This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json) Hash identifier: zjFpAiwiOTpg5sDlUvyCmlnfnb5g0X5Ykqd5SCD791o= Subject key identifier: B5:50:3C:93:CC:4F:00:AD:05:F3:5E:3B:FB:CB:14:81:7A:CB:54:F8 Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 790B03047703C0BEE29CE57CE4EC9CEA0E0C6EC3 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft Manifest number: B9 Signing time: Fri 05 Dec 2025 20:18:53 +0000 Manifest this update: Fri 05 Dec 2025 20:13:53 +0000 Manifest next update: Sat 06 Dec 2025 20:29:53 +0000 Files and hashes: 1: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: fnhlNHoz0D1IgMTBDMHXwjCIWoKVflnjI/dpbox6J1Q=) 2: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=) 3: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=) 4: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:0b:03:04:77:03:c0:be:e2:9c:e5:7c:e4:ec:9c:ea:0e:0c:6e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Dec 5 20:13:53 2025 GMT Not After : Dec 6 20:29:53 2025 GMT Subject: CN=B5503C93CC4F00AD05F35E3BFBCB14817ACB54F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:d7:b7:d9:7c:e1:ba:d9:68:f2:ba:f8:d9: 2b:39:23:e6:b8:1e:10:b9:36:e0:85:4c:a6:3f:0d: f5:6b:0b:cf:d3:90:6d:33:13:eb:49:8f:4d:14:92: e4:c4:23:d6:24:eb:84:bc:ef:d1:d9:45:ab:6b:a4: d5:a1:b5:88:c7:45:63:f5:67:6c:8c:be:32:d1:c1: fd:b9:dd:f8:5e:a8:a5:96:61:a9:03:70:b9:53:1d: 46:7f:d6:b0:66:f7:0b:d7:fa:35:27:3c:ae:90:d2: 72:d7:ef:56:40:90:7d:ed:d5:53:d7:68:79:75:c3: 45:bb:c4:94:16:2a:61:35:f1:6f:80:d1:9a:5a:1c: 69:28:cd:73:f5:d5:c2:53:2d:c1:5d:cc:82:c2:1f: e5:76:fa:fd:d8:63:d3:01:50:ef:a3:4e:cc:fc:f3: 1a:7c:9c:8d:7b:ea:05:d0:cc:9e:e1:74:73:f8:88: e9:ea:5e:ca:f8:31:26:ab:3c:54:e7:a7:72:46:05: 54:c7:ea:eb:07:0c:98:e5:1e:26:bd:d1:43:0f:de: d4:0b:6b:9d:71:79:e6:b4:d9:6b:0b:5b:20:dc:79: 9a:56:b8:6e:6c:65:99:5e:fd:37:23:ed:70:8f:cb: 75:21:76:70:ee:40:2f:00:d2:33:d9:63:fe:22:4f: 02:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:50:3C:93:CC:4F:00:AD:05:F3:5E:3B:FB:CB:14:81:7A:CB:54:F8 X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:24:75:d2:d3:22:21:5b:1b:f6:1c:4c:3b:0c:ce:22:1b:5f: 14:79:3c:fb:2b:68:3b:a4:51:88:4f:48:ec:ee:b2:20:af:bd: b3:61:bd:04:b6:f4:9a:fe:71:68:0f:0d:db:18:99:9b:2b:45: 34:e2:d8:84:4c:1d:90:80:ce:e6:81:d8:9e:f6:b8:5d:45:f1: 51:f9:3d:f1:6b:3b:44:07:d1:41:76:82:7a:53:00:3b:da:53: bc:33:8a:4d:e7:fa:b0:07:04:a8:02:e6:13:56:84:e7:f2:28: 4c:65:00:40:2f:47:e8:1d:69:e8:66:fc:b1:2b:bf:4d:9b:6e: 88:a1:94:c9:97:72:cd:00:4a:3e:a1:46:d7:af:02:cc:69:5c: 11:e4:77:08:ef:2b:47:22:9c:e0:ba:e2:50:0b:c1:47:ed:e9: 89:70:45:bc:b7:84:0b:56:f2:ea:ec:ab:d9:d9:50:66:bc:80: 2a:33:f1:f2:00:b2:f0:d2:01:a8:86:41:a8:b2:df:40:39:fd: 21:a0:56:18:68:85:4c:53:c2:7a:12:d1:e6:41:0a:36:45:86: e1:6f:ea:8b:0d:96:1c:02:79:f1:b0:ca:af:68:a7:47:39:ab: 18:19:54:4b:9d:f6:c9:46:73:9a:ae:ba:78:a2:a9:e1:fe:9f: 28:32:49:32 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUeQsDBHcDwL7inOV85Oyc6g4MbsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNTEyMDUyMDEzNTNaFw0yNTEyMDYyMDI5NTNaMDMxMTAvBgNV BAMTKEI1NTAzQzkzQ0M0RjAwQUQwNUYzNUUzQkZCQ0IxNDgxN0FDQjU0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9Ne32Xzhutlo8rr42Ss5I+a4 HhC5NuCFTKY/DfVrC8/TkG0zE+tJj00UkuTEI9Yk64S879HZRatrpNWhtYjHRWP1 Z2yMvjLRwf253fheqKWWYakDcLlTHUZ/1rBm9wvX+jUnPK6Q0nLX71ZAkH3t1VPX aHl1w0W7xJQWKmE18W+A0ZpaHGkozXP11cJTLcFdzILCH+V2+v3YY9MBUO+jTsz8 8xp8nI176gXQzJ7hdHP4iOnqXsr4MSarPFTnp3JGBVTH6usHDJjlHia90UMP3tQL a51xeea02WsLWyDceZpWuG5sZZle/Tcj7XCPy3UhdnDuQC8A0jPZY/4iTwLVAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUtVA8k8xPAK0F8147+8sUgXrLVPgwHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yL0IzRjBENzcz RENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHJHXS 0yIhWxv2HEw7DM4iG18UeTz7K2g7pFGIT0js7rIgr72zYb0EtvSa/nFoDw3bGJmb K0U04tiETB2QgM7mgdie9rhdRfFR+T3xaztEB9FBdoJ6UwA72lO8M4pN5/qwBwSo AuYTVoTn8ihMZQBAL0foHWnoZvyxK79Nm26IoZTJl3LNAEo+oUbXrwLMaVwR5HcI 7ytHIpzguuJQC8FH7emJcEW8t4QLVvLq7KvZ2VBmvIAqM/HyALLw0gGohkGost9A Of0hoFYYaIVMU8J6EtHmQQo2RYbhb+qLDZYcAnnxsMqvaKdHOasYGVRLnfbJRnOa rrp4oqnh/p8oMkky -----END CERTIFICATE-----Generated at Sat Dec 6 06:38:41 2025 by rpki-client