This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft File: D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft (raw, json) Hash identifier: cnFPeoMgA43rdye6t6wNhdeHxZ1BjTDIJWJ3APDvTxw= Subject key identifier: E6:84:6F:12:FC:ED:A6:D0:2C:30:DA:DF:AF:8E:03:EA:74:9A:D2:62 Authority key identifier: D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A Certificate issuer: /CN=d2dd078610aaec47b5403f297f9208b7a58fb33a Certificate serial: 41DFE6261D82C5038E356C9969D6F4DCE39BC7EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft Manifest number: 0319 Signing time: Thu 25 Dec 2025 09:37:18 +0000 Manifest this update: Thu 25 Dec 2025 09:32:18 +0000 Manifest next update: Fri 26 Dec 2025 10:19:18 +0000 Files and hashes: 1: D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl (hash: JmpVKvlkQZVXtha3XQGLf2tR6NJOoVhRoIhpMxaH+ik=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:df:e6:26:1d:82:c5:03:8e:35:6c:99:69:d6:f4:dc:e3:9b:c7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2dd078610aaec47b5403f297f9208b7a58fb33a Validity Not Before: Dec 25 09:32:18 2025 GMT Not After : Dec 26 10:19:18 2025 GMT Subject: CN=E6846F12FCEDA6D02C30DADFAF8E03EA749AD262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:61:5e:d4:bd:e9:08:c2:46:b6:ad:1e:50:13: f8:a4:ab:cc:35:e8:d7:31:bb:09:15:e5:b9:15:12: 48:68:69:45:99:eb:27:ea:04:ee:05:36:b7:e6:21: a7:ee:2f:2d:23:80:b8:f5:31:13:86:13:7b:8a:e9: e6:8e:2f:26:e9:41:5e:0d:70:e4:46:df:84:7f:3e: 70:28:19:6d:13:d9:38:46:bc:b0:41:2e:f0:0e:32: b8:68:83:a1:7a:15:9a:05:5f:cd:27:ca:06:3e:f4: 40:96:ac:37:9b:59:23:87:0a:4b:bf:17:09:09:65: 35:0d:65:21:89:e4:5d:3b:a2:2c:dc:1a:35:22:b6: bd:30:cf:7b:e3:e8:ce:39:19:bb:37:41:34:8d:f6: 5b:3b:59:bb:df:48:08:fc:95:29:5c:d4:7b:05:a7: 19:39:82:f1:3a:8a:b9:a1:c1:bf:68:6d:61:31:56: e6:22:00:8b:2d:16:ee:a5:52:e8:3a:04:c4:a6:a8: 0a:e5:b4:76:82:69:8d:04:44:51:23:18:8a:d6:f7: 5c:ad:70:f8:ed:23:18:9d:fa:7b:78:0f:a7:87:9e: e6:62:04:ba:ae:d9:38:5b:2a:85:3d:14:93:73:8f: 2c:2c:d8:16:d4:04:c4:86:f9:d9:f0:fd:24:9c:41: a9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:84:6F:12:FC:ED:A6:D0:2C:30:DA:DF:AF:8E:03:EA:74:9A:D2:62 X509v3 Authority Key Identifier: keyid:D2:DD:07:86:10:AA:EC:47:B5:40:3F:29:7F:92:08:B7:A5:8F:B3:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t0HhhCq7Ee1QD8pf5IIt6WPszo.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018cdcf2c8354b52/1/D2DD078610AAEC47B5403F297F9208B7A58FB33A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9e:c2:26:e0:1d:97:ca:67:95:50:fc:cb:5b:5b:87:a2:eb: 80:86:85:c2:fd:5a:c3:c1:b3:75:65:e0:83:95:3d:4d:55:45: 5a:16:4a:8c:9d:7d:9c:f7:0f:8f:f4:aa:76:15:ac:12:a7:e2: b6:2f:95:8a:f1:66:0c:c9:73:13:78:c7:fe:59:80:89:5e:a3: d1:6c:af:ff:1b:10:98:b6:44:bc:79:df:5a:da:43:18:0b:6a: 8b:00:83:3d:67:3a:83:e0:6c:e8:25:93:d2:de:02:ea:94:4e: 25:20:98:2e:54:ac:88:12:c4:41:9f:cb:63:95:af:be:fa:25: 4e:21:0b:bf:5a:c7:34:99:4a:7b:c3:ef:bc:6c:a0:38:23:32: ce:4b:ed:ff:29:6e:6c:98:54:89:80:33:be:95:ab:fb:b0:a1: ad:f9:c2:8d:67:d5:16:b7:8c:45:3d:ef:8b:2e:3d:48:b7:be: 7e:7d:45:a9:fc:99:6d:d3:ea:d2:16:47:72:44:3c:71:d1:2e: 82:20:26:7e:1c:3a:03:ec:0e:0b:0f:f1:4e:ca:df:8c:08:70: 8f:80:45:e8:e5:39:c9:7e:da:fb:ab:d2:d5:73:12:e8:5c:f2: 74:a5:ae:ec:52:f0:b6:c1:a3:20:15:14:de:e6:c1:56:7a:0f: 23:a1:1c:92 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUQd/mJh2CxQOONWyZadb03OObx+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDJkZDA3ODYxMGFhZWM0N2I1NDAzZjI5N2Y5MjA4Yjdh NThmYjMzYTAeFw0yNTEyMjUwOTMyMThaFw0yNTEyMjYxMDE5MThaMDMxMTAvBgNV BAMTKEU2ODQ2RjEyRkNFREE2RDAyQzMwREFERkFGOEUwM0VBNzQ5QUQyNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRYV7UvekIwka2rR5QE/ikq8w1 6NcxuwkV5bkVEkhoaUWZ6yfqBO4FNrfmIafuLy0jgLj1MROGE3uK6eaOLybpQV4N cORG34R/PnAoGW0T2ThGvLBBLvAOMrhog6F6FZoFX80nygY+9ECWrDebWSOHCku/ FwkJZTUNZSGJ5F07oizcGjUitr0wz3vj6M45Gbs3QTSN9ls7WbvfSAj8lSlc1HsF pxk5gvE6irmhwb9obWExVuYiAIstFu6lUug6BMSmqArltHaCaY0ERFEjGIrW91yt cPjtIxid+nt4D6eHnuZiBLqu2ThbKoU9FJNzjyws2BbUBMSG+dnw/SScQalFAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQU5oRvEvztptAsMNrfr44D6nSa0mIwHwYDVR0j BBgwFoAU0t0HhhCq7Ee1QD8pf5IIt6WPszowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIvMS9EMkREMDc4NjEw QUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvMHQwSGhoQ3E3RWUxUUQ4cGY1SUl0NldQc3pvLmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4YmFhNTc5YzAxOGNkY2YyYzgzNTRiNTIv MS9EMkREMDc4NjEwQUFFQzQ3QjU0MDNGMjk3RjkyMDhCN0E1OEZCMzNBLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAjJ7CJuAdl8pnlVD8y1tbh6LrgIaFwv1aw8GzdWXgg5U9TVVFWhZKjJ19 nPcPj/SqdhWsEqfiti+VivFmDMlzE3jH/lmAiV6j0Wyv/xsQmLZEvHnfWtpDGAtq iwCDPWc6g+Bs6CWT0t4C6pROJSCYLlSsiBLEQZ/LY5WvvvolTiELv1rHNJlKe8Pv vGygOCMyzkvt/ylubJhUiYAzvpWr+7ChrfnCjWfVFreMRT3viy49SLe+fn1FqfyZ bdPq0hZHckQ8cdEugiAmfhw6A+wOCw/xTsrfjAhwj4BF6OU5yX7a+6vS1XMS6Fzy dKWu7FLwtsGjIBUU3ubBVnoPI6Eckg== -----END CERTIFICATE-----Generated at Thu Dec 25 23:51:32 2025 by rpki-client