This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json) Hash identifier: 2lR/i/lFqvT0xWa7cFiMGzE39sO6Zl15/BQftoD+JV8= Subject key identifier: 43:C7:EC:57:FC:26:30:DD:29:2E:99:36:FB:4F:2B:8C:AD:BE:05:4C Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49 Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649 Certificate serial: 019AF464B5111783D7B85A3A43B4F180AA09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft Manifest number: 030B Signing time: Sat 06 Dec 2025 16:00:31 +0000 Manifest this update: Sat 06 Dec 2025 16:00:31 +0000 Manifest next update: Sun 07 Dec 2025 16:00:31 +0000 Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=) 2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: eVaqRtOTIf5Pr1WFNHbDeHEHLaEn1taVSFtdg4d5Gh0=) 3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:b5:11:17:83:d7:b8:5a:3a:43:b4:f1:80:aa:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649 Validity Not Before: Dec 6 16:00:31 2025 GMT Not After : Dec 7 16:00:31 2025 GMT Subject: CN=43c7ec57fc2630dd292e9936fb4f2b8cadbe054c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:70:fa:46:98:04:84:ad:5b:70:15:21:c9: 2e:a9:30:cc:fc:75:13:3d:b6:3b:ab:92:c2:5f:f3: 4a:b2:e0:77:e8:8c:b3:77:12:08:36:c4:ba:9a:92: bb:74:87:08:46:b3:21:51:b4:48:77:6b:ff:26:59: 72:58:ac:78:d9:2d:be:1e:71:9a:73:a5:49:f0:42: 8c:55:90:c4:1c:3a:67:80:64:b3:5e:c1:04:27:cc: c4:9d:c5:9a:fc:da:cc:9e:38:56:1e:64:c8:e5:09: c6:ae:a0:29:73:3e:d2:e6:f9:47:3b:a5:9f:61:45: d7:2a:9b:2a:be:d4:47:87:6a:7d:c0:88:2b:33:50: 78:a5:24:87:7c:c3:08:90:ab:1e:80:1e:20:3e:29: 0c:45:a9:40:5d:81:02:0c:7e:8d:22:ed:ad:19:60: 97:bd:68:c7:df:2f:4a:dc:f0:2b:4b:c4:16:ba:32: 7c:54:0d:d7:d5:3a:3c:42:c3:ce:63:0f:fa:68:4a: a9:94:27:d1:de:78:03:ed:07:1a:3a:99:08:45:00: 9e:2b:29:3a:f9:a5:6f:13:6e:80:8d:e2:90:2f:e2: d6:d1:b2:6a:f0:1f:4b:4d:4e:69:d0:0f:dd:d9:e1: 40:51:2d:5f:2a:70:0c:83:e6:08:8a:59:2e:57:3f: 86:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C7:EC:57:FC:26:30:DD:29:2E:99:36:FB:4F:2B:8C:AD:BE:05:4C X509v3 Authority Key Identifier: keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:82:73:3b:d7:19:51:fe:03:e8:c0:ed:9d:b7:8d:53:a8:cf: b3:46:20:68:eb:16:5b:66:1a:08:71:6b:35:27:b0:5b:f2:87: b3:55:72:4a:47:cd:8a:6f:81:59:7f:1c:5b:52:be:06:8c:64: 60:fe:b2:24:13:a2:4b:e4:30:6f:dc:a3:20:50:16:10:e6:d9: 0e:cc:44:87:0f:8e:88:8e:33:fc:ba:a6:e8:a7:70:a3:9b:6f: 0a:77:0c:cf:40:42:11:2e:76:9c:55:32:ce:c2:02:ce:e1:0b: c9:64:aa:82:76:d4:13:77:21:d3:2c:f2:79:6d:ea:3a:3d:ee: 68:00:dc:9b:26:7c:e9:56:0d:4b:65:b9:5e:a6:cd:34:5a:80: 32:b0:a4:a3:42:f8:74:07:c8:e8:3b:32:f9:5e:b4:c8:d2:06: d4:c8:4b:c0:82:4b:c4:8d:31:87:a4:5d:b2:f4:58:0a:a6:cd: c5:43:04:1b:a9:62:ae:60:99:77:51:d6:ee:bf:f2:af:e0:89: 56:58:d9:ba:eb:42:a2:a1:64:c4:f5:07:b9:a9:79:2d:91:2e: 43:37:30:f1:4b:19:92:d3:39:6c:ac:85:8f:12:ea:c6:e3:f5: c8:e5:cc:3a:ed:66:26:55:e0:8c:39:7c:28:81:1b:60:af:30: 92:1f:35:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZLURF4PXuFo6Q7TxgKoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2E3ZjNhYTYxYjIyNDExODIzNWUzMjAxMWVkZWNiZTNm NmE2NDkwHhcNMjUxMjA2MTYwMDMxWhcNMjUxMjA3MTYwMDMxWjAzMTEwLwYDVQQD Eyg0M2M3ZWM1N2ZjMjYzMGRkMjkyZTk5MzZmYjRmMmI4Y2FkYmUwNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUBw+kaYBIStW3AVIckuqTDM/HUT PbY7q5LCX/NKsuB36IyzdxIINsS6mpK7dIcIRrMhUbRId2v/JllyWKx42S2+HnGa c6VJ8EKMVZDEHDpngGSzXsEEJ8zEncWa/NrMnjhWHmTI5QnGrqApcz7S5vlHO6Wf YUXXKpsqvtRHh2p9wIgrM1B4pSSHfMMIkKsegB4gPikMRalAXYECDH6NIu2tGWCX vWjH3y9K3PArS8QWujJ8VA3X1To8QsPOYw/6aEqplCfR3ngD7QcaOpkIRQCeKyk6 +aVvE26AjeKQL+LW0bJq8B9LTU5p0A/d2eFAUS1fKnAMg+YIilkuVz+GswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPH7Ff8JjDdKS6ZNvtPK4ytvgVMMB8GA1UdIwQY MBaAFJJ6fzqmGyJBGCNeMgEe3svj9qZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMt NTAxYzcxYzQzYjA5LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMtNTAxYzcxYzQzYjA5 LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdoJzO9cZ Uf4D6MDtnbeNU6jPs0YgaOsWW2YaCHFrNSewW/KHs1VySkfNim+BWX8cW1K+Boxk YP6yJBOiS+Qwb9yjIFAWEObZDsxEhw+OiI4z/Lqm6Kdwo5tvCncMz0BCES52nFUy zsICzuELyWSqgnbUE3ch0yzyeW3qOj3uaADcmyZ86VYNS2W5XqbNNFqAMrCko0L4 dAfI6Dsy+V60yNIG1MhLwIJLxI0xh6RdsvRYCqbNxUMEG6lirmCZd1HW7r/yr+CJ VljZuutCoqFkxPUHual5LZEuQzcw8UsZktM5bKyFjxLqxuP1yOXMOu1mJlXgjDl8 KIEbYK8wkh81Gg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:29:39 2025 by rpki-client