This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json) Hash identifier: LTCOlomOAuMKwraKtlZ9ttqCHNlaM38jQY7X5RyJr1g= Subject key identifier: 95:5F:E1:EE:51:87:A9:00:52:9F:BE:EA:19:87:76:F0:2C:D4:4E:7B Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 5097C926A0018CD46A06090C5C0941EE0EDA78E1 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft Manifest number: A1 Signing time: Sat 20 Dec 2025 22:13:28 +0000 Manifest this update: Sat 20 Dec 2025 22:08:28 +0000 Manifest next update: Mon 22 Dec 2025 01:53:28 +0000 Files and hashes: 1: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: iaFsYS1Xv8+gu1vHg62rL9I/BJWzMBzc2djGrNX7wwQ=) 2: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=) 3: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=) 4: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=) 5: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=) 6: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 01:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:97:c9:26:a0:01:8c:d4:6a:06:09:0c:5c:09:41:ee:0e:da:78:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Dec 20 22:08:28 2025 GMT Not After : Dec 22 01:53:28 2025 GMT Subject: CN=955FE1EE5187A900529FBEEA198776F02CD44E7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:63:0c:de:80:6e:c1:67:07:f8:fa:ed:ed:c1: 1c:45:3c:12:79:96:be:ed:d4:d6:98:23:9d:66:fc: 69:ea:e8:ef:19:2e:7f:30:1f:72:95:2c:cb:6e:b9: d2:da:f0:10:1b:0a:21:39:8d:64:c1:4d:ab:51:f7: b0:e1:92:24:c7:31:f6:22:30:41:f8:42:7d:cd:e4: be:aa:de:05:01:40:52:77:b9:d3:dd:cc:28:9f:3e: ae:9e:84:36:da:0f:54:6b:0b:05:5d:12:ff:52:b5: d2:9d:94:29:06:c7:3e:42:59:f0:01:90:fc:38:21: c8:79:43:51:2c:ae:f1:27:ca:c0:e4:fd:01:ee:ee: a3:ea:e4:4b:e5:67:c3:1d:98:d7:4d:a2:da:73:4c: e3:1f:b8:09:38:ce:ef:74:07:6a:b4:b7:7d:b9:3a: 78:cd:5e:79:ec:71:b0:cf:56:5c:2f:f6:31:9d:1a: 5c:f9:45:f3:a5:af:0d:89:81:a2:19:12:4f:da:47: 63:db:b4:84:89:da:23:e0:1c:64:37:30:11:0b:cc: 73:71:c2:53:ea:4f:0b:25:f6:94:93:a4:cb:15:a2: b5:98:64:7d:c1:73:73:34:59:4b:4a:52:46:4f:f6: f2:ee:05:a6:08:87:8c:ce:de:c5:37:21:d2:cb:77: e8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5F:E1:EE:51:87:A9:00:52:9F:BE:EA:19:87:76:F0:2C:D4:4E:7B X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:8c:3b:54:47:3c:d6:c1:a3:f5:e7:78:6f:c3:dc:d8:13:8a: 1f:0e:c3:2f:12:af:d3:08:db:2c:14:7d:f4:34:5b:9d:8a:35: 2b:bb:15:5e:82:22:dd:2f:9a:c9:89:03:5b:1a:41:25:b4:9d: 6d:6a:26:ff:89:d7:e5:80:93:74:d4:35:f1:0b:85:be:00:e5: dd:57:96:1a:e7:9d:90:8b:62:3c:f5:86:d0:73:21:8c:b5:55: 75:30:c6:1a:6b:e5:e2:be:c1:11:63:70:9c:10:0c:0e:57:e2: d7:81:1b:12:11:75:78:4a:6a:2d:d6:00:35:50:89:f1:e8:75: c0:4e:4b:12:61:9e:25:c2:26:5c:4f:25:45:78:ac:d6:88:9a: 82:42:14:eb:72:7a:5e:90:41:1a:d3:56:d5:6d:4a:7f:45:3b: e4:13:ca:8c:a8:02:f3:9a:4f:a2:26:2c:ed:f9:1e:93:cb:62: 35:1a:d8:f0:a0:48:32:f2:78:09:39:d8:7d:b7:5e:8d:45:65: 30:4b:4c:fb:55:6c:5c:a1:52:b5:87:9b:0a:66:54:e4:4b:3f: 60:8c:22:69:dd:4a:3e:08:fa:f3:58:83:f4:db:29:bd:22:73: b7:00:8d:bd:34:65:53:60:ff:9f:9c:e3:08:fe:3a:c3:3b:78: 92:04:fe:e4 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUUJfJJqABjNRqBgkMXAlB7g7aeOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTEyMjAyMjA4MjhaFw0yNTEyMjIwMTUzMjhaMDMxMTAvBgNV BAMTKDk1NUZFMUVFNTE4N0E5MDA1MjlGQkVFQTE5ODc3NkYwMkNENDRFN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJYwzegG7BZwf4+u3twRxFPBJ5 lr7t1NaYI51m/Gnq6O8ZLn8wH3KVLMtuudLa8BAbCiE5jWTBTatR97DhkiTHMfYi MEH4Qn3N5L6q3gUBQFJ3udPdzCifPq6ehDbaD1RrCwVdEv9StdKdlCkGxz5CWfAB kPw4Ich5Q1EsrvEnysDk/QHu7qPq5EvlZ8MdmNdNotpzTOMfuAk4zu90B2q0t325 OnjNXnnscbDPVlwv9jGdGlz5RfOlrw2JgaIZEk/aR2PbtISJ2iPgHGQ3MBELzHNx wlPqTwsl9pSTpMsVorWYZH3Bc3M0WUtKUkZP9vLuBaYIh4zO3sU3IdLLd+j7AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUlV/h7lGHqQBSn77qGYd28CzUTnswHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGjDtU RzzWwaP153hvw9zYE4ofDsMvEq/TCNssFH30NFudijUruxVegiLdL5rJiQNbGkEl tJ1taib/idflgJN01DXxC4W+AOXdV5Ya552Qi2I89YbQcyGMtVV1MMYaa+XivsER Y3CcEAwOV+LXgRsSEXV4Smot1gA1UInx6HXATksSYZ4lwiZcTyVFeKzWiJqCQhTr cnpekEEa01bVbUp/RTvkE8qMqALzmk+iJizt+R6Ty2I1GtjwoEgy8ngJOdh9t16N RWUwS0z7VWxcoVK1h5sKZlTkSz9gjCJp3Uo+CPrzWIP02ym9InO3AI29NGVTYP+f nOMI/jrDO3iSBP7k -----END CERTIFICATE-----Generated at Sun Dec 21 12:06:04 2025 by rpki-client