This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          Nx2IFck95ZeuPdUuda7+j+jAQldNU6ViYVHb6tw5sTc=
Subject key identifier:   2C:C6:EE:80:24:71:52:8D:19:78:79:17:99:8B:23:E2:F2:FC:5A:AD
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       4766B5B1E182047515A0099E1F73602DCE79535F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          020B
Signing time:             Thu 20 Nov 2025 17:33:38 +0000
Manifest this update:     Thu 20 Nov 2025 17:28:38 +0000
Manifest next update:     Fri 21 Nov 2025 18:54:38 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: gFUWS6o58nA7FlWAqhgQyYpghsjD/ryQnUKWEIqa5x8=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Nov 2025 15:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:66:b5:b1:e1:82:04:75:15:a0:09:9e:1f:73:60:2d:ce:79:53:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Nov 20 17:28:38 2025 GMT
            Not After : Nov 21 18:54:38 2025 GMT
        Subject: CN=2CC6EE802471528D19787917998B23E2F2FC5AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:17:80:6d:c3:97:34:c9:48:f3:a8:22:42:ed:
                    41:6f:06:b2:16:c2:95:2d:42:3e:9a:8b:94:fb:a7:
                    82:98:48:bf:43:c6:10:bc:b0:04:be:cd:d6:e2:13:
                    60:54:2e:ea:1a:83:1b:fa:54:af:56:32:a9:95:01:
                    a8:a0:73:15:49:3d:f2:f5:55:e0:1a:dc:49:a6:20:
                    20:57:83:f4:11:43:44:e6:30:c8:7d:6f:77:d2:7b:
                    b1:65:b8:04:f1:98:43:38:b1:d7:96:4b:9b:55:ac:
                    ff:5e:40:5f:5d:ec:0d:3a:1f:a4:be:42:66:cf:09:
                    aa:4f:2b:a3:c5:85:ed:14:e7:d9:69:b9:ab:b3:d6:
                    16:b8:84:8d:d6:d4:cc:a7:f4:ce:41:6b:a4:ab:d5:
                    19:70:68:b6:ca:5c:75:fa:46:ea:c6:25:ea:74:df:
                    3c:ad:b2:e1:21:d3:d3:b1:8b:73:67:66:b9:f7:34:
                    39:57:fe:68:ca:be:1a:3e:1e:e4:48:4d:78:ec:1d:
                    68:b6:2b:5a:0c:e9:83:e3:54:f5:69:5d:93:1f:58:
                    9e:a7:6b:c1:ba:5c:45:b9:c2:6d:02:00:4b:e5:93:
                    7a:1d:05:9a:6c:53:20:ce:7f:eb:4f:5f:e4:9f:c3:
                    7e:32:2f:8c:b0:75:20:dd:36:5a:71:13:d1:7e:f4:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C6:EE:80:24:71:52:8D:19:78:79:17:99:8B:23:E2:F2:FC:5A:AD
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a7:e4:8d:0a:84:9c:88:cc:ea:76:cf:51:58:99:62:3b:f6:
         d7:10:b1:34:12:05:a4:a9:f4:47:e9:8a:ae:fc:f4:8d:78:95:
         2d:2a:31:bf:e7:ce:29:99:21:8f:d5:0b:ef:83:25:d6:f7:d5:
         eb:9b:3b:a3:b0:b0:34:96:93:35:ad:06:26:22:17:b2:a4:09:
         8d:c2:ed:1e:0a:c7:d3:02:ad:41:ce:51:3f:64:2c:85:57:fc:
         a9:8b:71:4e:34:70:87:c9:0b:97:fc:7c:bf:92:fd:6b:61:ae:
         39:72:b9:13:31:3a:44:93:32:fb:79:27:a9:17:6e:dc:e1:81:
         fd:ea:07:a4:49:3f:8c:b3:72:95:7e:5f:72:0d:ce:fd:9e:bb:
         32:ba:bd:0a:5e:f8:c1:a6:b9:49:ef:af:1e:06:fa:88:2f:86:
         11:a9:21:94:4d:44:3b:b9:2d:f8:3c:2b:d3:b8:69:ab:a3:eb:
         42:99:93:68:59:5f:d7:1c:d5:bd:b2:e5:91:9a:33:a5:cc:58:
         b9:7e:b7:09:98:d1:b7:fc:f5:c5:d1:c6:31:70:60:3d:e1:d8:
         5b:ef:f9:58:f1:f2:a5:20:ec:0a:a4:8d:40:1f:8b:6b:6b:44:
         43:9f:af:c3:28:16:37:8d:ae:14:13:92:40:3a:92:05:0f:2d:
         9f:4c:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 20 23:33:41 2025 by rpki-client