This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: mWVoHtJRMEHEnFxpun/jcTrXIfPB3AjZ1Fi5gm2LOGc= Subject key identifier: 89:A1:44:D5:68:54:57:E6:03:9A:CE:79:3B:F0:88:38:B7:F0:CF:1D Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 43FDA8A702A85A526975850E379C1068ECEEA8DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 024C Signing time: Thu 08 Jan 2026 09:20:25 +0000 Manifest this update: Thu 08 Jan 2026 09:15:25 +0000 Manifest next update: Fri 09 Jan 2026 13:14:25 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: urmhbG7wg6dUPdzz32NnN1aOYCiq2yIGw/LxAlKkJnQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 13:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:fd:a8:a7:02:a8:5a:52:69:75:85:0e:37:9c:10:68:ec:ee:a8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Jan 8 09:15:25 2026 GMT Not After : Jan 9 13:14:25 2026 GMT Subject: CN=89A144D5685457E6039ACE793BF08838B7F0CF1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d6:f2:5d:1b:90:98:a0:0d:45:2c:0d:cf:b1: 12:2a:ea:3e:71:22:21:c6:21:ca:af:ac:14:dc:c5: 7e:92:f7:49:6a:52:06:01:23:e5:0c:ca:e0:9e:1b: 23:55:88:73:36:53:b6:40:a7:4c:28:56:5f:bc:7d: 37:9a:c0:ce:97:3d:0a:7b:37:17:fa:ba:97:57:d7: 3a:86:fe:78:f1:83:d7:d0:fd:3d:35:3e:b5:43:79: 96:41:77:71:7a:10:9d:68:21:84:ba:5e:78:76:aa: 6e:81:32:1d:5c:51:86:92:bf:92:72:cd:70:d1:a4: eb:0b:3d:bb:c6:27:ad:28:08:4b:72:1c:fa:96:df: 31:5a:29:5c:fe:43:ef:8c:ef:20:1d:d0:2c:55:63: d2:02:96:af:4f:ff:ac:ec:42:4a:e7:18:1d:25:7b: 96:71:33:18:26:b8:ef:c3:e0:a7:6f:ac:e1:0c:ef: 95:28:a8:96:de:c7:a3:a9:a1:5e:ce:9a:fa:86:f6: 8f:4a:98:ed:9f:db:60:8e:04:4f:4e:23:b3:80:7a: 25:52:2d:15:02:38:a6:3e:19:e3:94:89:4e:43:ba: bc:33:af:45:58:b7:02:ad:af:f9:c0:bf:f7:8e:7f: 51:bf:24:0b:95:41:53:7f:57:ad:af:e1:8b:21:06: 7a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A1:44:D5:68:54:57:E6:03:9A:CE:79:3B:F0:88:38:B7:F0:CF:1D X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d6:da:6c:1d:1d:5d:27:cd:be:cd:64:35:95:f2:4e:22:97: 89:3e:c9:7c:64:e6:d0:89:c6:09:03:c3:19:fa:05:05:d7:d2: 99:15:3b:b6:25:ff:2e:72:96:58:17:a6:f3:a8:eb:29:a4:53: 56:23:2d:81:b1:d4:a4:5f:b8:bc:ce:fa:96:cc:3d:e4:c7:5d: d5:c4:b0:3f:8f:cf:a0:a8:df:7b:76:52:83:51:e4:67:c5:b8: 1e:ea:3c:c2:b9:60:8b:48:0e:67:86:1d:84:91:c5:f2:54:a3: 53:79:d2:d4:63:45:d6:f0:17:ed:af:4c:b1:39:e6:c6:14:c0: 61:06:d5:d6:77:c6:02:e3:5b:c3:19:74:34:c3:3b:f2:5a:22: bf:81:5e:45:f7:b0:6d:bc:b4:25:b0:d6:81:dd:1e:66:21:52: ec:8b:69:d8:0d:45:53:f1:fe:38:6d:c1:03:a4:b6:0f:d2:c0: b7:d8:3c:5e:c6:5d:01:9c:26:97:9f:88:26:62:a5:51:da:9b: 09:a4:bf:ce:ca:a6:eb:10:d4:74:68:63:8c:78:65:6e:c8:d9: df:5c:36:78:93:8c:ed:03:f0:6a:6a:3c:61:8b:52:f6:42:a5: 3b:35:bb:60:84:63:5b:85:8a:8f:23:7a:6e:ef:ce:e9:68:55: 6b:73:dc:f1 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUQ/2opwKoWlJpdYUON5wQaOzuqNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNjAxMDgwOTE1MjVaFw0yNjAxMDkxMzE0MjVaMDMxMTAvBgNV BAMTKDg5QTE0NEQ1Njg1NDU3RTYwMzlBQ0U3OTNCRjA4ODM4QjdGMENGMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe1vJdG5CYoA1FLA3PsRIq6j5x IiHGIcqvrBTcxX6S90lqUgYBI+UMyuCeGyNViHM2U7ZAp0woVl+8fTeawM6XPQp7 Nxf6updX1zqG/njxg9fQ/T01PrVDeZZBd3F6EJ1oIYS6Xnh2qm6BMh1cUYaSv5Jy zXDRpOsLPbvGJ60oCEtyHPqW3zFaKVz+Q++M7yAd0CxVY9IClq9P/6zsQkrnGB0l e5ZxMxgmuO/D4KdvrOEM75UoqJbex6OpoV7OmvqG9o9KmO2f22COBE9OI7OAeiVS LRUCOKY+GeOUiU5Durwzr0VYtwKtr/nAv/eOf1G/JAuVQVN/V62v4YshBnq1AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUiaFE1WhUV+YDms55O/CIOLfwzx0wHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAc9babB0dXSfNvs1kNZXyTiKXiT7JfGTm0InGCQPDGfoFBdfSmRU7tiX/ LnKWWBem86jrKaRTViMtgbHUpF+4vM76lsw95Mdd1cSwP4/PoKjfe3ZSg1HkZ8W4 Huo8wrlgi0gOZ4YdhJHF8lSjU3nS1GNF1vAX7a9MsTnmxhTAYQbV1nfGAuNbwxl0 NMM78loiv4FeRfewbby0JbDWgd0eZiFS7Itp2A1FU/H+OG3BA6S2D9LAt9g8XsZd AZwml5+IJmKlUdqbCaS/zsqm6xDUdGhjjHhlbsjZ31w2eJOM7QPwamo8YYtS9kKl OzW7YIRjW4WKjyN6bu/O6WhVa3Pc8Q== -----END CERTIFICATE-----Generated at Fri Jan 9 02:09:44 2026 by rpki-client