This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json) Hash identifier: B0/jZUef8YGksg9oCzFHz4UGJIqfrYPMQSOGmeUvJ1c= Subject key identifier: 7E:AB:CE:15:EF:F6:60:F4:FA:D6:72:28:69:8C:B9:0F:B3:9C:26:5F Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3 Certificate serial: 019BF4D10BB71248657B2DB3F321D94AFE64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft Manifest number: 0CE0 Signing time: Sun 25 Jan 2026 11:01:39 +0000 Manifest this update: Sun 25 Jan 2026 11:01:39 +0000 Manifest next update: Mon 26 Jan 2026 11:01:39 +0000 Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: a89jPNpiJyLcqq5pQzgEF0WUI2henhsbpd43SPUDw0s=) 2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d1:0b:b7:12:48:65:7b:2d:b3:f3:21:d9:4a:fe:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3 Validity Not Before: Jan 25 11:01:39 2026 GMT Not After : Jan 26 11:01:39 2026 GMT Subject: CN=7eabce15eff660f4fad67228698cb90fb39c265f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ad:51:b8:26:8f:fa:4c:3d:c0:9d:6d:d9:84: 0d:b4:bd:2e:0b:80:22:8f:c2:4f:7c:e2:69:10:ba: 88:16:f6:82:8c:48:ae:cf:6e:98:9b:a6:2d:10:1b: ff:ee:23:ee:80:fb:f0:20:5b:ff:0e:eb:b8:8e:48: 29:d1:dd:ae:e9:1c:2b:51:ba:81:70:07:49:c7:40: 46:a3:e4:6f:5a:bf:0d:d7:46:41:b0:ad:3d:b4:00: 47:90:98:ed:ff:6d:19:86:45:44:13:05:2c:95:0b: ed:a3:96:36:38:8e:0e:b3:92:ed:63:07:59:56:ba: 9b:c9:cf:78:8c:e4:5a:2d:30:9b:f7:a1:f5:8a:e4: fd:c6:0c:1e:e3:b3:07:de:c8:c5:06:97:a6:3e:72: d4:85:f5:bd:41:25:78:89:a2:2f:5a:be:58:b2:bf: d9:54:02:ec:13:e3:e1:69:40:ed:00:5c:90:2e:88: 5c:10:e1:b8:08:be:5e:8e:c0:fa:e8:45:7c:f6:cf: 87:5e:2b:95:a7:82:d6:00:2d:5e:87:d6:92:58:71: bc:d7:03:b9:2e:76:56:1b:26:4c:b5:74:f3:95:34: f4:34:a5:40:36:fe:f2:00:ee:b6:ff:82:6c:39:96: 5e:a6:d9:e4:5b:6a:e4:58:df:38:b1:d7:7b:8b:0c: 7f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AB:CE:15:EF:F6:60:F4:FA:D6:72:28:69:8C:B9:0F:B3:9C:26:5F X509v3 Authority Key Identifier: keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b2:1d:49:61:bb:73:1f:dc:da:4a:bf:08:43:e4:3d:24:a9: b3:24:7b:89:95:1d:6c:c9:97:a0:63:82:d1:27:9c:64:3e:7a: 96:21:15:ed:55:d1:b2:3f:e0:45:64:be:31:11:28:cd:39:79: 30:3f:6a:60:d4:0b:72:7c:82:7b:2b:d3:72:13:a6:88:cb:ea: 2a:20:ff:8f:12:a2:07:c7:6f:d6:59:2b:de:cc:e6:34:82:82: bf:69:dc:ed:a6:fd:c7:30:1a:ad:24:8f:d3:95:cb:6e:aa:f8: 58:4b:bb:65:6d:9c:ab:7e:fb:5e:f8:2c:4c:7b:10:3f:a0:61: 5d:ad:bd:98:ab:e8:b9:b9:e6:d4:18:08:6c:cb:9a:4c:24:25: ea:60:a6:4c:f3:e0:1f:d0:b9:b7:86:26:c4:1e:f0:7f:c1:c9: ed:5a:17:0f:0d:6a:84:4f:13:8a:d9:fb:ef:16:20:85:b1:d1: 12:36:cf:21:e9:25:ac:d2:d3:a5:ee:0f:f5:b9:1f:b6:09:15: 24:b8:d6:cb:0c:a3:92:ed:a9:e0:83:29:7c:b5:5f:ce:a1:69: 6a:cb:90:ec:29:e6:26:2b:27:0a:ac:13:e6:86:9a:84:51:a7: 4c:7e:ce:e2:2c:4f:88:2e:95:05:eb:4b:41:be:54:81:7f:65: db:49:d5:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Qu3Ekhley2z8yHZSv5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2FmN2Q0MDdmMDQ1ZGJlYTgwNzczMjY1YjA0Y2U1NzRk MGI3ZTMwHhcNMjYwMTI1MTEwMTM5WhcNMjYwMTI2MTEwMTM5WjAzMTEwLwYDVQQD Eyg3ZWFiY2UxNWVmZjY2MGY0ZmFkNjcyMjg2OThjYjkwZmIzOWMyNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a1RuCaP+kw9wJ1t2YQNtL0uC4Ai j8JPfOJpELqIFvaCjEiuz26Ym6YtEBv/7iPugPvwIFv/Duu4jkgp0d2u6RwrUbqB cAdJx0BGo+RvWr8N10ZBsK09tABHkJjt/20ZhkVEEwUslQvto5Y2OI4Os5LtYwdZ Vrqbyc94jORaLTCb96H1iuT9xgwe47MH3sjFBpemPnLUhfW9QSV4iaIvWr5Ysr/Z VALsE+PhaUDtAFyQLohcEOG4CL5ejsD66EV89s+HXiuVp4LWAC1eh9aSWHG81wO5 LnZWGyZMtXTzlTT0NKVANv7yAO62/4JsOZZeptnkW2rkWN84sdd7iwx/IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6rzhXv9mD0+tZyKGmMuQ+znCZfMB8GA1UdIwQY MBaAFJJ699QH8EXb6oB3MmWwTOV00LfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQt NTE2ZTBiMzBlYjEwLzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQtNTE2ZTBiMzBlYjEw LzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrIdSWG7 cx/c2kq/CEPkPSSpsyR7iZUdbMmXoGOC0SecZD56liEV7VXRsj/gRWS+MREozTl5 MD9qYNQLcnyCeyvTchOmiMvqKiD/jxKiB8dv1lkr3szmNIKCv2nc7ab9xzAarSSP 05XLbqr4WEu7ZW2cq377XvgsTHsQP6BhXa29mKvoubnm1BgIbMuaTCQl6mCmTPPg H9C5t4YmxB7wf8HJ7VoXDw1qhE8Titn77xYghbHREjbPIeklrNLTpe4P9bkftgkV JLjWywyjku2p4IMpfLVfzqFpasuQ7CnmJisnCqwT5oaahFGnTH7O4ixPiC6VBetL Qb5UgX9l20nVyw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:57 2026 by rpki-client