$ rpki-client -vvvf rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft File: DC780D9935DABC701A4C4832B16C11D7743C399A.mft (raw, json) Hash identifier: aW6E27vDe28cepgG9JNRhLZdE547aDM7xnOFvDbFuSc= Subject key identifier: 4D:51:73:23:45:9C:15:6F:5E:C5:12:AE:CC:9B:A1:59:32:B4:B2:13 Authority key identifier: DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A Certificate issuer: /CN=dc780d9935dabc701a4c4832b16c11d7743c399a Certificate serial: 5333F2B551742156260FCBDDA7DC276307AA2502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject info access: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft Manifest number: 0279 Signing time: Sat 14 Nov 2026 12:16:05 +0000 Manifest this update: Sat 14 Nov 2026 12:11:05 +0000 Manifest next update: Sun 15 Nov 2026 15:22:05 +0000 Files and hashes: 1: DC780D9935DABC701A4C4832B16C11D7743C399A.crl (hash: Q7KmrGHAPCF4Kb5Gs7LpC2Y8c17xRUASNzMzDnWtkwI=) 2: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: q5XBQbeSajkFemFHOP7sJXFLQua3ROC9i4L+KFjqA2Y=) 3: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 0B5YOvITIZWZRxiAsBfwVFBJO8A9+rknJ70VrZXbmhM=) 4: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: U8+OIXzaopDuaYf7hsd7liluEK65HTMfxtzOs2eUutU=) 5: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: YVqDFSJM9BpzA7j/lmc/Km9kXBCWwBuBJnXVpd3c0oA=) 6: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: +h5nxp3r86DxkM+mEV1xj5BP7LH8Lp8uZ6CT1Hi1E54=) 7: 326130343a623930323a3a2f34382d3438203d3e20323131333231.roa (hash: DvRjC5YVaO6hAiGHU5zPxy3o6I0+1biPcChDZYr62qk=) 8: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: G71RBaKhsjP596XjbfAcbZmTzgSOwVARGZ/mPeB9am8=) 9: 3138352e34392e3134332e302f32342d3234203d3e203630313331.roa (hash: 3y7Jbg3sm1uifLkJV88tgfg6D6rTEYYvAHPNscUUhHA=) 10: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: pEkraM4NhbgBsFbDwa7w6tJcsCMwH3uOz0vykIUzTk8=) 11: C8623AA6C30FA8E058243708F5672D7960E52389.cer (hash: xh+MW2FduGLhuo30+/bFrTnjBprE+rX9TK+QGtrFq9E=) 12: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: d+iw2diCkJRaNGhzIf4J/JKw8L1IDPPlPbWg6NjYiQ8=) 13: 326130343a623930303a3530303a3a2f34302d3430203d3e203630313331.roa (hash: aHSU2LAP9+uQoMkIpvrqOzq9aYzl4H0ZJ31M+HGxbv0=) 14: 326130343a623930343a373230303a3a2f34302d3430203d3e20323131333231.roa (hash: F4DaaBvGL9dgBxkY4xsFoeNBV/3e5iKiYWMDoodFLqo=) 15: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: eiOsAFzUoO5n+xOw6ZqDfb1W9mjnMVvG3lh8Uszxqbc=) 16: 326130343a623930303a3a2f34302d3430203d3e2038353837.roa (hash: C+7VhiatX/AuDzxhoKtyvY9d94VTo0QlL+iBBqSiSk8=) 17: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: uEPfzD+wbnhTwsVWW/UrDfMoUMKBuHi0vPl0IGNr7n4=) 18: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: mcRkbX+EcmuVG5kbogYs1kTfFjmT6GSDRiWlit7LIEo=) Validation: OK Signature path: rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:33:f2:b5:51:74:21:56:26:0f:cb:dd:a7:dc:27:63:07:aa:25:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc780d9935dabc701a4c4832b16c11d7743c399a Validity Not Before: Nov 14 12:11:05 2026 GMT Not After : Nov 15 15:22:05 2026 GMT Subject: CN=4D517323459C156F5EC512AECC9BA15932B4B213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a4:cd:d0:55:df:46:58:c2:7f:19:a8:fd:c5: ef:4e:2a:a7:00:bc:12:12:6a:9d:05:01:97:45:f8: 0f:82:65:d8:af:eb:d8:54:31:e0:27:0d:79:68:45: 39:97:65:c4:6c:43:09:71:b1:ef:7d:c2:8d:a7:23: ac:ba:73:ee:62:ed:86:c2:ef:f7:17:31:cb:12:b3: 8b:7f:5e:df:e9:8b:2c:f5:22:07:db:58:57:2c:dc: 92:68:8d:6e:bd:46:52:32:94:e4:92:c9:4f:70:76: a8:04:fc:8c:b8:7f:c0:8f:d0:49:d7:0f:48:b6:4f: b9:c1:09:0d:89:55:06:62:e3:9f:92:4a:38:bd:29: 06:6c:bb:0f:41:e0:77:a1:f9:fd:a1:57:ec:5d:2f: b2:1f:3f:f6:95:28:8c:27:11:c4:1f:f6:57:0a:fa: 75:b9:e5:5e:60:98:83:23:9c:b9:6b:f4:90:3b:f0: d4:6a:eb:4d:f3:76:ae:33:b4:f8:33:eb:46:14:6a: 32:c8:bb:96:fe:7a:68:66:9f:52:f3:45:14:dd:ae: 66:d3:2c:7f:89:9c:2b:92:14:2b:4f:12:e0:0a:37: 2c:c3:78:19:66:d7:be:aa:0d:29:c6:1f:d5:0a:cf: b5:bc:7f:01:4a:17:c9:cf:36:b3:a5:9c:cc:db:59: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:51:73:23:45:9C:15:6F:5E:C5:12:AE:CC:9B:A1:59:32:B4:B2:13 X509v3 Authority Key Identifier: keyid:DC:78:0D:99:35:DA:BC:70:1A:4C:48:32:B1:6C:11:D7:74:3C:39:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HgNmTXavHAaTEgysWwR13Q8OZo.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.nlnetlabs.nl/repo/nlnetlabs/1/DC780D9935DABC701A4C4832B16C11D7743C399A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:2b:e5:af:fa:fc:e2:be:33:70:86:55:79:57:d9:b2:66:eb: b5:d8:45:ce:fe:3d:76:01:de:55:9f:5a:40:c9:78:23:27:6e: a2:e8:23:fc:fb:d9:be:37:17:1d:3a:ed:58:07:49:76:77:fe: fe:25:65:0a:a9:80:c2:36:06:a7:ca:8b:9c:b1:99:b0:07:24: 28:98:eb:9f:70:e0:af:8e:23:1d:55:4a:a8:01:84:ae:36:5f: 26:62:c6:60:ae:ec:81:0b:14:f0:7b:41:f0:14:59:b5:33:3b: 6e:17:08:a9:c3:c6:ee:27:95:37:a8:a9:aa:a4:73:7a:e2:d6: 53:8d:bb:9d:97:9c:85:cb:75:e7:f7:c6:bb:48:9a:3c:54:54: 96:9a:1c:a1:4b:69:66:0b:e8:a5:1c:01:1d:71:73:ee:22:07: e7:f8:c3:72:23:54:9d:42:55:54:da:fa:55:da:31:81:88:d0: 87:70:ff:c6:e5:00:80:fa:7f:03:d5:9b:2b:a1:23:ae:69:9e: 58:d6:04:eb:cc:37:1c:43:d7:1b:34:9b:90:c4:59:f2:e1:32: 48:9e:96:90:06:6e:97:5b:6f:99:27:5a:29:fd:ee:60:99:d3: 4e:80:52:91:3d:ed:b9:a4:e5:18:ae:07:09:1d:03:ab:0c:0b: c0:d4:e7:74 -----BEGIN CERTIFICATE----- MIIE8TCCA9mgAwIBAgIUUzPytVF0IVYmD8vdp9wnYweqJQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZGM3ODBkOTkzNWRhYmM3MDFhNGM0ODMyYjE2YzExZDc3 NDNjMzk5YTAeFw0yNjExMTQxMjExMDVaFw0yNjExMTUxNTIyMDVaMDMxMTAvBgNV BAMTKDRENTE3MzIzNDU5QzE1NkY1RUM1MTJBRUNDOUJBMTU5MzJCNEIyMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhpM3QVd9GWMJ/Gaj9xe9OKqcA vBISap0FAZdF+A+CZdiv69hUMeAnDXloRTmXZcRsQwlxse99wo2nI6y6c+5i7YbC 7/cXMcsSs4t/Xt/piyz1IgfbWFcs3JJojW69RlIylOSSyU9wdqgE/Iy4f8CP0EnX D0i2T7nBCQ2JVQZi45+SSji9KQZsuw9B4Heh+f2hV+xdL7IfP/aVKIwnEcQf9lcK +nW55V5gmIMjnLlr9JA78NRq603zdq4ztPgz60YUajLIu5b+emhmn1LzRRTdrmbT LH+JnCuSFCtPEuAKNyzDeBlm176qDSnGH9UKz7W8fwFKF8nPNrOlnMzbWRJvAgMB AAGjggH7MIIB9zAdBgNVHQ4EFgQUTVFzI0WcFW9exRKuzJuhWTK0shMwHwYDVR0j BBgwFoAU3HgNmTXavHAaTEgysWwR13Q8OZowDgYDVR0PAQH/BAQDAgeAMG8GA1Ud HwRoMGYwZKBioGCGXnJzeW5jOi8vcnN5bmMua3JpbGwubmxuZXRsYWJzLm5sL3Jl cG8vbmxuZXRsYWJzLzEvREM3ODBEOTkzNURBQkM3MDFBNEM0ODMyQjE2QzExRDc3 NDNDMzk5QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzov L3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNIZ05tVFhhdkhBYVRF Z3lzV3dSMTNROE9aby5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5y c3luYzovL3JzeW5jLmtyaWxsLm5sbmV0bGFicy5ubC9yZXBvL25sbmV0bGFicy8x L0RDNzgwRDk5MzVEQUJDNzAxQTRDNDgzMkIxNkMxMUQ3NzQzQzM5OUEubWZ0MBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgAB BQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUA A4IBAQC0K+Wv+vzivjNwhlV5V9myZuu12EXO/j12Ad5Vn1pAyXgjJ26i6CP8+9m+ NxcdOu1YB0l2d/7+JWUKqYDCNganyoucsZmwByQomOufcOCvjiMdVUqoAYSuNl8m YsZgruyBCxTwe0HwFFm1MztuFwipw8buJ5U3qKmqpHN64tZTjbudl5yFy3Xn98a7 SJo8VFSWmhyhS2lmC+ilHAEdcXPuIgfn+MNyI1SdQlVU2vpV2jGBiNCHcP/G5QCA +n8D1ZsroSOuaZ5Y1gTrzDccQ9cbNJuQxFny4TJInpaQBm6XW2+ZJ1op/e5gmdNO gFKRPe25pOUYrgcJHQOrDAvA1Od0 -----END CERTIFICATE-----Generated at Sat Nov 14 21:54:57 2026 by rpki-client