This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: iOyr7OsBK5SSeNwJe6dLHsgwbm4AV/bO90Ju81P6XhE= Subject key identifier: D1:8A:D0:92:94:E9:C5:4B:88:C5:4F:F3:E0:63:20:3F:1C:7E:8B:25 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 63B1FC4DD66B62A961631431462C8801FF68BA41 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 011B Signing time: Sun 25 Jan 2026 11:15:53 +0000 Manifest this update: Sun 25 Jan 2026 11:10:53 +0000 Manifest next update: Mon 26 Jan 2026 13:41:53 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: H+Rptuf+YFn2Y1rycGHFGmjXWGg2qgEzGpybriY/oqM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b1:fc:4d:d6:6b:62:a9:61:63:14:31:46:2c:88:01:ff:68:ba:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Jan 25 11:10:53 2026 GMT Not After : Jan 26 13:41:53 2026 GMT Subject: CN=D18AD09294E9C54B88C54FF3E063203F1C7E8B25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:9a:bd:9c:0e:e0:e5:77:64:11:ce:f8:db: ad:2a:2d:15:b3:96:02:78:88:16:3e:a2:ae:79:0e: 2e:5b:a5:e1:1f:de:6b:84:21:3b:f2:b3:62:07:6c: 93:d1:93:6d:13:00:86:55:82:7b:fe:b8:a4:86:90: 0a:95:01:5b:de:99:c9:ce:34:65:ca:11:78:7c:4e: e4:0f:b2:c3:8f:40:b6:7a:7a:b4:15:8f:b2:79:3a: 06:af:c3:5d:bc:9b:44:82:a7:b3:ff:33:3f:63:ee: bb:26:6f:d2:02:8d:b7:70:45:cd:d5:00:7a:d9:21: 79:7e:9e:2d:df:d4:73:1e:bb:18:1f:03:6d:b7:c5: 32:40:39:eb:5a:ab:bd:fd:56:83:29:78:6a:ed:57: 47:79:89:17:7b:3d:3c:57:81:b6:c1:36:62:4f:1e: 8c:ae:a8:04:94:3a:d9:83:f9:84:a1:f1:97:1a:dc: cf:e0:ae:37:2b:cb:40:ea:34:1d:08:80:06:c3:6a: 63:2c:3f:c4:1e:f2:e8:03:57:12:1f:ef:72:08:a4: a3:72:09:d3:9c:17:cc:9a:ba:b2:39:50:8d:ba:18: 39:1a:c5:5f:ca:9f:b4:1f:8e:73:39:44:5e:1f:a1: 5a:e6:65:09:a0:dd:86:81:ae:1c:76:8b:92:4a:0f: e8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8A:D0:92:94:E9:C5:4B:88:C5:4F:F3:E0:63:20:3F:1C:7E:8B:25 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:37:68:bb:31:94:ed:3b:d2:cc:31:13:f3:6a:b5:45:ea:70: 68:db:34:6a:7c:4f:7d:96:ef:8c:af:51:f8:eb:36:58:4e:17: 79:e5:c2:58:ef:5a:7e:2a:84:3c:6d:db:1c:9a:24:a0:e6:a5: 2b:74:d4:cf:04:65:74:e6:ba:e6:a1:98:57:a6:d1:f4:0a:25: ab:4a:8b:e7:9e:46:0f:fd:a7:8f:8a:9e:de:67:96:e8:70:5a: 91:76:c6:d5:a8:5a:cf:a3:c8:87:dd:ea:dc:31:1c:f4:df:04: 1a:06:be:b2:95:7a:1d:b9:bc:8a:2f:36:50:87:f6:c6:8c:98: 28:55:15:ac:d4:98:cb:8a:b5:c6:50:44:97:f3:87:e2:05:ed: 04:13:60:11:10:04:24:8c:15:7c:80:d1:00:8c:d6:85:6b:8d: 2c:cb:15:39:4f:61:64:c6:f1:5f:1f:b7:aa:be:8b:9c:5b:6b: 1d:c0:4f:40:c0:3f:85:e8:fb:16:e5:57:90:d0:f8:44:6f:27: 70:d2:59:f4:9e:7f:39:73:be:47:5a:bc:28:91:71:8a:ed:ae: b9:af:79:66:9e:14:6c:ee:c3:cb:b8:2d:84:0e:0e:f0:7c:c4: 3e:77:a9:ad:65:f6:03:5b:fc:bc:dc:c1:7f:27:ca:eb:b4:4c: b6:72:d1:07 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUY7H8TdZrYqlhYxQxRiyIAf9oukEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNjAxMjUxMTEwNTNaFw0yNjAxMjYxMzQxNTNaMDMxMTAvBgNV BAMTKEQxOEFEMDkyOTRFOUM1NEI4OEM1NEZGM0UwNjMyMDNGMUM3RThCMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHJq9nA7g5XdkEc74260qLRWz lgJ4iBY+oq55Di5bpeEf3muEITvys2IHbJPRk20TAIZVgnv+uKSGkAqVAVvemcnO NGXKEXh8TuQPssOPQLZ6erQVj7J5Ogavw128m0SCp7P/Mz9j7rsmb9ICjbdwRc3V AHrZIXl+ni3f1HMeuxgfA223xTJAOetaq739VoMpeGrtV0d5iRd7PTxXgbbBNmJP HoyuqASUOtmD+YSh8Zca3M/grjcry0DqNB0IgAbDamMsP8Qe8ugDVxIf73IIpKNy CdOcF8yaurI5UI26GDkaxV/Kn7QfjnM5RF4foVrmZQmg3YaBrhx2i5JKD+gJAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU0YrQkpTpxUuIxU/z4GMgPxx+iyUwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDBN2i7 MZTtO9LMMRPzarVF6nBo2zRqfE99lu+Mr1H46zZYThd55cJY71p+KoQ8bdscmiSg 5qUrdNTPBGV05rrmoZhXptH0CiWrSovnnkYP/aePip7eZ5bocFqRdsbVqFrPo8iH 3ercMRz03wQaBr6ylXodubyKLzZQh/bGjJgoVRWs1JjLirXGUESX84fiBe0EE2AR EAQkjBV8gNEAjNaFa40syxU5T2FkxvFfH7eqvoucW2sdwE9AwD+F6PsW5VeQ0PhE bydw0ln0nn85c75HWrwokXGK7a65r3lmnhRs7sPLuC2EDg7wfMQ+d6mtZfYDW/y8 3MF/J8rrtEy2ctEH -----END CERTIFICATE-----Generated at Mon Jan 26 06:37:46 2026 by rpki-client