This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: ETgFqFY20rfUZ6PGJIFMtbQ8Iq2MdBA+9ujdx/3Q2L4= Subject key identifier: 2F:78:98:C5:B0:56:E9:6C:CF:EC:B4:E8:BA:48:67:52:28:0C:CA:99 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 3180F37492FFD50D81903960522C495AA7AC7C1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0240 Signing time: Tue 30 Dec 2025 09:09:58 +0000 Manifest this update: Tue 30 Dec 2025 09:04:58 +0000 Manifest next update: Wed 31 Dec 2025 12:26:58 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: tRSnla5bdUyzFCPdRWIbtDyhr1L+h7xTPr/iy9r8Nwk=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:80:f3:74:92:ff:d5:0d:81:90:39:60:52:2c:49:5a:a7:ac:7c:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Dec 30 09:04:58 2025 GMT Not After : Dec 31 12:26:58 2025 GMT Subject: CN=2F7898C5B056E96CCFECB4E8BA486752280CCA99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:39:d4:1d:39:3f:0c:d8:5c:5b:d0:1c:f7: 0c:e2:a8:3a:7c:fe:7f:a0:73:26:7e:ba:4e:18:0c: cf:27:f3:79:d6:e7:4f:4e:19:38:9d:1d:eb:48:b9: d6:b5:86:e4:98:a8:51:0f:af:a9:88:a0:7a:ff:d6: 42:20:a0:9d:f5:0b:28:6c:52:2c:c2:fb:9c:53:79: b0:46:ff:22:53:25:c2:e4:c9:9c:7c:5c:d6:1c:47: 0a:d5:70:f6:34:74:20:d0:6d:8a:a2:e9:29:7a:a8: 97:bd:9b:0c:bd:e9:52:c2:4d:a3:ae:56:08:3f:d9: 52:e5:4f:8f:62:ea:b8:79:61:39:ca:a7:10:46:bd: a7:a5:31:f2:21:4a:25:78:88:ec:b4:58:c4:85:3f: d1:99:58:fa:83:a9:7a:7f:2d:6a:89:9a:a6:3f:ca: a6:0c:da:51:c2:63:b0:aa:f4:00:80:90:4b:11:90: 8d:6b:09:dd:47:d7:93:0a:e3:b7:5e:e0:78:50:34: 44:92:30:7c:ba:55:34:76:12:e1:be:36:3c:70:62: 88:83:8f:7c:f4:e5:1b:27:c9:74:5b:3b:e4:37:33: e1:23:31:ef:01:ef:c1:64:65:a1:16:09:7f:51:60: 20:25:83:c3:97:b3:94:93:1a:ca:b4:5c:ea:0e:c8: f0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:78:98:C5:B0:56:E9:6C:CF:EC:B4:E8:BA:48:67:52:28:0C:CA:99 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:0e:af:99:be:6f:96:61:03:2b:f0:6c:c0:e0:53:fa:04:b9: 6e:d6:9a:25:2c:18:8e:fe:41:82:d3:04:cb:ee:28:d2:06:a3: cc:b3:c2:4f:52:55:60:11:77:20:2a:f4:73:39:48:48:a1:a0: 8e:cd:8b:07:cf:bc:e1:59:de:5c:6a:67:23:0a:11:cf:6a:ab: 2d:03:8b:b0:38:78:52:51:fc:80:bd:10:f5:b4:8e:2d:33:56: e8:50:25:13:dd:5d:9d:74:3e:41:3e:32:44:42:1f:03:eb:46: 39:e0:13:19:e7:e2:eb:ae:86:30:29:b6:9e:5f:d6:2f:87:ab: c1:e6:1d:94:61:44:2f:0e:eb:a1:a2:43:88:c6:eb:a3:83:e2: d5:3d:1d:35:5a:7a:e5:f4:c0:50:c4:30:ef:e0:b1:65:81:a0: 40:45:d9:01:aa:ec:4e:02:1c:f5:33:e3:07:d9:98:b0:b3:e2: 68:62:cb:de:b3:a8:2a:1b:02:7b:2e:1a:b0:ce:7c:21:bd:27: 26:03:98:be:81:8b:61:83:a1:09:87:e7:65:66:6c:91:da:fc: 6d:d2:ee:bf:db:7b:8c:a1:a9:2f:a1:5a:fb:45:2d:89:01:3f: d8:a4:d3:34:cb:2b:90:e8:58:a6:29:e8:0e:70:75:3d:2d:52: e4:4b:38:d7 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUMYDzdJL/1Q2BkDlgUixJWqesfBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTEyMzAwOTA0NThaFw0yNTEyMzExMjI2NThaMDMxMTAvBgNV BAMTKDJGNzg5OEM1QjA1NkU5NkNDRkVDQjRFOEJBNDg2NzUyMjgwQ0NBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzNjnUHTk/DNhcW9Ac9wziqDp8 /n+gcyZ+uk4YDM8n83nW509OGTidHetIuda1huSYqFEPr6mIoHr/1kIgoJ31Cyhs UizC+5xTebBG/yJTJcLkyZx8XNYcRwrVcPY0dCDQbYqi6Sl6qJe9mwy96VLCTaOu Vgg/2VLlT49i6rh5YTnKpxBGvaelMfIhSiV4iOy0WMSFP9GZWPqDqXp/LWqJmqY/ yqYM2lHCY7Cq9ACAkEsRkI1rCd1H15MK47de4HhQNESSMHy6VTR2EuG+NjxwYoiD j3z05RsnyXRbO+Q3M+EjMe8B78FkZaEWCX9RYCAlg8OXs5STGsq0XOoOyPArAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUL3iYxbBW6WzP7LToukhnUigMypkwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAVQ6vmb5vlmEDK/BswOBT+gS5btaaJSwYjv5BgtMEy+4o0gajzLPCT1JV YBF3ICr0czlISKGgjs2LB8+84VneXGpnIwoRz2qrLQOLsDh4UlH8gL0Q9bSOLTNW 6FAlE91dnXQ+QT4yREIfA+tGOeATGefi666GMCm2nl/WL4erweYdlGFELw7roaJD iMbro4Pi1T0dNVp65fTAUMQw7+CxZYGgQEXZAarsTgIc9TPjB9mYsLPiaGLL3rOo KhsCey4asM58Ib0nJgOYvoGLYYOhCYfnZWZskdr8bdLuv9t7jKGpL6Fa+0UtiQE/ 2KTTNMsrkOhYpinoDnB1PS1S5Es41w== -----END CERTIFICATE-----Generated at Tue Dec 30 14:54:00 2025 by rpki-client