This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
File:                     8568BF579F56F4139D364514D84EA5EE01CC8048.mft (raw, json)
Hash identifier:          qNjIauulUv36nlZRz+rHnNhOgcr9844qjaGc42vSARA=
Subject key identifier:   B1:85:DC:53:E1:CE:36:2C:1D:3B:1D:A0:47:41:3B:98:72:75:07:32
Authority key identifier: 85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48
Certificate issuer:       /CN=8568bf579f56f4139d364514d84ea5ee01cc8048
Certificate serial:       4460265C07B9FD1030EE13E0733E55BF230D1562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
Subject info access:      rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
Manifest number:          44
Signing time:             Sat 20 Dec 2025 14:28:24 +0000
Manifest this update:     Sat 20 Dec 2025 14:23:24 +0000
Manifest next update:     Sun 21 Dec 2025 14:53:24 +0000
Files and hashes:         1: 8568BF579F56F4139D364514D84EA5EE01CC8048.crl (hash: lhsxGjvTZiJGx/wshYP7zdqAK6aJfhtDNMdRFeO/IoI=)
                          2: AS214675.asa (hash: HWOmXzUwALfB4lvNwu30MokJHdZOmic5rwduYz2MzkA=)
Validation:               OK
Signature path:           rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl
                          rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 14:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:60:26:5c:07:b9:fd:10:30:ee:13:e0:73:3e:55:bf:23:0d:15:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8568bf579f56f4139d364514d84ea5ee01cc8048
        Validity
            Not Before: Dec 20 14:23:24 2025 GMT
            Not After : Dec 21 14:53:24 2025 GMT
        Subject: CN=B185DC53E1CE362C1D3B1DA047413B9872750732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:05:d7:25:35:6b:37:17:61:b6:40:68:50:2b:
                    d1:92:72:6b:98:15:a9:53:c0:2a:8c:fb:31:f5:30:
                    69:bf:f4:8e:c9:44:2c:2b:9a:94:f3:a9:a6:0f:4b:
                    57:ac:f8:69:be:89:0b:24:1c:a2:bd:7c:cb:05:d9:
                    1a:64:c2:ee:bb:bc:18:90:69:3d:78:3d:1d:39:04:
                    6a:90:69:75:a5:2b:d1:10:97:e3:79:22:f4:3d:ef:
                    44:3d:c4:72:84:1a:5b:20:b1:d1:44:47:02:fe:46:
                    62:45:c1:72:bd:59:a7:e3:36:91:78:5e:d7:60:1b:
                    45:56:18:6b:d7:9a:c1:b4:44:96:64:0c:8d:4b:2b:
                    a6:0b:a3:29:e9:2c:f1:b8:cb:97:71:df:1c:cf:3f:
                    20:31:49:90:88:db:c4:97:d2:7a:26:34:63:e7:4a:
                    32:86:96:1e:da:9e:7e:1c:d2:e8:55:68:d8:92:51:
                    ea:2f:f3:c5:32:89:f0:d6:31:b4:6f:0f:3e:0d:c1:
                    60:a6:a3:a4:3c:f2:d8:96:30:a9:11:dc:08:30:59:
                    f5:7a:ef:56:3a:97:13:31:5e:09:83:4c:41:22:f9:
                    2d:54:34:43:9b:81:aa:b5:d4:52:a8:12:b1:57:52:
                    cb:8f:63:d3:0a:91:16:6e:67:a1:01:c0:aa:c8:03:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:85:DC:53:E1:CE:36:2C:1D:3B:1D:A0:47:41:3B:98:72:75:07:32
            X509v3 Authority Key Identifier:
                keyid:85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0b:f5:a6:d2:b3:37:41:be:ab:db:89:f2:60:d6:b2:31:fa:
         23:ab:49:1b:56:af:3c:34:68:89:dc:e0:ff:2d:5f:0a:c0:6c:
         81:4e:20:88:c0:70:d8:48:2a:0c:af:1a:31:95:1a:6e:49:cb:
         94:64:7d:63:b3:32:79:a0:3b:90:29:a5:f9:0d:e4:11:d9:c3:
         51:d0:95:f1:5c:e6:66:fb:4d:1a:96:86:79:36:78:2c:ab:b8:
         21:d9:0e:35:b7:57:b7:28:0e:18:49:63:c9:ae:33:14:8b:01:
         06:56:c9:6b:20:96:13:84:96:77:0c:1f:c8:55:b6:9c:84:9d:
         d5:a6:34:73:cb:6b:5d:02:21:99:6b:ea:70:59:92:0f:96:8d:
         73:c7:30:49:56:89:95:03:88:80:f1:e6:fc:36:4d:a1:51:19:
         12:78:ea:8e:a1:ab:7a:6a:0b:57:8f:7e:d5:f8:e8:2d:63:e9:
         23:fb:f3:0a:03:fe:35:12:80:fa:f4:e0:f0:bc:0a:6b:88:1a:
         43:22:5e:8f:74:54:21:2b:6e:a9:6f:79:75:9f:dc:2b:fe:81:
         86:a7:6d:3a:8d:58:54:79:c6:d7:a6:ca:1d:6d:8a:99:01:73:
         87:e4:97:a4:b7:cc:b8:5d:ac:12:4c:95:26:2b:a0:fc:55:38:
         a5:03:53:c0
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIURGAmXAe5/RAw7hPgcz5VvyMNFWIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU2OGJmNTc5ZjU2ZjQxMzlkMzY0NTE0ZDg0ZWE1ZWUw
MWNjODA0ODAeFw0yNTEyMjAxNDIzMjRaFw0yNTEyMjExNDUzMjRaMDMxMTAvBgNV
BAMTKEIxODVEQzUzRTFDRTM2MkMxRDNCMURBMDQ3NDEzQjk4NzI3NTA3MzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtBdclNWs3F2G2QGhQK9GScmuY
FalTwCqM+zH1MGm/9I7JRCwrmpTzqaYPS1es+Gm+iQskHKK9fMsF2Rpkwu67vBiQ
aT14PR05BGqQaXWlK9EQl+N5IvQ970Q9xHKEGlsgsdFERwL+RmJFwXK9WafjNpF4
XtdgG0VWGGvXmsG0RJZkDI1LK6YLoynpLPG4y5dx3xzPPyAxSZCI28SX0nomNGPn
SjKGlh7ann4c0uhVaNiSUeov88UyifDWMbRvDz4NwWCmo6Q88tiWMKkR3AgwWfV6
71Y6lxMxXgmDTEEi+S1UNEObgaq11FKoErFXUsuPY9MKkRZuZ6EBwKrIA9BjAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUsYXcU+HONiwdOx2gR0E7mHJ1BzIwHwYDVR0j
BBgwFoAUhWi/V59W9BOdNkUU2E6l7gHMgEgwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8va3JpbGwuc3RhcmxhbXAuc3UvcmVwby9zdGFy
bGFtcC8wLzg1NjhCRjU3OUY1NkY0MTM5RDM2NDUxNEQ4NEVBNUVFMDFDQzgwNDgu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9oV2lfVjU5VzlCT2ROa1VVMkU2bDdn
SE1nRWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9r
cmlsbC5zdGFybGFtcC5zdS9yZXBvL3N0YXJsYW1wLzAvODU2OEJGNTc5RjU2RjQx
MzlEMzY0NTE0RDg0RUE1RUUwMUNDODA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAML9abSszdBvqvb
ifJg1rIx+iOrSRtWrzw0aInc4P8tXwrAbIFOIIjAcNhIKgyvGjGVGm5Jy5RkfWOz
MnmgO5AppfkN5BHZw1HQlfFc5mb7TRqWhnk2eCyruCHZDjW3V7coDhhJY8muMxSL
AQZWyWsglhOElncMH8hVtpyEndWmNHPLa10CIZlr6nBZkg+WjXPHMElWiZUDiIDx
5vw2TaFRGRJ46o6hq3pqC1ePftX46C1j6SP78woD/jUSgPr04PC8CmuIGkMiXo90
VCErbqlveXWf3Cv+gYanbTqNWFR5xtemyh1tipkBc4fkl6S3zLhdrBJMlSYroPxV
OKUDU8A=
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:07:43 2025 by rpki-client