This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: Y5iGqo52p0KqBSE+1364zps5ZLsZNpJ65tLpNXA13hk= Subject key identifier: D6:6F:F7:77:36:6E:14:2A:8D:67:95:E1:B4:4D:EB:13:34:E9:BD:4A Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 26F66C546D4B2146329D3017F17E53A08284DF3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 020C Signing time: Fri 21 Nov 2025 10:58:38 +0000 Manifest this update: Fri 21 Nov 2025 10:53:38 +0000 Manifest next update: Sat 22 Nov 2025 13:39:38 +0000 Files and hashes: 1: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) 2: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: +4eoUBPwV4VTTr2srwpDUhtDDRBaKzIY1TNJtM4hFco=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Nov 2025 13:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f6:6c:54:6d:4b:21:46:32:9d:30:17:f1:7e:53:a0:82:84:df:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Nov 21 10:53:38 2025 GMT Not After : Nov 22 13:39:38 2025 GMT Subject: CN=D66FF777366E142A8D6795E1B44DEB1334E9BD4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:77:1e:f8:53:f6:f3:b6:9f:ba:37:7f:ef:f5: a0:ee:24:0b:2f:3f:04:23:c3:71:41:bc:35:63:83: ad:fd:87:37:0a:bb:ec:a9:45:c3:13:ee:20:2f:ff: 22:c7:56:56:d9:cd:a0:4d:f3:ff:fe:7f:b1:7e:18: ab:cc:08:30:15:30:86:f5:a3:89:80:1f:01:63:72: 58:7a:ef:f6:cc:93:5a:d9:e4:3d:68:d3:62:d7:18: 0f:19:05:be:dc:dc:10:8e:d1:6e:8e:ba:ac:80:b2: 03:1d:c1:a0:81:38:b4:33:18:94:9a:f5:d4:0a:cf: 60:df:28:17:14:3f:60:d6:27:35:a1:f6:13:88:aa: fe:a4:04:e8:fb:a9:00:f2:d2:45:1f:70:08:bd:36: 3a:69:f7:3b:62:be:b0:ea:90:7a:19:65:dd:86:28: 92:ad:42:04:6f:de:b1:ef:eb:e8:c2:6c:83:25:a5: a1:41:75:7f:81:84:d8:ae:96:db:04:0a:bf:51:a7: b5:b8:6a:63:39:af:12:fd:12:01:85:5c:1d:5b:14: b4:9b:6d:48:ea:d6:89:71:7b:25:8a:96:de:c7:94: 63:41:be:52:66:e5:90:dc:95:12:5d:56:76:a8:d4: 4d:d8:15:df:3d:89:0b:8c:cf:09:08:7c:94:bc:87: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6F:F7:77:36:6E:14:2A:8D:67:95:E1:B4:4D:EB:13:34:E9:BD:4A X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:93:c7:82:60:c4:19:c3:b5:33:2a:52:a9:b6:87:a9:be:df: 94:e7:5e:aa:42:a2:5d:21:da:b5:6f:e6:7d:c7:ae:ee:c9:2b: 6c:36:d2:c6:1d:2e:6e:9c:ee:88:25:90:86:f6:2a:ca:03:e4: 6b:b3:2e:c0:64:14:37:e6:7c:90:16:f9:bd:6a:4d:f9:6b:ec: 04:aa:1d:75:ae:94:95:1d:62:44:64:6e:8c:9c:5f:be:ed:ff: 99:90:24:a2:29:58:16:dd:e1:29:51:b3:d3:5c:c4:8c:6f:f6: c3:d5:cd:2d:e1:e6:11:df:e3:c6:50:13:0d:64:2f:61:d5:e2: f3:7e:a1:94:9e:d0:f6:57:24:5c:13:6c:38:fd:13:b6:98:09: 89:98:81:44:37:e9:91:2a:bf:b4:66:a5:00:95:b5:74:ee:dc: 82:3a:dc:cb:df:6a:42:e9:18:5e:55:98:f1:c2:44:cd:5c:e5: 37:71:59:5e:5e:67:5f:5f:1d:3e:ed:b9:26:e1:b0:59:ae:a2: 65:f9:43:b1:9f:db:40:1c:8a:c3:98:44:b6:ef:45:ee:43:cd: 42:5f:99:7a:a1:82:2d:7b:fd:f2:59:4f:c9:ba:57:06:25:54: cd:77:01:ce:05:14:13:24:bb:8f:49:81:a3:86:e8:4b:cc:ad: 14:9c:60:9b -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUJvZsVG1LIUYynTAX8X5ToIKE3zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTExMjExMDUzMzhaFw0yNTExMjIxMzM5MzhaMDMxMTAvBgNV BAMTKEQ2NkZGNzc3MzY2RTE0MkE4RDY3OTVFMUI0NERFQjEzMzRFOUJENEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdx74U/bztp+6N3/v9aDuJAsv PwQjw3FBvDVjg639hzcKu+ypRcMT7iAv/yLHVlbZzaBN8//+f7F+GKvMCDAVMIb1 o4mAHwFjclh67/bMk1rZ5D1o02LXGA8ZBb7c3BCO0W6OuqyAsgMdwaCBOLQzGJSa 9dQKz2DfKBcUP2DWJzWh9hOIqv6kBOj7qQDy0kUfcAi9Njpp9ztivrDqkHoZZd2G KJKtQgRv3rHv6+jCbIMlpaFBdX+BhNiultsECr9Rp7W4amM5rxL9EgGFXB1bFLSb bUjq1olxeyWKlt7HlGNBvlJm5ZDclRJdVnao1E3YFd89iQuMzwkIfJS8h8elAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU1m/3dzZuFCqNZ5XhtE3rEzTpvUowHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAGJPHgmDEGcO1MypSqbaHqb7flOdeqkKiXSHatW/mfceu7skrbDbSxh0u bpzuiCWQhvYqygPka7MuwGQUN+Z8kBb5vWpN+WvsBKodda6UlR1iRGRujJxfvu3/ mZAkoilYFt3hKVGz01zEjG/2w9XNLeHmEd/jxlATDWQvYdXi836hlJ7Q9lckXBNs OP0TtpgJiZiBRDfpkSq/tGalAJW1dO7cgjrcy99qQukYXlWY8cJEzVzlN3FZXl5n X18dPu25JuGwWa6iZflDsZ/bQByKw5hEtu9F7kPNQl+ZeqGCLXv98llPybpXBiVU zXcBzgUUEyS7j0mBo4boS8ytFJxgmw== -----END CERTIFICATE-----Generated at Fri Nov 21 23:25:53 2025 by rpki-client