This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft File: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft (raw, json) Hash identifier: +e44MFDK16l8qH2Q4IQzPOfr/fXfORRBiqBsZgDdnDg= Subject key identifier: 1E:B1:F3:85:B2:15:D7:D8:95:A1:3A:A1:ED:65:6B:3F:F0:ED:BA:A2 Authority key identifier: ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9 Certificate issuer: /CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9 Certificate serial: 7CFFF78CFDEB6FCE95356D8CA0DFE6FBA69A89DC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer Subject info access: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft Manifest number: 1A Signing time: Sat 20 Dec 2025 02:36:50 +0000 Manifest this update: Sat 20 Dec 2025 02:31:50 +0000 Manifest next update: Sun 21 Dec 2025 06:20:50 +0000 Files and hashes: 1: 326130373a353463313a633030303a3a2f34342d3434203d3e20323134373632.roa (hash: Ehn6pGTxKobCbcqHXhYXu7JSWP4YzSgJi4eDlDBkLxc=) 2: ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl (hash: p/7elNXHiENi8yROEhAiwesKfA37rhuvePlyGNgkGxM=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ff:f7:8c:fd:eb:6f:ce:95:35:6d:8c:a0:df:e6:fb:a6:9a:89:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED454B99C2B0E472A9542F909449EBE8F31FFAD9 Validity Not Before: Dec 20 02:31:50 2025 GMT Not After : Dec 21 06:20:50 2025 GMT Subject: CN=1EB1F385B215D7D895A13AA1ED656B3FF0EDBAA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:e1:b0:8a:a8:17:ae:0c:70:f6:ea:94:89: 1a:48:9c:77:0d:7b:30:f6:52:dd:3f:7e:19:4f:fa: 60:85:9a:10:28:a6:30:cb:85:eb:97:83:f9:b0:4e: b3:5b:ca:01:dc:89:c8:61:01:d4:39:9f:cb:51:75: 27:8b:8d:24:90:8f:02:52:03:63:01:f6:63:76:3f: c0:66:9d:af:b3:52:c7:f2:68:99:ad:26:32:c2:b1: d3:e6:62:54:6f:23:e7:de:07:06:e7:74:dd:7c:18: 42:60:49:9a:20:a8:4b:b2:f3:ee:04:92:a9:df:44: f0:a0:27:1e:e0:94:ae:7e:ab:5e:5a:30:f7:1f:56: 35:fb:28:ee:de:a5:0b:bd:42:2f:be:af:eb:f6:76: f1:3f:54:83:6d:51:a3:3d:15:4e:5f:9c:4d:56:88: eb:3c:93:73:27:06:4f:5a:6c:1a:50:8b:46:11:e7: 35:b8:9e:79:e4:47:9c:9a:4f:61:84:43:c4:28:63: 8b:82:c5:f7:aa:b1:82:fc:5b:08:0e:25:77:1e:08: 66:55:af:9b:06:68:87:cf:01:a2:8f:86:21:d1:b3: 63:33:7e:74:fb:ec:ec:fd:72:0f:ce:11:d2:b1:f1: e2:03:0d:96:ed:ab:ed:55:ec:da:27:57:b7:1b:05: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B1:F3:85:B2:15:D7:D8:95:A1:3A:A1:ED:65:6B:3F:F0:ED:BA:A2 X509v3 Authority Key Identifier: keyid:ED:45:4B:99:C2:B0:E4:72:A9:54:2F:90:94:49:EB:E8:F3:1F:FA:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/cea5b3484c2b450fb2773b1b981f5087/1/ED454B99C2B0E472A9542F909449EBE8F31FFAD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:cc:15:a4:8f:74:ed:81:7d:8b:e2:a7:30:33:1e:8d:da:f5: a5:d6:0c:80:28:b0:67:57:21:38:87:e6:99:b3:6d:73:8d:5b: ad:d4:81:b3:c3:8a:fe:36:19:c2:d1:26:17:dc:19:12:62:4f: ee:c4:00:ab:01:e4:4a:bf:c3:2c:d1:ee:5b:0b:19:d0:c5:b0: 82:5a:49:84:c0:62:9b:63:83:bd:6c:e2:17:48:5b:5a:4a:af: 4a:7c:f3:ea:e9:ea:98:db:3d:75:67:28:57:f2:02:3d:e3:a1: 49:d8:aa:02:74:40:02:d1:21:53:1a:e5:0d:1b:4e:3e:12:d5: ba:80:57:cf:bc:c4:79:09:b4:e3:42:c1:99:6c:91:94:01:fb: c2:c4:89:0a:31:d8:e4:73:df:8d:b3:15:36:60:f9:e2:6f:6c: a8:7b:83:ae:1c:a3:87:d7:71:8d:d4:ec:c1:2e:7c:3a:1a:d6: 2e:9b:81:2a:21:14:6b:40:9f:45:eb:00:2d:23:fe:6f:a2:1a: 6f:3c:06:55:52:f9:29:cd:3c:bb:0a:fe:a8:5f:fd:52:e9:81: 1f:d4:62:6d:c0:25:08:f6:36:7d:dc:d1:f8:8a:3b:0a:2a:bc: 7b:cf:b9:45:dd:ef:c0:c9:32:ea:93:dc:cd:ae:d0:67:6e:f9: 1d:7b:ed:9e -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUfP/3jP3rb86VNW2MoN/m+6aaidwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ0NTRCOTlDMkIwRTQ3MkE5NTQyRjkwOTQ0OUVCRThG MzFGRkFEOTAeFw0yNTEyMjAwMjMxNTBaFw0yNTEyMjEwNjIwNTBaMDMxMTAvBgNV BAMTKDFFQjFGMzg1QjIxNUQ3RDg5NUExM0FBMUVENjU2QjNGRjBFREJBQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk9OGwiqgXrgxw9uqUiRpInHcN ezD2Ut0/fhlP+mCFmhAopjDLheuXg/mwTrNbygHcichhAdQ5n8tRdSeLjSSQjwJS A2MB9mN2P8Bmna+zUsfyaJmtJjLCsdPmYlRvI+feBwbndN18GEJgSZogqEuy8+4E kqnfRPCgJx7glK5+q15aMPcfVjX7KO7epQu9Qi++r+v2dvE/VINtUaM9FU5fnE1W iOs8k3MnBk9abBpQi0YR5zW4nnnkR5yaT2GEQ8QoY4uCxfeqsYL8WwgOJXceCGZV r5sGaIfPAaKPhiHRs2MzfnT77Oz9cg/OEdKx8eIDDZbtq+1V7NonV7cbBdPBAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQUHrHzhbIV19iVoTqh7WVrP/DtuqIwHwYDVR0j BBgwFoAU7UVLmcKw5HKpVC+QlEnr6PMf+tkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvY2VhNWIzNDg0YzJiNDUwZmIyNzczYjFiOTgxZjUwODcvMS9FRDQ1NEI5OUMy QjBFNDcyQTk1NDJGOTA5NDQ5RUJFOEYzMUZGQUQ5LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2FhMDA0YmExLTQxOWItNGRiNS1iYmQzLTVjY2E2MzNj YWUzZi80L0VENDU0Qjk5QzJCMEU0NzJBOTU0MkY5MDk0NDlFQkU4RjMxRkZBRDku Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jZWE1YjM0ODRjMmI0NTBmYjI3NzNi MWI5ODFmNTA4Ny8xL0VENDU0Qjk5QzJCMEU0NzJBOTU0MkY5MDk0NDlFQkU4RjMx RkZBRDkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQAozBWkj3TtgX2L4qcwMx6N2vWl1gyAKLBnVyE4h+aZ s21zjVut1IGzw4r+NhnC0SYX3BkSYk/uxACrAeRKv8Ms0e5bCxnQxbCCWkmEwGKb Y4O9bOIXSFtaSq9KfPPq6eqY2z11ZyhX8gI946FJ2KoCdEAC0SFTGuUNG04+EtW6 gFfPvMR5CbTjQsGZbJGUAfvCxIkKMdjkc9+NsxU2YPnib2yoe4OuHKOH13GN1OzB Lnw6GtYum4EqIRRrQJ9F6wAtI/5vohpvPAZVUvkpzTy7Cv6oX/1S6YEf1GJtwCUI 9jZ93NH4ijsKKrx7z7lF3e/AyTLqk9zNrtBnbvkde+2e -----END CERTIFICATE-----Generated at Sat Dec 20 10:37:37 2025 by rpki-client