This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft File: knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json) Hash identifier: 8sKZKQpECH9WZ2Sd7BueZYMg4CtP1047qZxKsxrw9q4= Subject key identifier: 39:4F:9D:25:7E:F5:1C:7E:50:CE:03:04:3F:E8:AF:F3:4A:2A:4B:94 Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B Certificate issuer: /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b Certificate serial: 019AF31B6032DE97E408447BD9D18340E038 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft Manifest number: 1532 Signing time: Sat 06 Dec 2025 10:00:48 +0000 Manifest this update: Sat 06 Dec 2025 10:00:48 +0000 Manifest next update: Sun 07 Dec 2025 10:00:48 +0000 Files and hashes: 1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: 3ym7Qgb1/vGgBxveQMiJCEhJxgasQmSY2EtJfOQk7x0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:60:32:de:97:e4:08:44:7b:d9:d1:83:40:e0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b Validity Not Before: Dec 6 10:00:48 2025 GMT Not After : Dec 7 10:00:48 2025 GMT Subject: CN=394f9d257ef51c7e50ce03043fe8aff34a2a4b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e0:22:ae:f5:a4:14:dc:dc:f3:52:18:4e:d3: 93:cb:f6:20:ef:84:31:75:0b:92:7f:05:c3:f5:5a: a9:1c:69:59:3a:bb:39:81:64:2f:4e:56:34:35:dd: ca:37:47:65:9c:8c:0b:28:f2:6c:70:a8:86:21:a2: 74:42:ae:89:74:31:c0:bc:c4:fa:a6:f8:25:57:ed: 9f:c0:2f:f0:f8:e9:79:b6:2c:ad:74:1c:be:7f:8b: 7b:d4:a4:82:d6:3b:be:36:c5:34:e1:24:dd:bb:3d: 35:7b:43:55:93:ca:b8:9a:25:a7:95:5a:67:b0:db: a2:87:c8:0c:49:75:b1:ef:04:32:52:a5:ba:19:f9: c8:1b:49:cc:71:47:f7:78:39:b1:f9:41:2f:74:80: 05:a0:6f:c6:8d:3c:96:9e:f7:b6:d2:02:89:ef:08: 8e:e2:38:3d:be:c2:3c:eb:f1:2e:14:64:60:48:0a: 7f:fc:c4:28:55:76:18:0a:b6:2a:d5:e2:87:e1:06: 93:3f:da:eb:93:47:e8:84:6b:2a:83:e7:3a:32:b3: 6d:55:92:3e:53:1a:06:34:ab:34:4f:b5:c4:5b:a7: 72:39:23:b6:95:56:23:d2:c0:9a:de:38:15:77:e6: 5b:7e:10:7f:13:72:7a:04:18:b4:b7:8f:ef:c7:29: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4F:9D:25:7E:F5:1C:7E:50:CE:03:04:3F:E8:AF:F3:4A:2A:4B:94 X509v3 Authority Key Identifier: keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:9b:af:ba:06:3a:74:c5:6e:a1:0c:4f:3c:61:5d:1e:cd:3f: ae:ca:56:45:65:8e:b4:ac:8f:a4:8e:fc:85:f1:6a:7a:8d:cd: 4d:ca:8b:4d:91:e8:24:36:cc:62:72:1a:e5:c4:c9:b7:13:19: 41:f0:75:06:65:e3:41:af:c4:3e:c1:7a:fa:31:b7:67:3f:9a: e9:bc:78:cd:91:1a:cb:de:b1:62:57:60:47:68:c3:50:26:b0: ce:19:83:9a:1f:f5:47:80:08:5c:54:cd:6a:d3:ee:c1:4a:f9: 93:b5:18:c2:39:a2:91:6a:e8:24:55:0b:b4:bd:e9:93:83:74: 7d:7e:77:a9:63:8b:01:0d:19:2d:dc:b8:07:df:3a:60:fd:4b: 7e:70:80:7b:8f:25:b1:8a:0c:09:d1:33:c4:af:11:9e:af:2f: 84:85:d1:7d:85:bc:08:e3:e2:1d:d1:06:cf:71:b1:dc:1f:09: 94:54:4a:f2:02:26:7e:55:4d:cd:81:cc:43:7d:05:0d:71:f8: c3:be:7b:63:82:76:91:57:bc:b4:85:f4:f4:0d:27:89:a9:d2: 60:81:16:86:a4:35:f3:01:a2:c9:17:ac:71:c6:e4:a2:d2:94: 55:72:27:ba:83:75:99:a6:de:80:f8:8c:e3:00:6c:4d:30:b5: 66:2d:0f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2Ay3pfkCER72dGDQOA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNzZiMmIwOTMyOTJjNWZhNzVlNmUxNGMyYTQ5OWFjODQ3 ZTQxNmIwHhcNMjUxMjA2MTAwMDQ4WhcNMjUxMjA3MTAwMDQ4WjAzMTEwLwYDVQQD EygzOTRmOWQyNTdlZjUxYzdlNTBjZTAzMDQzZmU4YWZmMzRhMmE0Yjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuAirvWkFNzc81IYTtOTy/Yg74Qx dQuSfwXD9VqpHGlZOrs5gWQvTlY0Nd3KN0dlnIwLKPJscKiGIaJ0Qq6JdDHAvMT6 pvglV+2fwC/w+Ol5tiytdBy+f4t71KSC1ju+NsU04STduz01e0NVk8q4miWnlVpn sNuih8gMSXWx7wQyUqW6GfnIG0nMcUf3eDmx+UEvdIAFoG/GjTyWnve20gKJ7wiO 4jg9vsI86/EuFGRgSAp//MQoVXYYCrYq1eKH4QaTP9rrk0fohGsqg+c6MrNtVZI+ UxoGNKs0T7XEW6dyOSO2lVYj0sCa3jgVd+ZbfhB/E3J6BBi0t4/vxyksvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlPnSV+9Rx+UM4DBD/or/NKKkuUMB8GA1UdIwQY MBaAFJJ2srCTKSxfp15uFMKkmayEfkFrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25heXNKTXBMRi1uWG00VXdxU1pySVItUVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zZmE5MmYtY2FiZC00MTNiLWFlNWMt NjliNzMzY2JjNTI4LzEva25heXNKTXBMRi1uWG00VXdxU1pySVItUVdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8zZmE5MmYtY2FiZC00MTNiLWFlNWMtNjliNzMzY2JjNTI4 LzEva25heXNKTXBMRi1uWG00VXdxU1pySVItUVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpuvugY6 dMVuoQxPPGFdHs0/rspWRWWOtKyPpI78hfFqeo3NTcqLTZHoJDbMYnIa5cTJtxMZ QfB1BmXjQa/EPsF6+jG3Zz+a6bx4zZEay96xYldgR2jDUCawzhmDmh/1R4AIXFTN atPuwUr5k7UYwjmikWroJFULtL3pk4N0fX53qWOLAQ0ZLdy4B986YP1LfnCAe48l sYoMCdEzxK8Rnq8vhIXRfYW8COPiHdEGz3Gx3B8JlFRK8gImflVNzYHMQ30FDXH4 w757Y4J2kVe8tIX09A0nianSYIEWhqQ18wGiyResccbkotKUVXInuoN1mabegPiM 4wBsTTC1Zi0PQw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:27 2025 by rpki-client