This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft File: 3F8EBCC0428DD608F39D858BE891B85B0032681A.mft (raw, json) Hash identifier: iO2C9/+NjCjVzDzbbSxHTBokLO1Tt8YyCVPDWA8EcRk= Subject key identifier: 8D:9F:92:D7:2C:62:C1:0A:82:E3:94:99:91:B4:21:D7:F3:62:A4:D1 Authority key identifier: 3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A Certificate issuer: /CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Certificate serial: 5867F39DD0EE48A4902C854B22AC2949285DAE46 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft Manifest number: E0 Signing time: Mon 02 Feb 2026 04:18:23 +0000 Manifest this update: Mon 02 Feb 2026 04:13:23 +0000 Manifest next update: Tue 03 Feb 2026 06:17:23 +0000 Files and hashes: 1: 3F8EBCC0428DD608F39D858BE891B85B0032681A.crl (hash: svKu3skTWfKneSS5Xb4l3EBYRU+8D53NGAypdioy+1g=) 2: AS61574.roa (hash: Ynl86BG//4yys2kNc3GrGh7DM2lbdYgU75T6KyljZYI=) 3: AS61574.asa (hash: WLc0Xn7uF/j7wS6tJQtWEwz0nz7jHfRgwckKy9g1vn8=) 4: AS61575.roa (hash: 28h1c2Unte9m6JfK2qV2CncYmTmTY54Ou2BLMXZE2TI=) Validation: OK Signature path: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Feb 2026 06:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:67:f3:9d:d0:ee:48:a4:90:2c:85:4b:22:ac:29:49:28:5d:ae:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F8EBCC0428DD608F39D858BE891B85B0032681A Validity Not Before: Feb 2 04:13:23 2026 GMT Not After : Feb 3 06:17:23 2026 GMT Subject: CN=8D9F92D72C62C10A82E3949991B421D7F362A4D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:c1:0f:07:7c:37:11:f0:3c:65:65:56:40: 06:e6:e2:ad:8d:26:a9:10:74:8a:ca:ad:f9:a9:af: e7:f9:9a:e6:cc:97:41:5f:bd:fd:8e:1e:06:45:c7: 1d:4c:63:e5:1d:5d:6b:0d:e2:47:5a:3c:5b:51:7c: c8:5f:d2:79:01:1e:53:55:2f:56:a6:cd:33:e3:d2: db:4e:88:25:23:7f:50:47:ff:e0:94:5a:8f:4e:32: 8c:8f:5f:97:d2:cd:f9:52:f9:dc:d0:b6:d5:af:4b: c8:85:ce:df:d2:ac:6e:fd:4e:36:f8:85:8a:71:81: e8:eb:e0:e9:8a:ab:1c:00:fd:77:43:bc:b8:80:1f: 5b:e0:5a:ea:9d:5d:dc:4f:8b:1d:56:ab:61:f3:4c: 46:bb:ca:a8:a9:9f:77:75:b2:16:aa:59:08:6b:e4: f2:bb:cc:a5:ca:b0:c5:50:94:66:56:27:4b:89:41: c9:c7:e2:83:03:a4:b4:a6:66:21:93:64:04:fa:4d: f3:b6:9c:71:73:82:ab:1c:b4:4b:eb:10:b8:99:30: 70:28:0f:43:9e:55:50:b7:44:5c:d2:e8:7d:f2:42: 3a:8a:05:be:96:7a:12:26:4f:6f:b9:5a:7f:0d:d0: 9d:46:a6:5f:f4:78:eb:a3:9e:18:e3:7c:aa:35:ce: 6f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9F:92:D7:2C:62:C1:0A:82:E3:94:99:91:B4:21:D7:F3:62:A4:D1 X509v3 Authority Key Identifier: keyid:3F:8E:BC:C0:42:8D:D6:08:F3:9D:85:8B:E8:91:B8:5B:00:32:68:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F8EBCC0428DD608F39D858BE891B85B0032681A.cer Subject Information Access: Signed Object - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/3F8EBCC0428DD608F39D858BE891B85B0032681A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fa:1b:b7:8b:3a:b4:63:c3:b0:9c:48:da:12:37:d8:88:4f: b5:c6:9f:39:b3:95:76:4e:83:77:d9:a5:f6:04:73:a6:b2:7e: 28:bd:47:99:97:57:59:9d:2c:88:15:75:5c:f5:13:f7:b6:65: 61:2d:30:57:11:03:50:0b:fa:38:04:e2:0a:1b:03:2f:99:56: 04:44:b7:ff:1d:f9:13:d4:b3:62:c0:d0:bb:1f:75:5a:c8:72: 4c:ae:ce:fb:c7:2f:0d:be:f6:19:bd:40:3a:c7:2f:32:2c:7d: c2:8b:83:00:a6:83:da:73:7a:e5:c8:2b:ae:94:fe:6a:cc:c0: 37:53:da:32:a9:c0:e3:5a:2b:47:d1:73:06:48:18:b0:1a:4d: c7:a4:44:b2:fb:e2:97:9e:6b:0a:8d:6d:4e:73:9b:db:88:27: 42:14:eb:cd:dd:41:ed:d4:6e:93:db:9d:66:0f:87:b5:f0:67: 81:af:87:07:de:36:cd:d6:14:af:1e:43:53:91:e8:3f:ff:f2: 1c:32:c9:79:32:31:81:7a:99:e5:7c:3c:06:77:c8:d4:fd:79: 2f:a4:e5:46:c3:15:95:01:b2:99:8f:63:8d:9d:fa:d1:5f:ed: 2b:97:c7:63:33:cb:2b:95:9c:3b:a7:03:6c:46:9e:bf:c6:d5: d2:3b:df:9e -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUWGfzndDuSKSQLIVLIqwpSShdrkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Y4RUJDQzA0MjhERDYwOEYzOUQ4NThCRTg5MUI4NUIw MDMyNjgxQTAeFw0yNjAyMDIwNDEzMjNaFw0yNjAyMDMwNjE3MjNaMDMxMTAvBgNV BAMTKDhEOUY5MkQ3MkM2MkMxMEE4MkUzOTQ5OTkxQjQyMUQ3RjM2MkE0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNsEPB3w3EfA8ZWVWQAbm4q2N JqkQdIrKrfmpr+f5mubMl0Ffvf2OHgZFxx1MY+UdXWsN4kdaPFtRfMhf0nkBHlNV L1amzTPj0ttOiCUjf1BH/+CUWo9OMoyPX5fSzflS+dzQttWvS8iFzt/SrG79Tjb4 hYpxgejr4OmKqxwA/XdDvLiAH1vgWuqdXdxPix1Wq2HzTEa7yqipn3d1shaqWQhr 5PK7zKXKsMVQlGZWJ0uJQcnH4oMDpLSmZiGTZAT6TfO2nHFzgqsctEvrELiZMHAo D0OeVVC3RFzS6H3yQjqKBb6WehImT2+5Wn8N0J1Gpl/0eOujnhjjfKo1zm+hAgMB AAGjggImMIICIjAdBgNVHQ4EFgQUjZ+S1yxiwQqC45SZkbQh1/NipNEwHwYDVR0j BBgwFoAUP468wEKN1gjznYWL6JG4WwAyaBowDgYDVR0PAQH/BAQDAgeAMHoGA1Ud HwRzMHEwb6BtoGuGaXJzeW5jOi8va3JpbGwucGVlcmluZy5lZS5jb2x1bWJpYS5l ZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhFQkNDMDQyOERENjA4RjM5RDg1 OEJFODkxQjg1QjAwMzI2ODFBLmNybDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUH MAKGXHJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVw by8xLzNGOEVCQ0MwNDI4REQ2MDhGMzlEODU4QkU4OTFCODVCMDAzMjY4MUEuY2Vy MIGFBggrBgEFBQcBCwR5MHcwdQYIKwYBBQUHMAuGaXJzeW5jOi8va3JpbGwucGVl cmluZy5lZS5jb2x1bWJpYS5lZHUvcmVwby9wZWVyaW5nLXRlc3RiZWQvMC8zRjhF QkNDMDQyOERENjA4RjM5RDg1OEJFODkxQjg1QjAwMzI2ODFBLm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA M/obt4s6tGPDsJxI2hI32IhPtcafObOVdk6Dd9ml9gRzprJ+KL1HmZdXWZ0siBV1 XPUT97ZlYS0wVxEDUAv6OATiChsDL5lWBES3/x35E9SzYsDQux91WshyTK7O+8cv Db72Gb1AOscvMix9wouDAKaD2nN65cgrrpT+aszAN1PaMqnA41orR9FzBkgYsBpN x6REsvvil55rCo1tTnOb24gnQhTrzd1B7dRuk9udZg+HtfBnga+HB942zdYUrx5D U5HoP//yHDLJeTIxgXqZ5Xw8BnfI1P15L6TlRsMVlQGymY9jjZ360V/tK5fHYzPL K5WcO6cDbEaev8bV0jvfng== -----END CERTIFICATE-----Generated at Mon Feb 2 08:13:57 2026 by rpki-client