This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.mft File: 5A4616047B182390E89624F93C238F3F455C65B0.mft (raw, json) Hash identifier: XtF3T3KHKHd+T63fwy5KJgxpoqq3RDABbBaxpRwSUzs= Subject key identifier: FA:EE:4D:FC:C0:82:5E:08:D6:88:6E:EA:DE:60:84:EE:B3:74:DD:A1 Authority key identifier: 5A:46:16:04:7B:18:23:90:E8:96:24:F9:3C:23:8F:3F:45:5C:65:B0 Certificate issuer: /CN=5A4616047B182390E89624F93C238F3F455C65B0 Certificate serial: 2123152210A25D0C81FE50A838240BD3FCFF700D Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/5A4616047B182390E89624F93C238F3F455C65B0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.mft Manifest number: 0D Signing time: Sun 11 Jan 2026 00:50:02 +0000 Manifest this update: Sun 11 Jan 2026 00:45:02 +0000 Manifest next update: Mon 12 Jan 2026 01:43:02 +0000 Files and hashes: 1: 5A4616047B182390E89624F93C238F3F455C65B0.crl (hash: ScO4F74zz4b5ppHmE0mh+QoSTBnEUOc6gmxB89+NMeA=) 2: 326130613a363034343a633131303a3a2f34342d3438203d3e20323134323233.roa (hash: 9cQUu/vo+Gr2Ja3UT90AGyJF/DgqJm/btPERTb4/Mj0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.crl rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.mft rsync://krill.47272.net/repo/HYEHOST/5/5A4616047B182390E89624F93C238F3F455C65B0.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:23:15:22:10:a2:5d:0c:81:fe:50:a8:38:24:0b:d3:fc:ff:70:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A4616047B182390E89624F93C238F3F455C65B0 Validity Not Before: Jan 11 00:45:02 2026 GMT Not After : Jan 12 01:43:02 2026 GMT Subject: CN=FAEE4DFCC0825E08D6886EEADE6084EEB374DDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:5a:1c:74:c8:3a:b1:f9:68:60:e5:84:c2: 9d:9c:9b:3d:2a:c1:15:96:81:26:7e:42:22:62:7e: 3c:54:40:0a:67:1b:e9:64:1a:1e:9f:04:da:2f:bc: b2:5a:8c:36:a1:6a:8b:34:c4:99:b2:fa:e6:33:a8: b1:d9:b4:05:55:82:76:87:c3:3e:dc:16:5f:ae:d0: 7c:16:ff:da:ce:17:99:d0:6e:75:d1:7e:26:a4:49: 89:a0:79:f5:d2:ad:57:e2:30:1e:2e:ba:e4:f8:b6: e9:2b:99:ab:8c:b3:41:a9:dd:0a:64:4b:51:c0:2d: a1:fa:7e:9a:0d:65:e9:38:32:b9:7d:8f:f5:43:b5: 95:59:84:5c:d6:f2:74:44:f8:6c:23:26:26:8d:ed: 1a:77:70:28:3e:c1:2d:c7:df:90:d2:75:4f:1c:c0: a0:de:3d:44:0e:ee:bf:11:e3:ac:b9:b5:d8:be:aa: e4:18:c3:ec:cf:ba:73:4d:9e:cb:aa:12:f0:0b:b0: 68:6e:e4:6e:35:ed:4a:ec:f7:0e:83:67:15:6f:ae: 5f:e7:59:b7:2c:aa:d2:7e:a2:5d:de:ed:b8:ea:ab: 25:95:d4:a5:2b:b2:a1:27:e0:2f:9f:5e:92:24:59: 65:46:48:36:c4:bd:76:da:34:d5:06:fb:5c:d5:92: 49:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:EE:4D:FC:C0:82:5E:08:D6:88:6E:EA:DE:60:84:EE:B3:74:DD:A1 X509v3 Authority Key Identifier: keyid:5A:46:16:04:7B:18:23:90:E8:96:24:F9:3C:23:8F:3F:45:5C:65:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/5A4616047B182390E89624F93C238F3F455C65B0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/4a62173e-e6af-40bc-aba8-1f681b1240f8/2/5A4616047B182390E89624F93C238F3F455C65B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:05:bf:4f:85:35:4e:67:06:4d:f0:6e:67:92:e8:71:5f:8d: f4:c4:ff:79:5d:6d:8e:d9:45:da:ba:69:b1:e3:91:ef:7d:5d: 1f:6c:c4:d3:8a:b4:c6:86:4e:8d:8b:8a:cf:bb:ff:b4:2e:ab: 70:65:4f:c1:01:2f:58:b5:88:ae:6d:b9:02:ec:75:0c:24:60: 00:82:51:d8:d2:16:b5:e1:10:b8:17:f7:26:e5:ae:66:af:aa: 74:ab:32:7b:64:69:54:5e:59:ab:66:1d:e2:f9:28:24:da:d8: 93:79:8c:47:ba:91:07:c0:1e:48:9e:48:3b:9f:17:d3:89:35: 09:c5:4f:10:81:75:f7:a6:1b:28:7b:68:e3:aa:6c:4e:01:5a: 42:63:1d:5a:9c:78:e8:4a:bf:fe:20:9d:f1:f7:1a:08:c2:89: 6f:e2:a3:c8:ec:a6:f4:d8:be:95:4e:17:c2:b4:aa:fb:f9:e8: 0a:76:a4:9e:3d:16:d3:00:33:61:d9:a8:0f:a6:43:f1:db:83: 71:ac:dd:02:b0:6e:6e:ce:3f:b1:ec:a1:d8:ae:d5:c1:75:8b: 35:26:4d:2e:14:f3:75:4c:d6:93:9e:22:9a:e6:d8:29:bc:e7: fa:f7:0c:89:22:1f:99:b7:50:aa:51:5a:6e:5a:69:c6:dd:0a: a2:cd:b4:4c -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUISMVIhCiXQyB/lCoOCQL0/z/cA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE0NjE2MDQ3QjE4MjM5MEU4OTYyNEY5M0MyMzhGM0Y0 NTVDNjVCMDAeFw0yNjAxMTEwMDQ1MDJaFw0yNjAxMTIwMTQzMDJaMDMxMTAvBgNV BAMTKEZBRUU0REZDQzA4MjVFMDhENjg4NkVFQURFNjA4NEVFQjM3NEREQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOdlocdMg6sfloYOWEwp2cmz0q wRWWgSZ+QiJifjxUQApnG+lkGh6fBNovvLJajDahaos0xJmy+uYzqLHZtAVVgnaH wz7cFl+u0HwW/9rOF5nQbnXRfiakSYmgefXSrVfiMB4uuuT4tukrmauMs0Gp3Qpk S1HALaH6fpoNZek4Mrl9j/VDtZVZhFzW8nRE+GwjJiaN7Rp3cCg+wS3H35DSdU8c wKDePUQO7r8R46y5tdi+quQYw+zPunNNnsuqEvALsGhu5G417Urs9w6DZxVvrl/n WbcsqtJ+ol3e7bjqqyWV1KUrsqEn4C+fXpIkWWVGSDbEvXbaNNUG+1zVkkk5AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQU+u5N/MCCXgjWiG7q3mCE7rN03aEwHwYDVR0j BBgwFoAUWkYWBHsYI5DoliT5PCOPP0VcZbAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNGE2MjE3M2UtZTZhZi00MGJjLWFiYTgtMWY2ODFiMTI0 MGY4LzIvNUE0NjE2MDQ3QjE4MjM5MEU4OTYyNEY5M0MyMzhGM0Y0NTVDNjVCMC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS81QTQ2MTYwNDdCMTgyMzkwRTg5NjI0Rjkz QzIzOEYzRjQ1NUM2NUIwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzRhNjIxNzNlLWU2YWYtNDBiYy1hYmE4LTFmNjgxYjEyNDBmOC8yLzVBNDYxNjA0 N0IxODIzOTBFODk2MjRGOTNDMjM4RjNGNDU1QzY1QjAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABBb9P hTVOZwZN8G5nkuhxX430xP95XW2O2UXaummx45HvfV0fbMTTirTGhk6Ni4rPu/+0 LqtwZU/BAS9YtYiubbkC7HUMJGAAglHY0ha14RC4F/cm5a5mr6p0qzJ7ZGlUXlmr Zh3i+Sgk2tiTeYxHupEHwB5Inkg7nxfTiTUJxU8QgXX3phsoe2jjqmxOAVpCYx1a nHjoSr/+IJ3x9xoIwolv4qPI7Kb02L6VThfCtKr7+egKdqSePRbTADNh2agPpkPx 24NxrN0CsG5uzj+x7KHYrtXBdYs1Jk0uFPN1TNaTniKa5tgpvOf69wyJIh+Zt1Cq UVpuWmnG3QqizbRM -----END CERTIFICATE-----Generated at Sun Jan 11 04:37:30 2026 by rpki-client