This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: j311p7wx4nALNyXSb+pq8yyycuub5xyMXGpwYakthok= Subject key identifier: EB:5B:2C:5B:00:AF:0B:3D:06:7E:1E:85:37:AB:4A:06:23:CD:61:81 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 72B267097C9CAE3F3133A33D816ECDB3983A6A6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: F1 Signing time: Sun 25 Jan 2026 02:47:23 +0000 Manifest this update: Sun 25 Jan 2026 02:42:23 +0000 Manifest next update: Mon 26 Jan 2026 04:24:23 +0000 Files and hashes: 1: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: YouEGWqx2GG1gNyKDzMvqaRmGag9lv2eJQyjBwSYn9Y=) 2: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: StJVY/GuvyTquzzKYyemZDC2eOSJs8crgolHKerS3v8=) 3: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: gYkRIFE7UL0cJEwnwxVcLo1Ut87kd9a2aqmOVqa5baI=) 4: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: qdL0+PphZnX4cdypWsOWZjkH1FNw49MUNv/FrNDrY3s=) 5: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: bG62lXPn1Km32GF1V4Mpr+78+uhtW45az4faRRcPToY=) 6: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: rzyLuLQB2r5jFPz4ER372UgwfaN2meO05T5dDI5hqUg=) 7: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: /xnxiOeZe4RUPZsXL0vjp7QXRGVs8BxZ08hPmiOocY8=) 8: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: qDS/meVpMF7qgfPtayVFbWOCnAfvA9XikJALxZNw670=) 9: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: OFYzxf950q78iFTJtOczlCYpNOX+DOEpFZuRWUO9N6w=) 10: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: XACd90ki63AXfGn+taSfXn0bg5k/VvTu6qRBsyyOiUc=) 11: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: 2WLi+yTCoT6MxCiLFaQP7kK5t5x+CtSSj0mzxVLx03Y=) 12: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: jR+qYDFgs1RFLmTf7rqpUDak54gW5tVDwGwUk/IhO4s=) 13: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: UL7yBA1F7ergECjM7xK45EYvQh4BIa6w098X6gj/00E=) 14: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: eSgn8pAntXBevn2NWK+HjwLFj3TRH0aVr1zTI6ST4E0=) 15: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b2:67:09:7c:9c:ae:3f:31:33:a3:3d:81:6e:cd:b3:98:3a:6a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Jan 25 02:42:23 2026 GMT Not After : Jan 26 04:24:23 2026 GMT Subject: CN=EB5B2C5B00AF0B3D067E1E8537AB4A0623CD6181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:73:b8:79:7a:ac:4e:f2:bb:eb:64:ac:53:e2: a7:20:6a:5d:44:c4:31:1e:a1:49:b7:2a:e7:b0:fe: 0f:ab:01:aa:62:53:e1:4e:08:20:4f:4d:e2:9c:fa: d6:eb:1d:b6:53:4a:4c:03:ea:d9:bf:62:13:60:a1: 5b:0e:99:44:38:53:0e:e1:86:9d:0a:13:58:8f:98: fa:44:68:d4:fc:e8:2a:fb:85:79:84:1c:ab:a4:72: 26:25:8d:9c:f5:9b:d2:fb:83:3a:4f:42:92:55:80: de:b8:d7:6b:db:b2:71:1e:b4:11:34:44:9f:1d:9d: db:27:eb:ae:aa:e2:da:f9:45:f3:ce:20:3c:3a:70: 6e:68:3c:93:2e:a1:76:58:48:1d:98:08:66:c2:41: 31:ac:98:13:c2:20:39:57:bc:46:76:9a:ae:dc:89: fd:66:36:9d:18:e4:44:40:b0:fd:cf:db:e6:22:5e: 4d:87:80:a4:87:bf:be:cf:c0:34:f3:b4:ab:c8:9b: 2a:23:a9:5f:6f:91:38:e1:73:3a:fd:b2:a1:43:66: 3a:c2:66:34:65:e2:df:76:79:55:75:bf:8b:82:45: 77:87:1b:d9:5e:5e:8a:f8:ce:42:0b:56:3e:0e:88: d0:24:93:ee:c5:f2:8a:96:01:d8:43:52:95:27:21: e8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:5B:2C:5B:00:AF:0B:3D:06:7E:1E:85:37:AB:4A:06:23:CD:61:81 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:56:38:f1:ee:6e:11:cc:f7:ca:d4:df:ed:bd:87:33:25:31: 3e:25:a6:4c:f2:5c:ae:9f:a5:a7:10:79:2a:a5:c9:e5:d8:0d: bb:93:5d:54:e7:ea:8a:84:03:44:be:70:7a:0e:9c:85:47:96: ad:e0:3e:a4:1d:11:af:b1:89:a8:77:b5:9f:36:ff:ec:06:9a: 92:14:d5:5d:65:bf:6e:24:7f:49:75:23:70:33:b7:f9:d9:b2: cc:dc:fd:cd:ec:20:4b:47:f0:42:04:10:45:44:b1:16:59:60: 1a:80:ba:56:ca:af:e8:25:6d:d5:d2:cc:14:b0:7c:4f:34:97: fa:5d:51:57:9c:bf:c1:d1:bf:69:c5:4e:17:fc:4e:c7:e2:36: a3:ef:4c:ca:aa:44:98:d4:77:8a:5c:a9:25:ae:37:bf:21:ef: 1b:10:c8:41:40:9f:8b:83:34:c6:9d:74:40:6c:93:17:be:d9: 28:a8:2a:5c:20:aa:06:e4:37:98:2c:1c:86:0d:d6:cf:f9:16: 51:8d:d0:11:e9:f0:83:76:69:2a:a2:72:09:22:8a:24:f6:6b: a7:34:74:3f:e6:a8:36:bd:8a:16:a5:84:53:60:ec:3c:38:fe: b7:6c:64:45:7b:8b:b4:fe:86:fa:c3:95:61:cf:22:1c:b4:93: ed:e1:db:30 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUcrJnCXycrj8xM6M9gW7Ns5g6amowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjAxMjUwMjQyMjNaFw0yNjAxMjYwNDI0MjNaMDMxMTAvBgNV BAMTKEVCNUIyQzVCMDBBRjBCM0QwNjdFMUU4NTM3QUI0QTA2MjNDRDYxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7c7h5eqxO8rvrZKxT4qcgal1E xDEeoUm3Kuew/g+rAapiU+FOCCBPTeKc+tbrHbZTSkwD6tm/YhNgoVsOmUQ4Uw7h hp0KE1iPmPpEaNT86Cr7hXmEHKukciYljZz1m9L7gzpPQpJVgN6412vbsnEetBE0 RJ8dndsn666q4tr5RfPOIDw6cG5oPJMuoXZYSB2YCGbCQTGsmBPCIDlXvEZ2mq7c if1mNp0Y5ERAsP3P2+YiXk2HgKSHv77PwDTztKvImyojqV9vkTjhczr9sqFDZjrC ZjRl4t92eVV1v4uCRXeHG9leXor4zkILVj4OiNAkk+7F8oqWAdhDUpUnIegDAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQU61ssWwCvCz0Gfh6FN6tKBiPNYYEwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQCAVjjx7m4RzPfK1N/tvYczJTE+JaZM8lyun6WnEHkqpcnl2A27k11U5+qK hANEvnB6DpyFR5at4D6kHRGvsYmod7WfNv/sBpqSFNVdZb9uJH9JdSNwM7f52bLM 3P3N7CBLR/BCBBBFRLEWWWAagLpWyq/oJW3V0swUsHxPNJf6XVFXnL/B0b9pxU4X /E7H4jaj70zKqkSY1HeKXKklrje/Ie8bEMhBQJ+LgzTGnXRAbJMXvtkoqCpcIKoG 5DeYLByGDdbP+RZRjdAR6fCDdmkqonIJIook9munNHQ/5qg2vYoWpYRTYOw8OP63 bGRFe4u0/ob6w5VhzyIctJPt4dsw -----END CERTIFICATE-----Generated at Sun Jan 25 07:45:00 2026 by rpki-client