This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json) Hash identifier: 7LYUoPfryE+GSR0nP03byANCBvextEd8G2LgAU6XYVg= Subject key identifier: 88:AE:E5:E9:52:93:41:9D:AB:08:DC:6B:F7:D7:08:09:C3:6F:85:3E Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Certificate serial: 11752315630790178B1A74055A5AD909FF4AF856 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft Manifest number: 0234 Signing time: Sun 21 Dec 2025 06:29:51 +0000 Manifest this update: Sun 21 Dec 2025 06:24:51 +0000 Manifest next update: Mon 22 Dec 2025 08:42:51 +0000 Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: yfv7l5/gy8ODzgIYPZgdM6K+srtpYW9MW2aNwx4U+uU=) 2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: OktGhRV8bYzCoMRfLVYMca3Cyl1qFoDuF4NLF943HiQ=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:42:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:75:23:15:63:07:90:17:8b:1a:74:05:5a:5a:d9:09:ff:4a:f8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af Validity Not Before: Dec 21 06:24:51 2025 GMT Not After : Dec 22 08:42:51 2025 GMT Subject: CN=88AEE5E95293419DAB08DC6BF7D70809C36F853E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:66:c6:4d:4f:91:da:cb:20:37:30:3c:91: e6:e7:0f:4f:89:43:79:e1:17:4c:df:12:ff:5b:0f: 25:ae:29:73:06:69:d4:ad:67:c5:b4:f3:a3:a4:0f: 16:55:11:aa:45:d6:1b:48:f1:3b:c2:3e:46:c1:2c: 4b:e1:c1:5d:fe:d4:a2:31:d0:cb:b0:e3:3b:c9:60: ca:d1:e7:af:ee:cb:43:fa:fd:51:cf:25:70:a8:eb: e5:2c:b6:d9:ce:e1:46:b5:d1:8e:4c:aa:c4:39:dc: 07:2c:0d:c0:0e:c5:29:ab:88:c6:38:c0:c3:c7:23: bb:66:52:29:a1:16:82:c7:33:89:c6:16:be:81:e3: 6b:a4:ae:88:96:04:75:ec:c7:d1:f4:00:fa:4c:49: 1b:2d:af:e9:00:74:b0:8f:88:b2:cb:a6:48:18:ff: e2:af:f4:34:43:f8:d7:57:76:43:9c:de:36:a9:8d: 7f:43:25:58:05:49:ff:39:bc:c8:5e:1e:1a:14:4e: 36:74:c0:97:24:8a:c1:1a:84:20:c8:07:dc:5f:83: 04:5e:a3:99:23:64:b6:3f:b5:a7:b4:91:04:60:6e: 1e:fb:a9:c8:bb:27:cc:88:4e:6d:dd:bd:b6:f4:f8: 6f:0d:ae:3e:11:e9:e4:ac:82:17:0e:b2:cd:11:a0: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AE:E5:E9:52:93:41:9D:AB:08:DC:6B:F7:D7:08:09:C3:6F:85:3E X509v3 Authority Key Identifier: keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:21:6d:51:04:f6:e6:ea:3b:7b:4f:0d:f8:8d:98:64:0c:fc: e2:f1:6e:7a:ca:4c:6b:6d:85:f9:ee:e8:86:b4:46:97:85:5b: ba:59:08:3f:25:2c:8e:54:54:f7:eb:7e:7a:eb:6f:20:21:41: bc:f4:30:bb:59:71:ca:9a:fd:5c:96:c7:d5:dc:df:b2:9e:8b: 5c:1e:1b:2d:ed:94:1a:c5:8a:16:e1:08:27:c1:15:a7:aa:47: 4f:f2:5a:8c:60:69:a0:11:4c:6f:ff:30:02:1c:ec:12:59:1c: 88:73:f0:df:ac:ec:68:55:28:97:1e:e8:b9:28:be:ac:32:7e: 51:44:86:c7:47:df:c8:e7:9f:4f:05:42:e2:96:37:86:88:c2: ef:22:cc:9a:d8:0b:52:5e:5b:24:6f:c2:dc:e0:a6:b1:a3:ad: 91:18:e7:98:d3:88:b1:c6:39:31:a8:6e:e2:25:53:75:11:18: b6:72:8e:fa:a3:d4:29:7e:c1:7e:5e:5e:a1:96:e0:fb:19:a4: 9e:c9:7d:db:3f:85:38:5e:40:61:19:97:17:96:44:60:fb:9e: 53:29:44:53:69:d4:0e:95:c8:82:0c:c0:2a:a1:39:42:4e:08: 72:f8:f2:30:ed:5a:fc:70:ae:6f:00:bf:a7:da:82:6d:f5:9a: 43:79:34:b3 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUEXUjFWMHkBeLGnQFWlrZCf9K+FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl ZDc2YjBhZjAeFw0yNTEyMjEwNjI0NTFaFw0yNTEyMjIwODQyNTFaMDMxMTAvBgNV BAMTKDg4QUVFNUU5NTI5MzQxOURBQjA4REM2QkY3RDcwODA5QzM2Rjg1M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWWbGTU+R2ssgNzA8kebnD0+J Q3nhF0zfEv9bDyWuKXMGadStZ8W086OkDxZVEapF1htI8TvCPkbBLEvhwV3+1KIx 0Muw4zvJYMrR56/uy0P6/VHPJXCo6+UsttnO4Ua10Y5MqsQ53AcsDcAOxSmriMY4 wMPHI7tmUimhFoLHM4nGFr6B42ukroiWBHXsx9H0APpMSRstr+kAdLCPiLLLpkgY /+Kv9DRD+NdXdkOc3japjX9DJVgFSf85vMheHhoUTjZ0wJckisEahCDIB9xfgwRe o5kjZLY/tae0kQRgbh77qci7J8yITm3dvbb0+G8Nrj4R6eSsghcOss0RoFO/AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUiK7l6VKTQZ2rCNxr99cICcNvhT4wHwYDVR0j BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF AAOCAQEAeyFtUQT25uo7e08N+I2YZAz84vFuespMa22F+e7ohrRGl4VbulkIPyUs jlRU9+t+eutvICFBvPQwu1lxypr9XJbH1dzfsp6LXB4bLe2UGsWKFuEIJ8EVp6pH T/JajGBpoBFMb/8wAhzsElkciHPw36zsaFUolx7ouSi+rDJ+UUSGx0ffyOefTwVC 4pY3hojC7yLMmtgLUl5bJG/C3OCmsaOtkRjnmNOIscY5Mahu4iVTdREYtnKO+qPU KX7Bfl5eoZbg+xmknsl92z+FOF5AYRmXF5ZEYPueUylEU2nUDpXIggzAKqE5Qk4I cvjyMO1a/HCubwC/p9qCbfWaQ3k0sw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:25:17 2025 by rpki-client