This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json) Hash identifier: tomGeQ3FCFTAkQYavIqICe3Xf1VEEVQdAOE2vmfDlec= Subject key identifier: 9D:4B:14:72:CD:15:48:86:B1:F1:A3:66:97:49:92:28:A4:C9:D7:57 Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 02CD116910400C1313E4FD91549720D0EC24CF11 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft Manifest number: B1 Signing time: Thu 01 Jan 2026 17:07:00 +0000 Manifest this update: Thu 01 Jan 2026 17:02:00 +0000 Manifest next update: Fri 02 Jan 2026 21:02:00 +0000 Files and hashes: 1: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=) 2: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: veMY7WY8aJpswmo7ATASVRtrVUN48y9s1hYZxaM9yfY=) 3: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=) 4: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=) 5: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=) 6: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=) Validation: Failed, CRL has expired Certificate: Data: Version: 3 (0x2) Serial Number: 02:cd:11:69:10:40:0c:13:13:e4:fd:91:54:97:20:d0:ec:24:cf:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Jan 1 17:02:00 2026 GMT Not After : Jan 2 21:02:00 2026 GMT Subject: CN=9D4B1472CD154886B1F1A36697499228A4C9D757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:14:91:ed:a8:b6:80:b8:7a:29:d1:0a:05:eb: dc:29:98:4f:28:30:8d:33:94:28:88:f5:5e:7b:ae: 7e:27:0d:00:62:1f:b2:43:6e:fe:92:35:53:13:b1: a0:b6:66:2f:ec:3f:81:fd:80:48:ff:06:a0:fa:78: b1:69:74:e4:58:6a:09:ee:7a:3d:75:c5:09:a5:d4: 66:fd:67:6e:95:44:e3:09:ea:59:3b:3d:50:f4:94: 90:d6:fe:d9:a1:88:41:77:fc:db:a8:fe:60:a6:40: cd:9b:5e:e5:58:02:35:b4:03:6b:45:82:29:0e:e8: 94:f9:a1:f8:bb:8a:2e:70:09:20:7d:fa:bf:7e:c1: 92:72:cf:2d:d6:ae:aa:6e:91:60:5e:0b:8b:12:28: 0a:46:78:46:3d:25:77:3b:33:c2:37:09:d7:85:5d: cb:bb:8d:0d:cf:f6:e1:c5:60:be:76:d5:58:e3:73: 38:0c:9f:f9:37:9f:7d:6a:ad:d9:20:52:b4:59:e3: 9c:04:7a:e3:b8:60:35:e3:2a:37:88:65:96:f8:b5: 17:5e:d9:6b:14:b5:13:42:74:2d:c6:7a:5e:28:73: 4f:b9:a2:38:fc:b0:92:0f:e8:e0:81:e6:5e:f1:d8: 51:fd:cb:1b:56:37:16:7a:50:7c:6e:42:f4:f6:f2: 13:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:4B:14:72:CD:15:48:86:B1:F1:A3:66:97:49:92:28:A4:C9:D7:57 X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a6:03:f7:e9:83:39:7e:f8:6c:e0:55:27:80:52:cc:be:31: 68:e3:96:25:af:57:37:0e:de:96:21:43:b2:0b:36:46:41:87: 9d:46:11:66:e4:38:d5:07:86:34:46:cb:52:76:ca:59:92:6f: 99:9b:d0:3a:26:c6:d6:c0:d1:10:4d:d0:24:f3:42:47:dc:42: 49:3a:a2:b5:f5:14:62:84:82:83:93:a9:bc:f0:b5:cf:01:84: d8:d6:4a:a4:ef:10:2e:a4:43:cb:76:e0:16:75:c2:83:ee:a1: 63:c3:c0:7b:7a:28:3e:03:2a:70:4d:0b:6e:e3:5e:f4:23:b6: 07:53:cb:db:0c:95:70:ef:62:fa:1a:83:86:12:c9:c1:2e:56: 33:df:c6:24:ec:c3:ca:96:2a:17:ea:14:63:08:43:c0:3a:36: 7a:7e:6e:93:6f:c7:fb:9f:b1:78:71:15:b7:2b:0a:0d:21:49: 04:d9:80:a8:bb:8c:3b:0f:81:30:d8:1c:96:a0:67:82:25:5c: b0:2b:4e:e0:6a:4e:f1:3b:35:ee:07:31:3b:8b:11:31:e9:fc: 37:26:94:88:cf:0b:82:41:68:5c:93:75:73:0a:1b:ad:70:0b: a5:ee:b1:b0:be:05:d7:79:9b:e4:08:1e:37:fd:69:c9:91:7a: 81:6e:14:1d -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUAs0RaRBADBMT5P2RVJcg0OwkzxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNjAxMDExNzAyMDBaFw0yNjAxMDIyMTAyMDBaMDMxMTAvBgNV BAMTKDlENEIxNDcyQ0QxNTQ4ODZCMUYxQTM2Njk3NDk5MjI4QTRDOUQ3NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzFJHtqLaAuHop0QoF69wpmE8o MI0zlCiI9V57rn4nDQBiH7JDbv6SNVMTsaC2Zi/sP4H9gEj/BqD6eLFpdORYagnu ej11xQml1Gb9Z26VROMJ6lk7PVD0lJDW/tmhiEF3/Nuo/mCmQM2bXuVYAjW0A2tF gikO6JT5ofi7ii5wCSB9+r9+wZJyzy3WrqpukWBeC4sSKApGeEY9JXc7M8I3CdeF Xcu7jQ3P9uHFYL521VjjczgMn/k3n31qrdkgUrRZ45wEeuO4YDXjKjeIZZb4tRde 2WsUtRNCdC3Gel4oc0+5ojj8sJIP6OCB5l7x2FH9yxtWNxZ6UHxuQvT28hN7AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUnUsUcs0VSIax8aNml0mSKKTJ11cwHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCzpgP3 6YM5fvhs4FUngFLMvjFo45Ylr1c3Dt6WIUOyCzZGQYedRhFm5DjVB4Y0RstSdspZ km+Zm9A6JsbWwNEQTdAk80JH3EJJOqK19RRihIKDk6m88LXPAYTY1kqk7xAupEPL duAWdcKD7qFjw8B7eig+AypwTQtu4170I7YHU8vbDJVw72L6GoOGEsnBLlYz38Yk 7MPKlioX6hRjCEPAOjZ6fm6Tb8f7n7F4cRW3KwoNIUkE2YCou4w7D4Ew2ByWoGeC JVywK07gak7xOzXuBzE7ixEx6fw3JpSIzwuCQWhck3VzChutcAul7rGwvgXXeZvk CB43/WnJkXqBbhQd -----END CERTIFICATE-----Generated at Sun Jan 11 04:39:08 2026 by rpki-client