This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
File:                     8568BF579F56F4139D364514D84EA5EE01CC8048.mft (raw, json)
Hash identifier:          UAfjk/9OAhlzgXts2MRlt+E71IPbjLfMPqssq8jkjok=
Subject key identifier:   2E:B4:AE:4B:42:C4:D7:F5:91:99:31:69:91:80:2E:37:6F:88:68:DB
Authority key identifier: 85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48
Certificate issuer:       /CN=8568bf579f56f4139d364514d84ea5ee01cc8048
Certificate serial:       28A17D03DF68E8E07B6C97AFAF63551AE86E9C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
Subject info access:      rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
Manifest number:          2F
Signing time:             Fri 05 Dec 2025 17:48:22 +0000
Manifest this update:     Fri 05 Dec 2025 17:43:22 +0000
Manifest next update:     Sat 06 Dec 2025 19:01:22 +0000
Files and hashes:         1: AS214675.asa (hash: 6diSNxOaHQhVCmq1v1ncGZb9Qbn8ZX4J7l+IbOq2AGQ=)
                          2: 8568BF579F56F4139D364514D84EA5EE01CC8048.crl (hash: TW6rbvRBTJV0GHLRUAs6/eFC0Scv8hMoS7DwMFRO35I=)
Validation:               OK
Signature path:           rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl
                          rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Dec 2025 19:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a1:7d:03:df:68:e8:e0:7b:6c:97:af:af:63:55:1a:e8:6e:9c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8568bf579f56f4139d364514d84ea5ee01cc8048
        Validity
            Not Before: Dec  5 17:43:22 2025 GMT
            Not After : Dec  6 19:01:22 2025 GMT
        Subject: CN=2EB4AE4B42C4D7F59199316991802E376F8868DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:ca:e7:84:1d:e5:56:06:d6:73:95:81:2b:
                    8d:58:ed:e0:f0:24:45:f6:b2:3e:f5:9f:69:58:c8:
                    a2:ab:da:68:77:d6:c2:1d:3c:09:12:68:df:20:a6:
                    3a:01:06:3e:25:78:58:d2:4e:49:98:24:b2:c1:c4:
                    4b:ad:73:a4:65:a6:19:a5:c5:bd:40:25:a9:8a:0a:
                    38:e7:3a:c8:c1:1e:d5:24:81:52:92:0d:06:6a:77:
                    26:07:ca:e5:05:e0:a2:3d:cc:bc:6d:c7:7f:4c:c6:
                    f1:c1:13:f1:d5:ed:ad:f3:3a:ca:be:d5:a1:b8:51:
                    92:6b:81:c0:1b:ad:18:3e:c3:bf:47:44:5f:94:f0:
                    c2:ab:fb:62:07:05:a8:4c:59:29:10:96:ac:3f:2d:
                    d5:83:4a:09:f3:40:3f:8f:bb:f2:26:51:e3:58:b5:
                    3e:24:bb:36:38:f4:2a:5a:64:50:03:7f:0e:3c:60:
                    18:01:1a:a9:e8:45:94:6c:4f:d5:3b:73:c2:cf:8d:
                    75:a0:8e:3e:d2:85:30:a6:00:a6:3a:5a:29:6a:5f:
                    bf:8d:e3:52:25:fb:d4:fe:05:d8:a4:1e:0f:9f:0a:
                    a2:9d:cc:52:64:c8:01:71:21:c0:a9:9a:72:92:bd:
                    c8:17:b4:83:7a:9e:53:63:91:e8:9a:86:e7:ca:10:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B4:AE:4B:42:C4:D7:F5:91:99:31:69:91:80:2E:37:6F:88:68:DB
            X509v3 Authority Key Identifier:
                keyid:85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:25:34:f4:fa:c4:a6:9d:7b:b5:bd:d5:4b:96:ca:cf:86:82:
         6a:1e:50:b0:c6:7a:74:6e:e1:aa:0c:da:b5:5c:0c:af:80:fa:
         d1:5a:2c:38:73:6e:48:14:77:6c:19:14:36:a1:32:39:db:bd:
         b2:c4:74:fd:8f:0c:fd:23:fd:8c:df:89:04:5c:5c:32:60:96:
         26:a2:71:ec:10:47:16:d8:6c:31:33:b0:a6:19:2f:27:ab:f5:
         b4:10:b0:84:16:2d:b0:10:d0:5f:f1:ce:36:2c:08:ee:a6:3a:
         65:24:ca:f9:57:73:01:8b:89:a9:90:13:80:6f:20:1d:d3:89:
         2d:f7:41:f6:87:e7:ba:3b:52:56:9d:97:90:1b:e1:61:e6:6c:
         6a:fc:ff:fa:38:1e:eb:3c:a8:59:6b:3b:42:16:ef:58:90:d9:
         13:83:8c:98:1b:ef:2a:ef:6b:64:87:bb:60:12:76:09:47:69:
         ad:75:91:dc:b5:79:59:cb:3c:1d:88:06:b4:84:8f:c6:c3:ca:
         84:99:be:ec:17:67:28:5c:c2:8c:0c:e8:99:46:73:c9:ed:55:
         5a:50:d6:3d:2b:f9:3b:cc:dc:e2:ca:e5:fe:97:e3:2b:41:8b:
         b4:54:03:5c:aa:f4:7c:f9:ec:90:63:c4:22:ed:80:7d:33:9f:
         a0:a2:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 05:43:56 2025 by rpki-client