This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: 3oId1+glqPaLmSxhoHbkMjbkIms7rXq7w6RLXRiwj/k= Subject key identifier: 51:78:5F:C5:99:22:94:B7:4A:80:7C:B5:DF:C8:89:15:7E:90:A9:BD Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 22F8E495FE3FFC34D9A91C2A30BEF8C7CAA8D429 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 020F Signing time: Sun 23 Nov 2025 17:03:38 +0000 Manifest this update: Sun 23 Nov 2025 16:58:38 +0000 Manifest next update: Mon 24 Nov 2025 18:23:38 +0000 Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 6eIyUNgnIQpUShQJiiN8GT7Dsi51UVyHE+I6xq7T30k=) 2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 15:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:f8:e4:95:fe:3f:fc:34:d9:a9:1c:2a:30:be:f8:c7:ca:a8:d4:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 23 16:58:38 2025 GMT Not After : Nov 24 18:23:38 2025 GMT Subject: CN=51785FC5992294B74A807CB5DFC889157E90A9BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ee:8b:34:cf:0e:50:ac:62:ea:c1:7c:62:99: 8f:85:6b:a6:ac:fe:29:b2:1b:20:ff:fe:07:85:f3: 93:e1:fa:6b:ea:64:e1:67:dd:8b:87:1e:e9:e6:26: 5a:07:04:94:c9:a5:df:59:c1:cb:a5:83:86:db:e8: 83:ea:4b:2b:d0:59:89:cd:bf:cd:16:b8:f4:fd:12: 78:71:93:4d:51:8f:67:1f:a9:f9:45:93:3d:ef:6f: 87:83:e3:a6:98:6f:a3:8a:06:23:24:c2:37:51:93: b7:68:da:0b:5d:1d:c8:3c:ff:e6:c8:fe:ea:32:5f: a3:8c:2a:d3:50:63:23:27:3e:48:4e:c9:47:70:3c: cb:e9:53:45:0b:7d:77:2d:38:a4:33:72:01:a8:67: 85:4e:ea:da:a3:89:16:c1:11:9d:78:f9:8f:fe:70: 26:6e:11:7b:47:13:e6:64:dd:16:f8:ae:a2:5f:81: 8a:ec:3b:a5:24:21:6a:93:92:65:45:f3:2d:57:e8: 08:7c:2a:fc:f3:f6:59:67:82:9a:46:50:f4:07:c4: ee:4d:46:e7:ce:d2:46:06:3b:d1:32:f8:b8:8d:76: 7d:1f:31:23:f9:cd:72:83:f3:e5:92:e2:fd:fc:3e: 7c:53:9f:83:15:bc:d3:bc:00:b1:8c:46:26:dd:9f: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:78:5F:C5:99:22:94:B7:4A:80:7C:B5:DF:C8:89:15:7E:90:A9:BD X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c5:6f:e3:a7:3f:91:9f:94:77:23:85:5e:9e:3c:70:27:f1: 20:fa:5e:c0:0c:fd:cc:69:5d:69:44:c5:58:40:f5:84:bf:d6: 61:56:2f:d0:03:85:57:26:34:93:c3:b9:db:1b:21:62:d3:f3: 92:c0:5e:b4:b1:d4:ec:4d:dd:ba:f2:5f:ca:40:c5:43:35:47: 0c:4a:61:47:07:69:ce:29:2a:94:34:5c:c1:6d:8c:a9:e6:36: 83:c5:46:ed:51:3c:8e:43:db:50:48:04:e9:99:6b:af:60:51: ff:ad:01:cf:bf:92:e3:ca:84:86:a1:30:c0:65:25:88:61:20: 34:0a:8d:c0:a1:68:5c:03:03:08:1b:ec:f7:82:8e:38:48:78: 57:19:71:ce:fe:7c:ad:5b:fc:5c:a8:c1:93:7a:f1:e6:af:ad: 2b:7d:c4:f9:f6:13:60:0c:56:94:4c:a8:08:1a:aa:1b:f7:3c: de:fa:c7:3d:21:0c:9a:8a:f2:f3:1b:e5:bd:4c:56:b4:d5:fd: 5e:5c:ff:8b:56:fa:92:c4:f8:18:2b:2c:6f:d7:76:34:c7:4f: 8c:f9:b8:83:10:82:ef:e1:80:80:9f:40:21:b1:f8:d0:ff:11: 86:82:1d:fc:64:75:83:28:cf:2a:da:65:49:0e:e7:c3:4e:46: 8e:fb:01:71 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUIvjklf4//DTZqRwqML74x8qo1CkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMjMxNjU4MzhaFw0yNTExMjQxODIzMzhaMDMxMTAvBgNV BAMTKDUxNzg1RkM1OTkyMjk0Qjc0QTgwN0NCNURGQzg4OTE1N0U5MEE5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg7os0zw5QrGLqwXximY+Fa6as /imyGyD//geF85Ph+mvqZOFn3YuHHunmJloHBJTJpd9Zwculg4bb6IPqSyvQWYnN v80WuPT9Enhxk01Rj2cfqflFkz3vb4eD46aYb6OKBiMkwjdRk7do2gtdHcg8/+bI /uoyX6OMKtNQYyMnPkhOyUdwPMvpU0ULfXctOKQzcgGoZ4VO6tqjiRbBEZ14+Y/+ cCZuEXtHE+Zk3Rb4rqJfgYrsO6UkIWqTkmVF8y1X6Ah8Kvzz9llngppGUPQHxO5N RufO0kYGO9Ey+LiNdn0fMSP5zXKD8+WS4v38PnxTn4MVvNO8ALGMRibdn2FFAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUUXhfxZkilLdKgHy138iJFX6Qqb0wHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAssVv46c/kZ+UdyOFXp48cCfxIPpewAz9zGldaUTFWED1hL/WYVYv0AOF VyY0k8O52xshYtPzksBetLHU7E3duvJfykDFQzVHDEphRwdpzikqlDRcwW2MqeY2 g8VG7VE8jkPbUEgE6Zlrr2BR/60Bz7+S48qEhqEwwGUliGEgNAqNwKFoXAMDCBvs 94KOOEh4Vxlxzv58rVv8XKjBk3rx5q+tK33E+fYTYAxWlEyoCBqqG/c83vrHPSEM mory8xvlvUxWtNX9Xlz/i1b6ksT4GCssb9d2NMdPjPm4gxCC7+GAgJ9AIbH40P8R hoId/GR1gyjPKtplSQ7nw05GjvsBcQ== -----END CERTIFICATE-----Generated at Mon Nov 24 01:20:20 2025 by rpki-client