This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
File:                     BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft (raw, json)
Hash identifier:          jdrjZQdD6aaTnlfIVIjiZClgzlYX1KNmhhhPdJwHoLU=
Subject key identifier:   D8:91:DA:CA:8A:93:BE:1D:92:56:ED:BA:15:D5:AA:20:E5:3B:59:DA
Authority key identifier: BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
Certificate issuer:       /CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
Certificate serial:       4ED14441139DA3176EF9F7A8EAB90452F6E2443B
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
Manifest number:          EC
Signing time:             Sun 21 Dec 2025 06:04:19 +0000
Manifest this update:     Sun 21 Dec 2025 05:59:19 +0000
Manifest next update:     Mon 22 Dec 2025 07:58:19 +0000
Files and hashes:         1: BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl (hash: SZBNQEyRxnLbmh4sGROxWyculSFX+TaasE8QyiT9yuw=)
                          2: 326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa (hash: KCRXXaVguUMBSgzhjp3GW88sRUsfyr/Z//HxQqDtx8g=)
                          3: 326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa (hash: ac94RfYRpfEUxIZEvv3OUNfLNnWtFFP0b8he3g1FYRE=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Dec 2025 00:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d1:44:41:13:9d:a3:17:6e:f9:f7:a8:ea:b9:04:52:f6:e2:44:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
        Validity
            Not Before: Dec 21 05:59:19 2025 GMT
            Not After : Dec 22 07:58:19 2025 GMT
        Subject: CN=D891DACA8A93BE1D9256EDBA15D5AA20E53B59DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:90:2b:5f:e6:d3:17:94:15:f5:47:29:d5:c2:
                    ed:e3:36:94:23:b0:6c:7e:79:a6:24:c6:6d:37:10:
                    cb:1a:81:f2:c9:56:87:a5:6e:41:16:1d:f0:c8:a1:
                    65:24:07:b8:e6:8a:e5:30:c8:e6:ea:81:63:f9:f3:
                    2f:38:47:7c:36:68:e6:10:27:4c:8d:80:aa:0a:23:
                    3a:8a:24:2d:52:bd:fd:d9:67:96:0a:cc:59:28:ac:
                    93:9d:45:88:43:1d:cd:b5:f9:fe:a1:a9:af:54:18:
                    7b:42:4f:01:0c:73:cf:f9:68:6f:8d:72:20:95:5b:
                    a1:41:28:8f:04:93:b8:47:91:ce:52:b0:78:48:e9:
                    49:cb:20:8d:2d:b8:86:3f:70:20:e7:5a:68:21:a4:
                    41:35:88:3f:e2:8b:cf:96:5f:50:9a:3a:fb:22:8e:
                    d6:12:b7:90:a9:44:1e:6d:39:0d:64:50:4d:d4:39:
                    52:53:5c:81:bf:a2:52:ec:55:e1:d2:ab:b0:7b:61:
                    fd:64:b4:0e:31:85:59:3e:a0:89:68:22:24:35:12:
                    47:f5:c3:8f:30:13:d5:67:67:5f:40:45:7d:90:ec:
                    f1:1b:e3:f0:77:85:02:4c:19:9a:63:af:42:bf:40:
                    7f:20:75:60:7a:bb:5b:20:6d:32:46:98:57:d2:bf:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:91:DA:CA:8A:93:BE:1D:92:56:ED:BA:15:D5:AA:20:E5:3B:59:DA
            X509v3 Authority Key Identifier:
                keyid:BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4a:97:e7:9a:b2:47:5f:0e:9c:a6:47:52:94:2f:53:28:a7:
         99:b8:17:90:80:71:5c:fb:b6:21:62:b0:3e:6a:ad:57:75:b6:
         6a:c2:64:a0:d4:f9:31:e0:0a:0b:10:55:62:17:13:23:d3:8a:
         8b:d2:26:e3:c7:7b:c7:f6:6a:05:21:ea:3c:86:20:9c:3c:f8:
         4d:36:91:64:50:66:a0:48:ff:b0:a4:9b:1b:0d:52:ba:15:5e:
         09:b4:79:fa:35:89:5b:68:e7:8b:6b:00:77:2b:7e:d8:ec:b2:
         b8:4e:d3:52:b2:84:78:0f:ae:c1:8f:12:07:ed:84:61:39:30:
         5f:64:30:3e:ab:64:48:b4:7a:97:6e:42:9b:cb:00:0d:11:9b:
         fe:d7:9c:a8:9a:76:ec:43:39:b1:66:3b:9d:50:f7:0f:02:21:
         f9:45:95:91:55:9c:e3:c2:ee:e2:07:88:76:84:dd:9b:80:b1:
         9a:d3:2f:e3:b0:a6:81:ef:7c:99:91:ae:51:bb:b4:49:57:f0:
         81:4b:5c:ca:4d:ab:3b:96:7f:ec:5d:3e:14:39:ee:6f:0c:b7:
         4e:af:44:c7:55:94:64:a5:87:cf:1a:cb:97:9d:c6:2e:0c:c7:
         68:c0:12:6d:24:03:91:ff:27:50:07:69:7d:3d:ff:93:b0:19:
         af:33:32:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 07:19:52 2025 by rpki-client