This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: m/qe+7WDRgF5dXkOM6DHInUWb0Au1Yz1Z6Qflct9xQg= Subject key identifier: 4F:EA:3D:52:F0:E7:C1:51:87:11:53:B6:B4:A3:48:9D:DE:41:4B:18 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 30A7279504633C93600048E32BD2546940878E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0214 Signing time: Thu 27 Nov 2025 10:58:44 +0000 Manifest this update: Thu 27 Nov 2025 10:53:44 +0000 Manifest next update: Fri 28 Nov 2025 14:23:44 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Hvd8o7dOZVpZu6X0JSrcdBfjpluRsMxxfHndQiP/iIU=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 14:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a7:27:95:04:63:3c:93:60:00:48:e3:2b:d2:54:69:40:87:8e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 27 10:53:44 2025 GMT Not After : Nov 28 14:23:44 2025 GMT Subject: CN=4FEA3D52F0E7C151871153B6B4A3489DDE414B18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:84:ea:7a:ad:2c:0b:5f:52:2a:e1:ce:f4: 53:96:e6:18:85:3b:29:5a:fb:64:4f:e3:87:fb:6e: d3:d3:22:ba:8b:fa:15:e1:9b:ae:9f:43:0f:b6:19: 34:ee:c6:c5:30:4f:5d:b1:87:96:17:f9:3b:d2:81: fd:e1:7e:2e:61:7c:e0:fc:e1:e7:18:47:bf:27:aa: f2:36:1e:e2:94:7a:d4:da:48:49:c0:04:2f:50:0b: 2a:92:17:f4:72:5d:73:e2:d4:d0:dc:08:59:00:8f: 4b:fb:a4:fb:9e:6f:11:60:5a:f8:18:d3:fc:40:c1: ad:39:28:05:b3:5f:fa:5b:90:63:49:fc:32:9e:f0: 11:8f:21:e6:ef:54:c9:d2:ca:b4:ff:0c:4b:bb:e3: c2:cd:bf:f1:73:a0:96:fe:76:6b:57:49:5a:eb:73: a8:1c:47:f9:06:d2:09:c9:39:54:8e:1f:4c:1f:05: 06:21:d7:a4:77:37:b4:c9:a3:27:00:9d:b4:76:62: a3:c5:5a:e7:a7:8b:df:db:09:4e:e7:84:99:4e:49: d9:4c:a5:49:90:ef:92:ba:05:66:71:7e:45:11:c3: c1:0c:13:22:91:29:ef:e7:7b:a7:5b:e0:5a:fb:36: cc:4a:59:13:86:a4:ee:4d:db:8a:f4:ea:13:88:24: 54:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EA:3D:52:F0:E7:C1:51:87:11:53:B6:B4:A3:48:9D:DE:41:4B:18 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:5d:7d:13:1f:6d:ec:f5:96:05:54:0a:44:21:c9:1e:82:f6: fa:50:fc:c9:6f:5a:b7:d8:76:87:86:05:56:16:f0:13:6e:a8: 14:0a:b3:87:bf:58:09:be:7c:71:7b:71:4d:0e:c7:ba:21:6e: b9:b6:92:36:30:8b:0b:4d:d9:8a:f2:59:db:e0:60:70:b5:16: 42:1f:79:0a:e4:1c:9d:79:be:d6:e0:0d:43:53:e0:57:46:04: 8e:73:a4:3d:3f:b2:eb:c4:b8:71:63:07:ef:8c:74:e1:f7:b3: 18:31:db:be:87:21:99:40:fd:71:f9:2b:8f:cd:fa:c3:2f:99: 12:58:88:19:b3:58:a8:5e:c9:87:1e:77:ef:85:93:d3:7b:2d: 51:9e:3b:2b:1d:8e:1c:90:9c:9a:8e:16:ce:9c:76:a8:a1:d2: 16:9a:5f:1a:71:bc:62:f4:b3:93:6d:e5:7b:6d:e5:24:6c:fe: 8d:b1:de:05:29:94:76:2a:79:fb:4f:b3:9a:4e:4a:34:f7:69: 51:bb:78:9d:c1:2c:c9:a1:f3:c4:13:7e:35:7c:e5:ea:4f:2a: 5d:16:ff:1f:3e:be:28:68:41:06:e1:57:97:fd:56:57:1a:c4: 0c:e7:72:a6:06:c9:6f:7a:b8:4f:10:37:1d:2a:b6:b8:02:d3: 41:f8:81:76 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUMKcnlQRjPJNgAEjjK9JUaUCHjg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMjcxMDUzNDRaFw0yNTExMjgxNDIzNDRaMDMxMTAvBgNV BAMTKDRGRUEzRDUyRjBFN0MxNTE4NzExNTNCNkI0QTM0ODlEREU0MTRCMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfroTqeq0sC19SKuHO9FOW5hiF Oyla+2RP44f7btPTIrqL+hXhm66fQw+2GTTuxsUwT12xh5YX+TvSgf3hfi5hfOD8 4ecYR78nqvI2HuKUetTaSEnABC9QCyqSF/RyXXPi1NDcCFkAj0v7pPuebxFgWvgY 0/xAwa05KAWzX/pbkGNJ/DKe8BGPIebvVMnSyrT/DEu748LNv/FzoJb+dmtXSVrr c6gcR/kG0gnJOVSOH0wfBQYh16R3N7TJoycAnbR2YqPFWueni9/bCU7nhJlOSdlM pUmQ75K6BWZxfkURw8EMEyKRKe/ne6db4Fr7NsxKWROGpO5N24r06hOIJFTxAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUT+o9UvDnwVGHEVO2tKNInd5BSxgwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEApF19Ex9t7PWWBVQKRCHJHoL2+lD8yW9at9h2h4YFVhbwE26oFAqzh79Y Cb58cXtxTQ7HuiFuubaSNjCLC03ZivJZ2+BgcLUWQh95CuQcnXm+1uANQ1PgV0YE jnOkPT+y68S4cWMH74x04fezGDHbvochmUD9cfkrj836wy+ZEliIGbNYqF7Jhx53 74WT03stUZ47Kx2OHJCcmo4Wzpx2qKHSFppfGnG8YvSzk23le23lJGz+jbHeBSmU dip5+0+zmk5KNPdpUbt4ncEsyaHzxBN+NXzl6k8qXRb/Hz6+KGhBBuFXl/1WVxrE DOdypgbJb3q4TxA3HSq2uALTQfiBdg== -----END CERTIFICATE-----Generated at Fri Nov 28 03:44:55 2025 by rpki-client