This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json) Hash identifier: QCWwhioVj5cDn7gyr5X6/inxmPH35AiskvsyKHPXLGc= Subject key identifier: 9D:13:84:A1:C8:84:FE:09:0A:F2:B8:3D:21:6D:8A:15:87:86:2D:AF Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab Certificate serial: 019AF12E141D806583E8A66FE6327CC8B144 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:02:00 +0000 Manifest this update: Sat 06 Dec 2025 01:02:00 +0000 Manifest next update: Sun 07 Dec 2025 01:02:00 +0000 Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: yoUREBE+pZxVhoGk6MHQXDilxEUN6AMJuTAvof6oHH8=) 2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=) 3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:14:1d:80:65:83:e8:a6:6f:e6:32:7c:c8:b1:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab Validity Not Before: Dec 6 01:02:00 2025 GMT Not After : Dec 7 01:02:00 2025 GMT Subject: CN=9d1384a1c884fe090af2b83d216d8a1587862daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e4:e0:5d:1e:04:f1:aa:18:88:c5:5d:40:77: f1:aa:22:82:a8:22:cc:ef:9b:1f:b3:9d:d6:d8:54: 1d:f0:5e:6a:c7:56:4f:6e:e9:a5:be:7f:10:7c:6d: 88:0e:fd:ee:0d:10:3f:e1:9f:bd:3c:3b:99:d7:5f: a3:0d:77:2a:21:e9:0a:a7:3e:1b:a8:16:e2:32:40: 56:ed:55:62:0f:b2:ac:be:8d:85:30:53:ea:51:6d: c2:f8:52:6c:c0:db:f5:5c:52:b2:a6:3e:6f:bf:8b: 18:6f:c4:9c:80:c2:79:b3:31:e7:7e:ae:83:fd:33: fd:9c:17:4d:a5:b2:f5:8f:67:69:93:7a:62:9e:62: 3d:5e:b7:bd:8d:43:45:f4:65:fd:2c:d7:ba:e7:31: 4e:19:1f:32:91:c5:4e:63:f5:74:df:1b:14:55:4d: b8:b7:11:f2:c3:43:4f:07:f6:5c:c1:23:f4:15:a7: 28:e7:83:79:7e:7c:64:c8:85:50:ac:37:c0:38:7c: ab:38:27:78:a5:fa:9b:da:2b:da:fc:ac:ef:f2:da: 5b:ab:e9:18:fb:2a:92:af:e6:1b:bb:b1:d5:2c:d6: 94:a5:84:5b:f0:18:d9:b2:2e:ad:11:1a:ea:b7:a8: 51:5d:40:0b:77:d8:94:6f:c2:24:3f:06:db:41:0f: 15:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:13:84:A1:C8:84:FE:09:0A:F2:B8:3D:21:6D:8A:15:87:86:2D:AF X509v3 Authority Key Identifier: keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:99:6a:cf:f3:02:57:24:2b:87:03:d2:f5:06:e4:e0:e2:10: f0:d4:8f:5a:43:18:ea:a5:bb:08:51:af:7c:34:ac:97:7c:30: fb:7c:16:2a:f4:16:e6:ce:fa:45:54:31:1a:83:a8:de:09:f0: 40:cf:de:96:88:aa:d6:ae:b9:e8:48:1a:dd:fe:15:d0:6a:1d: aa:ad:38:e4:4f:a8:81:77:74:df:82:70:15:08:c1:0b:01:3e: ea:61:25:1f:23:b7:af:01:12:ec:79:b3:00:80:40:f7:05:b9: e6:3e:6b:5e:1c:c1:dc:81:bc:e5:10:94:73:c5:bd:6f:d5:27: 16:fa:3a:11:df:a0:f3:d2:eb:a2:d9:05:ad:b2:f3:fb:25:84: 1e:ca:33:cc:5e:d4:c7:88:6e:11:86:5e:70:99:34:e6:27:79: 82:54:71:e6:4d:9d:75:5c:9b:00:6e:3b:16:4a:6a:3b:1f:1c: ee:57:b8:cb:37:b7:6b:4e:75:84:c7:d5:b7:f2:df:e4:1f:bd: d7:6b:c1:02:f8:d7:47:bf:1a:07:48:8c:95:04:a3:70:61:13: 1c:db:fe:0e:c2:40:e8:df:63:7a:2f:0e:a5:d6:6a:eb:92:8e: 34:95:99:93:55:c9:c2:c1:80:5c:79:26:7b:e7:b8:e9:79:8d: 88:71:10:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhQdgGWD6KZv5jJ8yLFEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2 YjFmYWIwHhcNMjUxMjA2MDEwMjAwWhcNMjUxMjA3MDEwMjAwWjAzMTEwLwYDVQQD Eyg5ZDEzODRhMWM4ODRmZTA5MGFmMmI4M2QyMTZkOGExNTg3ODYyZGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+TgXR4E8aoYiMVdQHfxqiKCqCLM 75sfs53W2FQd8F5qx1ZPbumlvn8QfG2IDv3uDRA/4Z+9PDuZ11+jDXcqIekKpz4b qBbiMkBW7VViD7Ksvo2FMFPqUW3C+FJswNv1XFKypj5vv4sYb8ScgMJ5szHnfq6D /TP9nBdNpbL1j2dpk3pinmI9Xre9jUNF9GX9LNe65zFOGR8ykcVOY/V03xsUVU24 txHyw0NPB/ZcwSP0Faco54N5fnxkyIVQrDfAOHyrOCd4pfqb2iva/Kzv8tpbq+kY +yqSr+Ybu7HVLNaUpYRb8BjZsi6tERrqt6hRXUALd9iUb8IkPwbbQQ8VLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0ThKHIhP4JCvK4PSFtihWHhi2vMB8GA1UdIwQY MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJlqz/MC VyQrhwPS9Qbk4OIQ8NSPWkMY6qW7CFGvfDSsl3ww+3wWKvQW5s76RVQxGoOo3gnw QM/eloiq1q656Ega3f4V0Godqq045E+ogXd034JwFQjBCwE+6mElHyO3rwES7Hmz AIBA9wW55j5rXhzB3IG85RCUc8W9b9UnFvo6Ed+g89LrotkFrbLz+yWEHsozzF7U x4huEYZecJk05id5glRx5k2ddVybAG47FkpqOx8c7le4yze3a051hMfVt/Lf5B+9 12vBAvjXR78aB0iMlQSjcGETHNv+DsJA6N9jei8OpdZq65KONJWZk1XJwsGAXHkm e+e46XmNiHEQAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:46 2025 by rpki-client