This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft File: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft (raw, json) Hash identifier: q/pKFRoj3AJiOWvzXOmg3C8i296sa8xiaf2iyIQgheY= Subject key identifier: 68:A2:0E:AB:8A:8D:32:23:02:99:83:6E:DC:AD:7C:6E:F3:AC:A6:6B Authority key identifier: 0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 Certificate issuer: /CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57 Certificate serial: 37C66B4226FD873814BFF95502F92F0190E5CFE6 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft Manifest number: 1C Signing time: Sat 24 Jan 2026 22:53:05 +0000 Manifest this update: Sat 24 Jan 2026 22:48:05 +0000 Manifest next update: Sun 25 Jan 2026 23:10:05 +0000 Files and hashes: 1: 0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl (hash: /9DgE29+9xFW05R1AZQ4fn16xf432dfYOo50w5JwbRI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:c6:6b:42:26:fd:87:38:14:bf:f9:55:02:f9:2f:01:90:e5:cf:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D6B538349B436ADE8D1CAFC73E5341BBC88AD57 Validity Not Before: Jan 24 22:48:05 2026 GMT Not After : Jan 25 23:10:05 2026 GMT Subject: CN=68A20EAB8A8D32230299836EDCAD7C6EF3ACA66B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:63:f7:fc:87:f9:a5:1d:2f:9b:6a:49:fa: 23:04:65:aa:54:da:32:6c:fc:6c:e4:d4:18:5a:7f: 0f:84:6d:f4:da:d0:36:07:fa:d2:16:3a:40:c1:92: d6:f2:33:33:a0:98:7d:b5:e5:d7:2d:f6:6b:00:6d: 2d:0e:ae:66:d8:16:42:fc:eb:49:c0:cd:dd:86:52: 03:1b:0e:ab:fd:6d:9a:6d:60:8c:60:62:05:4c:90: 8c:5c:3c:bc:27:5d:81:62:08:6f:9e:85:41:fa:c4: 3a:51:b2:2c:5c:b0:e5:34:1b:07:e7:28:9c:e5:c9: 01:fc:0b:1e:a2:dc:25:95:2c:67:0b:28:06:94:23: fc:29:a4:a6:e7:48:f9:86:92:b2:82:e7:f3:0c:98: f2:53:46:e0:82:f9:95:51:a2:98:b7:85:3d:f7:55: e2:5d:a3:b9:59:cb:24:4d:ba:89:79:b1:4f:bf:a9: a6:4d:f3:90:14:e0:dc:ff:e4:be:f4:07:45:82:2e: c0:f6:7e:f4:b3:05:43:03:2a:1f:67:ce:7d:01:1e: c0:15:5a:44:1d:ad:43:76:0f:d8:9f:a0:02:7c:39: a1:20:ec:af:6d:ee:da:43:e2:24:3f:65:93:fd:c1: 6b:16:d9:4c:95:4d:b0:83:2f:c8:4f:1a:71:2b:46: 73:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:0E:AB:8A:8D:32:23:02:99:83:6E:DC:AD:7C:6E:F3:AC:A6:6B X509v3 Authority Key Identifier: keyid:0D:6B:53:83:49:B4:36:AD:E8:D1:CA:FC:73:E5:34:1B:BC:88:AD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2ed4b7eb-17a7-44e1-9ca2-098a32383c90/2/0D6B538349B436ADE8D1CAFC73E5341BBC88AD57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:08:93:68:38:1c:95:d0:24:f6:1e:58:72:ff:cf:8c:8d:e2: 77:36:e6:04:12:2e:a8:c8:12:67:9c:7c:f1:2d:bb:f1:e2:21: a1:3e:7b:4f:f1:7c:cd:4c:3e:12:ad:e6:5b:b6:1a:9a:7f:50: 38:c7:fd:ab:19:b9:d7:7d:3c:40:40:25:67:e9:e4:7e:3c:8f: 91:77:38:a3:b1:44:ce:e8:95:31:70:b5:ad:48:4a:da:00:bb: 67:90:ed:9d:02:7e:ba:6e:62:eb:52:20:e6:0c:8c:3e:a0:ee: d9:96:e5:09:84:bf:d2:80:3f:ef:7c:a7:d3:5e:97:7e:85:4e: b2:ea:48:6c:47:7e:44:25:a6:56:c7:fd:a6:13:1c:97:ff:06: 5d:47:e5:67:01:ff:3c:ed:a5:22:3b:ca:0e:2f:0e:fd:cb:43: 8e:45:42:97:fe:ab:f2:12:4b:24:8d:6a:9a:a8:5c:ff:16:93: 5c:46:80:a5:02:b9:9c:3f:b6:dc:cd:ef:6e:34:ec:ec:d8:08: 7a:26:96:ad:19:f1:82:1d:86:84:ff:4c:1a:ec:bb:00:f8:99: 92:e0:9d:66:76:83:9a:59:1b:cd:58:a2:a7:fb:dc:a2:52:10: 3e:5c:83:8b:0d:5e:0b:68:5d:01:f6:3c:08:21:58:96:9b:87: 83:3d:a0:09 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUN8ZrQib9hzgUv/lVAvkvAZDlz+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQ2QjUzODM0OUI0MzZBREU4RDFDQUZDNzNFNTM0MUJC Qzg4QUQ1NzAeFw0yNjAxMjQyMjQ4MDVaFw0yNjAxMjUyMzEwMDVaMDMxMTAvBgNV BAMTKDY4QTIwRUFCOEE4RDMyMjMwMjk5ODM2RURDQUQ3QzZFRjNBQ0E2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1tmP3/If5pR0vm2pJ+iMEZapU 2jJs/Gzk1Bhafw+EbfTa0DYH+tIWOkDBktbyMzOgmH215dct9msAbS0OrmbYFkL8 60nAzd2GUgMbDqv9bZptYIxgYgVMkIxcPLwnXYFiCG+ehUH6xDpRsixcsOU0Gwfn KJzlyQH8Cx6i3CWVLGcLKAaUI/wppKbnSPmGkrKC5/MMmPJTRuCC+ZVRopi3hT33 VeJdo7lZyyRNuol5sU+/qaZN85AU4Nz/5L70B0WCLsD2fvSzBUMDKh9nzn0BHsAV WkQdrUN2D9ifoAJ8OaEg7K9t7tpD4iQ/ZZP9wWsW2UyVTbCDL8hPGnErRnMVAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUaKIOq4qNMiMCmYNu3K18bvOspmswHwYDVR0j BBgwFoAUDWtTg0m0Nq3o0cr8c+U0G7yIrVcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmVkNGI3ZWItMTdhNy00NGUxLTljYTItMDk4YTMyMzgz YzkwLzIvMEQ2QjUzODM0OUI0MzZBREU4RDFDQUZDNzNFNTM0MUJCQzg4QUQ1Ny5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8wRDZCNTM4MzQ5QjQzNkFERThEMUNBRkM3 M0U1MzQxQkJDODhBRDU3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzJlZDRiN2ViLTE3YTctNDRlMS05Y2EyLTA5OGEzMjM4M2M5MC8yLzBENkI1Mzgz NDlCNDM2QURFOEQxQ0FGQzczRTUzNDFCQkM4OEFENTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBCJNo OByV0CT2Hlhy/8+MjeJ3NuYEEi6oyBJnnHzxLbvx4iGhPntP8XzNTD4SreZbthqa f1A4x/2rGbnXfTxAQCVn6eR+PI+RdzijsUTO6JUxcLWtSEraALtnkO2dAn66bmLr UiDmDIw+oO7ZluUJhL/SgD/vfKfTXpd+hU6y6khsR35EJaZWx/2mExyX/wZdR+Vn Af887aUiO8oOLw79y0OORUKX/qvyEkskjWqaqFz/FpNcRoClArmcP7bcze9uNOzs 2Ah6JpatGfGCHYaE/0wa7LsA+JmS4J1mdoOaWRvNWKKn+9yiUhA+XIOLDV4LaF0B 9jwIIViWm4eDPaAJ -----END CERTIFICATE-----Generated at Sun Jan 25 08:40:28 2026 by rpki-client