This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: VL+YDBjuqFKEJN6hry8Lod+Jb6ch7oV+aoyVpiJFaRc=
Subject key identifier: 31:91:DF:5B:08:C4:3F:28:5C:8F:55:6D:71:60:BD:9A:57:1A:28:ED
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 68745066A4452142EBE6712E2179077955736AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0279
Signing time: Wed 11 Feb 2026 10:43:08 +0000
Manifest this update: Wed 11 Feb 2026 10:38:08 +0000
Manifest next update: Thu 12 Feb 2026 12:57:08 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: cXezOQNujG7ArKOKubVHnnLumcAUW7n2+EtNskuL5UY=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Feb 2026 12:57:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:74:50:66:a4:45:21:42:eb:e6:71:2e:21:79:07:79:55:73:6a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Feb 11 10:38:08 2026 GMT
Not After : Feb 12 12:57:08 2026 GMT
Subject: CN=3191DF5B08C43F285C8F556D7160BD9A571A28ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:52:5e:a1:75:25:ba:70:cf:2c:27:e6:fb:23:
b2:5f:b2:a6:87:31:c6:c7:04:b2:be:71:25:cd:7e:
c2:f9:e1:b0:5e:e7:52:84:91:ac:63:ce:66:f9:8b:
73:f8:af:17:07:b9:85:2c:b0:6d:09:b6:af:5b:3d:
8f:76:5a:65:cc:2c:ad:07:20:86:38:7c:1e:c2:98:
20:20:a0:72:ca:c7:11:63:fe:77:8f:ae:36:3f:6d:
1a:65:b0:d1:57:bd:88:b9:ca:d3:98:fc:5a:09:4c:
31:1a:71:56:eb:ed:2f:60:75:7e:5a:78:81:4f:eb:
5d:87:21:69:3d:70:67:ac:4a:0d:25:56:50:2f:b6:
2b:4f:3c:dd:de:b0:46:c2:74:2f:50:84:83:00:5e:
ff:75:60:49:3d:ca:c2:fd:d5:c6:ff:f9:e7:fc:1c:
5d:6a:c3:83:9c:fb:d0:74:a9:17:cd:5f:09:8c:61:
07:90:bc:b6:84:12:ff:d8:c1:ef:8f:66:19:bf:83:
93:3d:44:14:ec:5c:e7:70:40:75:9b:66:f0:72:a1:
28:1e:55:e0:92:af:aa:e6:ab:30:bb:00:1c:c0:88:
3d:96:76:6a:33:f3:14:56:0c:67:40:05:3e:e2:8a:
dc:e6:c5:77:b8:38:d3:78:cc:1a:cb:61:aa:32:fa:
1a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:91:DF:5B:08:C4:3F:28:5C:8F:55:6D:71:60:BD:9A:57:1A:28:ED
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:60:7b:c0:e5:9a:ac:98:66:95:81:0d:5e:ec:95:d1:03:68:
85:e2:7e:29:e5:96:66:1e:bd:d8:f3:a4:27:14:05:ed:29:47:
25:4b:3f:7e:c2:64:83:ea:ca:cc:d7:2b:93:be:86:be:29:9e:
02:cf:8e:ed:a1:eb:2b:0f:05:2e:93:0b:7a:c5:1e:6e:a8:60:
26:09:c2:1a:dd:63:77:83:71:1d:44:f9:a2:47:17:64:cb:31:
b0:3d:4f:b0:53:b0:98:95:58:6b:a2:91:ac:db:61:90:3a:49:
8e:99:ad:a0:28:00:91:01:ad:30:bd:0f:86:ed:31:95:90:a4:
0a:c9:38:b1:bd:67:78:0d:87:68:97:d3:80:94:e3:99:09:a4:
a5:49:40:2f:da:e1:16:f4:df:08:cb:f6:94:43:97:fa:e3:2a:
66:39:08:50:d6:07:de:00:7c:c9:dc:f2:ca:26:50:ff:52:ae:
2c:49:37:ac:86:00:77:2d:e3:41:dc:43:a9:8f:07:aa:39:25:
c5:df:9f:1c:d8:8b:9b:f0:8e:3c:49:c4:0d:07:6f:f8:de:e9:
ea:88:df:d1:7a:47:1c:b8:8e:e2:01:16:9d:91:39:2d:0e:8f:
66:0d:12:68:10:80:d9:10:5e:c8:4b:05:34:fe:f3:9e:fb:a0:
1f:41:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 11 17:52:09 2026 by rpki-client