This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft File: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft (raw, json) Hash identifier: 1vTd9sTuy9jWEaVvxWbhMwgbvgalYt8xuRJAbMPha6Q= Subject key identifier: 2E:B6:FF:8B:72:70:CE:91:FC:62:BA:F9:73:74:04:5A:B8:63:59:01 Authority key identifier: 2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD Certificate issuer: /CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Certificate serial: 02F12C962095AAC1704A6C292D6CCA4A9D044ED4 Authority info access: rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft Manifest number: 0107 Signing time: Sat 10 Jan 2026 23:15:47 +0000 Manifest this update: Sat 10 Jan 2026 23:10:47 +0000 Manifest next update: Mon 12 Jan 2026 02:41:47 +0000 Files and hashes: 1: 2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl (hash: B5zRzjGQFxsRX+WCElMc67OLvkjSRzII37SuKBTnBVw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.crl rsync://krill.47272.net/repo/HYEHOST/5/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/C3CF41898936CB9C573DB1EAAB94C6E669951FD7.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 20:58:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f1:2c:96:20:95:aa:c1:70:4a:6c:29:2d:6c:ca:4a:9d:04:4e:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F2C3124012C07F6775A6241DFC63BE0414C98AD Validity Not Before: Jan 10 23:10:47 2026 GMT Not After : Jan 12 02:41:47 2026 GMT Subject: CN=2EB6FF8B7270CE91FC62BAF97374045AB8635901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:01:b9:bd:6d:70:ad:05:7a:ce:fc:5d:6d: 9b:56:08:15:cf:21:f8:7a:e6:51:e2:c5:d2:a7:fd: 39:ca:df:63:3a:93:fd:8c:9d:27:83:6f:ff:5b:ea: 9d:d2:1b:b8:5a:08:2d:94:8c:f8:5b:21:67:f4:2d: b0:f2:1e:8a:e3:be:05:0a:d8:47:be:df:8a:34:e5: 4f:c8:93:6e:52:8e:3b:c6:b9:14:49:f4:1a:58:4e: 7f:d5:d1:c9:f8:dd:a2:86:31:b1:fa:40:82:aa:72: 77:c7:9c:b4:af:f6:d2:92:01:68:c4:4f:a8:85:74: f2:b3:db:94:24:43:7d:0c:9a:f8:f7:1c:72:8c:72: 4e:94:cb:a5:3f:a0:f2:09:13:25:6f:75:39:3c:0c: 79:46:ac:77:f9:82:8f:17:03:1e:d8:36:c1:ac:ba: ba:76:65:2f:15:3c:08:49:f1:00:0f:9a:8f:a6:a1: 4c:2e:42:ba:72:f2:47:87:aa:f3:0a:2d:7f:9d:a2: e7:89:4f:19:b8:99:1a:02:2e:9b:eb:a4:cf:dc:1c: c3:a4:2f:59:51:e3:bf:ef:b1:ac:15:22:9e:a3:04: c6:9e:42:e7:6a:b7:87:20:62:23:4f:6c:f4:7d:eb: 15:2a:d9:d2:e7:07:72:55:3e:bb:b8:de:27:4b:03: 38:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B6:FF:8B:72:70:CE:91:FC:62:BA:F9:73:74:04:5A:B8:63:59:01 X509v3 Authority Key Identifier: keyid:2F:2C:31:24:01:2C:07:F6:77:5A:62:41:DF:C6:3B:E0:41:4C:98:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.crl Authority Information Access: CA Issuers - URI:rsync://krill.47272.net/repo/HYEHOST/5/2F2C3124012C07F6775A6241DFC63BE0414C98AD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/9/2F2C3124012C07F6775A6241DFC63BE0414C98AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f1:04:05:ed:3c:97:41:97:2f:8b:1c:62:05:88:d9:99:ee: 88:2e:97:53:46:27:f7:a8:8c:54:09:f1:a0:9b:6a:61:3e:ea: ef:48:62:ac:40:04:27:3a:9b:fb:c9:dd:c3:90:2a:c9:96:cb: a3:29:07:83:4e:ae:a5:9c:54:a2:ad:d8:9a:9d:c0:51:45:71: 13:e8:e4:70:fa:5e:b8:cf:77:fe:b9:db:c6:e5:94:b9:9a:d3: 5c:14:9b:54:87:df:d7:ae:1c:43:b9:98:08:11:3e:da:27:af: 38:97:95:8a:2a:39:19:90:6b:30:be:31:2a:c6:2f:1b:a5:75: e5:9f:ed:17:d0:b9:c5:5f:e6:e5:d7:d1:2b:b5:40:a5:0a:32: d4:1e:ed:73:5f:44:4f:ee:f5:01:a4:04:2b:13:ab:f7:db:39: a7:b4:a0:cf:8b:b9:4a:df:30:6f:00:81:9d:1a:65:a3:47:b9: 9d:25:40:a4:8c:70:3c:67:80:e5:20:60:cd:07:c4:ee:f8:b5: 2d:c4:03:1e:aa:4b:8e:e2:f4:e3:de:72:63:d8:78:95:15:95: fc:b1:cc:94:41:8a:2a:be:fd:96:e6:4a:db:c8:71:f8:0d:7c: e8:4d:27:25:f4:45:bf:d2:9b:7d:13:3e:55:66:3c:09:29:39: b2:80:15:f6 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgIUAvEsliCVqsFwSmwpLWzKSp0ETtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0 MTRDOThBRDAeFw0yNjAxMTAyMzEwNDdaFw0yNjAxMTIwMjQxNDdaMDMxMTAvBgNV BAMTKDJFQjZGRjhCNzI3MENFOTFGQzYyQkFGOTczNzQwNDVBQjg2MzU5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC15gG5vW1wrQV6zvxdbZtWCBXP Ifh65lHixdKn/TnK32M6k/2MnSeDb/9b6p3SG7haCC2UjPhbIWf0LbDyHorjvgUK 2Ee+34o05U/Ik25SjjvGuRRJ9BpYTn/V0cn43aKGMbH6QIKqcnfHnLSv9tKSAWjE T6iFdPKz25QkQ30Mmvj3HHKMck6Uy6U/oPIJEyVvdTk8DHlGrHf5go8XAx7YNsGs urp2ZS8VPAhJ8QAPmo+moUwuQrpy8keHqvMKLX+doueJTxm4mRoCLpvrpM/cHMOk L1lR47/vsawVIp6jBMaeQudqt4cgYiNPbPR96xUq2dLnB3JVPru43idLAzgPAgMB AAGjggJSMIICTjAdBgNVHQ4EFgQULrb/i3JwzpH8Yrr5c3QEWrhjWQEwHwYDVR0j BBgwFoAULywxJAEsB/Z3WmJB38Y74EFMmK0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzkvMkYyQzMxMjQwMTJDMDdGNjc3NUE2MjQxREZDNjNCRTA0MTRDOThBRC5j cmwwbwYIKwYBBQUHAQEEYzBhMF8GCCsGAQUFBzAChlNyc3luYzovL2tyaWxsLjQ3 MjcyLm5ldC9yZXBvL0hZRUhPU1QvNS8yRjJDMzEyNDAxMkMwN0Y2Nzc1QTYyNDFE RkM2M0JFMDQxNEM5OEFELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC85LzJGMkMzMTI0 MDEyQzA3RjY3NzVBNjI0MURGQzYzQkUwNDE0Qzk4QUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl8QQF 7TyXQZcvixxiBYjZme6ILpdTRif3qIxUCfGgm2phPurvSGKsQAQnOpv7yd3DkCrJ lsujKQeDTq6lnFSirdiancBRRXET6ORw+l64z3f+udvG5ZS5mtNcFJtUh9/XrhxD uZgIET7aJ684l5WKKjkZkGswvjEqxi8bpXXln+0X0LnFX+bl19ErtUClCjLUHu1z X0RP7vUBpAQrE6v32zmntKDPi7lK3zBvAIGdGmWjR7mdJUCkjHA8Z4DlIGDNB8Tu +LUtxAMeqkuO4vTj3nJj2HiVFZX8scyUQYoqvv2W5krbyHH4DXzoTScl9EW/0pt9 Ez5VZjwJKTmygBX2 -----END CERTIFICATE-----Generated at Sun Jan 11 04:39:08 2026 by rpki-client