This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft
File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json)
Hash identifier: tEuons+QiYitlZOMJ63N9Jdtnl4IV5rvqsujOaLntck=
Subject key identifier: CA:0F:7D:24:AE:BB:58:25:25:66:0E:E2:32:AA:A9:58:3C:89:F7:75
Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31
Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631
Certificate serial: 17EB0B385D83778D1E52DECC737D59D2E9EBE5
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft
Manifest number: C0
Signing time: Sun 25 Jan 2026 05:49:35 +0000
Manifest this update: Sun 25 Jan 2026 05:44:35 +0000
Manifest next update: Mon 26 Jan 2026 06:16:35 +0000
Files and hashes: 1: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: C00p112dC4n7f5ffDaM8wDzk46WjlVHxa7R0UP+yAuI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl
rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft
rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:16:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:eb:0b:38:5d:83:77:8d:1e:52:de:cc:73:7d:59:d2:e9:eb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631
Validity
Not Before: Jan 25 05:44:35 2026 GMT
Not After : Jan 26 06:16:35 2026 GMT
Subject: CN=CA0F7D24AEBB582525660EE232AAA9583C89F775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d5:da:ae:7d:6d:ec:c9:6c:8a:38:ad:73:9d:
b7:d2:04:1c:14:ff:af:0c:50:8d:f3:9b:c0:ac:07:
53:18:0c:b3:ee:9d:4c:fa:5c:3a:c2:aa:ed:3c:41:
7c:3c:93:66:8c:b3:84:5e:21:6f:c9:4b:e6:a2:b8:
35:3f:34:85:23:a4:c2:4a:28:cc:28:a3:2a:7a:af:
99:72:a3:5d:9e:2a:82:ec:22:1a:35:55:39:0a:28:
d9:9d:98:24:41:43:10:fa:6f:a5:84:48:c4:37:95:
86:86:54:6b:40:0f:50:8c:f9:5a:13:35:51:73:51:
e3:b6:b4:8c:f1:02:32:29:fc:50:67:83:a9:78:e4:
38:48:65:9b:39:be:3f:d1:be:dc:88:a1:21:4b:f8:
99:fb:6e:8e:f5:80:93:b7:f5:7f:5e:b9:22:01:16:
d9:df:fe:09:b8:5f:33:cb:a4:ef:a9:f6:bb:e6:c2:
8e:05:29:94:47:0f:57:7a:b7:ff:e4:a6:f3:b9:7f:
23:10:f4:23:1f:e6:5d:2a:c2:19:06:4a:2b:50:b2:
d8:f5:55:e9:8b:5b:9a:de:5e:9a:e4:3d:d2:93:42:
07:73:22:3f:70:3f:b6:53:be:1d:60:9b:9d:4c:e6:
69:d4:36:54:17:9f:25:04:03:e3:f5:56:6a:6e:81:
d5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0F:7D:24:AE:BB:58:25:25:66:0E:E2:32:AA:A9:58:3C:89:F7:75
X509v3 Authority Key Identifier:
keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6e:11:85:ea:e4:56:0d:1f:c5:6f:49:26:72:dc:c0:fb:dd:
89:22:13:7c:cd:06:9e:b0:f7:3f:65:63:1d:15:a1:f7:de:f0:
ca:af:52:06:b8:77:ce:6c:0f:a0:13:e7:02:50:c9:53:33:24:
8d:f2:47:40:96:d2:64:88:76:0e:80:3f:6c:40:30:b2:31:9a:
09:2b:8c:dd:5f:1e:fb:c3:75:87:f2:d6:33:f9:84:d9:01:ca:
0c:5c:f8:46:ab:66:ec:4d:76:dc:bf:67:88:3f:e6:e7:e3:2e:
2f:50:d8:03:71:93:fb:f9:29:29:62:03:85:ea:60:73:76:aa:
d2:b1:1d:ac:71:bf:ee:5d:b7:ad:4a:0e:7f:01:6c:9c:30:21:
03:6f:f4:82:9b:14:04:0a:c6:85:a0:01:99:9e:91:37:df:df:
af:f9:8f:d7:e4:33:72:d1:98:31:2c:51:41:43:78:93:9d:bb:
4e:46:b9:73:e8:22:df:1f:19:e5:b4:5e:9a:de:4e:8a:70:77:
e0:da:b5:ae:42:e9:4c:54:8a:6b:52:07:45:d7:ae:c2:bd:ed:
f2:c1:da:5a:fc:13:f7:1b:50:5a:97:5b:31:65:85:17:5f:d9:
7a:33:f6:64:b3:9f:87:00:b2:b7:25:2a:fb:bb:fe:59:e7:ad:
5b:aa:a4:0e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgITF+sLOF2Dd40eUt7Mc31Z0unr5TANBgkqhkiG9w0BAQsF
ADAzMTEwLwYDVQQDEyg3QzRFMjU3MUQzOTUzNUVCODNCNEJERDRFNDY2OEEyRDJD
MTc3NjMxMB4XDTI2MDEyNTA1NDQzNVoXDTI2MDEyNjA2MTYzNVowMzExMC8GA1UE
AxMoQ0EwRjdEMjRBRUJCNTgyNTI1NjYwRUUyMzJBQUE5NTgzQzg5Rjc3NTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMrV2q59bezJbIo4rXOdt9IEHBT/
rwxQjfObwKwHUxgMs+6dTPpcOsKq7TxBfDyTZoyzhF4hb8lL5qK4NT80hSOkwkoo
zCijKnqvmXKjXZ4qguwiGjVVOQoo2Z2YJEFDEPpvpYRIxDeVhoZUa0APUIz5WhM1
UXNR47a0jPECMin8UGeDqXjkOEhlmzm+P9G+3IihIUv4mftujvWAk7f1f165IgEW
2d/+CbhfM8uk76n2u+bCjgUplEcPV3q3/+Sm87l/IxD0Ix/mXSrCGQZKK1Cy2PVV
6Ytbmt5emuQ90pNCB3MiP3A/tlO+HWCbnUzmadQ2VBefJQQD4/VWam6B1aECAwEA
AaOCAlIwggJOMB0GA1UdDgQWBBTKD30krrtYJSVmDuIyqqlYPIn3dTAfBgNVHSME
GDAWgBR8TiVx05U164O0vdTkZootLBd2MTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1Ud
HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5u
ZXQvcmVwb3NpdG9yeS80OTFhNDNiYy03NmVjLTRhYmUtYmE3ZC1lNzNlOTBkNjYy
Y2IvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRFNDY2OEEyRDJDMTc3NjMxLmNy
bDBvBggrBgEFBQcBAQRjMGEwXwYIKwYBBQUHMAKGU3JzeW5jOi8va3JpbGwuNDcy
NzIubmV0L3JlcG8vSFlFSE9TVC81LzdDNEUyNTcxRDM5NTM1RUI4M0I0QkRENEU0
NjY4QTJEMkMxNzc2MzEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
NDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2MmNiLzUvN0M0RTI1NzFE
Mzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAB1uEYXq
5FYNH8VvSSZy3MD73YkiE3zNBp6w9z9lYx0Voffe8MqvUga4d85sD6AT5wJQyVMz
JI3yR0CW0mSIdg6AP2xAMLIxmgkrjN1fHvvDdYfy1jP5hNkBygxc+EarZuxNdty/
Z4g/5ufjLi9Q2ANxk/v5KSliA4XqYHN2qtKxHaxxv+5dt61KDn8BbJwwIQNv9IKb
FAQKxoWgAZmekTff36/5j9fkM3LRmDEsUUFDeJOdu05GuXPoIt8fGeW0XpreTopw
d+Data5C6UxUimtSB0XXrsK97fLB2lr8E/cbUFqXWzFlhRdf2Xoz9mSzn4cAsrcl
Kvu7/lnnrVuqpA4=
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:24:05 2026 by rpki-client