This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json) Hash identifier: 6saqF2RBhe1zuEhh7ydNXzinWItF5mhd+ilo6kjYDi8= Subject key identifier: 8D:0E:0D:83:01:1B:77:7D:92:B2:79:C3:14:D8:DC:FB:5F:7C:0F:58 Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 2D2B7CE78AB28D0B6C9A5E7E59D9883B95ABF93A Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft Manifest number: A7 Signing time: Sat 22 Nov 2025 14:53:40 +0000 Manifest this update: Sat 22 Nov 2025 14:48:40 +0000 Manifest next update: Sun 23 Nov 2025 16:08:40 +0000 Files and hashes: 1: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=) 2: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: U6IUpgzsB3YcLsIrjG+3lNq62S+6dTn/fBdK1Q63nPY=) 3: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=) 4: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 11:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:2b:7c:e7:8a:b2:8d:0b:6c:9a:5e:7e:59:d9:88:3b:95:ab:f9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Nov 22 14:48:40 2025 GMT Not After : Nov 23 16:08:40 2025 GMT Subject: CN=8D0E0D83011B777D92B279C314D8DCFB5F7C0F58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:ef:34:18:ee:03:c6:71:78:ab:bd:d5:1f: ab:72:df:ea:88:58:d2:ed:ec:25:9a:81:39:fd:ae: 72:19:78:27:c9:1a:1b:f8:30:d9:d2:04:02:74:b2: 97:ef:d2:62:08:b0:d9:c9:f4:75:8e:12:19:ef:ed: ae:a5:5c:1f:f0:98:07:59:09:02:84:1d:e4:59:5f: be:d2:a2:21:48:78:9e:ba:3c:5d:d4:80:08:5d:67: 8f:58:05:ae:45:ed:40:f2:4c:24:34:bf:e8:f2:d2: f7:bc:7c:ef:36:01:4a:bd:21:ad:08:bf:13:fa:b9: 8a:be:83:57:cc:c8:f6:12:27:16:8e:39:49:86:60: 71:c7:5a:64:c1:f1:00:50:b2:6c:91:5c:41:02:92: 57:f4:df:c6:37:5d:a2:f4:ee:81:9d:e2:5b:2a:11: 61:39:06:18:f0:2a:f8:f4:06:c8:40:5c:96:75:88: a7:a4:30:7a:c1:6c:ee:d5:11:4a:c5:b7:7c:ba:0f: 20:ff:84:e5:8b:9e:0a:d1:71:89:0e:37:11:eb:26: 3d:86:ee:d0:5d:52:6a:03:7a:1a:4b:d4:28:e1:69: 30:e6:88:e7:28:5f:17:87:13:bc:47:49:ca:ed:10: 1c:3f:bd:f4:92:65:04:a3:38:81:40:26:31:6e:c7: dd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0E:0D:83:01:1B:77:7D:92:B2:79:C3:14:D8:DC:FB:5F:7C:0F:58 X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:e7:66:53:6c:ae:f8:a7:a5:2d:4f:71:e4:93:95:87:1f:4a: b4:e0:ff:24:f9:9f:45:03:3d:62:e3:4f:04:d7:a4:64:93:48: c0:4c:87:aa:1b:4d:c8:62:7a:cd:5b:95:7a:18:2b:cd:e6:1f: a7:ed:ad:a3:04:34:86:a9:0a:51:85:40:ea:37:3d:22:d1:c1: 95:35:23:cc:1c:99:52:30:73:25:3e:47:0b:50:a3:a2:68:5f: 99:e4:66:15:21:69:54:3c:08:f6:90:89:32:71:ea:f6:ee:8a: 18:7a:8c:f0:30:ee:8a:a9:a2:0b:64:7f:eb:01:c5:f4:9a:df: 80:01:a6:36:d6:c0:ab:58:78:cb:57:03:5c:51:50:5c:88:b3: e8:5e:e2:b2:7b:5a:de:d8:3e:a5:24:97:04:a9:9a:cf:72:4f: 15:13:3d:17:99:4a:08:24:ca:f8:64:ae:6f:b3:dc:f7:c5:38: dd:34:9e:00:95:09:59:e0:70:df:e6:f3:25:b5:32:32:77:a8: 96:11:01:be:af:d5:9a:fd:33:63:7e:f2:9b:58:ab:81:f6:5d: 7e:a4:b2:a8:15:66:ce:74:df:7a:47:f0:b4:21:b4:5b:ec:8a: dd:96:e3:ee:e9:e4:85:1e:25:c3:e4:22:bf:95:d4:19:92:bd: a0:da:cb:eb -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIULSt854qyjQtsml5+WdmIO5Wr+TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNTExMjIxNDQ4NDBaFw0yNTExMjMxNjA4NDBaMDMxMTAvBgNV BAMTKDhEMEUwRDgzMDExQjc3N0Q5MkIyNzlDMzE0RDhEQ0ZCNUY3QzBGNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7O80GO4DxnF4q73VH6ty3+qI WNLt7CWagTn9rnIZeCfJGhv4MNnSBAJ0spfv0mIIsNnJ9HWOEhnv7a6lXB/wmAdZ CQKEHeRZX77SoiFIeJ66PF3UgAhdZ49YBa5F7UDyTCQ0v+jy0ve8fO82AUq9Ia0I vxP6uYq+g1fMyPYSJxaOOUmGYHHHWmTB8QBQsmyRXEECklf038Y3XaL07oGd4lsq EWE5BhjwKvj0BshAXJZ1iKekMHrBbO7VEUrFt3y6DyD/hOWLngrRcYkONxHrJj2G 7tBdUmoDehpL1CjhaTDmiOcoXxeHE7xHScrtEBw/vfSSZQSjOIFAJjFux90PAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUjQ4NgwEbd32SsnnDFNjc+198D1gwHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yL0IzRjBENzcz RENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCo52ZT bK74p6UtT3Hkk5WHH0q04P8k+Z9FAz1i408E16Rkk0jATIeqG03IYnrNW5V6GCvN 5h+n7a2jBDSGqQpRhUDqNz0i0cGVNSPMHJlSMHMlPkcLUKOiaF+Z5GYVIWlUPAj2 kIkycer27ooYeozwMO6KqaILZH/rAcX0mt+AAaY21sCrWHjLVwNcUVBciLPoXuKy e1re2D6lJJcEqZrPck8VEz0XmUoIJMr4ZK5vs9z3xTjdNJ4AlQlZ4HDf5vMltTIy d6iWEQG+r9Wa/TNjfvKbWKuB9l1+pLKoFWbOdN96R/C0IbRb7IrdluPu6eSFHiXD 5CK/ldQZkr2g2svr -----END CERTIFICATE-----Generated at Sat Nov 22 22:05:09 2025 by rpki-client