This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft File: 3F8EBCC0428DD608F39D858BE891B85B0032681A.mft (raw, json) Hash identifier: S2Y/oGBvMtPr6c6IEroulu8krdvTENYJiTUmSljh9T8= Subject key identifier: 10:D9:67:66:06:DB:B4:B9:6C:C1:8C:9D:FD:AE:A3:56:77:3F:63:4C Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 210D411F087311D1D83D94048DB881AD562F574C Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft Manifest number: 1D Signing time: Tue 16 Dec 2025 02:25:18 +0000 Manifest this update: Tue 16 Dec 2025 02:20:18 +0000 Manifest next update: Wed 17 Dec 2025 05:42:18 +0000 Files and hashes: 1: AS61574.asa (hash: WLc0Xn7uF/j7wS6tJQtWEwz0nz7jHfRgwckKy9g1vn8=) 2: 3F8EBCC0428DD608F39D858BE891B85B0032681A.crl (hash: sE2YCWmbpiAGyvU9zu+taJ8xKm7+zG6S6/Np6RbcncM=) 3: 3133382e3138352e3232382e302f32342d3234203d3e203437303635.roa (hash: Z6//gTLPQHI8SIjVTeDlWkgw/+bNQdS3vhgZwk+Na/8=) 4: 3133382e3138352e3232392e302f32342d3234203d3e203631353734.roa (hash: uZBIa5EwFadexYoWsDKnOvyQwulEC4k8FXsw/UVWdyU=) 5: 323830343a323639633a633a3a2f34382d3438203d3e203631353734.roa (hash: ioMua6AWyA6p7dn2DfQREylMhkZPQE/VLJxcNKTN5+g=) 6: 323830343a323639633a643a3a2f34382d3438203d3e203631353734.roa (hash: UqKG0cpOnrg9F/saGAovbvCgtzhM3FTRhenkQ93fVDM=) Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 17 Dec 2025 05:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:0d:41:1f:08:73:11:d1:d8:3d:94:04:8d:b8:81:ad:56:2f:57:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Dec 16 02:20:18 2025 GMT Not After : Dec 17 05:42:18 2025 GMT Subject: CN=10D9676606DBB4B96CC18C9DFDAEA356773F634C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3c:47:b9:25:e7:9d:dd:4a:4c:75:a5:db:93: 78:10:19:ed:8c:e6:ee:9b:13:83:4f:92:ac:03:9a: 7c:30:14:ae:69:25:60:88:94:60:9e:a7:9d:1f:c0: 93:87:8c:c5:37:c6:1d:2a:d2:7d:e8:31:4f:a6:aa: 44:47:a9:15:b8:bf:e9:27:1f:a3:17:95:4e:36:f0: bf:3e:3f:41:ff:f2:cc:92:f6:29:5a:3d:79:c8:53: 15:ee:40:a4:82:88:c3:8b:c9:a9:40:be:74:7a:c5: b6:e7:9a:de:1b:51:41:a0:6c:21:96:ee:4e:5e:cf: d5:f6:97:69:e8:49:de:46:07:90:89:81:21:e5:09: 0b:fc:3f:6f:91:50:d6:fa:a6:de:d2:2a:d7:32:62: 47:d7:d8:e3:f9:b0:be:c6:6c:f2:be:eb:c6:81:f3: 12:7e:4e:0d:d7:d1:56:c3:3f:7e:04:61:79:04:ae: 54:91:e4:ee:d7:02:0c:98:88:f5:bd:26:ae:02:88: 22:9b:fb:5b:26:10:16:97:00:2b:6b:14:45:fa:69: 02:a1:31:6d:ee:27:f1:de:91:5f:6a:4e:0b:6c:0c: cb:cc:0d:91:8e:ac:3c:34:82:be:16:ab:75:b8:a2: 77:2c:06:04:94:d3:74:c8:82:1e:e7:82:87:c1:d3: ef:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D9:67:66:06:DB:B4:B9:6C:C1:8C:9D:FD:AE:A3:56:77:3F:63:4C X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9a:c6:22:f9:38:2a:63:d4:16:ae:ab:cd:83:32:c0:4c:52: d3:b9:8e:60:4a:09:12:54:62:4a:a9:cc:fa:e4:8c:65:3c:1a: 4c:3d:34:4b:f6:73:30:6a:9c:97:be:ff:bb:e4:ff:0a:b5:ce: a5:88:2c:f2:0c:99:93:a4:80:d7:56:11:d8:2b:98:48:6f:3c: 32:8d:cf:3e:56:0c:06:88:7c:df:9f:b7:b6:a3:80:ba:81:f5: 8c:bc:12:21:9c:6c:ff:96:b8:d4:4a:cc:18:4b:b5:26:bc:06: 62:15:cf:b2:76:d5:ed:39:50:79:2e:82:3f:37:b0:f3:3e:a6: fc:2f:ef:b2:95:97:d8:5f:db:e2:0e:fe:c4:fc:22:ec:2a:28: 48:6c:c5:d1:43:6c:04:87:e8:59:1a:e7:f4:bc:74:b5:fe:8a: b1:a0:64:dc:93:f5:14:bc:78:d5:4a:56:da:9e:3e:de:49:b9: f4:e0:79:48:da:ef:44:45:93:58:c2:90:1a:72:c1:23:c9:87: 43:ca:0e:e6:0d:55:72:2c:fb:51:25:f8:40:94:98:80:bf:01: 91:20:06:1c:b0:2e:60:02:5a:a5:31:e1:e2:c8:ab:e5:59:91: 8e:d9:0e:eb:b4:d1:f5:1c:eb:49:f5:10:71:e6:e2:3d:39:ff: cb:3c:9a:7d -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUIQ1BHwhzEdHYPZQEjbiBrVYvV0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNTEyMTYwMjIwMThaFw0yNTEyMTcwNTQyMThaMDMxMTAvBgNV BAMTKDEwRDk2NzY2MDZEQkI0Qjk2Q0MxOEM5REZEQUVBMzU2NzczRjYzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcPEe5Jeed3UpMdaXbk3gQGe2M 5u6bE4NPkqwDmnwwFK5pJWCIlGCep50fwJOHjMU3xh0q0n3oMU+mqkRHqRW4v+kn H6MXlU428L8+P0H/8syS9ilaPXnIUxXuQKSCiMOLyalAvnR6xbbnmt4bUUGgbCGW 7k5ez9X2l2noSd5GB5CJgSHlCQv8P2+RUNb6pt7SKtcyYkfX2OP5sL7GbPK+68aB 8xJ+Tg3X0VbDP34EYXkErlSR5O7XAgyYiPW9Jq4CiCKb+1smEBaXACtrFEX6aQKh MW3uJ/HekV9qTgtsDMvMDZGOrDw0gr4Wq3W4oncsBgSU03TIgh7ngofB0+/lAgMB AAGjggImMIICIjAdBgNVHQ4EFgQUENlnZgbbtLlswYyd/a6jVnc/Y0wwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhF QkNDMDQyOERENjA4RjM5RDg1OEJFODkxQjg1QjAwMzI2ODFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA d5rGIvk4KmPUFq6rzYMywExS07mOYEoJElRiSqnM+uSMZTwaTD00S/ZzMGqcl77/ u+T/CrXOpYgs8gyZk6SA11YR2CuYSG88Mo3PPlYMBoh835+3tqOAuoH1jLwSIZxs /5a41ErMGEu1JrwGYhXPsnbV7TlQeS6CPzew8z6m/C/vspWX2F/b4g7+xPwi7Coo SGzF0UNsBIfoWRrn9Lx0tf6KsaBk3JP1FLx41UpW2p4+3km59OB5SNrvREWTWMKQ GnLBI8mHQ8oO5g1Vciz7USX4QJSYgL8BkSAGHLAuYAJapTHh4sir5VmRjtkO67TR 9RzrSfUQcebiPTn/yzyafQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:38:27 2025 by rpki-client