This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          QTW71HBPW7Mg4RxqJx7WjcTch7PqPQ7r+Okg17OBpUE=
Subject key identifier:   7F:CD:48:0E:6B:D1:10:66:29:48:4E:9F:5D:41:34:59:A6:2B:D1:48
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       3688272ED1B38DC8FAB497194C8FCE60DE94816F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          0226
Signing time:             Wed 10 Dec 2025 20:09:17 +0000
Manifest this update:     Wed 10 Dec 2025 20:04:17 +0000
Manifest next update:     Thu 11 Dec 2025 21:21:17 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: RCEW9Fg+riLPKTPwXgZFacgmvswfVZp/MQvY3UzN0F4=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Dec 2025 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:88:27:2e:d1:b3:8d:c8:fa:b4:97:19:4c:8f:ce:60:de:94:81:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Dec 10 20:04:17 2025 GMT
            Not After : Dec 11 21:21:17 2025 GMT
        Subject: CN=7FCD480E6BD1106629484E9F5D413459A62BD148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:15:cc:18:d8:cb:8b:d6:88:79:15:42:2b:2e:
                    4f:eb:7b:21:23:7f:d2:9a:68:17:09:ae:2b:da:54:
                    a8:52:5c:e7:2a:e4:59:96:e5:2d:33:c8:5c:42:e6:
                    ff:70:bf:5b:98:c3:87:8f:84:52:aa:29:bf:92:93:
                    fd:57:ce:43:e8:17:04:49:da:24:c4:42:31:a5:5d:
                    f8:90:3f:44:71:64:51:b4:bf:6e:64:9e:49:54:d7:
                    ef:fe:b8:df:2f:5f:08:9e:3f:09:13:c5:f1:28:9c:
                    6f:d8:2f:4d:21:60:d8:77:df:62:8c:88:78:db:b8:
                    2a:8b:38:e7:49:87:a2:59:70:da:f2:e3:8e:af:04:
                    30:e8:9e:85:15:6a:4b:ab:e0:8d:bd:48:71:7b:f4:
                    8e:04:00:b9:cd:05:7e:41:df:46:82:a7:c0:b4:8e:
                    05:48:7c:7e:67:dc:21:ce:a2:49:f5:f1:35:c5:5e:
                    59:9a:a8:b7:b0:73:38:9a:90:66:ab:c9:ab:11:ae:
                    d6:2a:0b:f9:59:e9:9b:6c:e5:37:b5:3a:f3:1b:b6:
                    f4:76:63:8f:2a:5b:62:df:06:93:49:67:30:76:53:
                    23:52:d5:23:31:37:a1:95:72:a0:f4:9b:8d:d3:24:
                    af:3f:5e:d9:61:1b:cd:87:b5:b3:2f:fe:53:59:b1:
                    29:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CD:48:0E:6B:D1:10:66:29:48:4E:9F:5D:41:34:59:A6:2B:D1:48
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cc:e6:eb:0f:0c:2c:ef:ce:8c:91:63:e0:88:65:16:f4:a7:
         0f:d3:d4:51:d0:3b:57:de:a4:b0:a7:58:61:08:85:39:7a:49:
         2e:c3:a5:66:1e:40:fd:da:f9:57:ca:66:25:27:4b:f8:d5:1e:
         8c:1f:11:25:70:18:d3:d2:cd:d5:45:d0:e7:f0:f6:e6:a9:96:
         65:d9:c5:aa:83:04:2c:9d:68:61:7d:07:5f:c1:42:73:06:15:
         57:96:79:5d:eb:eb:5d:08:f2:25:d9:4e:b2:a6:f1:f2:c0:39:
         26:fa:cc:b3:e3:9c:06:d8:48:7b:af:28:74:d1:bb:74:25:e0:
         e2:44:96:14:fb:02:ff:ab:7e:70:e5:9b:7b:86:00:ce:f6:c3:
         42:52:6e:1e:f7:dc:dd:c0:1a:8f:cf:42:21:70:a1:ba:78:7b:
         39:91:1d:50:62:68:7a:db:c8:e8:ba:78:c4:c2:18:d9:1c:5c:
         ac:16:39:af:fa:29:1c:82:28:e5:77:77:16:b6:c1:fb:f5:cc:
         a9:52:28:f5:99:0e:7c:12:ef:01:fc:ba:91:90:b1:79:0a:cd:
         b7:d7:35:1f:16:57:c8:02:57:96:e3:66:42:eb:0b:16:d3:90:
         0d:4e:04:f9:cd:27:57:0e:80:41:ca:7c:2b:85:ae:1f:65:4b:
         f3:54:0c:47
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUNognLtGzjcj6tJcZTI/OYN6UgW8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNTEyMTAyMDA0MTdaFw0yNTEyMTEyMTIxMTdaMDMxMTAvBgNV
BAMTKDdGQ0Q0ODBFNkJEMTEwNjYyOTQ4NEU5RjVENDEzNDU5QTYyQkQxNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8FcwY2MuL1oh5FUIrLk/reyEj
f9KaaBcJrivaVKhSXOcq5FmW5S0zyFxC5v9wv1uYw4ePhFKqKb+Sk/1XzkPoFwRJ
2iTEQjGlXfiQP0RxZFG0v25knklU1+/+uN8vXwiePwkTxfEonG/YL00hYNh332KM
iHjbuCqLOOdJh6JZcNry446vBDDonoUVakur4I29SHF79I4EALnNBX5B30aCp8C0
jgVIfH5n3CHOokn18TXFXlmaqLewcziakGaryasRrtYqC/lZ6Zts5Te1OvMbtvR2
Y48qW2LfBpNJZzB2UyNS1SMxN6GVcqD0m43TJK8/XtlhG82HtbMv/lNZsSkPAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUf81IDmvREGYpSE6fXUE0WaYr0UgwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAWMzm6w8MLO/OjJFj4IhlFvSnD9PUUdA7V96ksKdYYQiFOXpJLsOlZh5A
/dr5V8pmJSdL+NUejB8RJXAY09LN1UXQ5/D25qmWZdnFqoMELJ1oYX0HX8FCcwYV
V5Z5XevrXQjyJdlOsqbx8sA5JvrMs+OcBthIe68odNG7dCXg4kSWFPsC/6t+cOWb
e4YAzvbDQlJuHvfc3cAaj89CIXChunh7OZEdUGJoetvI6Lp4xMIY2RxcrBY5r/op
HIIo5Xd3FrbB+/XMqVIo9ZkOfBLvAfy6kZCxeQrNt9c1HxZXyAJXluNmQusLFtOQ
DU4E+c0nVw6AQcp8K4WuH2VL81QMRw==
-----END CERTIFICATE-----
Generated at Wed Dec 10 22:04:25 2025 by rpki-client