This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: Gw6+6Z/bmDsm+cT7YI7EuCcCH1bPTkTtzKVFh0b3Zoo= Subject key identifier: 26:2D:67:31:98:EE:F9:0C:A3:C7:11:05:7A:15:00:1E:CB:09:65:E5 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 16D11CE80E8B57BF7C2F8525DCD5D888ABEB0AC5 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: EA Signing time: Sat 20 Dec 2025 20:24:09 +0000 Manifest this update: Sat 20 Dec 2025 20:19:09 +0000 Manifest next update: Sun 21 Dec 2025 23:51:09 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: Jmlqo02StdxiYJJqZ34vzydnEuQrAfHPaPVJujWt/Bo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d1:1c:e8:0e:8b:57:bf:7c:2f:85:25:dc:d5:d8:88:ab:eb:0a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Dec 20 20:19:09 2025 GMT Not After : Dec 21 23:51:09 2025 GMT Subject: CN=262D673198EEF90CA3C711057A15001ECB0965E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:02:88:41:54:01:8d:57:06:d2:09:6d:c5:40: a6:11:fd:39:9f:bf:0d:f3:a0:82:64:36:7a:ca:ae: bf:3c:bf:4e:db:bb:11:57:fa:16:d3:3d:35:15:07: ac:71:ef:68:75:1b:2b:11:38:4e:07:60:b7:1e:15: d2:ec:0d:b0:5e:9c:58:65:92:e9:aa:8d:ae:17:bd: 64:6c:bd:d9:f1:05:96:13:13:0b:0d:4f:74:8a:36: dd:de:f6:cb:f0:1d:62:df:1f:c0:64:6e:14:e7:6d: 8b:a5:5f:9e:51:da:24:32:de:47:4a:e1:21:c4:c3: 30:25:9c:29:ab:c0:1b:93:53:b5:d1:1f:09:12:30: b8:4d:fa:67:e7:6e:2b:36:6a:a6:ca:8f:8b:4a:3e: 98:fa:c5:37:0e:53:eb:90:1f:20:19:ae:3d:fc:fb: 10:8c:c9:e4:77:fc:30:85:88:dd:e8:ec:f2:14:99: e5:6b:58:2d:f1:2b:da:8f:8c:81:a8:79:53:33:d8: 42:33:a4:43:d3:3c:9a:4f:ab:82:fb:55:f1:9f:13: f9:51:5b:74:14:e0:40:70:ae:5e:4f:d4:42:1c:49: 47:81:42:6b:04:98:8a:31:c8:32:44:42:89:06:5d: 39:2d:8f:9f:37:6d:bf:8f:3d:a3:a8:9e:33:fe:c5: d6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2D:67:31:98:EE:F9:0C:A3:C7:11:05:7A:15:00:1E:CB:09:65:E5 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a6:80:bd:9f:96:34:be:c0:4c:7c:2a:de:3a:6b:b2:a6:60: 71:08:3b:ae:f5:c3:fa:a2:08:56:24:f0:b3:68:5e:6d:25:91: 10:cc:64:cb:f3:75:95:3d:e0:3a:4d:ae:10:34:bb:5c:ec:2e: d8:c5:95:4f:95:14:9f:4f:34:69:fd:d7:db:c1:22:83:62:f3: e6:53:c7:25:1f:bc:19:82:37:5c:e5:3b:f0:3e:5b:10:ee:9e: 46:ef:3f:09:f0:00:e3:c6:b8:6c:cb:d2:1c:d2:23:28:6a:4c: bd:e5:71:f6:02:2c:b5:f2:6d:69:4f:9f:ed:15:15:5d:72:ca: 86:93:1d:74:09:00:9e:39:4e:65:09:c8:4b:c6:1a:a4:d2:cb: f5:6c:f0:93:0a:d5:cb:c5:44:65:71:0f:98:52:88:5d:91:d1: c5:0c:19:be:ba:4b:e8:5c:92:19:52:fb:4b:88:0c:fb:2b:3e: 24:06:24:23:7d:11:15:9d:bf:ff:68:fe:de:bb:bd:c3:0f:d3: 69:76:93:c6:81:f0:7e:73:f4:55:3a:e0:62:88:2d:d5:4d:b7: 4e:0d:ac:fc:0c:55:e5:4b:5d:c7:a7:81:0d:3c:d1:32:4b:9a: 08:8d:40:9d:b7:4c:ea:68:f8:59:d6:74:84:d1:22:cb:11:5c: 7c:e6:2f:8d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUFtEc6A6LV798L4Ul3NXYiKvrCsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNTEyMjAyMDE5MDlaFw0yNTEyMjEyMzUxMDlaMDMxMTAvBgNV BAMTKDI2MkQ2NzMxOThFRUY5MENBM0M3MTEwNTdBMTUwMDFFQ0IwOTY1RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzAohBVAGNVwbSCW3FQKYR/Tmf vw3zoIJkNnrKrr88v07buxFX+hbTPTUVB6xx72h1GysROE4HYLceFdLsDbBenFhl kumqja4XvWRsvdnxBZYTEwsNT3SKNt3e9svwHWLfH8BkbhTnbYulX55R2iQy3kdK 4SHEwzAlnCmrwBuTU7XRHwkSMLhN+mfnbis2aqbKj4tKPpj6xTcOU+uQHyAZrj38 +xCMyeR3/DCFiN3o7PIUmeVrWC3xK9qPjIGoeVMz2EIzpEPTPJpPq4L7VfGfE/lR W3QU4EBwrl5P1EIcSUeBQmsEmIoxyDJEQokGXTktj583bb+PPaOonjP+xdYFAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUJi1nMZju+QyjxxEFehUAHssJZeUwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBpoC9 n5Y0vsBMfCreOmuypmBxCDuu9cP6oghWJPCzaF5tJZEQzGTL83WVPeA6Ta4QNLtc 7C7YxZVPlRSfTzRp/dfbwSKDYvPmU8clH7wZgjdc5TvwPlsQ7p5G7z8J8ADjxrhs y9Ic0iMoaky95XH2Aiy18m1pT5/tFRVdcsqGkx10CQCeOU5lCchLxhqk0sv1bPCT CtXLxURlcQ+YUohdkdHFDBm+ukvoXJIZUvtLiAz7Kz4kBiQjfREVnb//aP7eu73D D9NpdpPGgfB+c/RVOuBiiC3VTbdODaz8DFXlS13Hp4ENPNEyS5oIjUCdt0zqaPhZ 1nSE0SLLEVx85i+N -----END CERTIFICATE-----Generated at Sun Dec 21 02:03:46 2025 by rpki-client