This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft File: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft (raw, json) Hash identifier: ISrSyHr5ppzpUSB8oBRMHeR1Srf9aPcdlMzDqsxsC7s= Subject key identifier: 6A:CE:61:26:B7:A3:06:1C:69:B3:0C:4A:0C:D3:B5:54:4D:19:03:73 Authority key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9 Certificate issuer: /CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9 Certificate serial: 03D9AD3EC4A97FBDA70D60BC5E18766F5E0F86DF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer Subject info access: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft Manifest number: 05 Signing time: Wed 03 Dec 2025 20:28:00 +0000 Manifest this update: Wed 03 Dec 2025 20:23:00 +0000 Manifest next update: Thu 04 Dec 2025 22:17:00 +0000 Files and hashes: 1: 326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa (hash: Ehn6pGTxKobCbcqHXhYXu7JSWP4YzSgJi4eDlDBkLxc=) 2: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl (hash: cMxrOsaiRSVI6BUHRp06sximyZRCGJ70bVMak8fg7Rk=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 20:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d9:ad:3e:c4:a9:7f:bd:a7:0d:60:bc:5e:18:76:6f:5e:0f:86:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9 Validity Not Before: Dec 3 20:23:00 2025 GMT Not After : Dec 4 22:17:00 2025 GMT Subject: CN=6ACE6126B7A3061C69B30C4A0CD3B5544D190373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:ca:c0:5c:9d:e8:65:1e:f1:79:3b:59:50: 6d:99:7a:8f:23:40:d7:c7:1d:19:6c:f0:e5:c1:42: 70:5a:5b:af:51:07:49:ed:c8:38:94:7e:35:d2:97: 1a:64:b0:68:4f:66:f7:fc:4d:05:5f:fe:4a:9b:a8: fd:4a:18:15:df:d7:b1:91:e8:24:df:2a:8f:ef:ec: 6d:2b:92:cd:88:23:11:35:ed:ea:02:a7:c8:5d:ec: a6:3d:1f:00:9a:64:9c:6d:bb:75:91:d5:c9:36:0e: 49:02:25:d5:3b:85:c5:65:c0:c3:64:4f:f1:22:ac: 76:ec:4c:5c:38:6b:48:df:29:1c:ec:37:35:30:76: c4:c6:cc:ff:49:04:90:e1:3b:32:ea:6f:3f:97:d3: 6e:30:c9:b8:c7:25:b0:87:da:68:85:6a:03:13:90: 4f:1f:4a:4c:5b:cd:72:db:33:b8:34:42:6b:51:74: 44:49:38:88:6b:e0:01:56:60:df:6d:ce:f1:58:03: 2e:c0:fa:dc:28:c7:bf:86:0c:38:bb:8c:0d:02:ec: 80:4d:8a:d0:05:5c:03:a5:86:bf:0e:fd:67:11:4d: 23:7f:8a:f3:af:22:be:15:49:02:ca:db:1c:dc:65: 2c:b5:ae:3c:c7:65:84:0b:55:e6:75:fb:3d:b6:a1: db:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CE:61:26:B7:A3:06:1C:69:B3:0C:4A:0C:D3:B5:54:4D:19:03:73 X509v3 Authority Key Identifier: keyid:ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:27:76:01:bd:89:8e:79:86:ed:3f:1b:7a:62:c2:f5:19:b7: bb:36:35:8f:7d:0a:c8:dd:f2:ed:52:b1:b5:e1:9d:06:ce:a0: 14:ff:b8:70:4b:b8:8c:15:20:e5:d6:e0:3b:ba:fd:b7:32:25: b0:ed:ed:1e:9b:b2:3a:f5:9d:9a:45:e8:f9:8e:03:b6:9b:4a: 81:67:c0:39:2b:3c:f3:ee:77:8e:0b:06:8a:50:df:a4:5b:d1: 8c:ed:91:35:1d:29:63:1b:a3:09:3f:f6:6b:15:3d:bd:54:6d: 0c:e3:9f:ac:55:99:20:d2:b2:ed:16:28:a4:7b:ff:5c:e2:56: 3e:2e:3d:35:cf:aa:0c:15:fa:b0:22:9f:8a:1b:b5:15:a7:92: ac:4a:55:9a:8d:d3:9b:f0:2d:20:ae:a2:fd:2b:29:df:8e:22: d4:ff:8c:15:d4:28:33:a2:fd:15:8a:3c:13:59:a1:36:77:c5: 64:00:76:45:32:51:33:7e:65:b3:bc:4d:5e:19:8c:96:de:17: 63:49:93:9f:9e:cd:ff:eb:93:7a:7c:f5:ee:0e:21:cb:59:0f: 05:ca:82:ac:c2:69:f9:c6:ca:12:7d:d5:6e:59:f4:ed:41:49: 00:d2:e8:8e:eb:37:13:a8:8d:ea:91:2c:18:ac:66:88:ae:a0: 68:e9:fb:16 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUA9mtPsSpf72nDWC8Xhh2b14Pht8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0NTRCOTlDMkIwRTQ3MkE5NTQyRjkwOTQ0OUVCRThG MzFGRkFEOTAeFw0yNTEyMDMyMDIzMDBaFw0yNTEyMDQyMjE3MDBaMDMxMTAvBgNV BAMTKDZBQ0U2MTI2QjdBMzA2MUM2OUIzMEM0QTBDRDNCNTU0NEQxOTAzNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYlsrAXJ3oZR7xeTtZUG2Zeo8j QNfHHRls8OXBQnBaW69RB0ntyDiUfjXSlxpksGhPZvf8TQVf/kqbqP1KGBXf17GR 6CTfKo/v7G0rks2IIxE17eoCp8hd7KY9HwCaZJxtu3WR1ck2DkkCJdU7hcVlwMNk T/EirHbsTFw4a0jfKRzsNzUwdsTGzP9JBJDhOzLqbz+X024wybjHJbCH2miFagMT kE8fSkxbzXLbM7g0QmtRdERJOIhr4AFWYN9tzvFYAy7A+twox7+GDDi7jA0C7IBN itAFXAOlhr8O/WcRTSN/ivOvIr4VSQLK2xzcZSy1rjzHZYQLVeZ1+z22oduNAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQUas5hJrejBhxpswxKDNO1VE0ZA3MwHwYDVR0j BBgwFoAU7UVLmcKw5HKpVC+QlEnr6PMf+tkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvY2VhNWIzNDg0YzJiNDUwZmIyNzczYjFiOTgxZjUwODcvMS9FRDQ1NEI5OUMy QjBFNDcyQTk1NDJGOTA5NDQ5RUJFOEYzMUZGQUQ5LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj YWUzZi80L0VENDU0Qjk5QzJCMEU0NzJBOTU0MkY5MDk0NDlFQkU4RjMxRkZBRDku Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jZWE1YjM0ODRjMmI0NTBmYjI3NzNi MWI5ODFmNTA4Ny8xL0VENDU0Qjk5QzJCMEU0NzJBOTU0MkY5MDk0NDlFQkU4RjMx RkZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQBmJ3YBvYmOeYbtPxt6YsL1Gbe7NjWPfQrI3fLtUrG1 4Z0GzqAU/7hwS7iMFSDl1uA7uv23MiWw7e0em7I69Z2aRej5jgO2m0qBZ8A5Kzzz 7neOCwaKUN+kW9GM7ZE1HSljG6MJP/ZrFT29VG0M45+sVZkg0rLtFiike/9c4lY+ Lj01z6oMFfqwIp+KG7UVp5KsSlWajdOb8C0grqL9KynfjiLU/4wV1Cgzov0VijwT WaE2d8VkAHZFMlEzfmWzvE1eGYyW3hdjSZOfns3/65N6fPXuDiHLWQ8FyoKswmn5 xsoSfdVuWfTtQUkA0uiO6zcTqI3qkSwYrGaIrqBo6fsW -----END CERTIFICATE-----Generated at Thu Dec 4 08:15:10 2025 by rpki-client