This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json) Hash identifier: W414S36cde8Tn3lgqKMhqCK3HMWukFV83vUsBbelj74= Subject key identifier: 4B:A2:F1:8A:23:5C:FE:D4:3C:3D:B3:EE:81:18:06:38:87:6D:1E:7D Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 35B101280DC23DB632264B374DD4B4C768FAC3EC Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft Manifest number: 8D Signing time: Sat 06 Dec 2025 04:07:54 +0000 Manifest this update: Sat 06 Dec 2025 04:02:54 +0000 Manifest next update: Sun 07 Dec 2025 07:12:54 +0000 Files and hashes: 1: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: DcSRF8OWzjXObrZeTHl7cP+xVIzWKFjO4fipRgKpcZk=) 2: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=) 3: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=) 4: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=) 5: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=) 6: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b1:01:28:0d:c2:3d:b6:32:26:4b:37:4d:d4:b4:c7:68:fa:c3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Dec 6 04:02:54 2025 GMT Not After : Dec 7 07:12:54 2025 GMT Subject: CN=4BA2F18A235CFED43C3DB3EE81180638876D1E7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:83:97:0d:c4:f7:fc:52:a8:6d:fe:c7:12:97: 95:8d:c6:a1:83:6d:16:34:23:c6:8b:52:5a:0e:e7: 1f:bb:41:08:fc:cb:ca:c0:87:80:65:b0:58:3c:b9: f6:a0:11:bd:15:e8:c3:4d:21:f0:c7:e0:8c:62:69: 42:6a:8e:b9:68:80:bb:df:71:5c:ad:48:68:23:27: 52:57:34:ac:fe:0d:a4:ee:ec:ae:f6:b6:a1:a3:bf: 6d:7e:d6:30:70:8e:ae:2c:09:f3:63:c3:c5:d7:64: 9d:a0:5c:39:f0:ee:29:c7:96:b9:f4:b2:06:1b:8d: 0e:b6:1e:57:14:94:71:6e:53:4b:6e:ff:87:1b:3b: c3:45:d8:de:93:b7:b7:be:4d:0a:06:da:c1:3f:d2: 2c:2a:81:a6:66:19:36:c1:0f:c3:8c:13:76:39:aa: 45:4a:e7:07:ee:c5:95:9c:cb:b7:98:af:51:02:a4: 8b:1d:02:40:92:97:03:b3:0b:95:0d:09:67:00:9f: be:73:92:34:54:a5:93:45:19:23:5a:bc:0a:43:d3: ce:1f:c9:9e:dd:b7:69:01:15:28:f6:b8:5d:e1:98: 9f:d0:ed:7f:e1:df:8f:c2:ab:71:89:36:14:6a:e9: e6:de:0c:95:e2:7e:52:d3:9f:d5:78:b4:32:64:14: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A2:F1:8A:23:5C:FE:D4:3C:3D:B3:EE:81:18:06:38:87:6D:1E:7D X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a4:d7:e7:10:70:12:15:43:43:d9:d6:88:0b:7f:cd:73:98: bb:96:93:03:c9:49:e7:99:c4:9d:f4:b7:6f:07:c4:63:11:23: a1:a5:d3:23:48:2d:ea:43:e4:81:32:c4:1a:5a:45:cb:42:37: f9:0c:d5:10:1e:5b:ab:95:55:0e:be:ff:f7:2c:44:20:9c:38: 30:b6:29:85:5f:91:33:89:52:eb:9a:fd:83:a7:a9:6d:35:79: 2f:fe:05:d2:99:c1:38:1d:db:98:c4:28:68:d8:9c:ac:fc:38: e9:d4:3e:24:68:2b:40:ee:a8:5b:df:a8:4c:a7:98:a9:70:de: 63:20:70:b6:61:f7:44:56:b7:ad:2a:7d:f3:a5:84:62:27:fd: 41:51:c2:a1:af:aa:c4:bd:45:d6:dd:63:fa:b6:bf:61:bf:4f: 09:ff:e6:e7:cd:87:66:b6:72:49:a5:b6:9b:36:e2:cd:24:d6: fc:e6:ba:b1:20:51:f6:df:c4:f1:19:71:c1:25:7f:ae:3f:74: ab:4e:ec:80:6f:e2:df:b8:c3:f7:7e:c7:69:80:62:95:2d:30: d0:20:fd:d2:1a:b4:60:27:d5:0c:9f:50:50:31:de:21:2c:4e: 5c:42:ba:fd:ec:75:2e:93:83:e4:f0:4d:54:ed:b0:3a:63:ce: a1:c4:83:27 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUNbEBKA3CPbYyJks3TdS0x2j6w+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTEyMDYwNDAyNTRaFw0yNTEyMDcwNzEyNTRaMDMxMTAvBgNV BAMTKDRCQTJGMThBMjM1Q0ZFRDQzQzNEQjNFRTgxMTgwNjM4ODc2RDFFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpg5cNxPf8Uqht/scSl5WNxqGD bRY0I8aLUloO5x+7QQj8y8rAh4BlsFg8ufagEb0V6MNNIfDH4IxiaUJqjrlogLvf cVytSGgjJ1JXNKz+DaTu7K72tqGjv21+1jBwjq4sCfNjw8XXZJ2gXDnw7inHlrn0 sgYbjQ62HlcUlHFuU0tu/4cbO8NF2N6Tt7e+TQoG2sE/0iwqgaZmGTbBD8OME3Y5 qkVK5wfuxZWcy7eYr1ECpIsdAkCSlwOzC5UNCWcAn75zkjRUpZNFGSNavApD084f yZ7dt2kBFSj2uF3hmJ/Q7X/h34/Cq3GJNhRq6ebeDJXiflLTn9V4tDJkFP7/AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUS6LxiiNc/tQ8PbPugRgGOIdtHn0wHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAxpNfn EHASFUND2daIC3/Nc5i7lpMDyUnnmcSd9LdvB8RjESOhpdMjSC3qQ+SBMsQaWkXL Qjf5DNUQHlurlVUOvv/3LEQgnDgwtimFX5EziVLrmv2Dp6ltNXkv/gXSmcE4HduY xCho2Jys/Djp1D4kaCtA7qhb36hMp5ipcN5jIHC2YfdEVretKn3zpYRiJ/1BUcKh r6rEvUXW3WP6tr9hv08J/+bnzYdmtnJJpbabNuLNJNb85rqxIFH238TxGXHBJX+u P3SrTuyAb+LfuMP3fsdpgGKVLTDQIP3SGrRgJ9UMn1BQMd4hLE5cQrr97HUuk4Pk 8E1U7bA6Y86hxIMn -----END CERTIFICATE-----Generated at Sat Dec 6 19:31:39 2025 by rpki-client