This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: 8NUarZ5toJnQmNRZL9Bdo2JJMZDZAF59l4ElPRJI/Ok= Subject key identifier: B8:76:28:CF:3D:B7:04:01:50:F7:94:8D:7F:E6:9A:1F:41:20:BB:F1 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 0ECFC726B5B1BBE37E4C3B51B9F24F3935131F2C Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 022F Signing time: Sat 24 Jan 2026 17:36:25 +0000 Manifest this update: Sat 24 Jan 2026 17:31:25 +0000 Manifest next update: Sun 25 Jan 2026 19:58:25 +0000 Files and hashes: 1: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=) 2: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=) 3: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=) 4: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: Et507HqsQrKu97rSISWj2FC0ymDAbyn2EbKBi9/htto=) 5: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 11:50:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:cf:c7:26:b5:b1:bb:e3:7e:4c:3b:51:b9:f2:4f:39:35:13:1f:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Jan 24 17:31:25 2026 GMT Not After : Jan 25 19:58:25 2026 GMT Subject: CN=B87628CF3DB7040150F7948D7FE69A1F4120BBF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:12:5b:16:0e:a5:48:f6:50:d7:e7:53:da:ca: db:12:bc:a5:b5:ce:a0:50:c6:3d:1b:33:78:b0:3c: 44:a3:8c:92:89:98:d4:4d:13:cd:6d:34:f8:71:ba: 19:c2:74:ba:10:5f:e8:4a:8f:d9:f1:a4:6f:80:26: 6e:25:d8:9d:b7:0c:65:e3:7a:9e:e4:07:a0:81:28: 22:42:51:37:c3:23:a6:f9:3a:54:f7:07:75:6e:ca: a6:70:80:b9:9d:ab:e1:74:b6:38:50:32:4e:a6:c4: 03:4b:36:ef:ca:39:4d:e0:7c:04:98:fe:96:b0:59: 74:81:93:92:a8:a4:ab:7b:97:52:28:bf:20:77:ec: d4:f9:97:99:0c:53:ed:43:54:99:d1:39:62:44:1f: 65:3a:ce:29:5d:09:70:d8:b6:c5:17:13:bd:56:22: e0:ea:a7:ce:5a:ab:53:87:18:d2:cd:b1:0b:cd:cc: 09:ac:41:2d:2e:e0:9e:fa:9c:8e:34:76:8b:eb:19: db:b5:d7:d4:53:03:32:85:30:29:4f:c1:8c:80:27: b1:b3:6a:5e:5a:0a:97:b8:41:2b:72:f4:35:79:ab: a6:62:fa:7f:94:41:b2:fa:f9:f2:9a:3a:cd:f2:31: d8:67:08:d6:82:ea:15:19:5a:97:31:90:c2:20:fc: e4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:76:28:CF:3D:B7:04:01:50:F7:94:8D:7F:E6:9A:1F:41:20:BB:F1 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:46:62:6e:5e:44:44:67:d3:08:c2:14:2a:04:bc:50:6e:d3: bd:36:8b:09:4c:aa:dd:81:f1:2d:10:ff:fb:63:9d:51:60:aa: e5:f5:2e:31:e0:41:18:f0:99:d1:99:ed:07:bd:af:64:f8:4a: 11:15:e5:df:37:96:97:e3:14:36:3f:09:bb:2f:cb:3f:31:db: 23:60:06:d2:83:0e:03:81:00:57:1c:44:0b:27:a3:fc:18:73: 80:1b:6e:94:0d:a7:ad:88:9a:3e:f5:a0:e3:8a:4b:86:5f:a1: 6c:02:a2:14:54:7d:b0:62:ed:91:47:15:ec:89:e9:5e:4e:c5: 45:1d:c7:8a:cb:74:7f:bd:34:f9:66:be:ba:9e:ab:9d:81:16: 9a:84:2b:a7:b2:0d:ab:1b:42:65:58:24:ae:3d:dd:aa:ac:0e: a8:1a:ed:f5:d2:62:c0:e5:59:12:f5:d4:e7:79:54:27:e3:b6: 50:09:be:30:20:32:16:99:f4:aa:7b:db:c6:a7:f3:9f:4e:48: cf:2e:4a:ae:06:32:55:9e:3d:13:38:9b:28:0a:71:91:fc:b4: f3:21:0f:bb:03:66:b1:3c:a6:46:80:f4:08:65:29:b5:d7:80: 16:41:59:a3:53:f7:6b:96:25:44:05:24:9e:a1:78:33:30:a6: 36:ac:b4:0e -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUDs/HJrWxu+N+TDtRufJPOTUTHywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNjAxMjQxNzMxMjVaFw0yNjAxMjUxOTU4MjVaMDMxMTAvBgNV BAMTKEI4NzYyOENGM0RCNzA0MDE1MEY3OTQ4RDdGRTY5QTFGNDEyMEJCRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9ElsWDqVI9lDX51PaytsSvKW1 zqBQxj0bM3iwPESjjJKJmNRNE81tNPhxuhnCdLoQX+hKj9nxpG+AJm4l2J23DGXj ep7kB6CBKCJCUTfDI6b5OlT3B3VuyqZwgLmdq+F0tjhQMk6mxANLNu/KOU3gfASY /pawWXSBk5KopKt7l1IovyB37NT5l5kMU+1DVJnROWJEH2U6zildCXDYtsUXE71W IuDqp85aq1OHGNLNsQvNzAmsQS0u4J76nI40dovrGdu119RTAzKFMClPwYyAJ7Gz al5aCpe4QSty9DV5q6Zi+n+UQbL6+fKaOs3yMdhnCNaC6hUZWpcxkMIg/ORjAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUuHYozz23BAFQ95SNf+aaH0Egu/EwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKRmJuXkREZ9MIwhQqBLxQ btO9NosJTKrdgfEtEP/7Y51RYKrl9S4x4EEY8JnRme0Hva9k+EoRFeXfN5aX4xQ2 Pwm7L8s/MdsjYAbSgw4DgQBXHEQLJ6P8GHOAG26UDaetiJo+9aDjikuGX6FsAqIU VH2wYu2RRxXsieleTsVFHceKy3R/vTT5Zr66nqudgRaahCunsg2rG0JlWCSuPd2q rA6oGu310mLA5VkS9dTneVQn47ZQCb4wIDIWmfSqe9vGp/OfTkjPLkquBjJVnj0T OJsoCnGR/LTzIQ+7A2axPKZGgPQIZSm114AWQVmjU/drliVEBSSeoXgzMKY2rLQO -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:47 2026 by rpki-client