This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
File: 6003354361AF66B2F37153B9A7365EE572F6822E.mft (raw, json)
Hash identifier: xmQYVjxzWtrV087rSJpSuMzfSWodQvlsyYC4QIEA+uc=
Subject key identifier: EC:D6:30:71:72:FE:1C:BF:F4:4C:BF:14:DE:43:03:65:DA:58:62:FD
Authority key identifier: 60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
Certificate issuer: /CN=6003354361AF66B2F37153B9A7365EE572F6822E
Certificate serial: 6093C55B4BE0A2EF5D2681C6C0F0389F08ADF10C
Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
Manifest number: BF
Signing time: Sat 22 Nov 2025 09:38:16 +0000
Manifest this update: Sat 22 Nov 2025 09:33:16 +0000
Manifest next update: Sun 23 Nov 2025 11:16:16 +0000
Files and hashes: 1: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: hj2OdTJzJ/lMhD2+bSlhDwRPDkQ5RRLmuL3t94lTgMc=)
2: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: hUN5naRtN06Ia8W+gZVWL0PjC5030tIqv7AoahnILWU=)
3: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: QFhWc/Qi1XwFuZFFUxrJkVVsMNht6HRi/KIA9CCJysc=)
4: 6003354361AF66B2F37153B9A7365EE572F6822E.crl (hash: Vvzu07EsD+POAZsaZqdRTWuBrtfWET+gc1r859ns02Q=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl
rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 11:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:93:c5:5b:4b:e0:a2:ef:5d:26:81:c6:c0:f0:38:9f:08:ad:f1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6003354361AF66B2F37153B9A7365EE572F6822E
Validity
Not Before: Nov 22 09:33:16 2025 GMT
Not After : Nov 23 11:16:16 2025 GMT
Subject: CN=ECD6307172FE1CBFF44CBF14DE430365DA5862FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:82:64:30:99:84:1a:be:e6:84:53:a3:22:6f:
00:17:c4:10:4b:27:e8:2a:14:b2:f1:75:a6:ab:fa:
0a:cf:60:b7:ff:b1:38:de:70:7a:33:4f:9c:8f:42:
7d:a7:99:16:9a:01:71:84:39:4e:46:9b:3c:c0:52:
fb:11:22:fb:dd:69:fb:13:0d:75:2f:21:90:c1:74:
bf:5f:af:e9:6e:84:41:05:b8:8d:9a:97:ce:f0:24:
29:64:95:53:78:88:92:14:85:46:1b:0a:84:62:b9:
84:2e:e4:b3:da:58:c4:21:ef:f5:0c:d2:40:d6:18:
9c:c3:15:f0:7b:83:23:96:80:93:63:20:3c:8f:a4:
60:c4:f1:ae:1b:12:bf:c1:76:69:dc:59:9d:78:96:
2c:e6:1f:d3:dc:17:0d:10:65:2c:64:bc:df:3e:8a:
fb:ec:e1:61:04:ab:6b:32:e7:b3:4e:57:89:a4:ba:
b6:26:d7:71:ff:48:74:9c:96:ea:c0:c0:e5:98:92:
75:80:d3:03:f8:43:40:d5:ae:95:68:c9:e4:53:75:
3a:d7:c6:81:33:21:d6:07:50:af:ad:ff:89:e3:59:
68:31:ff:73:c5:ab:66:d0:95:e4:26:84:55:14:97:
d7:87:9e:06:a1:6e:82:0f:ff:2a:6e:7b:d2:13:40:
a5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:30:71:72:FE:1C:BF:F4:4C:BF:14:DE:43:03:65:DA:58:62:FD
X509v3 Authority Key Identifier:
keyid:60:03:35:43:61:AF:66:B2:F3:71:53:B9:A7:36:5E:E5:72:F6:82:2E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/6003354361AF66B2F37153B9A7365EE572F6822E.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/6/6003354361AF66B2F37153B9A7365EE572F6822E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6c:77:4d:67:fa:e7:f1:59:1f:65:1d:e5:cc:05:51:30:f1:
97:29:91:a1:ae:c6:73:ab:cd:9d:0c:03:fe:99:f8:e0:70:57:
99:5f:20:0e:41:f5:59:5e:7c:4e:22:0c:c7:d3:53:08:ee:17:
9b:63:d2:3c:4a:f1:7a:85:3b:61:06:74:96:ee:d0:a3:3c:08:
f6:5f:8a:84:5a:f3:31:a4:0f:98:c3:9a:88:d2:c5:20:ef:7d:
84:25:fe:3d:65:a3:13:3d:bc:6f:90:f7:b1:6e:fc:b1:69:4e:
2e:d5:30:30:9d:3d:d8:ea:22:83:31:d9:26:f4:44:0c:f7:15:
2f:a9:68:20:81:66:4f:0d:cd:30:ef:0c:ea:c3:38:4f:f3:72:
20:5c:4a:fe:37:5a:43:3e:c6:1d:d6:1d:60:f8:73:11:63:4f:
11:d1:4f:c3:0a:86:81:cf:26:6f:1b:e3:cd:10:06:5e:8b:8d:
3c:5d:b1:b6:7e:ca:f2:ff:e2:56:f5:8a:dd:d9:86:f2:ee:ba:
02:94:14:d2:9b:41:95:a1:68:95:31:e8:26:39:80:08:8f:75:
be:3f:77:4d:a9:40:54:70:51:48:78:2c:9d:6b:83:db:33:f6:
7b:78:9b:32:72:b8:64:00:4a:6c:b9:d0:1d:95:be:ef:64:28:
7f:e2:27:67
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUYJPFW0vgou9dJoHGwPA4nwit8QwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3
MkY2ODIyRTAeFw0yNTExMjIwOTMzMTZaFw0yNTExMjMxMTE2MTZaMDMxMTAvBgNV
BAMTKEVDRDYzMDcxNzJGRTFDQkZGNDRDQkYxNERFNDMwMzY1REE1ODYyRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqgmQwmYQavuaEU6MibwAXxBBL
J+gqFLLxdaar+grPYLf/sTjecHozT5yPQn2nmRaaAXGEOU5GmzzAUvsRIvvdafsT
DXUvIZDBdL9fr+luhEEFuI2al87wJClklVN4iJIUhUYbCoRiuYQu5LPaWMQh7/UM
0kDWGJzDFfB7gyOWgJNjIDyPpGDE8a4bEr/BdmncWZ14lizmH9PcFw0QZSxkvN8+
ivvs4WEEq2sy57NOV4mkurYm13H/SHSclurAwOWYknWA0wP4Q0DVrpVoyeRTdTrX
xoEzIdYHUK+t/4njWWgx/3PFq2bQleQmhFUUl9eHngahboIP/ypue9ITQKVZAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQU7NYwcXL+HL/0TL8U3kMDZdpYYv0wHwYDVR0j
BBgwFoAUYAM1Q2GvZrLzcVO5pzZe5XL2gi4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4
M2U3LzYvNjAwMzM1NDM2MUFGNjZCMkYzNzE1M0I5QTczNjVFRTU3MkY2ODIyRS5j
cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3
MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS82MDAzMzU0MzYxQUY2NkIyRjM3MTUzQjlB
NzM2NUVFNTcyRjY4MjJFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF
BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy82LzYwMDMzNTQz
NjFBRjY2QjJGMzcxNTNCOUE3MzY1RUU1NzJGNjgyMkUubWZ0MBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2bHdN
Z/rn8VkfZR3lzAVRMPGXKZGhrsZzq82dDAP+mfjgcFeZXyAOQfVZXnxOIgzH01MI
7hebY9I8SvF6hTthBnSW7tCjPAj2X4qEWvMxpA+Yw5qI0sUg732EJf49ZaMTPbxv
kPexbvyxaU4u1TAwnT3Y6iKDMdkm9EQM9xUvqWgggWZPDc0w7wzqwzhP83IgXEr+
N1pDPsYd1h1g+HMRY08R0U/DCoaBzyZvG+PNEAZei408XbG2fsry/+JW9Yrd2Yby
7roClBTSm0GVoWiVMegmOYAIj3W+P3dNqUBUcFFIeCyda4PbM/Z7eJsycrhkAEps
udAdlb7vZCh/4idn
-----END CERTIFICATE-----
Generated at Sat Nov 22 22:05:08 2025 by rpki-client