This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: /wkFD7HrR/fgjj/7UxV2d45WI4bDu2UYL/lO5SavMkQ= Subject key identifier: 65:81:AC:71:7D:85:61:06:AF:BC:42:C9:74:84:3A:57:BC:B0:AB:06 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 7B549A41C603BC7AA0D57CA4BB4001C4E5104CBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: AF Signing time: Sat 06 Dec 2025 08:26:52 +0000 Manifest this update: Sat 06 Dec 2025 08:21:52 +0000 Manifest next update: Sun 07 Dec 2025 11:33:52 +0000 Files and hashes: 1: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: gYkRIFE7UL0cJEwnwxVcLo1Ut87kd9a2aqmOVqa5baI=) 2: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: jR+qYDFgs1RFLmTf7rqpUDak54gW5tVDwGwUk/IhO4s=) 3: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: rzyLuLQB2r5jFPz4ER372UgwfaN2meO05T5dDI5hqUg=) 4: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: OJPv4b9VbBLwofHmcO4HMjIc44TTVCBlYk/QH+SUbWg=) 5: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: qdL0+PphZnX4cdypWsOWZjkH1FNw49MUNv/FrNDrY3s=) 6: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: OFYzxf950q78iFTJtOczlCYpNOX+DOEpFZuRWUO9N6w=) 7: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: 2WLi+yTCoT6MxCiLFaQP7kK5t5x+CtSSj0mzxVLx03Y=) 8: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: refEY6cMSdDY7cBVUX5w6R5vf51PxokJ+N8DMMimo3o=) 9: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: UL7yBA1F7ergECjM7xK45EYvQh4BIa6w098X6gj/00E=) 10: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: qDS/meVpMF7qgfPtayVFbWOCnAfvA9XikJALxZNw670=) 11: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: eSgn8pAntXBevn2NWK+HjwLFj3TRH0aVr1zTI6ST4E0=) 12: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: YouEGWqx2GG1gNyKDzMvqaRmGag9lv2eJQyjBwSYn9Y=) 13: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: XACd90ki63AXfGn+taSfXn0bg5k/VvTu6qRBsyyOiUc=) 14: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: bG62lXPn1Km32GF1V4Mpr+78+uhtW45az4faRRcPToY=) 15: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: /xnxiOeZe4RUPZsXL0vjp7QXRGVs8BxZ08hPmiOocY8=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:33:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:54:9a:41:c6:03:bc:7a:a0:d5:7c:a4:bb:40:01:c4:e5:10:4c:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Dec 6 08:21:52 2025 GMT Not After : Dec 7 11:33:52 2025 GMT Subject: CN=6581AC717D856106AFBC42C974843A57BCB0AB06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0c:3f:b4:ad:54:3a:5a:c2:4f:fb:55:bf:9d: 2b:9e:df:fe:62:40:e2:1a:ed:2a:07:03:c1:51:32: 47:22:eb:f3:3b:22:47:cd:89:48:76:4e:f8:aa:17: f9:1c:31:4b:bc:bc:6f:31:31:95:87:e4:d3:16:41: b8:13:df:e3:57:8c:78:b3:43:f1:07:da:6c:6a:c3: 56:f7:8d:50:53:3b:10:ef:e9:fc:d4:6a:1d:39:d6: f1:77:b7:96:79:90:6d:ac:0c:cb:22:fb:f7:e3:ec: 55:d0:fd:cd:5f:2e:8d:9d:3e:19:94:2d:0f:82:8f: b9:7f:29:29:9c:45:ae:11:ee:ec:c0:09:3a:ed:26: 83:b1:a5:13:5c:aa:0a:73:77:1c:68:0d:17:a2:31: f4:ff:db:e6:70:75:a3:3b:9c:13:26:39:da:f9:49: 96:c0:ff:46:7e:2b:6c:9b:ef:78:f9:77:96:8c:6d: 2e:f4:a6:51:bb:da:02:5a:cf:ca:8d:f4:a9:c8:ee: e0:35:b0:e5:40:44:11:09:81:d8:86:77:59:16:3c: 3b:37:b5:ce:de:5e:35:d5:0f:d9:e6:4b:0e:94:59: 20:37:c2:49:d7:62:89:1c:f7:65:a2:ba:ed:c5:7a: 8b:85:f4:3a:d5:8f:08:98:54:c4:30:6e:e6:f2:10: 78:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:81:AC:71:7D:85:61:06:AF:BC:42:C9:74:84:3A:57:BC:B0:AB:06 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:57:b2:8f:cc:d5:c3:03:a5:33:64:7a:11:b6:9e:14:76:43: 6f:3c:ba:16:75:8c:82:f5:27:e0:d7:ad:b8:6e:7f:eb:c2:22: 02:fa:9e:cc:25:ff:78:c7:09:ea:bb:cb:3e:2d:3f:c8:4f:b2: 14:b1:53:f7:1a:8a:9d:8a:b1:3d:6c:2c:4b:91:c1:77:75:e3: e9:2f:34:8a:6d:95:6a:c4:eb:8f:d1:77:e8:51:3b:54:00:a3: ba:42:74:e5:0e:3d:b1:af:75:77:42:59:5b:a0:d4:4b:2e:48: 35:31:4e:9f:80:8b:c4:40:a5:16:09:3a:30:81:f5:a2:d3:dd: db:50:df:ba:8c:0a:16:cf:ef:3e:c6:18:2b:7f:c7:46:d3:11: 2e:ef:0f:a5:56:87:81:99:df:54:e0:a1:5d:34:35:04:8d:08: 06:a7:3e:d3:93:2b:15:a2:98:6d:07:14:e5:74:35:c8:33:11: 98:f2:bb:bb:0a:eb:70:cc:6c:af:e5:62:73:da:ed:2f:4a:f6: 1c:b7:bc:02:15:90:55:0d:5c:81:e2:27:16:b5:e1:d4:ad:83: 74:7a:15:39:d1:30:44:3e:7f:06:d8:74:56:fd:fc:52:a1:68: dd:d9:09:f1:95:83:ab:0a:f1:db:86:21:1e:47:7d:12:af:e0: 9d:02:57:6c -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUe1SaQcYDvHqg1Xyku0ABxOUQTL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNTEyMDYwODIxNTJaFw0yNTEyMDcxMTMzNTJaMDMxMTAvBgNV BAMTKDY1ODFBQzcxN0Q4NTYxMDZBRkJDNDJDOTc0ODQzQTU3QkNCMEFCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDD+0rVQ6WsJP+1W/nSue3/5i QOIa7SoHA8FRMkci6/M7IkfNiUh2TviqF/kcMUu8vG8xMZWH5NMWQbgT3+NXjHiz Q/EH2mxqw1b3jVBTOxDv6fzUah051vF3t5Z5kG2sDMsi+/fj7FXQ/c1fLo2dPhmU LQ+Cj7l/KSmcRa4R7uzACTrtJoOxpRNcqgpzdxxoDReiMfT/2+ZwdaM7nBMmOdr5 SZbA/0Z+K2yb73j5d5aMbS70plG72gJaz8qN9KnI7uA1sOVARBEJgdiGd1kWPDs3 tc7eXjXVD9nmSw6UWSA3wknXYokc92Wiuu3FeouF9DrVjwiYVMQwbubyEHjbAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUZYGscX2FYQavvELJdIQ6V7ywqwYwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQA1V7KPzNXDA6UzZHoRtp4UdkNvPLoWdYyC9Sfg1624bn/rwiIC+p7MJf94 xwnqu8s+LT/IT7IUsVP3GoqdirE9bCxLkcF3dePpLzSKbZVqxOuP0XfoUTtUAKO6 QnTlDj2xr3V3QllboNRLLkg1MU6fgIvEQKUWCTowgfWi093bUN+6jAoWz+8+xhgr f8dG0xEu7w+lVoeBmd9U4KFdNDUEjQgGpz7TkysVophtBxTldDXIMxGY8ru7Cutw zGyv5WJz2u0vSvYct7wCFZBVDVyB4icWteHUrYN0ehU50TBEPn8G2HRW/fxSoWjd 2QnxlYOrCvHbhiEeR30Sr+CdAlds -----END CERTIFICATE-----Generated at Sat Dec 6 20:37:12 2025 by rpki-client