This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: goSjBdveG//X14yfcfWEEZIXoWBmbiuX587alhBq81s= Subject key identifier: E7:89:2E:F6:6A:29:B3:0E:90:B3:F9:A2:CA:E8:12:4A:84:8F:05:97 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 4A69007521FBF76A1C32E8B925D0996B01745EDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 026A Signing time: Sat 31 Jan 2026 01:07:07 +0000 Manifest this update: Sat 31 Jan 2026 01:02:07 +0000 Manifest next update: Sun 01 Feb 2026 03:18:07 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 9YVf9j/zBunrTKe03rcN5LZ6ImxonwnNd4QL7AWlSPE=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 31 Jan 2026 23:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:69:00:75:21:fb:f7:6a:1c:32:e8:b9:25:d0:99:6b:01:74:5e:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Jan 31 01:02:07 2026 GMT Not After : Feb 1 03:18:07 2026 GMT Subject: CN=E7892EF66A29B30E90B3F9A2CAE8124A848F0597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:3f:0d:ab:87:93:51:5e:7c:ea:9f:cc:86: 95:2a:db:c5:ad:45:2f:73:1a:2f:7f:a4:cd:6e:e1: f2:7a:8c:a7:cb:a3:a2:1d:79:bb:d4:ad:95:fa:ec: b7:7b:94:ab:4a:10:9d:68:dd:19:18:77:87:c1:47: 04:e9:43:b6:d7:0a:5c:de:83:54:98:98:d3:5d:13: 85:89:ee:f5:d8:5b:61:fe:69:9b:34:94:7d:37:1d: 90:68:9f:a9:bf:7b:b5:80:00:24:5d:2b:da:2b:b3: ea:d6:4a:bf:7f:fa:e7:59:cc:b6:53:5e:ec:33:9a: 74:74:43:81:f1:59:6e:c5:90:00:01:22:f7:e9:3d: 70:2f:b5:b3:04:48:4d:2c:39:9a:d3:8c:39:47:5b: 1d:a1:68:b3:7c:cd:33:35:61:be:11:3f:23:72:e0: 07:0a:fd:d8:62:b5:f0:76:76:b0:4f:0f:df:4c:fb: 43:24:64:c2:70:49:8d:33:b6:e8:d7:ba:32:18:1e: 47:9a:83:1d:62:cb:24:81:ec:15:70:e6:bf:db:04: 26:3b:79:79:b2:9b:ec:22:a9:88:b7:ee:ed:57:64: 7c:13:c2:ee:29:2d:2a:ee:6a:28:62:8b:8e:22:96: 9d:fd:3f:6f:b1:4d:4f:42:90:d2:58:13:38:06:c0: 97:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:89:2E:F6:6A:29:B3:0E:90:B3:F9:A2:CA:E8:12:4A:84:8F:05:97 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c4:fa:ad:6f:19:61:10:22:d1:6c:e2:d8:eb:45:bc:88:c0: 8b:4d:b8:ac:32:68:e7:13:91:1a:08:74:70:a2:dd:c2:a0:4d: 00:d3:e0:f7:d5:25:d9:a0:1c:1f:3c:5a:e6:52:92:db:4e:2e: a1:b8:db:02:22:c6:82:6a:ef:5a:9b:32:a8:66:e1:f9:c4:84: 34:d5:1a:0d:e9:b5:d7:b5:8a:99:b8:76:81:6e:8e:3f:4c:d3: ee:a0:23:88:59:67:04:f3:15:68:4d:f2:46:6c:ec:f4:27:4d: af:e3:2c:79:07:3a:4a:e9:52:26:c4:cf:fc:5a:d2:15:e5:58: 95:bd:46:18:f9:e9:64:12:c7:b0:ee:03:c0:e4:1d:b4:0b:12: 62:83:23:3e:dd:8d:88:9b:57:d1:47:89:27:f2:41:78:0f:3c: 7c:43:f7:06:61:11:8f:aa:c0:32:71:41:bb:8c:08:52:b7:a3: 15:27:14:78:fd:6a:7b:6d:00:3d:74:84:b3:83:4a:51:0f:3d: 48:65:71:90:ff:87:44:43:d5:9e:d8:64:94:df:63:7a:22:d0: 27:f8:1f:d0:a7:eb:c0:cc:b0:f4:58:9f:22:e5:68:5b:12:df: e3:6c:57:5d:0a:8a:d1:81:19:68:dc:7d:77:ce:2c:c5:c8:91: 7c:02:34:2f -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUSmkAdSH792ocMui5JdCZawF0Xt8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNjAxMzEwMTAyMDdaFw0yNjAyMDEwMzE4MDdaMDMxMTAvBgNV BAMTKEU3ODkyRUY2NkEyOUIzMEU5MEIzRjlBMkNBRTgxMjRBODQ4RjA1OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHdj8Nq4eTUV586p/MhpUq28Wt RS9zGi9/pM1u4fJ6jKfLo6IdebvUrZX67Ld7lKtKEJ1o3RkYd4fBRwTpQ7bXClze g1SYmNNdE4WJ7vXYW2H+aZs0lH03HZBon6m/e7WAACRdK9ors+rWSr9/+udZzLZT XuwzmnR0Q4HxWW7FkAABIvfpPXAvtbMESE0sOZrTjDlHWx2haLN8zTM1Yb4RPyNy 4AcK/dhitfB2drBPD99M+0MkZMJwSY0ztujXujIYHkeagx1iyySB7BVw5r/bBCY7 eXmym+wiqYi37u1XZHwTwu4pLSruaihii44ilp39P2+xTU9CkNJYEzgGwJfJAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU54ku9mopsw6Qs/miyugSSoSPBZcwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEALcT6rW8ZYRAi0Wzi2OtFvIjAi024rDJo5xORGgh0cKLdwqBNANPg99Ul 2aAcHzxa5lKS204uobjbAiLGgmrvWpsyqGbh+cSENNUaDem117WKmbh2gW6OP0zT 7qAjiFlnBPMVaE3yRmzs9CdNr+MseQc6SulSJsTP/FrSFeVYlb1GGPnpZBLHsO4D wOQdtAsSYoMjPt2NiJtX0UeJJ/JBeA88fEP3BmERj6rAMnFBu4wIUrejFScUeP1q e20APXSEs4NKUQ89SGVxkP+HREPVnthklN9jeiLQJ/gf0KfrwMyw9FifIuVoWxLf 42xXXQqK0YEZaNx9d84sxciRfAI0Lw== -----END CERTIFICATE-----Generated at Sat Jan 31 08:51:02 2026 by rpki-client