This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: LuYIQhoH3q6GftVtnunpcm8aUE1LR7QbD7zTYnEGF2M= Subject key identifier: 1D:42:AD:B7:01:3B:28:F2:62:9D:F4:74:42:48:74:99:7A:34:FA:B2 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 6D0D9B7EEA53FA64B690EA077AE7E5477EF530E2 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: 0202 Signing time: Sun 14 Dec 2025 13:04:39 +0000 Manifest this update: Sun 14 Dec 2025 12:59:39 +0000 Manifest next update: Mon 15 Dec 2025 14:26:39 +0000 Files and hashes: 1: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=) 2: 34352e3133322e3139312e302f32342d3234203d3e2033393730.roa (hash: piR0xY2W/Fg7dFVRqqqeApVksNlAZNhoOxCqAZQ09I0=) 3: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: /fQiD7MgAe+syxK1kLtLE6lGsEf8tO2qbpKEXcnfIY0=) 4: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=) 5: 34352e3133322e3139302e302f32342d3234203d3e2030.roa (hash: 9ieyP3BjwnrGT7jHWN0miv3BwxPneURkOZZD4j2C8Tw=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 19:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:0d:9b:7e:ea:53:fa:64:b6:90:ea:07:7a:e7:e5:47:7e:f5:30:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: Dec 14 12:59:39 2025 GMT Not After : Dec 15 14:26:39 2025 GMT Subject: CN=1D42ADB7013B28F2629DF474424874997A34FAB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:cb:70:d6:38:6e:6a:f6:90:e7:0f:09:2b: 89:1a:aa:80:de:d3:44:cd:a7:e3:74:a1:d2:9f:19: c3:c6:b2:c9:b8:7f:13:9d:d8:3e:f4:bf:77:a6:1e: eb:f5:9b:0e:dd:28:94:e2:d1:82:d6:05:4d:62:2d: 22:35:46:cb:64:8c:a1:25:9b:52:03:4e:d9:57:f2: 6d:03:95:93:72:3f:a5:82:dd:cf:02:58:03:42:38: d8:31:fd:57:6f:39:b2:a7:f4:db:a8:79:8b:31:01: ba:b7:64:37:29:4f:4b:44:0a:48:0f:88:ad:f4:bf: 4d:c8:7a:11:5a:cc:05:3f:cc:aa:41:8a:7e:f8:d3: 55:01:41:5c:9a:ea:15:06:ac:44:7b:a9:33:b2:2c: 8c:4f:cb:50:7e:48:b1:c7:6b:9f:91:5e:d8:03:0b: 00:b8:06:34:03:41:33:60:fb:5f:d7:2f:d5:2a:17: 45:21:4c:1f:8f:aa:fe:99:aa:73:4c:4b:ba:76:c9: 5a:f4:75:bb:fb:8c:90:aa:a9:9f:9a:63:9d:28:22: 59:f2:75:b9:6a:6a:8d:55:30:32:f1:04:fa:58:21: 9a:b7:43:fa:57:69:75:06:6e:22:d4:6e:95:4e:fd: 50:23:f0:1e:36:ac:30:52:76:98:ea:d4:07:1e:09: 22:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:42:AD:B7:01:3B:28:F2:62:9D:F4:74:42:48:74:99:7A:34:FA:B2 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f3:8a:bb:6a:03:2c:72:7a:0d:cf:e0:16:bc:85:39:ef:95: 0a:54:e0:43:d3:bb:69:85:3b:75:cd:22:43:34:92:58:4f:94: ee:ee:85:b4:83:f7:c9:4f:fc:f2:96:42:0e:1f:89:be:08:32: db:83:83:91:0c:a4:e0:25:b1:48:b7:e1:fc:fc:29:99:e1:84: 4b:6e:d3:df:40:1d:a0:10:5f:ab:9b:ea:25:51:e6:e2:c9:47: 6d:45:3d:4f:7e:e0:f3:3e:28:83:e8:c6:9b:ad:01:c7:97:52: 43:00:fe:b8:f6:36:95:3a:65:dd:f0:95:9a:d2:16:d2:89:15: 58:9d:e1:00:b4:9a:45:c3:5c:77:e3:a7:a3:fb:5b:d7:52:a0: 49:d6:a1:c0:cb:e2:6e:d4:11:8e:5c:d7:48:a8:12:e7:5d:f7: 80:3d:a7:1e:a6:05:18:1b:06:fa:ef:6d:84:0a:03:7d:34:a5: 70:32:f5:e9:42:5f:6d:d1:61:71:36:34:77:d0:c9:49:43:c5: bc:70:6e:ed:92:e6:c3:6b:83:1a:66:87:0d:56:42:7c:db:4a: 1a:5e:a3:93:94:ad:5f:e8:e0:0c:07:10:fc:ab:a4:7a:a3:ab: a6:60:59:85:cd:ac:a1:40:dd:58:a3:bc:bf:55:30:9c:31:92: d0:f3:f8:3a -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUbQ2bfupT+mS2kOoHeuflR371MOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNTEyMTQxMjU5MzlaFw0yNTEyMTUxNDI2MzlaMDMxMTAvBgNV BAMTKDFENDJBREI3MDEzQjI4RjI2MjlERjQ3NDQyNDg3NDk5N0EzNEZBQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+k8tw1jhuavaQ5w8JK4kaqoDe 00TNp+N0odKfGcPGssm4fxOd2D70v3emHuv1mw7dKJTi0YLWBU1iLSI1RstkjKEl m1IDTtlX8m0DlZNyP6WC3c8CWANCONgx/VdvObKn9NuoeYsxAbq3ZDcpT0tECkgP iK30v03IehFazAU/zKpBin7401UBQVya6hUGrER7qTOyLIxPy1B+SLHHa5+RXtgD CwC4BjQDQTNg+1/XL9UqF0UhTB+Pqv6ZqnNMS7p2yVr0dbv7jJCqqZ+aY50oIlny dblqao1VMDLxBPpYIZq3Q/pXaXUGbiLUbpVO/VAj8B42rDBSdpjq1AceCSLfAgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUHUKttwE7KPJinfR0Qkh0mXo0+rIwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCC84q7agMscnoNz+AWvIU5 75UKVOBD07tphTt1zSJDNJJYT5Tu7oW0g/fJT/zylkIOH4m+CDLbg4ORDKTgJbFI t+H8/CmZ4YRLbtPfQB2gEF+rm+olUebiyUdtRT1PfuDzPiiD6MabrQHHl1JDAP64 9jaVOmXd8JWa0hbSiRVYneEAtJpFw1x346ej+1vXUqBJ1qHAy+Ju1BGOXNdIqBLn XfeAPacepgUYGwb6722ECgN9NKVwMvXpQl9t0WFxNjR30MlJQ8W8cG7tkubDa4Ma ZocNVkJ820oaXqOTlK1f6OAMBxD8q6R6o6umYFmFzayhQN1Yo7y/VTCcMZLQ8/g6 -----END CERTIFICATE-----Generated at Sun Dec 14 15:24:24 2025 by rpki-client