdJVeUdC3HhWQZszsEJdmCYRSHfQdYnI30ipIDznoBec1thTIgx9CQAiU1AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUQOS/H/RR669M5oMC/Lh2G7l2VXIwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAUKDgNLQnrVAZcG1iz7Mz/50/CTO1qRqd0wRW4YhvYrxJGwMVrVbzrsNU 9l/hS5CWLPOB6bRIg8UGCTdJopL+FGmmwzMfYMMC4JxeRDC74W/LdfWsB0+OAUSD I32YF10wMMXifos4/lt66Ln8FkJ0r5BKWV8fV9qffmVZc1JTw7rvwOAXjE/cjxYw 6OzMvQ5ck/R0k6Lu1EE90JMZaskQuPn+vJwomN0VunyqKBf/bsEBzjBaGJJKNxor odL1AzgNzk7HNlBhp+y9cftKZS3jFVy05Bod1Z4fKv4fZjhWOjCCajQbhXjKRD9Y wcHtEGzaDklj4IbIuD10DMNzwnpiNA== -----END CERTIFICATE-----Generated at Wed Nov 19 16:01:59 2025 by rpki-client