This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
File:                     656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json)
Hash identifier:          ErG9zPhPSN0VUBmo5xpppiDkUjYRpxK49S5tJ+8ghJ8=
Subject key identifier:   4D:72:53:9C:72:B6:40:CD:6F:E1:8D:EE:14:B6:CA:E7:F3:1C:B6:E0
Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Certificate issuer:       /CN=656E4422ABF129649200EB019A815F2B12236E92
Certificate serial:       4209363E5819EBFB50AE8EF1AA26B58CB7AFA007
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject info access:      rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
Manifest number:          0230
Signing time:             Sun 25 Jan 2026 12:01:25 +0000
Manifest this update:     Sun 25 Jan 2026 11:56:25 +0000
Manifest next update:     Mon 26 Jan 2026 14:54:25 +0000
Files and hashes:         1: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=)
                          2: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: JO5RDuLOZ98JTC9VM8iS0LOOnYqKZtmsZxVlDL8Wjwc=)
                          3: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=)
                          4: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=)
                          5: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:09:36:3e:58:19:eb:fb:50:ae:8e:f1:aa:26:b5:8c:b7:af:a0:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92
        Validity
            Not Before: Jan 25 11:56:25 2026 GMT
            Not After : Jan 26 14:54:25 2026 GMT
        Subject: CN=4D72539C72B640CD6FE18DEE14B6CAE7F31CB6E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:b0:59:9c:28:34:2f:ad:eb:e6:6d:a0:7c:
                    33:5f:f3:86:50:e7:d0:2d:46:ff:62:64:34:fa:3e:
                    1f:4f:b0:1b:15:c4:5f:fb:56:86:52:43:8d:87:dd:
                    92:55:51:70:da:cc:34:40:79:78:ac:b5:8d:f4:32:
                    ed:40:79:37:b5:d2:7f:d0:46:03:ad:8d:3d:87:a1:
                    d7:fd:2b:c9:f1:64:99:cb:ef:07:b6:65:cb:48:42:
                    61:7e:51:e0:2b:4e:70:2d:f1:57:05:c1:02:89:e4:
                    ba:ea:fa:14:84:b5:50:ce:22:b2:ba:27:ce:37:81:
                    58:44:d0:84:97:90:90:8e:82:36:9f:d0:62:0b:52:
                    55:de:8b:dd:ce:de:d3:6e:db:2a:aa:79:69:1c:4f:
                    53:ce:9b:4a:1d:77:44:ba:d0:16:56:6e:48:65:e3:
                    97:32:00:fb:cc:7f:a1:ce:64:d1:2e:82:6d:c4:8a:
                    6e:02:d6:cb:d7:b3:b5:10:7d:a4:2c:37:a9:2b:2c:
                    ae:1a:29:4f:ff:c6:32:be:dc:41:55:55:ae:97:28:
                    d3:d7:03:b1:31:4b:22:80:ac:10:0e:2a:5a:67:9f:
                    01:ee:40:22:59:8c:ce:51:0b:08:03:3e:fa:12:ef:
                    af:80:4a:ea:61:1d:bf:f9:62:c9:9d:c9:f3:34:7e:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:72:53:9C:72:B6:40:CD:6F:E1:8D:EE:14:B6:CA:E7:F3:1C:B6:E0
            X509v3 Authority Key Identifier:
                keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:4c:1b:37:b1:bb:65:13:76:d0:aa:06:a7:aa:fc:8a:c0:
         c6:4c:9c:58:03:8f:65:33:cc:26:bb:f9:cb:0d:7d:1d:d9:11:
         ea:a3:f4:b7:ff:3c:0c:bb:bf:b6:80:ce:d2:54:4a:83:d1:0a:
         7c:50:93:c3:16:cf:26:d6:83:5d:e5:04:1c:98:12:0d:64:09:
         ba:68:6d:a0:05:2c:f6:c5:b0:0f:ac:6e:fc:ef:62:32:17:e3:
         3f:2b:06:42:b5:c1:38:47:bc:5e:1c:70:03:c1:04:79:73:02:
         36:7b:68:34:17:c5:ec:3b:82:6a:7c:bd:8d:6a:2b:bf:67:0c:
         ed:c6:14:d3:46:7e:1b:b8:6f:67:6a:00:10:3a:61:d8:72:36:
         9a:2f:d1:20:30:53:d1:6c:2c:08:07:f0:fc:58:93:f4:50:0c:
         e2:50:d9:51:b0:b5:07:e4:e6:20:c4:d1:49:52:fc:be:c6:02:
         78:c1:dd:36:f5:4f:a9:71:59:de:25:61:83:84:ac:0e:48:bd:
         2c:82:a3:ef:f5:95:9b:91:4a:a3:f2:b5:03:58:ec:4c:92:d3:
         7f:4e:65:05:58:f7:16:ec:1b:a0:f3:65:a2:0c:e4:f6:07:12:
         33:29:bb:bb:79:b6:22:77:61:3c:5f:62:64:bf:20:89:1c:8c:
         17:46:ba:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----