This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: tUKY9xz8H3+c8AdztUuniQ1G3YLmAFnuGF/SGVCoy18= Subject key identifier: 42:16:8F:DC:B3:64:4D:5B:29:7D:7F:A3:74:45:69:33:76:83:8B:08 Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 72C95ABE28D5D50E83070B832F4894881B3000B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 020E Signing time: Sat 22 Nov 2025 22:13:38 +0000 Manifest this update: Sat 22 Nov 2025 22:08:38 +0000 Manifest next update: Mon 24 Nov 2025 01:02:38 +0000 Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: kfSXko1C2jMuSuTtcnOgx+AHXfprCHZpHnP8jvIiw88=) 2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c9:5a:be:28:d5:d5:0e:83:07:0b:83:2f:48:94:88:1b:30:00:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 22 22:08:38 2025 GMT Not After : Nov 24 01:02:38 2025 GMT Subject: CN=42168FDCB3644D5B297D7FA37445693376838B08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:90:53:d7:37:a3:b8:7b:ab:22:83:9c:13:39: c2:5b:28:7d:5e:48:67:b1:d6:42:07:7c:b7:e7:6f: 92:9d:0d:46:4f:33:5a:6d:10:46:47:cf:ea:d8:60: 27:4d:89:c3:1e:dc:19:70:91:a4:bf:fa:2c:e4:8d: fa:d8:85:a1:a8:1f:f8:f6:5a:30:4c:e0:bf:e0:20: fb:ef:66:92:90:c5:5c:98:7b:55:71:ee:99:99:b6: 66:f1:4e:7b:db:12:9f:8b:64:ec:9a:be:ec:ce:df: e4:13:47:19:83:88:d6:08:29:05:5e:7d:87:f5:4c: 05:9b:62:5c:e9:de:3b:be:a0:ae:86:a7:9e:c6:44: d8:15:b8:a3:a8:d4:85:9f:26:86:45:a4:8c:de:37: c0:4a:10:9f:91:7d:d8:09:ed:36:7e:c8:81:78:31: 1c:6e:f3:6e:5a:1a:eb:4a:d2:6b:e4:c8:8a:64:31: 34:64:cc:af:16:57:63:23:b9:b4:9b:92:c3:de:f1: e5:8a:d6:86:fa:e7:23:cb:d3:cc:08:be:e6:0e:fd: c2:3e:2d:85:ae:b2:b5:51:59:d4:db:22:ee:c2:7b: f5:37:18:0a:8a:dd:1d:3a:7e:06:7a:03:ab:e1:2f: 12:bb:3a:36:5b:16:9a:ec:9f:2b:7c:9d:53:29:de: ac:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:16:8F:DC:B3:64:4D:5B:29:7D:7F:A3:74:45:69:33:76:83:8B:08 X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:00:06:6a:d4:c4:ee:21:98:e5:5d:32:19:ed:da:c5:fa:80: 88:8b:f8:d6:d7:f2:8d:26:a5:3b:e2:08:c8:03:a4:e6:fe:57: 75:c4:8e:fa:95:a7:cd:23:0a:19:07:58:c4:f2:a1:32:12:d3: 88:25:6a:26:fe:65:d3:4d:cd:19:32:0f:5c:d1:9b:45:5b:17: 7b:c0:b8:c9:25:f3:31:36:26:b5:1f:a7:38:84:5b:03:59:8a: 05:f7:1f:b5:7c:d6:08:36:14:52:6e:fc:1d:a6:e8:2b:ae:34: 89:ef:be:17:db:ae:f7:de:3b:e5:b3:1f:bb:8f:ad:cc:ca:89: 23:15:c4:ff:42:9a:52:c9:ba:6b:30:5d:18:eb:31:11:55:ef: e6:e3:6a:5f:2f:c7:e5:c1:a7:3b:93:3a:e3:49:14:4c:83:21: 95:f8:07:0f:0b:dc:65:17:4e:0b:39:cd:99:71:66:6b:80:84: 68:8b:92:e5:d9:1f:ec:b1:22:ed:cc:fa:b9:a7:78:cf:7b:91: b5:21:d9:a6:53:d9:f5:d7:75:78:19:b8:7d:33:3d:e5:33:82: 77:d1:3a:5b:6b:bd:88:94:54:97:5c:90:5a:e1:ab:2e:0e:56: 86:82:d7:1d:68:eb:b2:1e:b5:9c:3a:a4:05:8a:ba:8a:9b:70: 8b:0a:a2:15 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUcslavijV1Q6DBwuDL0iUiBswALgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMjIyMjA4MzhaFw0yNTExMjQwMTAyMzhaMDMxMTAvBgNV BAMTKDQyMTY4RkRDQjM2NDRENUIyOTdEN0ZBMzc0NDU2OTMzNzY4MzhCMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLkFPXN6O4e6sig5wTOcJbKH1e SGex1kIHfLfnb5KdDUZPM1ptEEZHz+rYYCdNicMe3BlwkaS/+izkjfrYhaGoH/j2 WjBM4L/gIPvvZpKQxVyYe1Vx7pmZtmbxTnvbEp+LZOyavuzO3+QTRxmDiNYIKQVe fYf1TAWbYlzp3ju+oK6Gp57GRNgVuKOo1IWfJoZFpIzeN8BKEJ+RfdgJ7TZ+yIF4 MRxu825aGutK0mvkyIpkMTRkzK8WV2MjubSbksPe8eWK1ob65yPL08wIvuYO/cI+ LYWusrVRWdTbIu7Ce/U3GAqK3R06fgZ6A6vhLxK7OjZbFprsnyt8nVMp3qzdAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUQhaP3LNkTVspfX+jdEVpM3aDiwgwHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAMgAGatTE7iGY5V0yGe3axfqAiIv41tfyjSalO+IIyAOk5v5XdcSO+pWn zSMKGQdYxPKhMhLTiCVqJv5l003NGTIPXNGbRVsXe8C4ySXzMTYmtR+nOIRbA1mK BfcftXzWCDYUUm78HaboK640ie++F9uu99475bMfu4+tzMqJIxXE/0KaUsm6azBd GOsxEVXv5uNqXy/H5cGnO5M640kUTIMhlfgHDwvcZRdOCznNmXFma4CEaIuS5dkf 7LEi7cz6uad4z3uRtSHZplPZ9dd1eBm4fTM95TOCd9E6W2u9iJRUl1yQWuGrLg5W hoLXHWjrsh61nDqkBYq6iptwiwqiFQ== -----END CERTIFICATE-----Generated at Sun Nov 23 13:20:58 2025 by rpki-client