This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: CAS9QEvxUXTgStgUxJ4BZB3FU3NvLVTwIdAJsEEEZaM=
Subject key identifier: AB:47:D9:F4:C0:07:CC:F4:DD:9E:5B:C4:71:30:BF:F3:15:40:62:B8
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 4E74244F1B9409C2DBF3077F443ACDC1720BA047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0276
Signing time: Mon 09 Feb 2026 06:47:58 +0000
Manifest this update: Mon 09 Feb 2026 06:42:58 +0000
Manifest next update: Tue 10 Feb 2026 09:32:58 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: SOxSG4XFLbU1qA5ct091uJlxb6cr8Tf9vJQBY7m/LE8=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:32:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:74:24:4f:1b:94:09:c2:db:f3:07:7f:44:3a:cd:c1:72:0b:a0:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Feb 9 06:42:58 2026 GMT
Not After : Feb 10 09:32:58 2026 GMT
Subject: CN=AB47D9F4C007CCF4DD9E5BC47130BFF3154062B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:30:a2:56:a1:52:73:bb:26:d9:bd:9f:f9:
10:33:3d:99:ae:b5:fa:99:9b:89:78:04:b6:f8:40:
e6:0b:9c:4b:3a:0e:e6:ce:75:f6:52:69:be:41:44:
eb:c0:32:5a:da:cc:5f:f1:c0:2e:b6:09:e2:fc:38:
65:9a:3a:37:61:d0:c1:d1:6b:9d:52:a4:d4:09:3e:
e6:56:40:f4:92:ec:cb:eb:0c:d1:a0:7a:76:95:e7:
12:1c:2f:52:bd:09:08:fd:2e:9d:5f:b8:0a:f0:bf:
57:e7:19:cc:7d:73:6f:3e:ec:e7:6c:92:ee:e5:86:
6b:e2:03:3f:9f:c0:89:6b:ce:42:48:89:cc:0f:20:
ea:19:75:69:93:81:8c:19:06:3c:5f:4d:fc:06:5b:
22:0b:d2:2c:c0:06:5e:f1:48:d3:b3:ab:a8:74:71:
aa:4a:71:0d:13:4a:e3:b7:41:30:8b:fb:7d:26:e5:
d3:1a:6e:dc:68:75:0b:08:dc:16:39:3f:36:c8:f3:
ae:ca:03:bc:96:a0:e1:1f:9c:7a:f6:43:7c:f9:0e:
59:10:bb:d9:19:36:2a:d4:15:21:3d:21:35:cc:85:
ba:2b:8b:66:90:00:b2:f6:c9:57:15:9c:42:5b:44:
5e:18:f4:ce:58:0e:04:2c:55:14:10:ec:ac:34:73:
75:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:47:D9:F4:C0:07:CC:F4:DD:9E:5B:C4:71:30:BF:F3:15:40:62:B8
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e9:b1:d3:bb:5f:94:63:95:ed:4b:a0:35:5b:ab:f4:dd:44:
84:de:16:52:d9:f9:05:a3:07:a3:1f:2d:e4:41:46:ee:fa:25:
ba:3b:d8:cd:cf:81:61:14:ec:a7:ca:8b:cb:bd:aa:15:3c:4e:
97:6f:9c:54:1f:93:35:3a:1d:d1:03:5a:1f:7a:04:a1:21:79:
a4:da:7b:01:cf:45:54:15:12:8c:29:c3:fd:31:9c:e2:ab:9b:
2b:69:8c:45:a5:39:7d:6d:9e:f5:1f:15:c3:40:af:8d:08:e2:
e8:b3:e9:3a:ed:ed:39:68:e2:c6:25:eb:c5:d5:97:e2:bf:c2:
9f:d8:e2:83:1b:f6:aa:b6:b5:fd:4c:a1:a6:6f:9a:e6:3d:b6:
49:51:46:8c:20:2a:7c:ff:4c:de:cf:d4:fd:02:e8:78:93:e5:
6e:33:22:a3:dd:0a:9d:e5:8e:c0:b6:be:cb:51:49:68:23:31:
e5:49:77:96:89:6e:0b:11:5a:13:e6:6c:6e:a1:08:92:78:ca:
3d:08:fa:d6:49:01:e9:bd:87:6f:e3:4e:1c:90:33:cb:48:6c:
6a:55:46:a5:dd:93:0f:51:0c:42:68:a9:ad:83:77:ac:0a:f2:
cc:1e:3f:d8:c0:8e:05:70:fd:65:fa:11:87:d3:9b:c5:4e:6d:
53:d1:f1:5e
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUTnQkTxuUCcLb8wd/RDrNwXILoEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNjAyMDkwNjQyNThaFw0yNjAyMTAwOTMyNThaMDMxMTAvBgNV
BAMTKEFCNDdEOUY0QzAwN0NDRjRERDlFNUJDNDcxMzBCRkYzMTU0MDYyQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOjCiVqFSc7sm2b2f+RAzPZmu
tfqZm4l4BLb4QOYLnEs6DubOdfZSab5BROvAMlrazF/xwC62CeL8OGWaOjdh0MHR
a51SpNQJPuZWQPSS7MvrDNGgenaV5xIcL1K9CQj9Lp1fuArwv1fnGcx9c28+7Ods
ku7lhmviAz+fwIlrzkJIicwPIOoZdWmTgYwZBjxfTfwGWyIL0izABl7xSNOzq6h0
capKcQ0TSuO3QTCL+30m5dMabtxodQsI3BY5PzbI867KA7yWoOEfnHr2Q3z5DlkQ
u9kZNirUFSE9ITXMhbori2aQALL2yVcVnEJbRF4Y9M5YDgQsVRQQ7Kw0c3UrAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUq0fZ9MAHzPTdnlvEcTC/8xVAYrgwHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAYOmx07tflGOV7UugNVur9N1EhN4WUtn5BaMHox8t5EFG7volujvYzc+B
YRTsp8qLy72qFTxOl2+cVB+TNTod0QNaH3oEoSF5pNp7Ac9FVBUSjCnD/TGc4qub
K2mMRaU5fW2e9R8Vw0CvjQji6LPpOu3tOWjixiXrxdWX4r/Cn9jigxv2qra1/Uyh
pm+a5j22SVFGjCAqfP9M3s/U/QLoeJPlbjMio90KneWOwLa+y1FJaCMx5Ul3lolu
CxFaE+ZsbqEIknjKPQj61kkB6b2Hb+NOHJAzy0hsalVGpd2TD1EMQmiprYN3rAry
zB4/2MCOBXD9ZfoRh9ObxU5tU9HxXg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:06:09 2026 by rpki-client