This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File:                     4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier:          ayLG2U+MIHX95AP/XSSY0UjHdzPTxqQ4qRCONWwoELM=
Subject key identifier:   CC:9D:98:78:05:41:05:0A:22:3E:D6:42:8A:E4:0D:E7:7F:89:EA:77
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer:       /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial:       6E5722896514D1C7B4E9D81A95017565FDABD028
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number:          0603
Signing time:             Sun 14 Dec 2025 08:00:46 +0000
Manifest this update:     Sun 14 Dec 2025 07:55:46 +0000
Manifest next update:     Mon 15 Dec 2025 08:22:46 +0000
Files and hashes:         1: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 5FkiKEMEsvRMc75EhhhqzQGAWBAp/vUFv5o2r+QS74o=)
                          2: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: WqnPhejGIpkZ0xjXVvvod9Bjx2w1OURfMjc0Q0hE0uQ=)
                          3: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: xz8VxwUZ4pjErZQ0CYKmZgOPUPaoIRYcesJsYXhF+j0=)
                          4: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: +0GPXjQoS+N412w6ofV8eg2e5UX1asnUPxI6dYS84sA=)
                          5: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: k1L2Of8QfV2MIN/B39N63nTwZ7dvoxi+6OPXT00R6qo=)
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
                          rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Dec 2025 08:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:57:22:89:65:14:d1:c7:b4:e9:d8:1a:95:01:75:65:fd:ab:d0:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
        Validity
            Not Before: Dec 14 07:55:46 2025 GMT
            Not After : Dec 15 08:22:46 2025 GMT
        Subject: CN=CC9D98780541050A223ED6428AE40DE77F89EA77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:f7:fc:f2:eb:51:b2:b1:51:03:3d:1f:55:
                    51:bd:11:58:fc:69:b9:c1:28:9c:12:27:a9:0a:26:
                    c3:97:6e:db:a4:3c:f7:f6:06:57:d5:f3:10:b2:81:
                    83:7f:8f:e6:33:09:0a:1c:bd:c9:0b:3b:58:44:a9:
                    41:5f:60:09:29:25:0c:6e:7b:d1:94:54:41:a0:7d:
                    77:b4:79:bb:1a:bd:8b:c0:7c:a9:27:cf:56:b8:a6:
                    34:fa:a5:4d:d9:8a:da:36:06:f8:81:2c:7c:1c:43:
                    66:cd:39:39:e9:46:b1:40:65:b1:1c:ff:43:df:77:
                    79:79:3f:d7:86:0b:1f:0d:c3:f7:cc:7e:fc:0f:40:
                    33:e2:24:5b:f9:e4:4c:ac:6b:2e:79:16:9a:38:ba:
                    aa:f6:d2:87:d7:d8:5d:a0:f7:4f:df:4a:e7:a2:c0:
                    c5:11:8d:e0:b2:77:c2:a6:e9:f3:ea:52:95:c2:f2:
                    61:56:d7:27:80:e4:96:a4:b4:18:34:7b:ae:c4:d5:
                    80:9f:96:c7:a4:98:26:c9:4c:2a:48:d1:66:17:f7:
                    82:d4:73:85:ce:6b:7a:6c:5a:4f:48:96:72:52:5d:
                    c0:54:90:28:76:a5:4a:e3:6e:96:94:f4:ec:f2:e9:
                    91:4b:40:ee:ad:d0:74:cb:4f:24:a7:ff:97:2d:06:
                    3d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9D:98:78:05:41:05:0A:22:3E:D6:42:8A:E4:0D:E7:7F:89:EA:77
            X509v3 Authority Key Identifier:
                keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:84:54:25:3d:82:9e:3e:48:0e:e3:ec:7d:22:7b:f8:f0:f7:
         aa:4c:1f:44:53:45:95:1d:ae:2c:d8:9b:5e:69:92:3a:d6:8b:
         27:76:14:e0:cc:7f:fc:97:b3:bc:02:d6:4a:a5:ae:0f:2b:92:
         b2:91:2a:24:56:dd:02:76:b8:47:29:c3:ff:5f:05:f1:d0:80:
         6a:9c:4f:dc:0c:5e:84:28:b5:e0:e7:c4:29:5c:96:c3:bd:83:
         80:86:13:28:a9:4c:3a:bd:d6:a1:bd:7d:5d:77:64:c1:cd:dd:
         65:f6:eb:0e:23:c1:0b:0b:f6:11:80:31:8e:5f:4b:ec:ca:6d:
         df:e1:3a:d5:2e:80:2c:ae:64:86:af:c5:19:82:f9:3a:a8:00:
         3f:75:b7:45:81:05:33:80:3c:07:d6:8b:13:63:af:af:d5:4a:
         81:8e:ac:d7:2c:39:f4:aa:42:9d:cc:12:37:b9:23:64:75:60:
         45:e2:fe:64:d5:11:72:2d:91:67:00:2e:0e:d7:9d:ff:42:1a:
         a3:c0:3b:18:71:80:51:82:fb:a6:00:74:9f:85:76:38:6c:f9:
         76:03:f3:0c:c7:fe:e5:e1:33:25:a9:ca:42:75:cb:8d:f1:14:
         e1:9b:01:14:f4:26:be:7d:10:74:10:5f:cf:e7:18:42:a6:a5:
         f6:f5:bf:a3
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUblciiWUU0ce06dgalQF1Zf2r0CgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNGFkZDU0NjY3MjMwODQ0OTBlZjQ5MWM2MTliOGJjNjFh
MzI4YThiNjAeFw0yNTEyMTQwNzU1NDZaFw0yNTEyMTUwODIyNDZaMDMxMTAvBgNV
BAMTKENDOUQ5ODc4MDU0MTA1MEEyMjNFRDY0MjhBRTQwREU3N0Y4OUVBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnSPf88utRsrFRAz0fVVG9EVj8
abnBKJwSJ6kKJsOXbtukPPf2BlfV8xCygYN/j+YzCQocvckLO1hEqUFfYAkpJQxu
e9GUVEGgfXe0ebsavYvAfKknz1a4pjT6pU3Zito2BviBLHwcQ2bNOTnpRrFAZbEc
/0Pfd3l5P9eGCx8Nw/fMfvwPQDPiJFv55Eysay55Fpo4uqr20ofX2F2g90/fSuei
wMURjeCyd8Km6fPqUpXC8mFW1yeA5JaktBg0e67E1YCflsekmCbJTCpI0WYX94LU
c4XOa3psWk9IlnJSXcBUkCh2pUrjbpaU9Ozy6ZFLQO6t0HTLTySn/5ctBj2DAgMB
AAGjggHlMIIB4TAdBgNVHQ4EFgQUzJ2YeAVBBQoiPtZCiuQN53+J6ncwHwYDVR0j
BBgwFoAUSt1UZnIwhEkO9JHGGbi8YaMoqLYwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8va3JpbGwuNDcyNzIubmV0L3JlcG8vSFlFSE9T
VC8wLzRBREQ1NDY2NzIzMDg0NDkwRUY0OTFDNjE5QjhCQzYxQTMyOEE4QjYuY3Js
MGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9TdDFVWm5Jd2hFa085SkhHR2JpOFlhTW9x
TFkuY2VyMG8GCCsGAQUFBwELBGMwYTBfBggrBgEFBQcwC4ZTcnN5bmM6Ly9rcmls
bC40NzI3Mi5uZXQvcmVwby9IWUVIT1NULzAvNEFERDU0NjY3MjMwODQ0OTBFRjQ5
MUM2MTlCOEJDNjFBMzI4QThCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEI
AQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGSEVCU9gp4+SA7j7H0ie/jw
96pMH0RTRZUdrizYm15pkjrWiyd2FODMf/yXs7wC1kqlrg8rkrKRKiRW3QJ2uEcp
w/9fBfHQgGqcT9wMXoQoteDnxClclsO9g4CGEyipTDq91qG9fV13ZMHN3WX26w4j
wQsL9hGAMY5fS+zKbd/hOtUugCyuZIavxRmC+TqoAD91t0WBBTOAPAfWixNjr6/V
SoGOrNcsOfSqQp3MEje5I2R1YEXi/mTVEXItkWcALg7Xnf9CGqPAOxhxgFGC+6YA
dJ+Fdjhs+XYD8wzH/uXhMyWpykJ1y43xFOGbART0Jr59EHQQX8/nGEKmpfb1v6M=
-----END CERTIFICATE-----
Generated at Sun Dec 14 16:59:11 2025 by rpki-client