This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: K5GB0RlZJYUFDfevV1WU8//q2N6oiby7VRkj5Z+uCt8= Subject key identifier: 07:EE:56:F5:74:67:22:22:23:F6:0B:69:0B:9E:75:E0:AC:C6:CC:40 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 229389BCCD88DFBC1CCEBB16BB24986F82380ABD Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 01F7 Signing time: Sat 06 Dec 2025 00:04:39 +0000 Manifest this update: Fri 05 Dec 2025 23:59:39 +0000 Manifest next update: Sun 07 Dec 2025 03:23:39 +0000 Files and hashes: 1: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=) 2: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: iVxSdZeLBua+u5wztDg0OtTgGFVnVB3d3SZry1UuJuU=) 3: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=) 4: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=) 5: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:93:89:bc:cd:88:df:bc:1c:ce:bb:16:bb:24:98:6f:82:38:0a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Dec 5 23:59:39 2025 GMT Not After : Dec 7 03:23:39 2025 GMT Subject: CN=07EE56F57467222223F60B690B9E75E0ACC6CC40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bf:91:f3:c7:da:81:bd:a7:2b:52:0a:0f:62: e2:93:4f:1f:e8:ba:8a:bd:86:66:2c:d9:e2:1f:7e: 1a:f4:b1:82:b5:57:37:c7:3e:b7:65:a5:d3:6b:4d: c7:af:88:ac:06:b4:7e:2c:ed:30:b8:df:58:71:c9: 7f:a4:a4:cd:98:40:36:d2:32:a1:32:78:d0:60:04: 83:32:60:99:20:ca:f9:5c:bf:4d:b4:ef:b5:a5:c8: c6:ab:c9:dd:1a:77:58:db:14:44:a2:46:7b:2f:91: 5d:8c:77:ab:0b:bd:bd:54:1a:d8:13:88:3b:dd:db: 1f:b4:24:80:30:62:45:12:85:e0:a9:47:ef:65:44: 1f:e8:05:22:ed:54:c8:1a:c5:9f:89:fe:91:46:0a: d3:15:f0:75:2f:21:e8:6d:50:65:65:b4:a4:60:95: 4a:20:26:d0:a9:f3:5b:2f:20:7f:86:0a:5f:2f:2d: 54:fb:44:0b:bf:ea:4d:36:3c:7e:5a:01:83:51:8d: a0:ff:a5:a4:ff:a3:77:7d:83:4a:35:50:2a:14:09: 03:49:40:85:9c:ea:a7:f0:b2:69:09:75:39:30:4a: 73:97:55:86:d3:c2:07:20:8f:cd:d3:d3:a5:28:57: d6:7c:9b:90:de:f5:73:a8:9b:68:ce:b6:c6:bf:10: 19:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EE:56:F5:74:67:22:22:23:F6:0B:69:0B:9E:75:E0:AC:C6:CC:40 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e4:f6:c2:6e:ef:8c:ab:1f:5e:e7:63:a2:4f:38:c0:8e:ee: 6d:0c:e0:48:69:ba:32:69:04:c9:3f:12:87:ed:3a:61:02:ba: 67:87:02:4b:bc:a4:b1:2b:1e:be:4d:0d:ea:6b:2a:da:b1:b1: 83:dd:c5:67:18:71:58:f7:c2:9c:b1:fe:7b:2a:ee:c1:54:32: 6c:42:9f:7f:53:f2:0e:0a:99:cb:8e:bc:e4:0d:05:cc:99:c3: 42:c6:9f:6b:30:bf:57:76:f7:d9:13:66:0f:23:15:60:dc:cd: fb:3c:d6:89:92:18:aa:08:dc:81:e2:86:47:83:c8:85:6d:cd: dc:93:74:c8:0f:31:2b:c5:6b:7a:7c:e1:66:c1:49:c0:56:ee: 55:64:a9:8e:23:4a:c1:4c:aa:77:66:d0:84:da:c7:af:d3:61: 47:8c:ef:b8:53:70:86:77:a3:6d:cf:72:ce:73:9d:77:04:3a: ae:a0:c5:1a:cc:7d:25:d6:20:28:8c:eb:5f:68:f7:84:15:44: 98:40:7e:f0:45:e2:aa:68:99:de:97:3f:33:bf:f8:65:a3:6f: d6:1b:25:05:0e:44:eb:c9:7a:fa:ea:57:cf:d3:24:8c:69:67: f7:1f:75:b2:90:51:83:21:c9:ba:ca:3e:71:9c:ed:00:b6:d6: 37:a4:5b:5b -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUIpOJvM2I37wczrsWuySYb4I4Cr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNTEyMDUyMzU5MzlaFw0yNTEyMDcwMzIzMzlaMDMxMTAvBgNV BAMTKDA3RUU1NkY1NzQ2NzIyMjIyM0Y2MEI2OTBCOUU3NUUwQUNDNkNDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0v5Hzx9qBvacrUgoPYuKTTx/o uoq9hmYs2eIffhr0sYK1VzfHPrdlpdNrTceviKwGtH4s7TC431hxyX+kpM2YQDbS MqEyeNBgBIMyYJkgyvlcv02077WlyMaryd0ad1jbFESiRnsvkV2Md6sLvb1UGtgT iDvd2x+0JIAwYkUSheCpR+9lRB/oBSLtVMgaxZ+J/pFGCtMV8HUvIehtUGVltKRg lUogJtCp81svIH+GCl8vLVT7RAu/6k02PH5aAYNRjaD/paT/o3d9g0o1UCoUCQNJ QIWc6qfwsmkJdTkwSnOXVYbTwgcgj83T06UoV9Z8m5De9XOom2jOtsa/EBkRAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUB+5W9XRnIiIj9gtpC5514KzGzEAwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCm5PbCbu+Mqx9e52OiTzjA ju5tDOBIaboyaQTJPxKH7TphArpnhwJLvKSxKx6+TQ3qayrasbGD3cVnGHFY98Kc sf57Ku7BVDJsQp9/U/IOCpnLjrzkDQXMmcNCxp9rML9XdvfZE2YPIxVg3M37PNaJ khiqCNyB4oZHg8iFbc3ck3TIDzErxWt6fOFmwUnAVu5VZKmOI0rBTKp3ZtCE2sev 02FHjO+4U3CGd6Ntz3LOc513BDquoMUazH0l1iAojOtfaPeEFUSYQH7wReKqaJne lz8zv/hlo2/WGyUFDkTryXr66lfP0ySMaWf3H3WykFGDIcm6yj5xnO0AttY3pFtb -----END CERTIFICATE-----Generated at Sat Dec 6 18:32:05 2025 by rpki-client