This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: Xl+l2h84tXVIbaUSHCl1rbFARcg2ngvpT4OlSmaO7xo= Subject key identifier: 27:29:43:06:44:1F:34:09:11:F9:3E:46:0E:8F:9B:C3:61:77:3F:55 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 3838FC99136BC1C255DBE0F8DBEB9253538A4FF8 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: D9 Signing time: Mon 08 Dec 2025 03:50:31 +0000 Manifest this update: Mon 08 Dec 2025 03:45:31 +0000 Manifest next update: Tue 09 Dec 2025 04:39:31 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: LorOCA1G1lpFCFkNFFoZuxPIO1SHKeydcvqxhZbDbXU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:38:fc:99:13:6b:c1:c2:55:db:e0:f8:db:eb:92:53:53:8a:4f:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Dec 8 03:45:31 2025 GMT Not After : Dec 9 04:39:31 2025 GMT Subject: CN=27294306441F340911F93E460E8F9BC361773F55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f7:b1:79:dc:ae:8d:be:02:0d:38:00:a0:29: 39:fd:98:61:47:7a:68:a9:81:b1:a8:39:bf:7e:e9: e5:ab:88:97:58:0a:c9:0f:98:1b:ec:df:87:0b:d0: 23:c1:e5:17:25:78:0a:b1:62:fe:0c:ce:21:88:ec: 4f:07:ff:cf:8e:1e:23:f9:1f:44:46:3c:9f:6f:3b: f0:5d:41:18:d6:87:6a:6a:8b:ec:e1:c6:e8:a4:ab: cc:0c:b3:6e:4a:c0:56:d1:5d:71:01:b0:b0:cc:d6: 69:38:cf:41:b6:00:18:7e:a0:87:e1:84:bb:25:d5: 64:3b:d7:ac:b1:cd:0e:8a:5f:86:fa:05:e4:16:15: cc:19:8a:37:70:0b:32:9c:3c:cb:d3:cb:5f:80:15: 4c:ad:3f:7e:69:34:37:1a:a7:37:00:03:36:8f:c0: d4:7c:eb:12:b9:af:6b:ed:b7:b4:fe:6b:1b:b1:32: 5c:5c:08:68:26:67:42:83:58:03:02:8c:82:11:d2: 39:90:24:33:aa:33:bc:ba:cf:7c:c6:38:93:d7:1e: 33:5a:90:67:1c:8c:3e:67:d7:fa:a3:6e:9d:07:15: fa:fc:32:4f:43:53:16:05:f2:c8:96:a6:9c:d1:55: be:a3:a3:d3:cf:80:08:7d:5a:9a:61:ad:55:f4:30: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:29:43:06:44:1F:34:09:11:F9:3E:46:0E:8F:9B:C3:61:77:3F:55 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0f:b2:87:f4:fb:88:43:15:24:5f:8c:d6:3c:56:2f:6b:b7: c2:d0:61:c3:4d:43:f9:77:16:34:b6:13:72:ef:6a:3f:f7:d3: bb:ec:ef:dd:8c:5a:55:db:af:ac:14:1d:32:a3:a9:54:6d:36: c5:32:9b:0d:3d:37:d7:71:db:cc:47:20:6e:ce:65:a7:ff:31: 9a:d4:bf:6f:6c:f2:81:38:ba:b7:73:52:9b:ef:69:60:2c:3b: a5:e5:81:c1:50:98:54:f3:00:26:cb:62:ae:c8:8a:ec:4d:5c: 49:f6:b0:6d:f5:4c:a3:03:ee:d6:67:9f:c1:c8:b1:2f:47:b7: da:ab:f4:b9:7c:49:12:73:bc:06:e9:81:58:12:2f:84:3b:0f: d4:48:85:7c:a3:84:81:20:16:80:e0:e4:f2:15:14:2a:65:2f: 94:e2:4e:60:e7:0c:ed:3e:7d:eb:1e:61:47:62:04:f1:37:93: 8b:34:b1:8f:71:8f:2f:dc:7b:7b:6a:a1:7e:e4:f7:4d:78:b5: 26:01:ca:dd:a8:dc:e2:c9:ea:de:9c:e4:59:48:3e:22:7e:83: 20:d5:19:a3:ac:fe:3e:06:1e:98:17:84:c2:32:f8:31:4f:21: f5:79:d3:fd:00:0f:a1:f1:1b:70:61:02:30:16:ef:2d:fd:fd: 2c:57:e7:79 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUODj8mRNrwcJV2+D42+uSU1OKT/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNTEyMDgwMzQ1MzFaFw0yNTEyMDkwNDM5MzFaMDMxMTAvBgNV BAMTKDI3Mjk0MzA2NDQxRjM0MDkxMUY5M0U0NjBFOEY5QkMzNjE3NzNGNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw97F53K6NvgINOACgKTn9mGFH emipgbGoOb9+6eWriJdYCskPmBvs34cL0CPB5RcleAqxYv4MziGI7E8H/8+OHiP5 H0RGPJ9vO/BdQRjWh2pqi+zhxuikq8wMs25KwFbRXXEBsLDM1mk4z0G2ABh+oIfh hLsl1WQ716yxzQ6KX4b6BeQWFcwZijdwCzKcPMvTy1+AFUytP35pNDcapzcAAzaP wNR86xK5r2vtt7T+axuxMlxcCGgmZ0KDWAMCjIIR0jmQJDOqM7y6z3zGOJPXHjNa kGccjD5n1/qjbp0HFfr8Mk9DUxYF8siWppzRVb6jo9PPgAh9WpphrVX0MFUXAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUJylDBkQfNAkR+T5GDo+bw2F3P1UwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiD7KH 9PuIQxUkX4zWPFYva7fC0GHDTUP5dxY0thNy72o/99O77O/djFpV26+sFB0yo6lU bTbFMpsNPTfXcdvMRyBuzmWn/zGa1L9vbPKBOLq3c1Kb72lgLDul5YHBUJhU8wAm y2KuyIrsTVxJ9rBt9UyjA+7WZ5/ByLEvR7faq/S5fEkSc7wG6YFYEi+EOw/USIV8 o4SBIBaA4OTyFRQqZS+U4k5g5wztPn3rHmFHYgTxN5OLNLGPcY8v3Ht7aqF+5PdN eLUmAcrdqNziyerenORZSD4ifoMg1RmjrP4+Bh6YF4TCMvgxTyH1edP9AA+h8Rtw YQIwFu8t/f0sV+d5 -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:52 2025 by rpki-client