This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: 09gC5NnWwgnWv6U1KObcOhf6lhJpO4LeLzyyV47ZrS4= Subject key identifier: 1E:21:AB:BE:AF:AE:D5:30:67:7D:30:E3:46:6D:BC:94:A8:0F:D6:20 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 7C38979E1B7EE467EB2AAE5B6EFDAFBDC60D966D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0252 Signing time: Tue 13 Jan 2026 03:51:00 +0000 Manifest this update: Tue 13 Jan 2026 03:46:00 +0000 Manifest next update: Wed 14 Jan 2026 07:35:00 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: KCu+exjNKzSrYDcs8Pb4NgpIYoLcBp1PPK4P0D+YzUw=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 01:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:38:97:9e:1b:7e:e4:67:eb:2a:ae:5b:6e:fd:af:bd:c6:0d:96:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Jan 13 03:46:00 2026 GMT Not After : Jan 14 07:35:00 2026 GMT Subject: CN=1E21ABBEAFAED530677D30E3466DBC94A80FD620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:26:ff:27:87:6d:9e:6f:bb:31:87:42:ff: 6d:2e:68:4b:14:d0:a0:a1:56:38:2e:71:a2:09:5e: ff:74:9f:9a:f3:38:4a:78:52:a7:a6:30:4b:bd:cb: 4f:6c:a2:07:e7:cb:b6:5a:2d:24:1b:53:1b:f3:e9: d2:3c:f7:34:b3:6a:68:12:2d:24:7b:00:7c:8c:33: 76:c7:0d:ee:03:dc:5e:d9:8e:de:7c:8a:9b:57:57: d8:4f:a8:6b:42:5b:53:95:23:12:e6:2f:6c:49:c9: fc:5f:36:f6:08:f6:c2:38:5d:00:cd:f0:8e:63:6f: 24:ed:bd:63:72:a2:06:bb:be:e7:47:0a:3d:fa:93: 12:89:98:9d:28:73:41:e6:ad:bf:27:53:a7:65:53: cd:90:f2:99:58:73:70:b3:d3:7a:8e:ba:c6:06:5a: 8c:1f:22:2b:3b:74:40:0a:af:e1:ec:64:38:70:e5: 80:71:93:e1:0e:18:26:f4:b9:fe:53:35:39:46:72: a4:09:0b:46:0a:cf:a0:01:03:1b:50:15:20:f1:35: 52:26:17:a0:0e:82:3c:c4:bc:61:05:44:39:e4:2e: 8a:41:02:aa:86:ea:c2:a4:ff:7c:f8:c5:07:8d:a7: 41:52:37:c9:37:68:64:32:dd:0e:ce:5a:a6:9a:fe: 30:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:21:AB:BE:AF:AE:D5:30:67:7D:30:E3:46:6D:BC:94:A8:0F:D6:20 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:93:fd:8c:12:59:0f:21:ab:e0:85:c4:20:d9:93:bc:1a:6e: 71:70:7b:b6:b4:58:a1:f1:e3:cc:f4:f0:23:fb:d9:c7:bf:de: 7d:e2:3d:2b:8b:e8:e5:d4:72:59:e0:c7:59:2c:44:ef:5b:a2: b0:cf:42:db:45:ed:4f:29:e7:96:af:a8:23:d3:e8:a2:7d:1e: 05:cd:93:c2:c0:9a:1d:08:07:8c:63:85:39:28:fa:b8:7c:9b: 39:5e:d9:b3:1f:eb:90:85:c9:6c:14:af:d6:85:26:c5:37:5a: 69:32:a3:57:a9:61:88:a3:0d:52:7b:87:d1:22:54:3d:aa:47: 96:c7:69:1c:aa:3f:59:1d:9d:bd:0d:bb:05:84:39:ac:0b:15: 19:19:0e:f6:49:07:97:60:4d:1a:fb:c3:db:5b:a0:f2:fa:c2: 4f:bc:11:8a:cc:bd:97:c0:11:18:59:ef:0f:b9:9f:c2:12:78: cf:92:bf:7a:92:15:68:4f:cc:78:32:31:47:64:4b:aa:c7:d8: b1:04:2e:7f:a8:11:97:f5:cd:5f:67:0d:3e:fc:0b:e7:f2:77: ec:27:65:9f:44:9c:ee:c2:7e:ae:0b:b8:ff:cc:dd:66:d0:95: a1:6e:14:9d:cf:cd:9b:cd:c7:a3:27:d5:bc:fb:fc:6b:84:39: b8:21:c3:93 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUfDiXnht+5GfrKq5bbv2vvcYNlm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNjAxMTMwMzQ2MDBaFw0yNjAxMTQwNzM1MDBaMDMxMTAvBgNV BAMTKDFFMjFBQkJFQUZBRUQ1MzA2NzdEMzBFMzQ2NkRCQzk0QTgwRkQ2MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6yb/J4dtnm+7MYdC/20uaEsU 0KChVjgucaIJXv90n5rzOEp4UqemMEu9y09sogfny7ZaLSQbUxvz6dI89zSzamgS LSR7AHyMM3bHDe4D3F7Zjt58iptXV9hPqGtCW1OVIxLmL2xJyfxfNvYI9sI4XQDN 8I5jbyTtvWNyoga7vudHCj36kxKJmJ0oc0Hmrb8nU6dlU82Q8plYc3Cz03qOusYG WowfIis7dEAKr+HsZDhw5YBxk+EOGCb0uf5TNTlGcqQJC0YKz6ABAxtQFSDxNVIm F6AOgjzEvGEFRDnkLopBAqqG6sKk/3z4xQeNp0FSN8k3aGQy3Q7OWqaa/jAzAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUHiGrvq+u1TBnfTDjRm28lKgP1iAwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAD5P9jBJZDyGr4IXEINmTvBpucXB7trRYofHjzPTwI/vZx7/efeI9K4vo 5dRyWeDHWSxE71uisM9C20XtTynnlq+oI9Poon0eBc2TwsCaHQgHjGOFOSj6uHyb OV7Zsx/rkIXJbBSv1oUmxTdaaTKjV6lhiKMNUnuH0SJUPapHlsdpHKo/WR2dvQ27 BYQ5rAsVGRkO9kkHl2BNGvvD21ug8vrCT7wRisy9l8ARGFnvD7mfwhJ4z5K/epIV aE/MeDIxR2RLqsfYsQQuf6gRl/XNX2cNPvwL5/J37Cdln0Sc7sJ+rgu4/8zdZtCV oW4Unc/Nm83HoyfVvPv8a4Q5uCHDkw== -----END CERTIFICATE-----Generated at Tue Jan 13 05:49:40 2026 by rpki-client