This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json)
Hash identifier: aO/lA9gXHY2ADFr4y+ciioDvEtKlO4tYsnD5MlXiqRc=
Subject key identifier: F6:01:09:24:B3:8D:AD:43:59:13:46:77:8E:41:85:68:29:5A:66:0C
Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E
Certificate serial: 1C84B6082AEC5B0D69E3EAA1463742CB7CD97439
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
Manifest number: D2
Signing time: Sat 06 Dec 2025 15:09:34 +0000
Manifest this update: Sat 06 Dec 2025 15:04:34 +0000
Manifest next update: Sun 07 Dec 2025 15:19:34 +0000
Files and hashes: 1: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=)
2: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: LO41bXCmQ5aEGBuJCUmJrgqmJUWViOp1hlMjaniUodA=)
3: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=)
4: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:84:b6:08:2a:ec:5b:0d:69:e3:ea:a1:46:37:42:cb:7c:d9:74:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E
Validity
Not Before: Dec 6 15:04:34 2025 GMT
Not After : Dec 7 15:19:34 2025 GMT
Subject: CN=F6010924B38DAD43591346778E418568295A660C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:9c:a0:bd:a0:7d:db:63:a7:1b:82:07:c4:
65:4e:b8:05:f2:24:2c:92:48:2a:c3:49:08:79:62:
9a:f1:6b:8e:61:5b:4e:08:e6:70:78:9c:fa:fe:c0:
65:1a:73:a5:f7:d4:f6:1f:3b:5f:ed:4d:26:a7:fd:
d8:4d:fe:09:1d:3b:a0:f4:46:73:64:09:32:ba:65:
d4:db:f7:53:88:d2:28:e6:99:73:99:76:e9:20:05:
f4:6f:a6:b3:a4:86:68:6e:0d:34:36:7d:1f:3f:62:
44:17:fe:cd:5a:01:03:83:db:d9:c9:04:50:81:d1:
8a:c8:fd:ec:95:96:d4:9f:4b:31:1f:fd:ee:53:89:
6f:c8:25:69:4f:bf:0b:89:f1:7b:ef:fd:6a:f1:58:
5d:e7:83:89:cb:03:15:01:42:ae:95:09:ee:4b:85:
0a:e0:fa:c5:b4:f5:88:e1:4a:31:fa:ca:99:81:65:
ec:7f:8b:b8:a0:bb:c2:e2:fc:54:c4:b4:2c:c6:4c:
9b:71:0b:6e:5f:88:72:06:b0:79:a0:dd:57:3a:95:
22:18:5a:ff:fe:59:57:85:7b:23:17:74:b6:54:64:
2c:a9:8a:02:bf:a4:b8:90:11:51:06:72:42:24:43:
18:78:4e:a9:0e:bf:d6:6e:4d:d2:d2:6b:05:12:46:
82:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:01:09:24:B3:8D:AD:43:59:13:46:77:8E:41:85:68:29:5A:66:0C
X509v3 Authority Key Identifier:
keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:68:fd:9c:6d:7f:85:22:75:e7:d1:5b:65:07:7a:42:f4:be:
33:06:bc:2c:c4:79:e2:9e:69:c6:f1:79:b9:74:fd:1c:67:9e:
74:77:af:93:04:20:1b:16:9c:c5:27:83:6f:aa:2b:2b:92:3f:
15:33:0d:9b:d9:65:3e:5b:68:a0:bb:31:42:71:7b:2c:f1:61:
9e:08:79:ae:c7:93:86:d5:dc:20:eb:2d:77:be:88:34:64:2e:
fa:20:73:75:fd:d5:b8:86:15:6b:fe:b5:5e:4e:54:13:0b:c1:
80:d5:46:39:68:43:98:0a:df:67:0e:40:14:ce:e4:f9:5f:78:
66:2d:2a:be:ab:7b:a9:de:1e:94:e1:f3:c7:96:ba:e6:ad:44:
b2:85:b7:27:f3:69:fa:81:6e:76:de:d8:cc:91:49:00:63:f1:
0f:50:b4:8f:5d:c6:5d:dc:d4:3e:6e:d8:02:43:d3:97:32:d2:
a8:38:35:a1:70:bb:76:00:23:fd:4c:d5:0c:6c:96:c5:bb:17:
f9:99:00:54:12:ce:e4:77:cc:49:e4:19:ae:06:c7:76:f3:d3:
50:aa:8d:31:a2:65:7c:5a:23:14:e3:64:0e:9f:78:8a:a8:ca:
78:2b:4a:04:86:8c:80:c9:46:e4:cf:88:9c:bf:84:1f:d4:de:
b9:ce:9e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:38:48 2025 by rpki-client