This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft File: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft (raw, json) Hash identifier: 8aR0vxHMna7gJ9zJXVjj6kTFY7tiIqGF8N6v8yBxplw= Subject key identifier: 32:66:4B:A6:C9:4C:86:BD:B9:F5:F1:AD:0C:81:CD:EA:DD:3E:43:16 Authority key identifier: B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 Certificate issuer: /CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Certificate serial: 398B0AEAD3C3218C1C0C13A9EEEDC7E9D3B35CE0 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft Manifest number: E7 Signing time: Fri 09 Jan 2026 10:44:31 +0000 Manifest this update: Fri 09 Jan 2026 10:39:31 +0000 Manifest next update: Sat 10 Jan 2026 10:56:31 +0000 Files and hashes: 1: 326130613a363034343a623334333a3a2f34382d3438203d3e20323039373335.roa (hash: gl3XcUXLDzu/fH6TlbsYQk5DZAQEnfCBBv+yPT42ay4=) 2: B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl (hash: H+8kSYP2TQb+jNoFUYpFC0dZmCg1y2wPlNdOer8aIO0=) 3: 326130613a363034343a623330303a3a2f34322d3432203d3e20323134383039.roa (hash: rL0HqOB+MnXMFAFPM77NjHuvY8wsbwqcrhR4UPqYqsc=) 4: 326130613a363034343a623363303a3a2f34342d3434203d3e203434373333.roa (hash: rJLCwnl4uhsE/sIS8YisrOAIem98x56OxfgeBDZO+zk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:8b:0a:ea:d3:c3:21:8c:1c:0c:13:a9:ee:ed:c7:e9:d3:b3:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2 Validity Not Before: Jan 9 10:39:31 2026 GMT Not After : Jan 10 10:56:31 2026 GMT Subject: CN=32664BA6C94C86BDB9F5F1AD0C81CDEADD3E4316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ee:bd:7f:91:02:4f:e2:fa:16:20:d9:a2:52: 8b:7c:8b:02:55:f0:fb:ab:3a:c6:e0:95:ae:d1:65: 06:ea:40:40:90:4f:c1:0d:9c:10:a9:92:79:0a:14: ea:3a:c4:39:38:7a:4b:c4:01:f7:cd:04:f2:b2:37: 8f:b8:96:a4:26:b6:18:b5:8f:1b:d3:53:88:c9:62: 86:e5:67:d1:4f:87:88:24:ac:2e:53:b8:50:49:6e: 87:72:28:07:8c:5e:08:24:7c:71:4d:70:24:1e:36: ad:0c:03:39:b2:6c:0a:e0:60:d3:d5:7d:bc:04:a6: a0:3c:b6:e0:b1:7d:a3:8c:93:bf:e8:75:6a:5b:7c: 85:0e:02:79:1c:19:e5:6d:38:08:de:0c:f4:36:d2: 5e:25:ee:6d:07:e2:31:58:44:fd:db:44:01:e7:a6: b6:99:69:a1:42:bc:10:56:21:dd:ec:6f:9d:13:ca: 28:ee:78:f2:b0:5b:87:b9:5e:df:de:7d:d3:10:7a: c5:d3:93:ba:da:6c:95:4f:c4:44:79:30:b3:b8:87: bc:5d:46:5d:1d:ff:df:00:af:1b:a4:e2:d7:70:c3: df:85:0d:76:ff:1c:37:ec:c0:4b:b5:76:e3:ef:e6: 03:f8:a8:20:f6:1a:bc:a5:ae:f4:b0:2e:18:98:2a: 26:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:66:4B:A6:C9:4C:86:BD:B9:F5:F1:AD:0C:81:CD:EA:DD:3E:43:16 X509v3 Authority Key Identifier: keyid:B3:F0:D7:73:DC:BE:52:3A:3F:B1:F5:D2:6D:00:33:48:74:BC:9F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/2/B3F0D773DCBE523A3FB1F5D26D00334874BC9FB2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:bc:ae:66:c9:c9:75:fa:de:47:ca:3c:ce:40:b9:7f:bf:0c: b1:8c:ec:ac:40:ed:40:42:dc:b0:51:15:6c:b9:fc:0a:5b:21: e8:6c:49:a1:f1:32:0f:f9:67:b9:81:9c:f4:d3:ce:67:6e:e9: df:a5:32:92:67:f5:9f:21:54:c7:61:78:3b:f6:e5:76:a4:fb: 12:ea:3c:5c:d5:55:04:be:86:cb:28:8f:0e:3e:d3:34:cc:d4: 93:b4:29:c6:3d:b4:6a:ac:f4:73:86:c6:26:4a:df:44:b4:08: 65:79:ba:83:0a:cf:a5:4b:92:9c:2b:93:e3:49:55:65:69:34: 6a:72:0b:09:69:26:e4:ce:e1:f6:5f:3e:da:2d:e5:a6:cd:11: 71:56:dc:2c:29:91:44:2f:66:6a:51:44:27:aa:9d:b7:3b:ea: 6a:e1:dd:0b:0f:d1:b8:e7:47:06:b5:f3:87:49:b3:4b:04:d1: 26:28:5d:5e:af:7b:a6:ab:41:1a:34:38:75:80:0a:f7:4b:e5: 17:c1:45:06:ba:b3:4c:bd:c2:c5:12:d9:f7:8e:19:77:c9:77: d5:af:3b:a0:5c:11:78:b9:6a:78:62:9d:fd:ba:1e:d7:78:43: cb:1e:02:26:43:5f:c7:1b:dc:82:24:81:73:6c:63:53:3b:2b: 1d:27:46:55 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUOYsK6tPDIYwcDBOp7u3H6dOzXOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3 NEJDOUZCMjAeFw0yNjAxMDkxMDM5MzFaFw0yNjAxMTAxMDU2MzFaMDMxMTAvBgNV BAMTKDMyNjY0QkE2Qzk0Qzg2QkRCOUY1RjFBRDBDODFDREVBREQzRTQzMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc7r1/kQJP4voWINmiUot8iwJV 8PurOsbgla7RZQbqQECQT8ENnBCpknkKFOo6xDk4ekvEAffNBPKyN4+4lqQmthi1 jxvTU4jJYoblZ9FPh4gkrC5TuFBJbodyKAeMXggkfHFNcCQeNq0MAzmybArgYNPV fbwEpqA8tuCxfaOMk7/odWpbfIUOAnkcGeVtOAjeDPQ20l4l7m0H4jFYRP3bRAHn praZaaFCvBBWId3sb50TyijuePKwW4e5Xt/efdMQesXTk7rabJVPxER5MLO4h7xd Rl0d/98Arxuk4tdww9+FDXb/HDfswEu1duPv5gP4qCD2GrylrvSwLhiYKiYNAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUMmZLpslMhr259fGtDIHN6t0+QxYwHwYDVR0j BBgwFoAUs/DXc9y+Ujo/sfXSbQAzSHS8n7IwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzEwOThjMjMtYTk3Ny00ZjlhLTk3YzktY2Q0ZTc1OWRl YTA5LzIvQjNGMEQ3NzNEQ0JFNTIzQTNGQjFGNUQyNkQwMDMzNDg3NEJDOUZCMi5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS9CM0YwRDc3M0RDQkU1MjNBM0ZCMUY1RDI2 RDAwMzM0ODc0QkM5RkIyLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxMDk4YzIzLWE5NzctNGY5YS05N2M5LWNkNGU3NTlkZWEwOS8yL0IzRjBENzcz RENCRTUyM0EzRkIxRjVEMjZEMDAzMzQ4NzRCQzlGQjIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVvK5m ycl1+t5HyjzOQLl/vwyxjOysQO1AQtywURVsufwKWyHobEmh8TIP+We5gZz0085n bunfpTKSZ/WfIVTHYXg79uV2pPsS6jxc1VUEvobLKI8OPtM0zNSTtCnGPbRqrPRz hsYmSt9EtAhlebqDCs+lS5KcK5PjSVVlaTRqcgsJaSbkzuH2Xz7aLeWmzRFxVtws KZFEL2ZqUUQnqp23O+pq4d0LD9G450cGtfOHSbNLBNEmKF1er3umq0EaNDh1gAr3 S+UXwUUGurNMvcLFEtn3jhl3yXfVrzugXBF4uWp4Yp39uh7XeEPLHgImQ1/HG9yC JIFzbGNTOysdJ0ZV -----END CERTIFICATE-----Generated at Sat Jan 10 02:48:24 2026 by rpki-client