This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft
File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json)
Hash identifier: +b6QFAqC51yyG7qd626V1zjA3pJvZfoj2vcPCYRTiYI=
Subject key identifier: FA:F8:9A:2A:F7:78:90:02:E3:37:79:AC:C7:68:4B:D3:BC:06:BB:C6
Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2
Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2
Certificate serial: 10F62842DA8A2039CB9C8AB528226BD8EC536068
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft
Manifest number: FC
Signing time: Sun 25 Jan 2026 03:44:37 +0000
Manifest this update: Sun 25 Jan 2026 03:39:37 +0000
Manifest next update: Mon 26 Jan 2026 05:53:37 +0000
Files and hashes: 1: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: os+6SypC61mTrdWacoGfR4kH51wx6USqYzK0BZYiBJk=)
2: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=)
3: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=)
4: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl
rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft
rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f6:28:42:da:8a:20:39:cb:9c:8a:b5:28:22:6b:d8:ec:53:60:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2
Validity
Not Before: Jan 25 03:39:37 2026 GMT
Not After : Jan 26 05:53:37 2026 GMT
Subject: CN=FAF89A2AF7789002E33779ACC7684BD3BC06BBC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:58:7a:30:aa:f1:92:f7:45:64:82:55:d9:
9a:0b:74:40:df:75:03:51:ae:c8:f5:3e:01:1b:4e:
4a:8f:b8:4e:11:46:ed:a0:75:c3:7c:f2:d1:74:39:
05:94:14:05:80:ed:4e:cf:68:3b:32:41:52:1f:e6:
09:ec:bd:48:fd:ef:c7:e5:68:4b:52:85:3e:2e:25:
e3:a2:59:7c:d0:1c:f9:a4:9f:b5:53:9d:dd:69:6c:
db:d2:69:c7:c3:78:bd:61:96:f9:80:a6:10:7f:2a:
1c:25:65:4b:5a:87:e7:ec:c4:9e:74:44:2e:af:1f:
67:14:a1:72:0c:7f:fe:82:59:c6:a5:a1:73:01:1c:
50:82:9e:33:59:f3:04:b9:eb:f4:b6:91:40:7c:60:
f3:79:a0:cd:db:5f:d9:40:9a:f7:66:66:26:37:52:
28:43:52:79:89:11:21:f4:50:8f:d8:e3:8e:7e:b7:
35:2e:14:19:1a:72:f7:bb:a1:29:59:68:a8:33:5b:
36:d3:06:cb:43:48:00:56:ca:35:72:3e:da:ba:24:
36:44:43:23:a6:e6:09:f3:be:77:27:c6:ac:c0:42:
5c:8c:2a:0a:e2:69:a2:a8:9e:21:ac:86:b5:52:b3:
6a:7b:cc:ea:0d:3d:dc:41:2c:c6:84:cd:74:c4:77:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:9A:2A:F7:78:90:02:E3:37:79:AC:C7:68:4B:D3:BC:06:BB:C6
X509v3 Authority Key Identifier:
keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ff:18:ff:35:07:5d:2c:fa:66:bc:92:87:b1:8a:f1:1d:c5:
f0:f6:72:0e:a7:a7:6d:3a:a8:ad:a0:d2:bf:73:a6:9e:7a:db:
2c:a8:f1:32:2e:05:2b:15:0d:5f:24:e3:7e:38:fc:65:59:28:
34:2b:a8:19:b4:3a:aa:e3:aa:f3:da:59:07:86:b4:e6:74:4b:
37:40:b9:6c:9d:05:25:7f:68:61:cd:1a:10:67:62:06:9e:10:
77:1d:11:58:2c:8c:7c:52:96:2e:9e:ba:58:20:49:ad:bd:88:
d6:c7:de:c3:e3:56:8b:d1:be:86:d1:c1:d2:dc:dc:d5:4d:52:
98:df:c1:dc:37:c3:da:9e:6e:09:09:ec:85:d4:0a:09:5c:24:
01:3c:11:4e:33:36:13:e3:b7:ac:06:1c:9c:9e:57:97:a7:98:
58:34:7a:03:55:c1:1c:7c:b1:08:6a:a8:f2:13:b0:fd:c6:2f:
b0:33:8e:41:82:3d:20:ba:2f:5c:4b:39:99:df:ef:d7:36:bf:
15:5d:d3:cd:6d:a5:9b:6e:9b:c9:a4:65:58:9a:39:e7:2d:a4:
43:7c:d7:21:f6:70:b9:57:2d:cb:2d:81:34:81:2c:84:fa:04:
6a:0d:e0:e4:5b:61:ba:50:56:2e:ac:fe:c7:71:0f:92:16:3d:
82:77:b7:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:54:03 2026 by rpki-client