This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: NKXONrxlymbqy4ciPEQI5Oc5DwwMV7LXUGnn7A16ShE=
Subject key identifier: 05:48:25:1C:28:5F:1E:2C:B7:EE:7F:42:11:48:5D:E2:4C:2E:2B:4E
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 30954A65A24B6CA62014DAAE0BAB00EAFEBF128F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: 0243
Signing time: Thu 01 Jan 2026 14:00:01 +0000
Manifest this update: Thu 01 Jan 2026 13:55:01 +0000
Manifest next update: Fri 02 Jan 2026 17:47:01 +0000
Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=)
2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: aw6o1QRvuY08jXm60IxCsI1V1INOK+UakyPXu+U/pUE=)
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Jan 2026 17:47:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:95:4a:65:a2:4b:6c:a6:20:14:da:ae:0b:ab:00:ea:fe:bf:12:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jan 1 13:55:01 2026 GMT
Not After : Jan 2 17:47:01 2026 GMT
Subject: CN=0548251C285F1E2CB7EE7F4211485DE24C2E2B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:61:5b:aa:b5:92:64:f0:74:bd:62:c0:fb:
a8:bd:d3:aa:07:8e:89:bf:12:00:63:ff:17:da:8d:
ad:c6:19:90:ce:e3:71:a6:eb:e9:08:f9:6b:ad:02:
db:7a:d9:2f:82:d4:68:2a:6f:80:85:e3:0b:24:b6:
82:5d:50:6e:bf:9e:cf:bd:cc:9e:7d:52:42:18:0d:
51:c3:46:6c:a2:68:06:39:6a:7b:0f:d5:ae:f1:fd:
7c:c0:1b:8b:a3:db:4c:8d:46:98:f0:85:e3:01:c3:
5a:bd:0e:96:81:72:8d:5a:7d:17:fd:6b:fd:f7:79:
f8:b8:75:58:ea:ed:1c:8d:da:ad:47:72:84:98:0f:
b6:5e:f9:25:f4:58:20:28:1d:d0:73:41:ec:31:a6:
3d:31:9e:59:88:81:8c:cd:eb:76:d9:d6:af:e9:e3:
64:bc:fd:e3:85:7d:b7:e9:2f:e7:7d:f7:7f:35:d9:
6b:f5:d0:55:d8:cf:c7:02:96:68:24:47:e1:c2:88:
cc:99:ee:cb:8f:87:99:bf:12:9a:39:c7:e6:ba:0a:
47:c5:7d:e4:c5:ee:36:e2:e3:91:c6:d3:57:13:13:
1f:2d:52:38:73:fc:93:79:4b:bf:78:10:29:9f:95:
00:4f:6c:50:d9:6f:f4:ba:5a:b1:05:8f:34:bf:22:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:48:25:1C:28:5F:1E:2C:B7:EE:7F:42:11:48:5D:E2:4C:2E:2B:4E
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b5:04:48:de:52:9e:2b:b5:1d:bf:e8:4a:8e:64:df:0a:67:
14:ee:90:61:f9:1c:04:c3:2c:44:02:ee:af:fa:8f:26:c8:61:
25:15:4a:24:f4:a8:89:3a:b2:82:a1:0a:46:1a:bb:49:b3:6c:
31:e2:ce:44:b2:ca:1c:8c:29:32:03:6f:33:72:71:85:e0:32:
c5:b6:7b:e9:f3:ec:6c:89:8c:ee:80:f0:96:76:1c:6c:b2:97:
89:ba:68:2c:09:54:04:29:70:6d:60:67:ea:77:34:92:41:fb:
16:a7:a8:79:3d:22:3f:4b:6b:c1:0c:da:25:5d:37:86:fd:64:
fd:19:17:74:3f:7b:ab:96:93:5c:7a:fa:49:b5:e8:d2:81:f5:
ed:09:fc:b7:26:68:d9:ca:b0:12:59:04:af:1e:b2:23:b6:60:
f5:26:27:49:49:dc:f2:49:cb:85:30:0b:df:8c:82:8c:b2:f4:
9d:dd:02:01:7e:4c:ee:ec:5a:d6:73:b5:79:e7:9f:73:0b:58:
a8:7f:40:21:40:7a:b5:2d:3a:e5:93:9f:96:33:12:f3:57:8b:
4b:c7:db:07:19:01:20:e7:4b:f5:04:ed:ea:65:76:8e:b5:11:
d4:8d:15:7b:8f:3e:c2:75:26:74:c9:4c:98:cf:a1:b2:f0:2d:
e3:ee:e0:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 23:33:48 2026 by rpki-client