This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: Nx2IFck95ZeuPdUuda7+j+jAQldNU6ViYVHb6tw5sTc=
Subject key identifier: 2C:C6:EE:80:24:71:52:8D:19:78:79:17:99:8B:23:E2:F2:FC:5A:AD
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 4766B5B1E182047515A0099E1F73602DCE79535F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 020B
Signing time: Thu 20 Nov 2025 17:33:38 +0000
Manifest this update: Thu 20 Nov 2025 17:28:38 +0000
Manifest next update: Fri 21 Nov 2025 18:54:38 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: gFUWS6o58nA7FlWAqhgQyYpghsjD/ryQnUKWEIqa5x8=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Nov 2025 15:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:66:b5:b1:e1:82:04:75:15:a0:09:9e:1f:73:60:2d:ce:79:53:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Nov 20 17:28:38 2025 GMT
Not After : Nov 21 18:54:38 2025 GMT
Subject: CN=2CC6EE802471528D19787917998B23E2F2FC5AAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:17:80:6d:c3:97:34:c9:48:f3:a8:22:42:ed:
41:6f:06:b2:16:c2:95:2d:42:3e:9a:8b:94:fb:a7:
82:98:48:bf:43:c6:10:bc:b0:04:be:cd:d6:e2:13:
60:54:2e:ea:1a:83:1b:fa:54:af:56:32:a9:95:01:
a8:a0:73:15:49:3d:f2:f5:55:e0:1a:dc:49:a6:20:
20:57:83:f4:11:43:44:e6:30:c8:7d:6f:77:d2:7b:
b1:65:b8:04:f1:98:43:38:b1:d7:96:4b:9b:55:ac:
ff:5e:40:5f:5d:ec:0d:3a:1f:a4:be:42:66:cf:09:
aa:4f:2b:a3:c5:85:ed:14:e7:d9:69:b9:ab:b3:d6:
16:b8:84:8d:d6:d4:cc:a7:f4:ce:41:6b:a4:ab:d5:
19:70:68:b6:ca:5c:75:fa:46:ea:c6:25:ea:74:df:
3c:ad:b2:e1:21:d3:d3:b1:8b:73:67:66:b9:f7:34:
39:57:fe:68:ca:be:1a:3e:1e:e4:48:4d:78:ec:1d:
68:b6:2b:5a:0c:e9:83:e3:54:f5:69:5d:93:1f:58:
9e:a7:6b:c1:ba:5c:45:b9:c2:6d:02:00:4b:e5:93:
7a:1d:05:9a:6c:53:20:ce:7f:eb:4f:5f:e4:9f:c3:
7e:32:2f:8c:b0:75:20:dd:36:5a:71:13:d1:7e:f4:
dc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C6:EE:80:24:71:52:8D:19:78:79:17:99:8B:23:E2:F2:FC:5A:AD
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:a7:e4:8d:0a:84:9c:88:cc:ea:76:cf:51:58:99:62:3b:f6:
d7:10:b1:34:12:05:a4:a9:f4:47:e9:8a:ae:fc:f4:8d:78:95:
2d:2a:31:bf:e7:ce:29:99:21:8f:d5:0b:ef:83:25:d6:f7:d5:
eb:9b:3b:a3:b0:b0:34:96:93:35:ad:06:26:22:17:b2:a4:09:
8d:c2:ed:1e:0a:c7:d3:02:ad:41:ce:51:3f:64:2c:85:57:fc:
a9:8b:71:4e:34:70:87:c9:0b:97:fc:7c:bf:92:fd:6b:61:ae:
39:72:b9:13:31:3a:44:93:32:fb:79:27:a9:17:6e:dc:e1:81:
fd:ea:07:a4:49:3f:8c:b3:72:95:7e:5f:72:0d:ce:fd:9e:bb:
32:ba:bd:0a:5e:f8:c1:a6:b9:49:ef:af:1e:06:fa:88:2f:86:
11:a9:21:94:4d:44:3b:b9:2d:f8:3c:2b:d3:b8:69:ab:a3:eb:
42:99:93:68:59:5f:d7:1c:d5:bd:b2:e5:91:9a:33:a5:cc:58:
b9:7e:b7:09:98:d1:b7:fc:f5:c5:d1:c6:31:70:60:3d:e1:d8:
5b:ef:f9:58:f1:f2:a5:20:ec:0a:a4:8d:40:1f:8b:6b:6b:44:
43:9f:af:c3:28:16:37:8d:ae:14:13:92:40:3a:92:05:0f:2d:
9f:4c:a1:74
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUR2a1seGCBHUVoAmeH3NgLc55U18wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNTExMjAxNzI4MzhaFw0yNTExMjExODU0MzhaMDMxMTAvBgNV
BAMTKDJDQzZFRTgwMjQ3MTUyOEQxOTc4NzkxNzk5OEIyM0UyRjJGQzVBQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9F4Btw5c0yUjzqCJC7UFvBrIW
wpUtQj6ai5T7p4KYSL9DxhC8sAS+zdbiE2BULuoagxv6VK9WMqmVAaigcxVJPfL1
VeAa3EmmICBXg/QRQ0TmMMh9b3fSe7FluATxmEM4sdeWS5tVrP9eQF9d7A06H6S+
QmbPCapPK6PFhe0U59lpuauz1ha4hI3W1Myn9M5Ba6Sr1RlwaLbKXHX6RurGJep0
3zytsuEh09Oxi3NnZrn3NDlX/mjKvho+HuRITXjsHWi2K1oM6YPjVPVpXZMfWJ6n
a8G6XEW5wm0CAEvlk3odBZpsUyDOf+tPX+Sfw34yL4ywdSDdNlpxE9F+9NyDAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQULMbugCRxUo0ZeHkXmYsj4vL8Wq0wHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAlKfkjQqEnIjM6nbPUViZYjv21xCxNBIFpKn0R+mKrvz0jXiVLSoxv+fO
KZkhj9UL74Ml1vfV65s7o7CwNJaTNa0GJiIXsqQJjcLtHgrH0wKtQc5RP2QshVf8
qYtxTjRwh8kLl/x8v5L9a2GuOXK5EzE6RJMy+3knqRdu3OGB/eoHpEk/jLNylX5f
cg3O/Z67Mrq9Cl74waa5Se+vHgb6iC+GEakhlE1EO7kt+Dwr07hpq6PrQpmTaFlf
1xzVvbLlkZozpcxYuX63CZjRt/z1xdHGMXBgPeHYW+/5WPHypSDsCqSNQB+La2tE
Q5+vwygWN42uFBOSQDqSBQ8tn0yhdA==
-----END CERTIFICATE-----
Generated at Thu Nov 20 23:33:41 2025 by rpki-client