This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft File: DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft (raw, json) Hash identifier: ngGGqnsiBXImgHSQ0rcpPdro9zu7aBo44FIUTD8ci9o= Subject key identifier: E5:9D:09:9C:EF:6F:CB:76:23:82:AE:D3:70:2F:BA:BB:BE:35:B0:3A Authority key identifier: DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C Certificate issuer: /CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Certificate serial: 4AE2C54C8633802D9AF261A21013A206CB954128 Authority info access: rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject info access: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft Manifest number: 3D Signing time: Sun 01 Feb 2026 19:26:47 +0000 Manifest this update: Sun 01 Feb 2026 19:21:47 +0000 Manifest next update: Mon 02 Feb 2026 23:09:47 +0000 Files and hashes: 1: DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl (hash: +1b0wuFii43uCsPFAD61qBBV7EA/1GiudrSuo0F8ghc=) 2: AS24381.asa (hash: 7Bd5Wb1PtwgjYIC9RF45nAAB3jRY689JG+aNM+kzoLM=) 3: 323430313a323036303a623030323a3a2f34382d3438203d3e203234333831.roa (hash: lXc0eV4FfLxr7QyLKNsbJLXUNMB04fs7kpQDovC34FM=) 4: 323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (hash: VmIkUnZdOEjdRj9sOfiNi5GekVaoRBas6LxAq9Y6qTU=) 5: 323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (hash: xLbTWGSR0HvTnUdYp2nr/La6L8Rr5k/ezhkiW+Q3tmM=) Validation: OK Signature path: rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Feb 2026 23:09:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e2:c5:4c:86:33:80:2d:9a:f2:61:a2:10:13:a2:06:cb:95:41:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD8984A82671DD60AA7980ACF2402EF6DA98721C Validity Not Before: Feb 1 19:21:47 2026 GMT Not After : Feb 2 23:09:47 2026 GMT Subject: CN=E59D099CEF6FCB762382AED3702FBABBBE35B03A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:04:d9:1a:ab:73:cd:86:bb:c9:12:4c:ec: d6:7f:3d:21:fd:e0:0a:25:81:77:2d:f4:52:ba:7a: f3:05:ff:6e:90:3c:19:51:c2:3c:8c:79:62:6d:ab: d1:4e:29:84:97:7c:eb:8e:b9:46:e3:91:c9:94:67: 3a:db:4d:a5:35:d1:9b:7d:ec:81:b3:fe:a1:dc:08: 0d:66:5c:4f:42:8d:c4:1e:a5:09:5e:46:47:84:65: a0:15:77:0e:32:bc:99:95:da:06:c1:27:e0:35:92: 27:9d:44:b0:0d:11:d6:40:ff:0f:8d:e6:90:7e:42: 76:b1:8b:b1:fb:10:30:63:38:02:36:b3:8c:a0:51: d9:3a:b6:e7:41:cf:cb:d0:20:d1:e9:5e:ab:bf:b6: 84:b3:9e:be:03:a6:a6:9e:c8:02:a2:6f:5c:17:15: 51:a3:f7:a4:a6:85:9a:73:7f:8c:d3:54:67:1f:de: c3:19:3d:53:43:c2:ad:5c:9a:33:2b:d1:54:19:1e: 34:b4:52:74:56:da:d4:7a:af:d5:7e:14:6e:e1:83: 9e:56:d7:94:b3:e9:35:ad:ee:a5:a0:e7:0e:09:52: de:7b:49:f3:eb:eb:b6:1e:73:aa:57:62:ac:d8:5a: 02:4b:ea:d7:a0:0d:76:66:6e:88:7b:7b:6e:22:43: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:9D:09:9C:EF:6F:CB:76:23:82:AE:D3:70:2F:BA:BB:BE:35:B0:3A X509v3 Authority Key Identifier: keyid:DD:89:84:A8:26:71:DD:60:AA:79:80:AC:F2:40:2E:F6:DA:98:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/DD8984A82671DD60AA7980ACF2402EF6DA98721C.cer Subject Information Access: Signed Object - URI:rsync://krill.sy5.nsw.au.infininet.com.au/repo/BGP-Exchange/2/DD8984A82671DD60AA7980ACF2402EF6DA98721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:98:e5:2f:56:ed:46:be:d1:56:0e:1f:26:b3:db:41:fe:26: 47:bf:63:af:9a:6e:1f:29:c0:12:9e:ff:00:80:96:72:a7:b8: a5:5d:c7:b0:1f:55:b8:5d:8f:73:b4:a6:68:7b:be:1c:cb:0c: ac:52:42:11:f6:04:7e:27:da:17:59:18:c9:f3:46:9c:8a:74: 6f:c4:b2:87:32:7a:8a:bf:09:15:f8:fc:23:ec:2e:39:f7:9b: 11:93:10:b3:ef:74:bc:06:b7:5d:b5:7e:d5:01:cb:fc:58:dc: e4:0a:9c:6d:eb:d2:77:bf:62:15:50:3d:86:d1:8a:3a:e6:16: 9e:ee:d5:23:5d:85:06:5b:92:27:f6:5c:ef:4e:21:f3:5f:f0: 76:7a:4a:d7:71:1c:ee:e3:34:9d:0f:f1:3d:1c:a2:56:b3:26: 14:56:82:50:ce:42:53:9f:be:7b:a6:f7:39:53:16:aa:49:aa: 9a:f0:6d:1d:6c:4b:d5:8e:39:94:2e:a5:d1:d0:0e:2f:be:0c: bc:30:65:af:1b:89:ce:7e:74:79:7d:f7:70:28:92:e6:6f:5f: 04:08:6f:e8:bb:f3:87:e5:a5:e5:fd:14:1b:e0:a6:07:8c:43: 8e:5f:71:d3:53:3f:6b:7b:69:0f:ab:bb:65:ba:91:c2:ad:4a: 9c:31:b1:b0 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIUSuLFTIYzgC2a8mGiEBOiBsuVQSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZE QTk4NzIxQzAeFw0yNjAyMDExOTIxNDdaFw0yNjAyMDIyMzA5NDdaMDMxMTAvBgNV BAMTKEU1OUQwOTlDRUY2RkNCNzYyMzgyQUVEMzcwMkZCQUJCQkUzNUIwM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp4QTZGqtzzYa7yRJM7NZ/PSH9 4AolgXct9FK6evMF/26QPBlRwjyMeWJtq9FOKYSXfOuOuUbjkcmUZzrbTaU10Zt9 7IGz/qHcCA1mXE9CjcQepQleRkeEZaAVdw4yvJmV2gbBJ+A1kiedRLANEdZA/w+N 5pB+Qnaxi7H7EDBjOAI2s4ygUdk6tudBz8vQINHpXqu/toSznr4DpqaeyAKib1wX FVGj96SmhZpzf4zTVGcf3sMZPVNDwq1cmjMr0VQZHjS0UnRW2tR6r9V+FG7hg55W 15Sz6TWt7qWg5w4JUt57SfPr67Yec6pXYqzYWgJL6tegDXZmboh7e24iQx+1AgMB AAGjggItMIICKTAdBgNVHQ4EFgQU5Z0JnO9vy3Yjgq7TcC+6u741sDowHwYDVR0j BBgwFoAU3YmEqCZx3WCqeYCs8kAu9tqYchwwDgYDVR0PAQH/BAQDAgeAMHsGA1Ud HwR0MHIwcKBuoGyGanJzeW5jOi8va3JpbGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQu Y29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdlLzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4 MEFDRjI0MDJFRjZEQTk4NzIxQy5jcmwwfQYIKwYBBQUHAQEEcTBvMG0GCCsGAQUF BzAChmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MTUw RTREMDAwMC8wL0REODk4NEE4MjY3MURENjBBQTc5ODBBQ0YyNDAyRUY2REE5ODcy MUMuY2VyMIGGBggrBgEFBQcBCwR6MHgwdgYIKwYBBQUHMAuGanJzeW5jOi8va3Jp bGwuc3k1Lm5zdy5hdS5pbmZpbmluZXQuY29tLmF1L3JlcG8vQkdQLUV4Y2hhbmdl LzIvREQ4OTg0QTgyNjcxREQ2MEFBNzk4MEFDRjI0MDJFRjZEQTk4NzIxQy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAASY5S9W7Ua+0VYOHyaz20H+Jke/Y6+abh8pwBKe/wCAlnKnuKVdx7Af Vbhdj3O0pmh7vhzLDKxSQhH2BH4n2hdZGMnzRpyKdG/Esocyeoq/CRX4/CPsLjn3 mxGTELPvdLwGt121ftUBy/xY3OQKnG3r0ne/YhVQPYbRijrmFp7u1SNdhQZbkif2 XO9OIfNf8HZ6StdxHO7jNJ0P8T0colazJhRWglDOQlOfvnum9zlTFqpJqprwbR1s S9WOOZQupdHQDi++DLwwZa8bic5+dHl993AokuZvXwQIb+i784flpeX9FBvgpgeM Q45fcdNTP2t7aQ+ru2W6kcKtSpwxsbA= -----END CERTIFICATE-----Generated at Mon Feb 2 08:06:46 2026 by rpki-client