This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json) Hash identifier: nh/GsME1IKLn8n60rINLIHvnsihoIMKOYv+O/Vz9fm4= Subject key identifier: 94:91:30:90:C1:2C:C4:70:25:6F:F1:0B:CC:FD:CE:5C:66:B6:1D:07 Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2 Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2 Certificate serial: 019AF12D7F22A22890ED6BA08871DC9DC63C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft Manifest number: 125F Signing time: Sat 06 Dec 2025 01:01:21 +0000 Manifest this update: Sat 06 Dec 2025 01:01:21 +0000 Manifest next update: Sun 07 Dec 2025 01:01:21 +0000 Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=) 2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: SOxMMBvjKOBQ4RXgHppTNHNPICUPYBKgoAiMSEC0yLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:7f:22:a2:28:90:ed:6b:a0:88:71:dc:9d:c6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2 Validity Not Before: Dec 6 01:01:21 2025 GMT Not After : Dec 7 01:01:21 2025 GMT Subject: CN=94913090c12cc470256ff10bccfdce5c66b61d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:38:89:09:01:fd:19:fb:5b:20:fa:ee:52: 3c:2a:24:f9:da:c2:9b:d4:ee:24:61:38:8e:1c:ee: bb:b2:bd:b9:99:f8:91:c1:2e:70:bd:05:79:b3:69: 50:73:f8:ab:fd:eb:6a:71:bc:90:5d:31:7e:b1:38: 68:aa:32:54:4d:5b:c2:64:65:c8:f1:bd:4f:d8:33: 43:bf:b6:92:f1:8a:65:d6:bb:d1:25:38:07:80:51: 4a:d8:7c:a6:b6:1b:e3:d8:9e:fd:7d:ad:a1:d2:ff: d9:be:3f:74:f5:bf:db:b9:dd:ea:d4:79:30:31:c0: a8:d4:20:fb:23:fd:0d:d4:8c:d7:b0:c4:ce:83:0e: 36:c9:2e:d4:f2:5a:1f:2b:64:23:50:48:53:bf:bf: 42:f3:bc:81:8d:42:6a:b9:98:40:c2:4b:e6:4f:82: c4:d5:a5:a7:06:0e:38:e2:98:20:c7:bf:76:98:5e: 44:c2:03:35:70:82:ab:50:96:d3:53:6e:23:b0:de: 67:86:76:d5:21:d7:1b:43:be:7e:71:06:4d:a4:f5: 12:5a:1c:c9:44:81:f8:88:21:c6:ea:43:33:c3:9e: 41:7e:d8:d9:08:b2:35:f0:d3:0e:67:4c:b7:ae:69: a7:59:85:55:55:11:64:38:68:d7:5d:19:53:0b:49: 2f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:91:30:90:C1:2C:C4:70:25:6F:F1:0B:CC:FD:CE:5C:66:B6:1D:07 X509v3 Authority Key Identifier: keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9a:74:2f:f6:43:27:b5:88:fe:46:2c:9a:e8:f8:0d:45:06: 2e:2b:08:b5:89:c3:ac:78:b2:bd:e0:b8:0d:82:9f:d8:0d:19: 7c:f8:31:68:31:78:d9:3c:c0:27:29:5e:c5:31:2e:fd:b2:c0: 33:7c:d9:02:36:5e:bd:dd:82:48:ee:9f:21:6d:c4:55:88:e2: d7:c4:9c:6a:cf:ac:a6:ba:bd:28:ad:a2:ba:8a:0e:0a:0a:b7: 38:be:95:13:a7:ae:14:9d:50:b8:45:bb:54:e1:14:bb:00:bd: c6:76:26:3b:4d:37:1a:ab:ef:b3:20:36:5c:c8:ac:ab:06:6e: 26:f0:a7:2e:f3:87:b6:ab:f9:5c:83:23:de:34:9c:4a:49:bc: 29:18:e1:d5:58:87:38:2c:22:20:e1:54:e0:48:8d:77:1c:7f: b3:c4:1a:c7:3b:54:4a:57:ed:25:bb:1c:f8:91:23:14:25:0a: 25:ff:41:d8:a4:a2:b0:8b:72:68:ed:b9:70:aa:b1:2a:93:fa: 38:69:2a:56:03:b7:c4:88:ed:43:3b:9e:a2:60:fd:96:56:99: 28:66:70:ee:10:a2:c6:55:b0:08:46:6f:a3:8f:d8:c6:f2:b7: 39:46:a9:3a:ba:c6:4b:af:fc:f4:35:81:bf:65:01:7b:79:41: 12:5a:e9:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLX8ioiiQ7WugiHHcncY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2E0N2Q3NDc3ZjI1Njg5ZjY0ZDA2NGIzZWNhMDk2NDdl OGNlYTIwHhcNMjUxMjA2MDEwMTIxWhcNMjUxMjA3MDEwMTIxWjAzMTEwLwYDVQQD Eyg5NDkxMzA5MGMxMmNjNDcwMjU2ZmYxMGJjY2ZkY2U1YzY2YjYxZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWo4iQkB/Rn7WyD67lI8KiT52sKb 1O4kYTiOHO67sr25mfiRwS5wvQV5s2lQc/ir/etqcbyQXTF+sThoqjJUTVvCZGXI 8b1P2DNDv7aS8Ypl1rvRJTgHgFFK2Hymthvj2J79fa2h0v/Zvj909b/bud3q1Hkw McCo1CD7I/0N1IzXsMTOgw42yS7U8lofK2QjUEhTv79C87yBjUJquZhAwkvmT4LE 1aWnBg444pggx792mF5EwgM1cIKrUJbTU24jsN5nhnbVIdcbQ75+cQZNpPUSWhzJ RIH4iCHG6kMzw55BftjZCLI18NMOZ0y3rmmnWYVVVRFkOGjXXRlTC0kvdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJSRMJDBLMRwJW/xC8z9zlxmth0HMB8GA1UdIwQY MBaAFJJ6R9dHfyVon2TQZLPsoJZH6M6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjIt OTMyNTIwMTRjY2Y4LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjItOTMyNTIwMTRjY2Y4 LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5p0L/ZD J7WI/kYsmuj4DUUGLisItYnDrHiyveC4DYKf2A0ZfPgxaDF42TzAJylexTEu/bLA M3zZAjZevd2CSO6fIW3EVYji18Scas+sprq9KK2iuooOCgq3OL6VE6euFJ1QuEW7 VOEUuwC9xnYmO003GqvvsyA2XMisqwZuJvCnLvOHtqv5XIMj3jScSkm8KRjh1ViH OCwiIOFU4EiNdxx/s8QaxztUSlftJbsc+JEjFCUKJf9B2KSisItyaO25cKqxKpP6 OGkqVgO3xIjtQzueomD9llaZKGZw7hCixlWwCEZvo4/YxvK3OUapOrrGS6/89DWB v2UBe3lBElrpgw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:18 2025 by rpki-client