This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: IQVyn+t60Zt/F7qWUOzmvKbaRqo8yWT9CWKVx7tTj40= Subject key identifier: DF:60:14:3A:E0:C6:E3:C2:86:EE:19:49:3D:B8:C8:F8:E2:61:84:EF Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 3617F5A8702AA1BB9BE8E6794C461110FF2E603C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0208 Signing time: Tue 18 Nov 2025 11:33:38 +0000 Manifest this update: Tue 18 Nov 2025 11:28:38 +0000 Manifest next update: Wed 19 Nov 2025 15:27:38 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: ZRCDkc0zOKvqdQ5WQRX5TBb/oKuqs2mgF5C4rpg1YWQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 19 Nov 2025 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:17:f5:a8:70:2a:a1:bb:9b:e8:e6:79:4c:46:11:10:ff:2e:60:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 18 11:28:38 2025 GMT Not After : Nov 19 15:27:38 2025 GMT Subject: CN=DF60143AE0C6E3C286EE19493DB8C8F8E26184EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:65:ef:08:72:2c:05:ee:fe:99:79:31:4b:5c: 88:d8:2e:de:8a:b3:42:b1:5c:4f:2c:19:10:2e:65: a5:8a:a3:3c:4b:1e:48:ad:45:75:4d:aa:bb:45:21: 8e:8d:92:7e:ae:45:65:bd:cc:ac:e3:93:ed:9c:dd: 0a:99:c5:53:a1:de:19:96:f4:36:ff:ab:d3:16:b1: b3:13:ae:ed:fe:1f:52:ad:fc:e0:4a:ff:77:61:31: e0:44:9f:40:1d:6e:4b:bd:1c:7f:18:e2:26:ff:76: 80:a9:8f:f0:2b:70:08:95:bb:51:59:be:e4:5c:33: 44:89:e1:16:6a:84:8d:82:8b:61:b1:4a:1a:c5:d8: 3b:3f:6a:c6:e4:a3:d0:5e:98:d2:3d:bd:66:b8:ea: 65:08:7d:ae:cb:4c:90:07:7c:03:ab:5c:66:0c:b4: a7:a0:b5:f8:17:53:f4:54:ca:da:4e:96:b4:ec:55: 2f:de:c2:76:2e:d0:1b:93:47:1e:a7:7a:18:2c:9e: 2b:79:19:35:81:ab:0f:5c:90:35:ae:34:76:80:6c: 19:33:9c:e3:5b:ce:40:d2:b0:8f:dc:43:01:ad:f0: ea:92:cb:25:14:8a:e1:6a:c3:bf:4f:21:83:72:7b: 43:ed:fa:01:e2:97:6f:2f:84:cd:02:97:18:5a:6c: 38:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:60:14:3A:E0:C6:E3:C2:86:EE:19:49:3D:B8:C8:F8:E2:61:84:EF X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f2:f2:bb:9f:5f:9a:35:1d:9f:1a:09:f4:12:07:bd:11:5a: 5a:45:12:de:ff:5e:b9:96:2d:e4:8b:0a:9c:83:99:bd:9d:dc: 23:08:0b:f3:c2:43:34:2f:31:66:51:17:69:2f:61:f4:84:ab: 44:96:ba:a5:b5:40:62:97:bd:26:96:eb:24:0e:0d:60:91:89: 69:b3:70:a7:e2:61:15:1e:33:83:cd:ed:e3:16:cb:71:dd:21: 89:04:ae:ad:4d:90:9f:ea:e0:5f:cf:e0:28:32:f5:fd:07:3c: 54:0a:7d:68:f0:0e:2a:6b:33:0d:eb:ed:8e:14:e2:73:04:d9: 94:73:6c:6f:3d:25:c7:15:e0:89:56:97:7b:41:72:37:e3:2e: 65:8d:5f:02:a9:07:7e:f5:27:cd:23:cb:78:53:1e:d3:79:aa: 72:e8:00:dd:4b:ee:45:a4:9f:03:1d:f4:d2:8c:30:28:e1:a9: 5c:44:7e:79:46:e5:38:04:45:4c:13:c8:fb:ad:f6:c5:6e:67: 47:86:2d:9f:03:4b:90:a3:25:f1:1a:d2:22:03:39:7b:5e:3a: 62:5f:f1:98:69:a1:70:31:ed:0a:9a:21:83:43:de:1e:eb:4b: 8d:bb:66:ff:84:2b:02:02:e5:00:b8:8f:69:b6:a7:88:db:16: fa:80:30:d7 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUNhf1qHAqobub6OZ5TEYREP8uYDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMTgxMTI4MzhaFw0yNTExMTkxNTI3MzhaMDMxMTAvBgNV BAMTKERGNjAxNDNBRTBDNkUzQzI4NkVFMTk0OTNEQjhDOEY4RTI2MTg0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZe8IciwF7v6ZeTFLXIjYLt6K s0KxXE8sGRAuZaWKozxLHkitRXVNqrtFIY6Nkn6uRWW9zKzjk+2c3QqZxVOh3hmW 9Db/q9MWsbMTru3+H1Kt/OBK/3dhMeBEn0Adbku9HH8Y4ib/doCpj/ArcAiVu1FZ vuRcM0SJ4RZqhI2Ci2GxShrF2Ds/asbko9BemNI9vWa46mUIfa7LTJAHfAOrXGYM tKegtfgXU/RUytpOlrTsVS/ewnYu0BuTRx6nehgsnit5GTWBqw9ckDWuNHaAbBkz nONbzkDSsI/cQwGt8OqSyyUUiuFqw79PIYNye0Pt+gHil28vhM0ClxhabDghAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU32AUOuDG48KG7hlJPbjI+OJhhO8wHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAuPLyu59fmjUdnxoJ9BIHvRFaWkUS3v9euZYt5IsKnIOZvZ3cIwgL88JD NC8xZlEXaS9h9ISrRJa6pbVAYpe9JpbrJA4NYJGJabNwp+JhFR4zg83t4xbLcd0h iQSurU2Qn+rgX8/gKDL1/Qc8VAp9aPAOKmszDevtjhTicwTZlHNsbz0lxxXgiVaX e0FyN+MuZY1fAqkHfvUnzSPLeFMe03mqcugA3UvuRaSfAx300owwKOGpXER+eUbl OARFTBPI+632xW5nR4YtnwNLkKMl8RrSIgM5e146Yl/xmGmhcDHtCpohg0PeHutL jbtm/4QrAgLlALiPabaniNsW+oAw1w== -----END CERTIFICATE-----Generated at Tue Nov 18 14:27:16 2025 by rpki-client