This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: F1VNXmycG+GcrVPcmsET2Z/yr+7g4Cei6hBPjC+4eYw= Subject key identifier: 84:A4:4C:6F:79:5A:59:7B:CC:EE:27:AC:46:52:4C:F2:48:B1:E0:08 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 69A27CDB7870505B6309FB32B75099F2D9904437 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0218 Signing time: Sun 30 Nov 2025 12:18:49 +0000 Manifest this update: Sun 30 Nov 2025 12:13:49 +0000 Manifest next update: Mon 01 Dec 2025 13:39:49 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 7L0f8QTbI3EPm4Dd6aO8ZAujS5gohTDxJ7/2v5S2plk=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a2:7c:db:78:70:50:5b:63:09:fb:32:b7:50:99:f2:d9:90:44:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 30 12:13:49 2025 GMT Not After : Dec 1 13:39:49 2025 GMT Subject: CN=84A44C6F795A597BCCEE27AC46524CF248B1E008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b7:95:d9:69:e6:6d:26:2e:32:90:d9:ef:d3: e2:3f:8b:76:e3:9b:0b:80:99:99:f9:2c:bb:7a:5c: 35:23:81:9b:9a:96:ca:c9:88:ec:75:98:82:16:52: 82:5c:c6:36:82:42:73:c4:28:38:97:9a:47:08:d5: 7e:68:91:6e:bf:dd:ad:0a:d9:a5:ff:ee:bf:f6:fc: 4e:de:77:ac:7e:cf:74:be:29:2a:d0:9c:b4:ac:cb: a3:63:04:8b:55:04:4d:2d:5a:cf:8d:3a:53:9b:9e: 0d:03:66:34:f7:3a:62:ae:db:3f:99:57:39:57:7f: b6:b3:ba:d1:f7:d4:52:f7:60:48:8c:75:e3:5f:06: 99:0f:3c:18:d4:63:ad:34:40:21:cd:0c:76:59:a8: 72:d9:65:85:94:c0:a5:18:9c:17:60:15:b5:23:8f: 77:bc:73:77:22:a2:c0:ff:a7:e5:11:4b:8c:08:f8: 83:36:fb:fa:79:1f:d8:65:06:a1:3b:bf:55:95:1b: b5:3e:73:42:c4:93:bd:2e:63:3d:b8:4d:24:ea:33: a2:d2:11:6a:53:64:b8:65:54:b5:1d:47:b9:fa:23: 44:05:6b:1a:04:01:94:b4:dc:0c:84:4a:7e:9d:47: 7b:ef:39:5c:57:f9:1e:b9:1c:5f:00:37:f1:0b:71: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A4:4C:6F:79:5A:59:7B:CC:EE:27:AC:46:52:4C:F2:48:B1:E0:08 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0c:40:38:4d:e1:49:92:ff:8a:c7:a4:1e:9b:9d:0d:e8:c5: dd:65:04:8e:f8:83:04:3f:9b:c7:8f:74:2e:92:fb:70:f4:00: 3a:7a:85:6c:10:ac:fd:c6:83:a5:46:32:9b:6d:dc:31:ae:4d: 51:ba:78:15:14:30:c6:65:8d:7a:a4:a5:af:7a:c2:8f:f9:67: a7:bf:1f:d2:0b:d8:2d:21:43:99:38:a4:d4:50:2d:eb:0c:b1: 9e:42:ce:8d:8a:4b:94:38:76:9d:b7:6a:47:db:12:77:dc:ba: b6:19:52:2b:ea:1d:07:d6:32:7a:14:16:9f:02:85:67:13:3e: 58:bc:45:8a:1f:64:52:8b:d7:7e:2a:b7:8e:62:62:c1:bb:d5: 97:35:29:73:35:b0:54:90:27:55:70:2b:da:86:64:01:45:a7: 06:2e:c6:60:69:a4:3c:cf:f5:54:2c:9c:97:35:06:df:16:63: d8:4b:e8:f6:56:36:7d:a5:56:bb:39:68:e6:58:18:45:ef:53: fd:64:73:59:89:96:07:18:f3:f2:6a:05:58:04:58:6b:4e:5b: b5:a3:ad:e5:c0:6b:02:d9:bc:ce:13:b9:bd:c6:aa:06:f9:5d: 90:8f:d0:ee:57:e6:10:25:69:e6:78:3f:a1:f6:87:ec:05:b0: 2f:e7:e3:ea -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUaaJ823hwUFtjCfsyt1CZ8tmQRDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMzAxMjEzNDlaFw0yNTEyMDExMzM5NDlaMDMxMTAvBgNV BAMTKDg0QTQ0QzZGNzk1QTU5N0JDQ0VFMjdBQzQ2NTI0Q0YyNDhCMUUwMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbt5XZaeZtJi4ykNnv0+I/i3bj mwuAmZn5LLt6XDUjgZualsrJiOx1mIIWUoJcxjaCQnPEKDiXmkcI1X5okW6/3a0K 2aX/7r/2/E7ed6x+z3S+KSrQnLSsy6NjBItVBE0tWs+NOlObng0DZjT3OmKu2z+Z VzlXf7azutH31FL3YEiMdeNfBpkPPBjUY600QCHNDHZZqHLZZYWUwKUYnBdgFbUj j3e8c3ciosD/p+URS4wI+IM2+/p5H9hlBqE7v1WVG7U+c0LEk70uYz24TSTqM6LS EWpTZLhlVLUdR7n6I0QFaxoEAZS03AyESn6dR3vvOVxX+R65HF8AN/ELcQi5AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUhKRMb3laWXvM7iesRlJM8kix4AgwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAOwxAOE3hSZL/isekHpudDejF3WUEjviDBD+bx490LpL7cPQAOnqFbBCs /caDpUYym23cMa5NUbp4FRQwxmWNeqSlr3rCj/lnp78f0gvYLSFDmTik1FAt6wyx nkLOjYpLlDh2nbdqR9sSd9y6thlSK+odB9YyehQWnwKFZxM+WLxFih9kUovXfiq3 jmJiwbvVlzUpczWwVJAnVXAr2oZkAUWnBi7GYGmkPM/1VCyclzUG3xZj2Evo9lY2 faVWuzlo5lgYRe9T/WRzWYmWBxjz8moFWARYa05btaOt5cBrAtm8zhO5vcaqBvld kI/Q7lfmECVp5ng/ofaH7AWwL+fj6g== -----END CERTIFICATE-----Generated at Sun Nov 30 20:46:49 2025 by rpki-client