This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft File: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft (raw, json) Hash identifier: JkzOKdOaiETIdhhyDS4O2Yr64m6gr2PndelbDPsGyGo= Subject key identifier: 33:C0:62:BF:60:97:21:CB:64:6C:FF:DE:4F:A0:40:5D:B3:10:46:2D Authority key identifier: 7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 Certificate issuer: /CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Certificate serial: 209C8B9CFA3FAE2F347421D61AA42FE3F6F7A713 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft Manifest number: 7B Signing time: Sat 22 Nov 2025 14:55:45 +0000 Manifest this update: Sat 22 Nov 2025 14:50:45 +0000 Manifest next update: Sun 23 Nov 2025 18:31:45 +0000 Files and hashes: 1: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: uF8QCN8jX1S8vPb+j6CiYDy604ujJKGOHIcdENgsozA=) 2: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: xoDReEFetLSQGYBm0baNBaTLSOi9Q5x2Cfso2AOKl0A=) 3: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: RZ3mYxtXjyfnSAX6OB7Fb/NzyUR2Iaz1eYb6yM0niNc=) 4: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: K8xXw24z/h7osAEvKUs5Zvv+EC9Fem2xi6ka3dAsTS8=) 5: 7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl (hash: PLUN/WnMAy01pjQF9Ve1Iaq5Czg22CEpVhlvlXC8jkI=) 6: 326130613a363034343a386666633a3a2f34382d3438203d3e203331383938.roa (hash: CTStzL4XbpBzdiPo/k9GT6LN/2SBVWE37f9B3UyCq40=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 11:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:9c:8b:9c:fa:3f:ae:2f:34:74:21:d6:1a:a4:2f:e3:f6:f7:a7:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4E2571D39535EB83B4BDD4E4668A2D2C177631 Validity Not Before: Nov 22 14:50:45 2025 GMT Not After : Nov 23 18:31:45 2025 GMT Subject: CN=33C062BF609721CB646CFFDE4FA0405DB310462D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d6:86:9b:5d:4f:00:14:d3:f1:0b:9b:63:20: 0b:46:4a:6b:4b:54:6e:81:6e:f5:24:71:86:61:22: ac:68:f8:2f:27:a9:bf:b3:45:69:59:91:53:a7:6e: 02:fc:f8:3d:29:d9:74:d5:2a:8a:f2:cf:83:89:00: e9:84:2f:97:3f:55:22:6a:a8:59:fb:38:2b:f2:ae: a7:fc:49:84:d4:9a:fa:d0:55:77:38:90:06:9a:f9: 13:83:83:8b:06:00:70:bc:22:7f:f8:85:f2:fd:49: 05:7a:26:f2:06:9c:8b:7a:d4:1b:5d:5b:12:44:a2: 6a:c6:1e:3c:d0:10:66:7c:41:a4:93:2d:81:f4:85: 65:6f:5b:bc:8b:67:80:6e:4c:f8:5e:c5:43:42:75: da:ce:f1:38:50:ee:01:5a:29:f2:43:22:4e:0b:80: f1:e9:4b:39:ee:a2:51:1a:a0:9a:e1:d8:b5:f9:2f: f8:05:ee:59:b6:8f:1c:9e:e2:5e:4c:ca:df:88:00: 0f:e8:38:47:4d:6c:46:0c:5e:61:b4:42:35:2f:37: de:8c:3c:cb:0b:31:ae:55:0b:a4:8a:79:62:3e:4a: 28:0e:a9:ba:69:14:7a:d8:69:4d:06:68:51:4a:51: a5:d4:3a:84:5c:99:eb:f3:3d:e7:0b:2c:b0:97:e9: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C0:62:BF:60:97:21:CB:64:6C:FF:DE:4F:A0:40:5D:B3:10:46:2D X509v3 Authority Key Identifier: keyid:7C:4E:25:71:D3:95:35:EB:83:B4:BD:D4:E4:66:8A:2D:2C:17:76:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/5/7C4E2571D39535EB83B4BDD4E4668A2D2C177631.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:0a:0c:04:0d:4c:ae:8f:5f:3a:fe:ee:c7:5c:4f:51:4c:40: 30:cc:c4:98:c5:95:69:f3:ef:ee:1e:6d:77:68:91:e2:d0:a6: 2c:77:75:a5:8d:5a:3c:78:5c:ee:0d:26:ad:ec:75:42:6f:3c: ce:1e:50:02:9a:c7:d2:1e:8c:3f:b4:96:db:ea:2a:f4:64:39: 9a:0a:2d:7b:b1:ea:be:cb:a1:4e:c3:bf:a4:b9:6a:09:98:1e: 98:64:3e:53:77:6b:95:57:31:65:03:04:57:89:87:15:fa:67: 2b:08:77:d9:ed:30:6b:a9:c2:f5:26:2d:b2:f5:24:d2:ff:0a: 25:43:83:8b:d8:0a:d1:1d:a1:ea:cd:d9:d3:14:25:e7:82:4c: 18:37:04:77:f1:63:19:e5:20:29:68:ac:ad:0b:f4:98:fa:32: c1:f2:82:07:ec:7e:f0:cd:9e:dc:d6:82:0c:18:2d:7c:b3:8a: 37:ed:19:50:ef:f9:34:68:6f:25:0e:ef:09:15:41:5c:3b:3c: 84:ff:04:09:2c:6f:a1:51:19:92:7b:a8:26:71:a2:40:b0:11: 39:83:da:11:ec:4d:6c:df:e0:2b:80:60:f5:20:b7:33:c7:31: 12:23:91:b8:0f:a2:2d:e5:a3:15:fe:f5:42:b8:41:c3:1f:50: 0e:2a:ec:cb -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUIJyLnPo/ri80dCHWGqQv4/b3pxMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQy QzE3NzYzMTAeFw0yNTExMjIxNDUwNDVaFw0yNTExMjMxODMxNDVaMDMxMTAvBgNV BAMTKDMzQzA2MkJGNjA5NzIxQ0I2NDZDRkZERTRGQTA0MDVEQjMxMDQ2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV1oabXU8AFNPxC5tjIAtGSmtL VG6BbvUkcYZhIqxo+C8nqb+zRWlZkVOnbgL8+D0p2XTVKoryz4OJAOmEL5c/VSJq qFn7OCvyrqf8SYTUmvrQVXc4kAaa+RODg4sGAHC8In/4hfL9SQV6JvIGnIt61Btd WxJEomrGHjzQEGZ8QaSTLYH0hWVvW7yLZ4BuTPhexUNCddrO8ThQ7gFaKfJDIk4L gPHpSznuolEaoJrh2LX5L/gF7lm2jxye4l5Myt+IAA/oOEdNbEYMXmG0QjUvN96M PMsLMa5VC6SKeWI+SigOqbppFHrYaU0GaFFKUaXUOoRcmevzPecLLLCX6bK9AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUM8Biv2CXIctkbP/eT6BAXbMQRi0wHwYDVR0j BBgwFoAUfE4lcdOVNeuDtL3U5GaKLSwXdjEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzUvN0M0RTI1NzFEMzk1MzVFQjgzQjRCREQ0RTQ2NjhBMkQyQzE3NzYzMS5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS83QzRFMjU3MUQzOTUzNUVCODNCNEJERDRF NDY2OEEyRDJDMTc3NjMxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi81LzdDNEUyNTcx RDM5NTM1RUI4M0I0QkRENEU0NjY4QTJEMkMxNzc2MzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClCgwE DUyuj186/u7HXE9RTEAwzMSYxZVp8+/uHm13aJHi0KYsd3WljVo8eFzuDSat7HVC bzzOHlACmsfSHow/tJbb6ir0ZDmaCi17seq+y6FOw7+kuWoJmB6YZD5Td2uVVzFl AwRXiYcV+mcrCHfZ7TBrqcL1Ji2y9STS/wolQ4OL2ArRHaHqzdnTFCXngkwYNwR3 8WMZ5SApaKytC/SY+jLB8oIH7H7wzZ7c1oIMGC18s4o37RlQ7/k0aG8lDu8JFUFc OzyE/wQJLG+hURmSe6gmcaJAsBE5g9oR7E1s3+ArgGD1ILczxzESI5G4D6It5aMV /vVCuEHDH1AOKuzL -----END CERTIFICATE-----Generated at Sat Nov 22 22:06:10 2025 by rpki-client