This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: 7/ehFMl3v8Z9tdTM5YCuTl3yy779lc+uovBW6hUeJDM= Subject key identifier: B9:9D:53:76:8B:35:99:F5:49:66:33:72:42:59:5F:1C:14:FA:07:6C Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 700F254639D6401A64F8FA793D705F01B6DDF80C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0210 Signing time: Mon 24 Nov 2025 10:28:38 +0000 Manifest this update: Mon 24 Nov 2025 10:23:38 +0000 Manifest next update: Tue 25 Nov 2025 12:01:38 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: x8Tx931c8BNAD0C1DNLfJ1EBMW43i3MGoMDZHUJpEso=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Nov 2025 12:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:0f:25:46:39:d6:40:1a:64:f8:fa:79:3d:70:5f:01:b6:dd:f8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 24 10:23:38 2025 GMT Not After : Nov 25 12:01:38 2025 GMT Subject: CN=B99D53768B3599F54966337242595F1C14FA076C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:99:68:d2:35:bd:bf:c4:d7:9b:bb:d6:85:6a: a0:a0:12:79:e9:29:9d:30:e9:46:6e:38:e0:17:88: d4:f4:10:c5:31:41:a8:83:5f:86:38:21:5e:55:b3: 5b:45:c6:3d:e9:b2:c8:46:96:4a:e5:c9:91:5f:d7: 3c:db:45:50:9a:45:25:69:7e:a0:d1:95:eb:0e:db: 9d:09:35:d1:47:33:11:d4:ad:1e:28:14:99:19:27: 34:fb:34:a2:6d:73:c5:1e:35:d9:d0:d3:58:ce:37: 80:f4:4c:a5:a5:b9:7f:af:9b:6f:05:15:04:88:ea: ce:16:b6:17:85:bb:92:72:02:88:7b:5a:07:ae:35: af:0e:2a:18:61:ca:c0:4b:24:fc:61:d7:db:8d:f9: b5:24:3c:34:51:61:4b:d3:89:f4:0f:ba:99:e3:4b: 86:b7:92:20:86:cd:51:f0:95:0b:c4:93:7d:fe:1e: d5:63:52:5a:d2:4b:4a:47:4b:8d:fc:08:f5:ab:82: 20:4b:4d:c0:5c:5b:44:a2:85:32:ec:f3:51:2a:e8: 2c:20:89:52:70:72:3f:32:47:13:9d:12:5d:27:da: 6c:0a:9c:60:77:15:ff:af:ca:5a:36:87:46:1b:16: c2:14:41:ca:0e:39:c3:d3:0c:eb:69:7a:5c:d5:40: c7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9D:53:76:8B:35:99:F5:49:66:33:72:42:59:5F:1C:14:FA:07:6C X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:3c:ef:d7:ab:51:d4:53:0b:5c:5c:77:29:c8:79:15:4a:dc: 3f:86:5b:2d:6c:56:32:06:05:a4:88:7c:ea:06:e3:32:4d:c5: ad:49:df:d7:70:8c:9b:b1:40:6c:b9:82:cf:33:4c:11:85:37: a6:bb:74:9f:7c:c6:f2:ab:38:85:de:0d:29:ea:5d:d1:5c:c7: 74:3b:bb:e1:30:1d:ad:eb:66:67:5e:e4:06:6f:4b:9b:3b:fd: 68:f8:b8:1f:64:c2:86:ca:dd:ee:a4:a3:2d:86:7c:ff:a9:f4: c0:d7:c0:1f:12:50:9c:4e:f5:79:4c:18:5a:0d:5a:30:5c:76: 5a:2a:22:1b:94:4d:45:3e:bd:92:41:0d:78:e4:09:ef:d3:a6: a8:4d:21:75:66:9b:5a:8d:49:4b:f1:18:d1:4b:6d:f8:34:7e: 2a:1a:8b:32:a0:4b:78:fb:fb:ff:23:dc:44:22:4f:8c:6a:2a: c9:67:2f:e9:8a:5b:c6:49:4e:b4:4c:0e:98:99:13:c8:8c:6d: 30:af:49:7c:db:76:06:0c:96:c5:03:16:d5:3b:a5:4a:de:45: cb:84:ba:e4:f9:62:b4:bc:86:a1:d7:79:42:98:e8:53:0a:aa: db:84:0a:ec:a8:96:bb:1a:f4:96:14:66:a1:bf:1d:99:41:0f: 91:3e:b0:6a -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUcA8lRjnWQBpk+Pp5PXBfAbbd+AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMjQxMDIzMzhaFw0yNTExMjUxMjAxMzhaMDMxMTAvBgNV BAMTKEI5OUQ1Mzc2OEIzNTk5RjU0OTY2MzM3MjQyNTk1RjFDMTRGQTA3NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mWjSNb2/xNebu9aFaqCgEnnp KZ0w6UZuOOAXiNT0EMUxQaiDX4Y4IV5Vs1tFxj3psshGlkrlyZFf1zzbRVCaRSVp fqDRlesO250JNdFHMxHUrR4oFJkZJzT7NKJtc8UeNdnQ01jON4D0TKWluX+vm28F FQSI6s4WtheFu5JyAoh7WgeuNa8OKhhhysBLJPxh19uN+bUkPDRRYUvTifQPupnj S4a3kiCGzVHwlQvEk33+HtVjUlrSS0pHS438CPWrgiBLTcBcW0SihTLs81Eq6Cwg iVJwcj8yRxOdEl0n2mwKnGB3Ff+vylo2h0YbFsIUQcoOOcPTDOtpelzVQMerAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUuZ1Tdos1mfVJZjNyQllfHBT6B2wwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAMTzv16tR1FMLXFx3Kch5FUrcP4ZbLWxWMgYFpIh86gbjMk3FrUnf13CM m7FAbLmCzzNMEYU3prt0n3zG8qs4hd4NKepd0VzHdDu74TAdretmZ17kBm9Lmzv9 aPi4H2TChsrd7qSjLYZ8/6n0wNfAHxJQnE71eUwYWg1aMFx2WioiG5RNRT69kkEN eOQJ79OmqE0hdWabWo1JS/EY0Utt+DR+KhqLMqBLePv7/yPcRCJPjGoqyWcv6Ypb xklOtEwOmJkTyIxtMK9JfNt2BgyWxQMW1TulSt5Fy4S65PlitLyGodd5QpjoUwqq 24QK7KiWuxr0lhRmob8dmUEPkT6wag== -----END CERTIFICATE-----Generated at Tue Nov 25 03:18:36 2025 by rpki-client