This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
File:                     80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft (raw, json)
Hash identifier:          8vZkHB72KncZmdSi7NjL71TRVDrnNH6KXK6Ddz+hSz4=
Subject key identifier:   20:35:6E:1B:83:FF:12:29:E4:38:87:E8:F2:5F:3C:07:E4:05:07:55
Authority key identifier: 80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1
Certificate issuer:       /CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
Certificate serial:       0AE6252576C0E7B65A2DE5BF2E08442928323E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
Subject info access:      rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
Manifest number:          057A
Signing time:             Sat 13 Dec 2025 03:09:18 +0000
Manifest this update:     Sat 13 Dec 2025 03:04:18 +0000
Manifest next update:     Sun 14 Dec 2025 04:24:18 +0000
Files and hashes:         1: AS212934.asa (hash: 53XShpJ+NB5sf3EXMo5SBl7pYHowfGvfOlp+2zWjCfE=)
                          2: 80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl (hash: QBdLQNegP2ANAxqsWc4eYTZ8wSQXOdrqbUVnLD8kPmc=)
Validation:               OK
Signature path:           rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Dec 2025 00:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e6:25:25:76:c0:e7:b6:5a:2d:e5:bf:2e:08:44:29:28:32:3e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e44f09ff201cb2bc67b16d490f7a6d10cd9df1
        Validity
            Not Before: Dec 13 03:04:18 2025 GMT
            Not After : Dec 14 04:24:18 2025 GMT
        Subject: CN=20356E1B83FF1229E43887E8F25F3C07E4050755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:11:68:8e:08:67:15:9a:a0:a8:17:99:d8:63:
                    af:10:28:9a:ae:08:f3:d7:90:54:8f:3c:a9:2b:9b:
                    34:e7:1d:0a:81:b9:f5:56:5e:bd:b1:24:d0:6a:de:
                    d8:12:95:5a:d0:78:49:9f:7e:81:33:06:7c:05:19:
                    d0:ac:73:3e:16:e6:62:94:d3:de:e6:d8:4f:48:0e:
                    3b:eb:b3:27:aa:c8:ef:33:cc:fa:6f:c0:8d:b5:ef:
                    17:a4:e3:d3:08:03:28:73:b8:ff:5b:71:55:0b:1f:
                    37:00:ae:31:2d:5e:dd:81:b4:f8:3e:00:c7:87:29:
                    85:19:15:da:c9:80:1a:62:db:cd:aa:d6:99:25:46:
                    a4:cc:39:f5:d8:cd:fe:f2:ec:dd:f3:a1:8f:0e:5d:
                    93:7b:ec:45:ad:44:c8:e8:53:8c:2a:64:01:4a:6a:
                    6a:a0:ce:04:70:aa:7e:71:01:3e:69:eb:31:d8:02:
                    18:b3:6e:e0:99:88:db:d5:43:21:14:a0:86:e2:f3:
                    3c:24:26:ec:4e:32:09:10:78:f3:d5:ad:4f:e1:89:
                    52:92:78:6a:e8:9f:44:d3:c5:f3:3e:24:b2:3f:e8:
                    18:f9:82:11:25:ec:77:70:62:5a:fb:af:30:06:60:
                    31:ea:9a:9c:69:28:55:61:f3:fc:64:b8:c0:bb:7b:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:35:6E:1B:83:FF:12:29:E4:38:87:E8:F2:5F:3C:07:E4:05:07:55
            X509v3 Authority Key Identifier:
                keyid:80:E4:4F:09:FF:20:1C:B2:BC:67:B1:6D:49:0F:7A:6D:10:CD:9D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gORPCf8gHLK8Z7FtSQ96bRDNnfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/3/80E44F09FF201CB2BC67B16D490F7A6D10CD9DF1.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b8:4b:fe:fd:4d:73:c0:83:1c:63:98:5e:66:cd:ab:7f:4d:
         5c:d6:90:bc:28:73:37:dc:6a:cd:1a:8e:9f:a7:2d:6f:1f:d4:
         10:6d:25:da:a5:33:90:f6:55:5b:4b:da:13:94:a8:87:04:43:
         9c:7d:8a:12:3c:a7:cf:9d:91:fe:33:36:fc:db:ee:6f:03:06:
         82:71:b4:1a:ea:06:7a:a6:b1:ea:34:a2:59:a0:d0:57:ee:97:
         ed:85:53:0a:e1:e9:e2:ca:32:9a:ae:f4:56:c4:20:9b:01:7e:
         f3:6b:a2:c6:ab:90:c6:14:32:aa:22:c1:68:68:38:17:54:0e:
         d9:b1:bf:f8:f4:1f:5e:3a:89:20:e2:6f:65:5e:5d:cf:2b:ae:
         e3:f4:9d:56:59:b7:17:ee:77:47:72:3b:f0:ed:d5:9d:c9:85:
         dd:0a:6a:ce:59:b1:b2:de:5c:22:b7:f0:7f:99:7c:3d:7c:76:
         ee:61:b2:86:1e:7c:5c:84:f2:86:31:9b:7d:1e:9a:cb:ce:43:
         a4:f8:e3:3b:76:50:b9:aa:bd:87:e3:e6:d2:6b:92:31:c2:b9:
         17:18:f2:a7:fa:21:04:02:fa:17:3f:15:7a:e8:63:4b:d2:ab:
         0b:e7:23:2d:a4:a9:bb:9f:be:49:ad:07:f3:e8:80:dc:92:78:
         24:3b:cf:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 13 07:18:31 2025 by rpki-client