This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
File:                     8568BF579F56F4139D364514D84EA5EE01CC8048.mft (raw, json)
Hash identifier:          xkBO9Io1eqQdWpb2byw5yRuwhg7y6LJCu8H+U6rXLj4=
Subject key identifier:   93:12:46:43:99:CC:BB:A3:74:DA:B8:5A:86:68:C7:5C:82:73:AD:13
Authority key identifier: 85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48
Certificate issuer:       /CN=8568bf579f56f4139d364514d84ea5ee01cc8048
Certificate serial:       3892F7F9196EAD83E58A6E126094961BD7934D92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
Subject info access:      rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
Manifest number:          8A
Signing time:             Mon 09 Feb 2026 09:00:23 +0000
Manifest this update:     Mon 09 Feb 2026 08:55:23 +0000
Manifest next update:     Tue 10 Feb 2026 09:36:23 +0000
Files and hashes:         1: 8568BF579F56F4139D364514D84EA5EE01CC8048.crl (hash: uXNlsYQOUXCTo59PmYQK/1ogCWWyhWqW5lAmrSQKUrg=)
                          2: AS214675.asa (hash: 1oOoiKXWiUgd0/E9gi4ag6XFrGfgb5PMaVjPKNaflSE=)
Validation:               OK
Signature path:           rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl
                          rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 09:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:92:f7:f9:19:6e:ad:83:e5:8a:6e:12:60:94:96:1b:d7:93:4d:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8568bf579f56f4139d364514d84ea5ee01cc8048
        Validity
            Not Before: Feb  9 08:55:23 2026 GMT
            Not After : Feb 10 09:36:23 2026 GMT
        Subject: CN=9312464399CCBBA374DAB85A8668C75C8273AD13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:47:75:7a:48:7a:1f:59:6c:72:83:4c:04:
                    b8:d6:64:f5:0c:8d:93:31:06:90:a3:92:3d:2b:1e:
                    e3:18:1b:81:2c:4e:89:c4:97:ee:d5:f2:41:2a:24:
                    4a:50:82:63:44:79:b4:1b:07:13:92:9b:c4:b0:5f:
                    d8:1b:cc:bf:ee:f4:ae:a7:70:ef:e2:b8:3d:36:60:
                    20:5f:ba:e3:74:d7:66:88:6e:54:ef:f0:59:83:2e:
                    ab:be:cc:eb:be:78:cf:89:19:e7:1c:e2:0c:c5:79:
                    ce:01:23:b3:86:34:49:8c:10:10:32:64:3e:e7:2c:
                    69:b7:18:62:fa:2b:73:fe:b8:11:41:ba:1a:f8:a6:
                    09:84:aa:ce:1b:20:d6:cc:6e:48:f2:93:53:0d:d1:
                    67:26:8e:40:a1:0f:da:84:21:52:a3:31:7f:6d:31:
                    9e:94:4e:14:d7:3e:b9:3b:3d:ac:99:eb:72:ab:6e:
                    f1:a8:4f:5e:21:db:69:60:d3:a1:b7:c1:64:ea:0d:
                    e8:3e:de:a1:5f:5a:92:6a:e5:69:fc:d4:47:df:0b:
                    9e:90:15:a2:e8:5b:71:c8:a8:03:3c:83:08:00:5d:
                    b0:e7:79:30:54:cd:e4:fd:fc:50:11:c4:4a:be:b1:
                    94:94:7a:4a:89:30:07:5c:a8:05:e2:43:fd:fc:30:
                    94:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:12:46:43:99:CC:BB:A3:74:DA:B8:5A:86:68:C7:5C:82:73:AD:13
            X509v3 Authority Key Identifier:
                keyid:85:68:BF:57:9F:56:F4:13:9D:36:45:14:D8:4E:A5:EE:01:CC:80:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWi_V59W9BOdNkUU2E6l7gHMgEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.starlamp.su/repo/starlamp/0/8568BF579F56F4139D364514D84EA5EE01CC8048.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:39:5e:af:85:be:14:24:ec:22:e5:8a:7b:02:5d:de:fb:d4:
         7f:2e:74:86:a9:4c:65:e7:1d:19:76:e4:3a:b1:d5:85:f5:31:
         df:9c:50:99:fa:d4:66:8d:7f:cb:ec:51:4d:7b:ca:c8:de:0c:
         8c:a6:a9:0e:e3:aa:7d:6c:ec:ea:15:90:96:ff:54:4c:49:63:
         f0:ab:78:cb:1b:34:b0:23:a4:da:09:1b:71:cd:59:33:8e:13:
         d4:52:ad:69:79:41:c5:7e:7a:ea:98:cc:61:68:31:30:2e:77:
         68:e7:23:93:45:90:0d:27:1b:a1:a4:54:4a:0c:0f:83:13:83:
         8f:e0:11:8a:9e:12:93:c5:c3:0b:9d:3d:b2:6b:79:b8:b1:bd:
         b3:43:98:e1:a2:a8:42:06:d1:68:01:50:52:67:d2:a7:39:a4:
         12:d4:b3:87:b6:75:a4:3c:f6:ca:7d:80:b7:fd:2a:17:d1:4e:
         72:7e:a4:0f:8e:1e:46:ba:dd:07:50:71:34:3d:c6:a4:63:60:
         a9:b9:3a:77:8b:e7:29:ad:47:f5:13:85:78:e8:23:b3:ef:25:
         09:35:98:a9:d0:a9:79:46:d7:7b:a8:d1:5a:a6:03:28:ca:74:
         3f:0c:d4:54:e1:c4:a8:7c:a6:ad:c6:00:18:83:3f:b8:14:f3:
         42:be:56:33
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUOJL3+RlurYPlim4SYJSWG9eTTZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU2OGJmNTc5ZjU2ZjQxMzlkMzY0NTE0ZDg0ZWE1ZWUw
MWNjODA0ODAeFw0yNjAyMDkwODU1MjNaFw0yNjAyMTAwOTM2MjNaMDMxMTAvBgNV
BAMTKDkzMTI0NjQzOTlDQ0JCQTM3NERBQjg1QTg2NjhDNzVDODI3M0FEMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClUUd1ekh6H1lscoNMBLjWZPUM
jZMxBpCjkj0rHuMYG4EsTonEl+7V8kEqJEpQgmNEebQbBxOSm8SwX9gbzL/u9K6n
cO/iuD02YCBfuuN012aIblTv8FmDLqu+zOu+eM+JGecc4gzFec4BI7OGNEmMEBAy
ZD7nLGm3GGL6K3P+uBFBuhr4pgmEqs4bINbMbkjyk1MN0WcmjkChD9qEIVKjMX9t
MZ6UThTXPrk7PayZ63KrbvGoT14h22lg06G3wWTqDeg+3qFfWpJq5Wn81EffC56Q
FaLoW3HIqAM8gwgAXbDneTBUzeT9/FARxEq+sZSUekqJMAdcqAXiQ/38MJQBAgMB
AAGjggHrMIIB5zAdBgNVHQ4EFgQUkxJGQ5nMu6N02rhahmjHXIJzrRMwHwYDVR0j
BBgwFoAUhWi/V59W9BOdNkUU2E6l7gHMgEgwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud
HwRgMF4wXKBaoFiGVnJzeW5jOi8va3JpbGwuc3RhcmxhbXAuc3UvcmVwby9zdGFy
bGFtcC8wLzg1NjhCRjU3OUY1NkY0MTM5RDM2NDUxNEQ4NEVBNUVFMDFDQzgwNDgu
Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp
cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9oV2lfVjU5VzlCT2ROa1VVMkU2bDdn
SE1nRWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9r
cmlsbC5zdGFybGFtcC5zdS9yZXBvL3N0YXJsYW1wLzAvODU2OEJGNTc5RjU2RjQx
MzlEMzY0NTE0RDg0RUE1RUUwMUNDODA0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFM5Xq+FvhQk7CLl
insCXd771H8udIapTGXnHRl25Dqx1YX1Md+cUJn61GaNf8vsUU17ysjeDIymqQ7j
qn1s7OoVkJb/VExJY/CreMsbNLAjpNoJG3HNWTOOE9RSrWl5QcV+euqYzGFoMTAu
d2jnI5NFkA0nG6GkVEoMD4MTg4/gEYqeEpPFwwudPbJrebixvbNDmOGiqEIG0WgB
UFJn0qc5pBLUs4e2daQ89sp9gLf9KhfRTnJ+pA+OHka63QdQcTQ9xqRjYKm5OneL
5ymtR/UThXjoI7PvJQk1mKnQqXlG13uo0VqmAyjKdD8M1FThxKh8pq3GABiDP7gU
80K+VjM=
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:40:46 2026 by rpki-client