This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
File: BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft (raw, json)
Hash identifier: 8nU0x8gOG0c7jsiRDSvTFM/8sy/MYo9Qym1MboyQ48g=
Subject key identifier: B1:FE:76:CC:76:26:61:B7:72:43:06:18:BD:A3:F0:1F:B9:78:85:12
Authority key identifier: BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
Certificate issuer: /CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
Certificate serial: 25931185795120FCF7F31DE0E92088C8AC9DF2CA
Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
Subject info access: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
Manifest number: D7
Signing time: Fri 05 Dec 2025 12:09:15 +0000
Manifest this update: Fri 05 Dec 2025 12:04:15 +0000
Manifest next update: Sat 06 Dec 2025 14:07:15 +0000
Files and hashes: 1: 326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa (hash: ac94RfYRpfEUxIZEvv3OUNfLNnWtFFP0b8he3g1FYRE=)
2: BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl (hash: YqnfcPBVEnGgPhqLb2ipP1Wicizs48qhSKxTv7HFuRM=)
3: 326130613a363034303a366430303a3a2f34302d3430203d3e203439393735.roa (hash: KCRXXaVguUMBSgzhjp3GW88sRUsfyr/Z//HxQqDtx8g=)
Validation: OK
Signature path: rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl
rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Dec 2025 14:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:93:11:85:79:51:20:fc:f7:f3:1d:e0:e9:20:88:c8:ac:9d:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52
Validity
Not Before: Dec 5 12:04:15 2025 GMT
Not After : Dec 6 14:07:15 2025 GMT
Subject: CN=B1FE76CC762661B772430618BDA3F01FB9788512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:2e:56:7e:f1:44:44:7b:e8:c5:c5:6d:a7:
74:c2:16:67:fb:da:6a:d4:4b:2a:71:0d:e4:41:d0:
3f:5f:fc:3f:0e:2d:e6:c3:c3:7a:dc:d7:28:08:f2:
33:e1:49:79:16:65:0d:2f:1c:68:0e:61:bb:01:ca:
01:da:c3:e2:72:1e:22:05:fb:d6:8c:41:56:bc:e0:
23:96:22:8a:9b:44:a1:32:79:24:47:7a:ae:d6:85:
b3:ce:40:af:ac:2f:3a:fe:c1:79:8f:2d:39:76:2d:
97:17:83:4c:fe:0e:b9:80:24:df:89:e2:76:2b:a3:
20:ea:d1:6c:6c:05:70:9a:f7:1d:e5:c7:75:45:10:
cd:2f:db:69:e5:03:bb:77:37:c3:26:34:75:10:ae:
78:6e:51:94:9a:5d:5c:cf:e7:1d:c9:91:e2:ba:24:
d1:2d:0d:ff:fd:01:f0:4e:5f:0c:95:00:d4:63:04:
15:aa:b6:d9:ba:b4:52:ec:d1:9a:57:87:b8:7a:05:
08:e6:53:3e:59:72:70:ac:e7:79:07:59:69:a7:a0:
99:22:fa:2e:43:ad:2b:10:10:fc:2c:1e:8b:fc:6c:
6d:96:ba:26:2c:de:a5:20:8b:e5:bb:b6:c0:25:f7:
bd:fa:67:97:40:fe:1b:23:0a:bc:71:3d:21:7e:fb:
16:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FE:76:CC:76:26:61:B7:72:43:06:18:BD:A3:F0:1F:B9:78:85:12
X509v3 Authority Key Identifier:
keyid:BF:47:87:77:D8:2C:49:62:25:D8:A1:EB:CE:4F:B4:D3:D9:EF:7D:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.crl
Authority Information Access:
CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.cer
Subject Information Access:
Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/5/BF478777D82C496225D8A1EBCE4FB4D3D9EF7D52.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:04:d0:15:8c:cd:6a:73:9f:0c:4d:a3:f0:85:85:57:9a:b1:
12:a9:64:a5:6f:d8:6b:10:cf:8b:58:5c:3e:99:f9:b5:cf:96:
e9:41:cc:4f:22:e9:b7:1e:cc:f2:50:dd:e6:7e:c6:25:b8:83:
f6:78:43:fc:16:c0:63:6c:e2:77:06:34:6c:69:76:31:e0:b9:
bb:aa:df:75:43:0f:a0:3c:ec:dc:06:0e:f8:0a:77:71:1b:39:
b1:bc:3d:57:44:dd:a4:6b:40:38:9b:27:1e:42:df:18:40:85:
52:ab:82:93:76:2b:96:32:66:fc:f3:82:85:74:28:bd:62:ac:
68:e1:d8:e1:2e:35:9b:2a:3b:38:f2:8e:02:f1:5d:15:98:08:
08:af:c5:4d:0b:3c:52:90:89:ff:a6:1f:11:52:0c:a9:21:38:
c2:57:d2:dd:55:1b:b9:f5:5d:b7:ca:de:c2:f6:53:df:b8:c4:
47:4b:83:a3:86:e2:46:d7:a0:13:60:90:ee:1f:a3:91:a6:29:
03:08:2c:24:31:eb:6d:3d:6a:5e:4e:09:c7:0d:8e:25:1b:d7:
d0:ba:68:37:c8:fd:7e:5c:25:a0:a9:a8:15:8b:13:c1:88:aa:
58:24:37:75:b0:11:37:e6:76:e1:90:f1:96:3d:2a:f6:8d:22:
42:16:55:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:58:54 2025 by rpki-client