This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: npEaHcm/xFd0WiVsxFbfm2nx4ozNwj7tPqzdpEelAkw= Subject key identifier: 27:68:B3:2B:CE:D2:F6:E5:E3:08:00:D3:7B:6C:0B:A0:45:07:E2:E0 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 726CBA04F614556D315FF52B0DD15670E1CCAB1F Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: C2 Signing time: Sat 22 Nov 2025 20:23:10 +0000 Manifest this update: Sat 22 Nov 2025 20:18:10 +0000 Manifest next update: Sun 23 Nov 2025 22:57:10 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: oyOKtcF+eLA8tno98b2RzD7EUnmX/qra5p5lTCO5y/4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 11:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:6c:ba:04:f6:14:55:6d:31:5f:f5:2b:0d:d1:56:70:e1:cc:ab:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Nov 22 20:18:10 2025 GMT Not After : Nov 23 22:57:10 2025 GMT Subject: CN=2768B32BCED2F6E5E30800D37B6C0BA04507E2E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b4:8a:fc:e1:24:f3:72:73:5c:63:7e:e3:b8: 20:9e:19:c5:e4:08:da:d9:0b:88:18:eb:a6:f3:67: a7:62:a6:21:91:b4:e2:84:93:26:b7:66:a6:bd:6a: 21:7a:3f:9b:79:35:1a:8b:51:cd:50:ef:4a:d4:5f: cd:0f:18:09:e4:01:44:9a:44:a6:85:bc:7f:75:f4: d7:c2:f0:19:0e:35:6e:29:99:60:77:87:8e:b4:3a: 7d:ad:33:93:4d:de:36:db:57:b8:52:2e:59:c4:35: 7d:69:13:6b:f7:d1:b7:64:ab:be:ea:be:9f:d9:96: 6c:58:af:94:cb:b1:be:a7:9f:03:cf:e1:86:77:0f: f9:53:26:79:da:c7:6c:98:08:48:40:81:2e:d4:e8: a9:39:89:ab:a4:6d:80:38:36:fd:ca:d1:07:31:4f: c6:0f:8e:68:c0:8e:a6:1b:46:11:7a:17:f4:d4:09: b6:5a:bf:77:b1:61:1c:55:5b:c9:14:9b:11:74:3b: dc:6f:63:b8:32:35:56:31:b7:e0:db:64:40:6e:0c: 27:81:30:db:65:e9:a9:7d:bf:7b:ab:12:03:35:3c: 7b:d7:6c:fd:0b:75:65:cf:76:f1:06:c4:82:fa:3e: 27:69:9c:e1:2f:be:3d:7a:32:6f:43:f7:63:62:dc: fc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:68:B3:2B:CE:D2:F6:E5:E3:08:00:D3:7B:6C:0B:A0:45:07:E2:E0 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:ec:6e:29:29:9f:04:04:f6:33:9b:99:86:a5:bf:fa:50:66: bc:33:6d:51:7b:98:f9:33:77:73:b2:c2:c1:93:f8:c1:82:e9: 70:21:e7:9d:71:22:5c:ee:2b:6d:83:32:b4:b9:3c:cf:84:12: ce:69:fc:c8:15:49:52:c3:5d:e1:76:80:24:65:44:f4:2a:21: 00:0b:1d:33:34:8d:6c:67:3d:07:54:2b:43:9a:c9:09:49:2a: 6f:ed:0a:fe:3a:2b:3f:54:b0:2f:9f:f1:81:57:8a:aa:04:41: e4:18:24:b2:f3:86:87:6f:73:12:8a:8f:ef:be:b4:bb:ef:87: 9a:e9:88:63:bb:b5:87:e9:22:7c:90:d8:90:e0:75:56:9a:ea: 2c:04:1e:ad:6e:e1:1f:7f:db:ba:70:9e:22:79:83:ea:da:91: cc:7b:9b:64:14:25:25:72:4b:16:42:9e:90:aa:28:42:64:71: 1c:c8:e8:22:78:c2:ad:99:10:cf:07:9e:52:09:31:ab:73:bd: c9:47:2f:b7:ac:85:58:a2:7b:d9:37:f5:49:0d:91:87:e7:75: 68:7d:e4:8a:ec:8c:47:c0:e2:02:10:9b:6f:09:26:81:cd:e3: a8:a7:c9:9f:49:be:23:f3:dc:26:c1:f7:f6:c3:be:fb:a6:00: 0c:a3:cd:e7 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUcmy6BPYUVW0xX/UrDdFWcOHMqx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNTExMjIyMDE4MTBaFw0yNTExMjMyMjU3MTBaMDMxMTAvBgNV BAMTKDI3NjhCMzJCQ0VEMkY2RTVFMzA4MDBEMzdCNkMwQkEwNDUwN0UyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPtIr84STzcnNcY37juCCeGcXk CNrZC4gY66bzZ6dipiGRtOKEkya3Zqa9aiF6P5t5NRqLUc1Q70rUX80PGAnkAUSa RKaFvH919NfC8BkONW4pmWB3h460On2tM5NN3jbbV7hSLlnENX1pE2v30bdkq77q vp/ZlmxYr5TLsb6nnwPP4YZ3D/lTJnnax2yYCEhAgS7U6Kk5iaukbYA4Nv3K0Qcx T8YPjmjAjqYbRhF6F/TUCbZav3exYRxVW8kUmxF0O9xvY7gyNVYxt+DbZEBuDCeB MNtl6al9v3urEgM1PHvXbP0LdWXPdvEGxIL6PidpnOEvvj16Mm9D92Ni3Px1AgMB AAGjggJSMIICTjAdBgNVHQ4EFgQUJ2izK87S9uXjCADTe2wLoEUH4uAwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAi7G4p KZ8EBPYzm5mGpb/6UGa8M21Re5j5M3dzssLBk/jBgulwIeedcSJc7ittgzK0uTzP hBLOafzIFUlSw13hdoAkZUT0KiEACx0zNI1sZz0HVCtDmskJSSpv7Qr+Ois/VLAv n/GBV4qqBEHkGCSy84aHb3MSio/vvrS774ea6Yhju7WH6SJ8kNiQ4HVWmuosBB6t buEff9u6cJ4ieYPq2pHMe5tkFCUlcksWQp6QqihCZHEcyOgieMKtmRDPB55SCTGr c73JRy+3rIVYonvZN/VJDZGH53VofeSK7IxHwOICEJtvCSaBzeOop8mfSb4j89wm wff2w777pgAMo83n -----END CERTIFICATE-----Generated at Sat Nov 22 22:06:24 2025 by rpki-client