This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: CTPokJU2847gDmx7LeFeWpPtTTxij54PU7aD/Ie8cOY= Subject key identifier: 8B:8E:18:A4:6F:33:4F:1A:F6:31:9F:FD:DA:7C:5D:B0:22:38:65:59 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 2FDD8D992A263BDA70206CFC727172C3FE52A827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0230 Signing time: Thu 18 Dec 2025 06:59:37 +0000 Manifest this update: Thu 18 Dec 2025 06:54:37 +0000 Manifest next update: Fri 19 Dec 2025 07:06:37 +0000 Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: eCQ6/MvjL7OrpR2c4aDzKoO/Wmv5vI0+FiPT9FE794o=) 2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 07:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:dd:8d:99:2a:26:3b:da:70:20:6c:fc:72:71:72:c3:fe:52:a8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Dec 18 06:54:37 2025 GMT Not After : Dec 19 07:06:37 2025 GMT Subject: CN=8B8E18A46F334F1AF6319FFDDA7C5DB022386559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:47:06:eb:d8:cd:73:99:8b:52:4d:0d:45:3d: 5b:4d:f5:a2:9b:e1:c3:37:ce:1a:ec:fc:ac:b0:a9: 97:01:e7:4f:10:8b:f1:12:f1:be:69:e8:0c:82:99: 21:62:b5:b7:48:65:ab:47:55:76:35:e0:94:a6:57: 44:36:90:47:0a:de:91:3e:6f:30:7a:33:14:12:dc: 1a:e9:1f:f1:5e:ee:1e:83:ed:b8:29:4a:29:84:da: 04:ee:64:1c:40:84:a6:be:27:9f:6f:13:e3:42:05: 95:ea:ec:a2:e8:aa:0e:df:8d:39:b8:1a:97:2c:0f: f2:ce:75:85:58:8f:ae:d5:d8:97:73:ee:d0:7c:d8: eb:59:f4:99:90:b9:04:98:06:c7:5f:c9:7e:7e:b7: 85:33:a3:99:ce:14:96:4a:1c:79:a1:aa:be:42:e5: 42:ef:cc:5a:a7:b4:37:b6:dd:16:30:9f:fd:be:fe: 80:1c:59:56:e6:06:b4:96:f4:be:fa:a1:de:ac:8f: 4a:95:33:a7:fe:ef:e8:22:cf:94:68:ab:7e:5c:b2: 9c:02:e9:92:5d:03:00:c7:ef:9e:73:05:e1:26:39: 88:f5:2e:78:44:67:7a:7b:30:6d:7f:30:03:66:03: 1d:99:1b:eb:aa:bb:5b:05:31:6d:7a:cd:1f:8b:ed: 19:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8E:18:A4:6F:33:4F:1A:F6:31:9F:FD:DA:7C:5D:B0:22:38:65:59 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c9:ff:22:f1:20:e1:41:b2:63:5e:66:6c:30:47:c0:f0:98: 6e:e7:7e:b0:aa:87:8f:83:c4:4c:99:b8:88:a4:fd:e4:8a:e3: 5f:8d:88:51:7e:50:af:69:6d:d1:e0:ec:44:32:cf:f8:30:9a: d4:2c:4d:93:c1:b1:5c:a5:64:f2:f7:58:2a:a1:8d:9f:6c:09: 35:af:19:f7:3e:25:59:1b:58:26:c8:7a:42:f5:d5:2c:4c:f8: 1d:46:2b:c5:e9:91:7f:0d:f6:71:ef:0f:b1:41:f5:4c:6a:e1: 57:f6:bc:d5:45:8c:a6:c3:ed:fd:82:f9:f4:fa:ae:60:f0:8e: 7d:3b:36:63:48:0c:ec:17:c9:9b:ae:d8:4d:1e:20:ea:58:e5: 5f:15:10:3e:e1:51:6c:1e:81:c2:f5:72:70:4d:b5:f3:80:b4: 70:b6:3b:4a:9d:3d:22:5f:e7:e7:d3:32:47:7d:d4:8a:74:c9: 11:4f:b9:ae:47:9a:09:15:e3:b6:27:76:2c:8b:44:f4:2c:e1: 02:2f:8f:dc:01:be:5c:0f:f5:69:76:67:54:53:41:de:81:a2: aa:e3:73:13:a1:4c:49:85:b1:a5:50:79:b6:29:da:b7:72:22: 33:49:c8:34:45:13:2f:ee:a1:07:b2:cf:3c:a6:df:93:75:02: c8:d4:31:68 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUL92NmSomO9pwIGz8cnFyw/5SqCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTEyMTgwNjU0MzdaFw0yNTEyMTkwNzA2MzdaMDMxMTAvBgNV BAMTKDhCOEUxOEE0NkYzMzRGMUFGNjMxOUZGRERBN0M1REIwMjIzODY1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRwbr2M1zmYtSTQ1FPVtN9aKb 4cM3zhrs/KywqZcB508Qi/ES8b5p6AyCmSFitbdIZatHVXY14JSmV0Q2kEcK3pE+ bzB6MxQS3BrpH/Fe7h6D7bgpSimE2gTuZBxAhKa+J59vE+NCBZXq7KLoqg7fjTm4 GpcsD/LOdYVYj67V2Jdz7tB82OtZ9JmQuQSYBsdfyX5+t4Uzo5nOFJZKHHmhqr5C 5ULvzFqntDe23RYwn/2+/oAcWVbmBrSW9L76od6sj0qVM6f+7+giz5Roq35cspwC 6ZJdAwDH755zBeEmOYj1LnhEZ3p7MG1/MANmAx2ZG+uqu1sFMW16zR+L7Rk7AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUi44YpG8zTxr2MZ/92nxdsCI4ZVkwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAc8n/IvEg4UGyY15mbDBHwPCYbud+sKqHj4PETJm4iKT95IrjX42IUX5Q r2lt0eDsRDLP+DCa1CxNk8GxXKVk8vdYKqGNn2wJNa8Z9z4lWRtYJsh6QvXVLEz4 HUYrxemRfw32ce8PsUH1TGrhV/a81UWMpsPt/YL59PquYPCOfTs2Y0gM7BfJm67Y TR4g6ljlXxUQPuFRbB6BwvVycE2184C0cLY7Sp09Il/n59MyR33UinTJEU+5rkea CRXjtid2LItE9CzhAi+P3AG+XA/1aXZnVFNB3oGiquNzE6FMSYWxpVB5tinat3Ii M0nINEUTL+6hB7LPPKbfk3UCyNQxaA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:09:41 2025 by rpki-client