This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: mJkvXb0jVg0EM1USiST11UDBnOeWVzWhKepiqDvm578= Subject key identifier: DF:97:43:A6:56:BB:42:DE:2B:C5:DA:67:EA:2A:EF:33:91:C6:AA:2E Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 6A819EFAA52E6B476B741435D0807DF888D463A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 020A Signing time: Wed 19 Nov 2025 23:48:38 +0000 Manifest this update: Wed 19 Nov 2025 23:43:38 +0000 Manifest next update: Fri 21 Nov 2025 01:29:38 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: O459rzpRXkTArtOP2DF/Z5M9StWbbj4AILGGJH3WO+U=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Nov 2025 01:29:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:81:9e:fa:a5:2e:6b:47:6b:74:14:35:d0:80:7d:f8:88:d4:63:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 19 23:43:38 2025 GMT Not After : Nov 21 01:29:38 2025 GMT Subject: CN=DF9743A656BB42DE2BC5DA67EA2AEF3391C6AA2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:65:3b:45:c8:7f:b2:89:3c:eb:d6:ce:22:ca: 8e:c4:c6:af:a6:0f:0f:b9:77:2f:d0:82:6d:bd:ab: 21:ab:b1:70:14:87:92:e2:a2:71:55:77:a2:e1:68: e4:60:26:8e:b4:32:83:ec:f1:9d:c3:70:1e:74:18: d5:1e:25:0c:e4:f9:c1:47:7f:f7:d4:0a:e0:51:82: ff:98:4d:a7:e8:8a:72:db:ef:ff:55:d0:c1:45:68: de:d0:6f:cd:c8:5e:11:69:56:f7:b1:52:92:bd:d8: 79:95:f8:4f:e1:97:c5:9e:38:b2:af:4f:a6:8d:71: ca:4e:29:8e:4d:6c:d5:20:09:2a:c7:43:d6:49:59: ae:d5:37:65:4f:c7:66:04:ae:66:91:30:40:a4:c3: a9:2d:fe:44:06:48:13:cc:a3:eb:05:15:71:6d:a0: b3:9e:ac:fb:e1:e0:ee:63:56:0f:a4:a5:9c:20:6e: ac:d6:43:ba:8d:7b:c4:f8:7b:b0:2b:c0:5f:39:35: c9:34:5a:1e:8b:43:4b:fb:47:84:00:bd:90:48:5b: 33:80:19:0d:08:40:ea:3f:97:69:0b:88:ad:28:d9: 84:d2:eb:03:3e:d8:fd:e9:50:e4:9b:d1:1f:f5:8c: 52:c7:26:d1:db:c5:65:95:4e:b8:3d:6b:08:0f:eb: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:97:43:A6:56:BB:42:DE:2B:C5:DA:67:EA:2A:EF:33:91:C6:AA:2E X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:c7:f7:00:a3:67:92:e9:1b:d6:bc:bc:df:d8:c8:2b:d7:52: b3:ae:b4:d0:04:cf:c4:bc:12:6b:c2:4f:27:f4:90:70:f3:38: df:b6:f3:f7:c8:ef:0c:c3:61:90:05:7f:64:bf:87:44:b6:c9: 06:2c:cf:87:db:0c:df:f8:55:85:9e:99:8f:bf:a6:8c:e4:63: f2:87:48:8c:a2:cb:2a:1c:61:e3:e7:f8:0f:e8:a5:f2:63:1f: eb:0d:fd:a3:fe:c4:33:29:bc:fa:1a:75:88:ef:d6:52:30:a5: 3a:be:a9:e9:2c:ce:52:ce:96:8d:d0:d9:ee:61:83:3e:6c:49: 55:17:f7:da:bd:b5:59:9d:c8:08:36:68:3a:aa:35:eb:0b:08: 35:35:d2:f4:bf:da:29:3c:c1:73:83:e4:1e:b3:67:af:04:23: ec:da:49:67:df:ec:49:7c:1a:99:5f:c0:8e:f0:b3:cf:ac:12: 78:41:f3:62:03:1a:62:be:20:5e:5a:80:4b:32:8b:7b:ae:c6: fc:81:bb:a8:e4:9a:a3:77:72:71:90:e5:11:c7:0c:51:fe:48: 30:8e:c8:9b:d9:7a:89:e8:07:f8:ec:ae:d9:2f:46:a7:05:ad: cd:cb:03:7c:28:00:77:91:de:2a:58:c8:1a:dc:b8:db:7a:a0: dd:f0:e6:b3 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUaoGe+qUua0drdBQ10IB9+IjUY6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMTkyMzQzMzhaFw0yNTExMjEwMTI5MzhaMDMxMTAvBgNV BAMTKERGOTc0M0E2NTZCQjQyREUyQkM1REE2N0VBMkFFRjMzOTFDNkFBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgZTtFyH+yiTzr1s4iyo7Exq+m Dw+5dy/Qgm29qyGrsXAUh5LionFVd6LhaORgJo60MoPs8Z3DcB50GNUeJQzk+cFH f/fUCuBRgv+YTafoinLb7/9V0MFFaN7Qb83IXhFpVvexUpK92HmV+E/hl8WeOLKv T6aNccpOKY5NbNUgCSrHQ9ZJWa7VN2VPx2YErmaRMECkw6kt/kQGSBPMo+sFFXFt oLOerPvh4O5jVg+kpZwgbqzWQ7qNe8T4e7ArwF85Nck0Wh6LQ0v7R4QAvZBIWzOA GQ0IQOo/l2kLiK0o2YTS6wM+2P3pUOSb0R/1jFLHJtHbxWWVTrg9awgP65e9AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU35dDpla7Qt4rxdpn6irvM5HGqi4wHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAP8f3AKNnkukb1ry839jIK9dSs6600ATPxLwSa8JPJ/SQcPM437bz98jv DMNhkAV/ZL+HRLbJBizPh9sM3/hVhZ6Zj7+mjORj8odIjKLLKhxh4+f4D+il8mMf 6w39o/7EMym8+hp1iO/WUjClOr6p6SzOUs6WjdDZ7mGDPmxJVRf32r21WZ3ICDZo Oqo16wsINTXS9L/aKTzBc4PkHrNnrwQj7NpJZ9/sSXwamV/AjvCzz6wSeEHzYgMa Yr4gXlqASzKLe67G/IG7qOSao3dycZDlEccMUf5IMI7Im9l6iegH+Oyu2S9GpwWt zcsDfCgAd5HeKljIGty423qg3fDmsw== -----END CERTIFICATE-----Generated at Thu Nov 20 11:36:35 2025 by rpki-client