This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json) Hash identifier: Y/Xo6qJyjELk5PkMrivfVlfwYx3ttHqc09IsHS7I+4o= Subject key identifier: 1D:92:81:1F:53:9A:6B:51:A9:81:F0:FF:18:91:C7:30:90:D6:3C:ED Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab Certificate serial: 019B2B1CD05404E6348C688BD6FBB48EC1EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 07:01:07 +0000 Manifest this update: Wed 17 Dec 2025 07:01:07 +0000 Manifest next update: Thu 18 Dec 2025 07:01:07 +0000 Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: eNu+i0z2gq5FFY4dXqL5YmvbJVB0QMiyk5F/Tn+hiTo=) 2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=) 3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:d0:54:04:e6:34:8c:68:8b:d6:fb:b4:8e:c1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab Validity Not Before: Dec 17 07:01:07 2025 GMT Not After : Dec 18 07:01:07 2025 GMT Subject: CN=1d92811f539a6b51a981f0ff1891c73090d63ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7d:8e:8c:02:3d:53:e8:fc:46:61:95:7d:11: 98:57:4d:d2:d5:d8:e9:ce:a7:1c:e9:c9:fc:2f:cd: ea:ec:55:13:ab:58:94:be:35:e2:2c:47:82:b2:d3: 38:7a:98:ed:13:41:af:f3:c5:8f:e9:de:0f:9e:16: 9e:f5:15:91:cb:ba:69:cb:05:79:b1:ca:69:38:66: b9:d7:15:c8:3e:a2:53:89:92:7c:fb:5e:d9:43:89: 87:6d:cf:3b:73:9f:05:e2:98:c8:6f:f8:61:9f:84: 5c:6b:05:75:ae:cc:1a:57:3d:39:49:b4:1f:65:7a: 6e:6c:73:77:78:ed:0a:ae:96:77:2d:ad:69:e4:1f: da:87:f3:d2:32:05:89:30:61:59:84:2c:be:85:f5: b1:bb:da:e0:7b:ca:c3:38:cb:c9:83:6b:0c:ac:99: e0:5c:4e:cb:4a:79:90:68:ee:89:7b:28:48:7e:81: ec:5c:d4:10:08:57:de:51:aa:21:5c:45:bb:86:85: a2:de:39:f3:b8:3f:9f:8d:2a:40:31:cd:cc:cc:a7: 26:f2:f2:fc:00:c0:30:8d:11:2f:fd:8f:c8:84:6d: bd:1c:03:7a:0f:26:18:6c:6a:cb:6d:bf:f8:0a:21: 96:b7:a1:33:be:6b:1f:e6:1d:b2:e3:4b:2d:f4:b1: e8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:92:81:1F:53:9A:6B:51:A9:81:F0:FF:18:91:C7:30:90:D6:3C:ED X509v3 Authority Key Identifier: keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:91:6d:16:50:72:8e:d8:b4:8e:28:9a:dd:e2:87:72:91:9f: bf:6e:a4:42:34:9c:df:a7:2e:45:f6:bf:8c:17:49:59:47:4e: de:f5:9e:f8:35:2b:25:e7:ee:86:5a:f9:6e:05:08:6d:73:fa: f8:1f:a9:b8:e0:8e:b7:13:e9:00:9d:d4:79:84:58:8e:73:c7: 17:e6:76:16:7c:5b:61:3e:1f:d3:da:4c:56:39:0f:3a:44:47: 42:b7:66:4a:b8:94:65:93:43:0e:89:8d:a9:45:c4:c3:d7:3a: 73:cc:d2:4e:e9:a3:68:cb:00:34:6f:f3:6e:8c:2e:0d:ed:b5: 38:e2:58:88:05:6b:27:02:a2:da:e7:16:44:1c:75:fc:9a:e8: 35:ea:20:93:2c:1c:c1:6c:55:b9:be:db:12:c7:c0:40:4d:6f: 7c:82:4d:9e:fb:07:ad:cb:3c:e7:43:72:f9:14:05:98:9f:3e: 92:45:ab:d5:fb:24:6e:44:56:aa:bb:44:2f:20:f0:1b:a9:10: 2c:75:d4:86:73:ec:94:65:0c:a0:11:d6:22:f6:d7:d3:53:08: e8:f3:ec:6b:61:cf:5a:9e:db:22:11:0b:90:da:02:7d:10:7b: 41:45:a6:05:3d:09:9e:42:1e:1a:b7:92:2e:eb:50:10:98:e2: f6:c6:6f:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHNBUBOY0jGiL1vu0jsHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2 YjFmYWIwHhcNMjUxMjE3MDcwMTA3WhcNMjUxMjE4MDcwMTA3WjAzMTEwLwYDVQQD EygxZDkyODExZjUzOWE2YjUxYTk4MWYwZmYxODkxYzczMDkwZDYzY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn2OjAI9U+j8RmGVfRGYV03S1djp zqcc6cn8L83q7FUTq1iUvjXiLEeCstM4epjtE0Gv88WP6d4Pnhae9RWRy7ppywV5 scppOGa51xXIPqJTiZJ8+17ZQ4mHbc87c58F4pjIb/hhn4RcawV1rswaVz05SbQf ZXpubHN3eO0KrpZ3La1p5B/ah/PSMgWJMGFZhCy+hfWxu9rge8rDOMvJg2sMrJng XE7LSnmQaO6JeyhIfoHsXNQQCFfeUaohXEW7hoWi3jnzuD+fjSpAMc3MzKcm8vL8 AMAwjREv/Y/IhG29HAN6DyYYbGrLbb/4CiGWt6Ezvmsf5h2y40st9LHoRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2SgR9TmmtRqYHw/xiRxzCQ1jztMB8GA1UdIwQY MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5FtFlBy jti0jiia3eKHcpGfv26kQjSc36cuRfa/jBdJWUdO3vWe+DUrJefuhlr5bgUIbXP6 +B+puOCOtxPpAJ3UeYRYjnPHF+Z2FnxbYT4f09pMVjkPOkRHQrdmSriUZZNDDomN qUXEw9c6c8zSTumjaMsANG/zbowuDe21OOJYiAVrJwKi2ucWRBx1/JroNeogkywc wWxVub7bEsfAQE1vfIJNnvsHrcs850Ny+RQFmJ8+kkWr1fskbkRWqrtELyDwG6kQ LHXUhnPslGUMoBHWIvbX01MI6PPsa2HPWp7bIhELkNoCfRB7QUWmBT0JnkIeGreS LutQEJji9sZvnw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:43:51 2025 by rpki-client