This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
File: BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft (raw, json)
Hash identifier: bawP1byE/3FguBoli+axTFFkS8rqL+nfWf98JTf1ekQ=
Subject key identifier: 2D:5C:5E:C8:F8:A3:BA:F1:85:83:CE:7E:67:FE:6A:05:7C:0F:99:24
Authority key identifier: BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
Certificate issuer: /CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
Certificate serial: 5FAABCD195B9C93F52264F1785347E6A1177CB0C
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
Subject info access: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
Manifest number: 011C
Signing time: Sun 25 Jan 2026 09:01:43 +0000
Manifest this update: Sun 25 Jan 2026 08:56:43 +0000
Manifest next update: Mon 26 Jan 2026 12:07:43 +0000
Files and hashes: 1: 326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa (hash: ac94RfYRpfEUxIZEvv3OUNfLNnWtFFP0b8he3g1FYRE=)
2: BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl (hash: 06BJ3PKNT/TjiQxijvlT6PeNumR1TUeQkjG2sq6pVFg=)
3: 326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa (hash: KCRXXaVguUMBSgzhjp3GW88sRUsfyr/Z//HxQqDtx8g=)
Validation: OK
Signature path: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl
rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 03:56:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:aa:bc:d1:95:b9:c9:3f:52:26:4f:17:85:34:7e:6a:11:77:cb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
Validity
Not Before: Jan 25 08:56:43 2026 GMT
Not After : Jan 26 12:07:43 2026 GMT
Subject: CN=2D5C5EC8F8A3BAF18583CE7E67FE6A057C0F9924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:df:39:2c:84:26:30:ad:08:b3:ff:f4:d6:5e:
d7:51:95:c5:1d:3e:e7:5b:b8:4f:be:fb:23:68:73:
12:32:38:d2:f1:c2:d4:64:49:e8:df:f0:dc:2e:09:
11:c1:05:8c:ba:39:ab:02:7d:76:ba:e3:50:b0:ee:
7e:0f:36:75:4e:38:5c:98:50:4e:61:b4:67:e4:54:
ab:2d:9c:82:d3:72:60:ed:7f:d6:52:02:c9:5b:97:
14:74:51:74:0b:15:b3:d7:2c:6a:00:af:00:de:e1:
d9:5a:9e:27:32:68:fd:84:b8:49:0f:0b:49:43:4f:
a5:cb:d2:9c:9d:d5:f9:a6:66:c5:f4:65:1f:35:98:
8e:3d:58:d4:55:69:ac:c7:ef:fe:d0:be:16:3a:52:
b1:90:39:c9:59:23:d3:f4:05:12:77:f6:fb:aa:3a:
e3:1e:3c:11:5d:15:bb:28:71:64:91:72:ca:6d:65:
00:a6:0b:9c:a3:ac:61:8a:22:1d:50:4b:69:4d:91:
5c:a0:87:d0:f9:ae:05:02:73:0d:69:df:93:e2:74:
e3:7c:91:98:d3:d8:7f:e2:73:5f:92:fe:45:9b:b8:
dd:0e:7b:04:3f:67:65:cc:39:14:34:c1:cf:4e:a4:
78:d0:de:dd:1a:cc:2f:55:df:20:fe:22:6c:eb:5a:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5C:5E:C8:F8:A3:BA:F1:85:83:CE:7E:67:FE:6A:05:7C:0F:99:24
X509v3 Authority Key Identifier:
keyid:BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
Subject Information Access:
Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:75:10:9d:ff:f1:ad:55:d7:fd:1d:1a:e2:7d:72:aa:a6:16:
85:37:75:63:28:ca:dd:a5:f8:e7:c3:0e:1c:f7:1b:41:a0:2b:
d6:16:5d:ea:2b:5e:a2:0c:0d:5a:cf:36:49:04:c9:24:6c:bb:
33:f2:46:25:9e:cb:91:06:d9:e2:e7:f4:24:b7:2d:89:c9:0b:
c6:6b:3f:11:50:61:94:6c:b7:e7:09:24:b5:eb:5c:4d:3d:ba:
ca:d5:a9:a0:eb:34:d4:ad:b4:49:6f:cc:db:d6:57:99:59:65:
3e:3c:42:32:8a:23:29:21:26:70:cc:d0:6e:ed:dd:a3:3b:3a:
83:67:91:fd:84:fb:99:de:17:b7:fa:ed:4d:01:f8:ef:06:54:
3f:80:2c:88:fc:06:22:e3:9b:48:24:42:d0:43:38:e6:24:25:
8b:df:e7:fa:02:60:0f:51:55:a8:ec:7f:ff:33:71:fc:d9:bb:
48:48:88:81:ba:e7:ab:b9:a8:f9:58:72:0e:38:c6:f5:22:89:
5c:c1:e0:5d:60:68:f2:68:44:8a:06:dc:d5:3b:8b:cd:92:ad:
3c:41:eb:bc:02:d3:56:cf:2c:c5:0d:18:6e:67:a0:45:c9:f9:
5a:de:27:29:ae:66:5b:bc:bd:21:3a:3d:6a:0a:c3:23:d0:37:
b1:f5:9f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:33:29 2026 by rpki-client