This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json) Hash identifier: ipklAPwtPPitsNPpW7uMfRe9y29a8YDG/KoGgjMsIK0= Subject key identifier: D9:7C:27:E6:E1:EE:48:4E:3B:BA:CE:2E:6B:8C:62:94:FB:02:1A:C2 Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3 Certificate serial: 019AF2AD54C3CB1D0BCFA76BFB4F4AEA3331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft Manifest number: 0C5A Signing time: Sat 06 Dec 2025 08:00:36 +0000 Manifest this update: Sat 06 Dec 2025 08:00:36 +0000 Manifest next update: Sun 07 Dec 2025 08:00:36 +0000 Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=) 2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: Jsd8JZL8ztzGMZjYoMbLSKwjk4bgyPjabDKV1acNYxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:54:c3:cb:1d:0b:cf:a7:6b:fb:4f:4a:ea:33:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3 Validity Not Before: Dec 6 08:00:36 2025 GMT Not After : Dec 7 08:00:36 2025 GMT Subject: CN=d97c27e6e1ee484e3bbace2e6b8c6294fb021ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d5:11:a4:9d:3b:fa:1d:99:9d:d2:20:fa:e4: e9:7e:15:63:5f:c5:80:97:74:73:c2:f9:c7:ce:1a: d5:4a:d6:29:43:76:36:3d:6e:47:30:b8:21:27:43: b8:8e:45:4f:4c:2b:d0:7f:00:2c:f7:9f:63:65:24: af:40:9d:0c:69:3b:38:58:e9:9e:a8:72:17:20:1f: 76:7d:d9:83:c2:69:96:2c:1f:ba:96:33:0a:c4:ea: b6:f2:81:d5:3c:ed:e5:bc:3a:17:af:b6:99:12:71: 2f:2e:4a:82:4d:7a:1a:7a:8f:cb:b2:18:50:ae:c1: de:be:21:c1:55:b1:94:94:a9:04:ed:27:cb:c4:6d: d0:05:05:11:d4:e0:be:d0:61:4a:6d:9c:ec:37:9c: b5:4d:1e:04:d6:4d:67:5c:ab:f9:42:a7:f6:31:bc: fa:c2:07:ff:aa:cb:21:57:99:a7:d3:37:d8:00:d1: 23:61:05:98:5f:4a:38:69:10:06:30:d3:fb:92:33: a6:9d:93:4e:f6:32:e3:84:4f:65:d5:a6:63:9a:ce: ac:0c:e1:99:93:04:66:b9:83:d1:79:cc:b6:27:82: 56:67:c1:63:0b:01:39:de:6d:cf:ba:e8:fd:e0:9f: 0d:c0:85:36:2a:fe:06:11:46:2c:30:e8:e5:34:8c: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7C:27:E6:E1:EE:48:4E:3B:BA:CE:2E:6B:8C:62:94:FB:02:1A:C2 X509v3 Authority Key Identifier: keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:8b:d5:f7:c2:77:c2:db:1b:d5:b5:60:d3:14:96:1a:7d:03: 65:06:a4:e1:15:79:79:e2:4a:29:e5:9e:6b:6d:0d:0d:ad:4d: 98:d5:42:a5:49:3d:f2:4c:4e:57:cc:5b:a7:96:58:40:65:c3: f7:63:64:cf:82:ec:19:2a:70:53:51:f2:4b:c3:86:80:44:fe: 97:85:ff:f6:49:7b:5d:83:36:d7:49:4b:24:9f:a4:a3:8d:0e: b8:bf:c2:e3:87:60:1a:3f:45:9d:45:05:4c:cc:68:85:21:f9: 65:f9:c1:45:46:05:d1:b6:98:7e:6e:df:6a:3b:e7:95:c6:52: 88:80:e4:2c:b2:22:2b:b7:16:d7:d8:18:23:d8:a2:a8:74:3d: 36:c9:1e:e0:70:e9:82:48:50:45:a9:5d:43:d8:f7:f5:cd:38: 6f:44:58:ea:bc:00:65:d9:be:4f:b8:9b:b1:8e:56:63:c3:83: 5b:9e:02:1a:46:5c:32:10:78:b8:c4:7f:51:1e:76:32:c6:10: 73:a7:fb:14:49:9b:e5:84:51:da:e7:66:89:f4:95:96:bd:ad: a7:c0:5e:b0:c0:1a:73:0d:d5:22:5f:04:8a:c2:69:59:2b:20: 5c:ac:25:46:d9:29:88:71:8c:f1:e8:81:7a:47:5a:45:15:ea: c8:43:63:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrVTDyx0Lz6dr+09K6jMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2FmN2Q0MDdmMDQ1ZGJlYTgwNzczMjY1YjA0Y2U1NzRk MGI3ZTMwHhcNMjUxMjA2MDgwMDM2WhcNMjUxMjA3MDgwMDM2WjAzMTEwLwYDVQQD EyhkOTdjMjdlNmUxZWU0ODRlM2JiYWNlMmU2YjhjNjI5NGZiMDIxYWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptURpJ07+h2ZndIg+uTpfhVjX8WA l3RzwvnHzhrVStYpQ3Y2PW5HMLghJ0O4jkVPTCvQfwAs959jZSSvQJ0MaTs4WOme qHIXIB92fdmDwmmWLB+6ljMKxOq28oHVPO3lvDoXr7aZEnEvLkqCTXoaeo/LshhQ rsHeviHBVbGUlKkE7SfLxG3QBQUR1OC+0GFKbZzsN5y1TR4E1k1nXKv5Qqf2Mbz6 wgf/qsshV5mn0zfYANEjYQWYX0o4aRAGMNP7kjOmnZNO9jLjhE9l1aZjms6sDOGZ kwRmuYPRecy2J4JWZ8FjCwE53m3Puuj94J8NwIU2Kv4GEUYsMOjlNIyAXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl8J+bh7khOO7rOLmuMYpT7AhrCMB8GA1UdIwQY MBaAFJJ699QH8EXb6oB3MmWwTOV00LfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQt NTE2ZTBiMzBlYjEwLzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQtNTE2ZTBiMzBlYjEw LzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsovV98J3 wtsb1bVg0xSWGn0DZQak4RV5eeJKKeWea20NDa1NmNVCpUk98kxOV8xbp5ZYQGXD 92Nkz4LsGSpwU1HyS8OGgET+l4X/9kl7XYM210lLJJ+ko40OuL/C44dgGj9FnUUF TMxohSH5ZfnBRUYF0baYfm7fajvnlcZSiIDkLLIiK7cW19gYI9iiqHQ9Nske4HDp gkhQRaldQ9j39c04b0RY6rwAZdm+T7ibsY5WY8ODW54CGkZcMhB4uMR/UR52MsYQ c6f7FEmb5YRR2udmifSVlr2tp8BesMAacw3VIl8EisJpWSsgXKwlRtkpiHGM8eiB ekdaRRXqyENj6g== -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:09 2025 by rpki-client