This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: IJNiZXEqm8sAyOUzIPm/+186clpSIgdK6LDUzR0qlSo= Subject key identifier: 18:C2:69:5C:5E:A1:36:77:78:E4:F7:ED:69:99:B8:37:A3:92:41:BD Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 6D6B67CA98ADA38630BE537624DB90CBDECCB593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 025D Signing time: Wed 21 Jan 2026 16:21:35 +0000 Manifest this update: Wed 21 Jan 2026 16:16:35 +0000 Manifest next update: Thu 22 Jan 2026 20:00:35 +0000 Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: aFk63PUXpLQ959s12hH3zPShdLxUfMG50yURzwZFSkk=) 2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:6b:67:ca:98:ad:a3:86:30:be:53:76:24:db:90:cb:de:cc:b5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Jan 21 16:16:35 2026 GMT Not After : Jan 22 20:00:35 2026 GMT Subject: CN=18C2695C5EA1367778E4F7ED6999B837A39241BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b0:f6:b1:05:c8:b5:7d:13:06:27:87:e4:72: aa:f5:fd:46:63:b8:fc:a4:2c:ef:4c:79:f9:29:74: 51:f8:a2:af:fe:72:8b:e7:31:74:bd:7a:69:fd:6c: ca:99:53:ce:a2:93:ea:8a:cc:a2:24:2b:23:c2:2e: e8:79:3c:c6:05:c6:38:37:bc:91:19:be:09:4e:f6: ea:a7:3b:65:aa:d3:6a:4d:d5:e2:f1:a9:c4:4b:e8: be:e1:85:a4:3e:69:ae:45:8a:8c:a7:a2:e7:1d:89: dc:cc:b5:96:ab:31:c5:88:3b:31:2f:ae:91:d6:d8: f7:ac:97:e9:dc:6d:25:cd:c9:e5:42:2b:04:67:21: 8c:3e:d0:6e:0d:51:45:40:ed:b6:0e:ba:e1:7a:bd: b9:93:a5:d6:31:f4:38:79:83:55:d6:a2:64:78:70: 3e:d5:8f:0e:bc:bc:69:83:d9:ab:fc:dc:ce:77:2b: 47:f6:5d:47:7e:08:18:e7:90:7f:fa:3a:f3:e7:0d: 40:e4:35:5d:9c:c1:94:f5:52:7a:12:3a:76:c5:db: 36:74:d7:4a:50:10:19:cb:6d:21:cc:cd:30:ff:23: 2b:b7:84:9d:c2:87:7f:b3:f8:4a:9c:ec:b2:e4:63: b7:0e:bf:69:ed:b9:8a:6d:84:18:df:d4:e2:56:ac: 7b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C2:69:5C:5E:A1:36:77:78:E4:F7:ED:69:99:B8:37:A3:92:41:BD X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:8d:2f:ba:1a:41:52:dd:53:d5:11:fb:c9:19:bd:71:51:81: ec:e3:c6:c1:57:2f:60:e6:5f:87:1f:be:b4:28:ed:9b:82:1a: 59:ae:a5:30:44:ce:46:47:cf:d0:22:05:cc:67:99:c9:bd:fa: df:74:49:fd:4d:f8:ab:f3:cc:45:4c:d2:a6:fc:00:f6:1f:a8: 30:b6:22:25:ba:a7:88:b7:c0:80:83:ba:c3:6b:11:a7:00:b8: c9:69:6c:2e:39:d4:26:34:54:cc:ae:6e:29:c7:82:1d:32:07: c9:54:ec:70:5e:4e:37:ba:c9:eb:1c:f7:1d:45:17:92:78:4e: ac:25:e6:c1:33:b0:1c:46:24:a4:7f:0a:36:e6:39:66:06:08: cf:da:64:ee:4f:5b:d8:0f:b0:48:71:42:cd:8b:4a:d9:45:f9: 6d:aa:68:9c:d5:c3:ac:4b:fa:ff:5c:e8:c7:53:a5:fc:0e:26: d8:b4:a2:a1:dd:ac:d7:a5:df:dc:af:6d:40:1b:86:79:40:f3: fc:2e:0f:cd:fe:b9:2e:47:a9:ac:9f:0c:b2:74:08:72:f2:ca: 60:e2:b0:9c:1f:e7:8c:4c:86:75:47:29:db:fc:fb:d5:40:bc: e6:d5:72:c0:9f:1d:e3:72:e4:20:e3:78:65:ca:f3:a1:9a:f8: b9:fc:fa:ec -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUbWtnypito4YwvlN2JNuQy97MtZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNjAxMjExNjE2MzVaFw0yNjAxMjIyMDAwMzVaMDMxMTAvBgNV BAMTKDE4QzI2OTVDNUVBMTM2Nzc3OEU0RjdFRDY5OTlCODM3QTM5MjQxQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsPaxBci1fRMGJ4fkcqr1/UZj uPykLO9MefkpdFH4oq/+covnMXS9emn9bMqZU86ik+qKzKIkKyPCLuh5PMYFxjg3 vJEZvglO9uqnO2Wq02pN1eLxqcRL6L7hhaQ+aa5FioynoucdidzMtZarMcWIOzEv rpHW2Pesl+ncbSXNyeVCKwRnIYw+0G4NUUVA7bYOuuF6vbmTpdYx9Dh5g1XWomR4 cD7Vjw68vGmD2av83M53K0f2XUd+CBjnkH/6OvPnDUDkNV2cwZT1UnoSOnbF2zZ0 10pQEBnLbSHMzTD/Iyu3hJ3Ch3+z+Eqc7LLkY7cOv2ntuYpthBjf1OJWrHurAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUGMJpXF6hNnd45PftaZm4N6OSQb0wHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAk40vuhpBUt1T1RH7yRm9cVGB7OPGwVcvYOZfhx++tCjtm4IaWa6lMETO RkfP0CIFzGeZyb3633RJ/U34q/PMRUzSpvwA9h+oMLYiJbqniLfAgIO6w2sRpwC4 yWlsLjnUJjRUzK5uKceCHTIHyVTscF5ON7rJ6xz3HUUXknhOrCXmwTOwHEYkpH8K NuY5ZgYIz9pk7k9b2A+wSHFCzYtK2UX5baponNXDrEv6/1zox1Ol/A4m2LSiod2s 16Xf3K9tQBuGeUDz/C4Pzf65LkeprJ8MsnQIcvLKYOKwnB/njEyGdUcp2/z71UC8 5tVywJ8d43LkION4ZcrzoZr4ufz67A== -----END CERTIFICATE-----Generated at Wed Jan 21 22:43:57 2026 by rpki-client