This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft File: knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft (raw, json) Hash identifier: yRMWkZ0Vu0BFQpVX8RfVjdG8juVQEMqotfX/klBipz0= Subject key identifier: 64:DC:8D:C1:15:F2:66:D4:B0:FB:5B:F6:97:35:F0:E2:81:59:D8:EE Authority key identifier: 92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7 Certificate issuer: /CN=927bfe6e9fb6804cd928ba81272d660856b53df7 Certificate serial: 019AF12D383954EC03AB2F97A9ED701E4131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft Manifest number: 0215 Signing time: Sat 06 Dec 2025 01:01:03 +0000 Manifest this update: Sat 06 Dec 2025 01:01:03 +0000 Manifest next update: Sun 07 Dec 2025 01:01:03 +0000 Files and hashes: 1: knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl (hash: H7NU3v/ddPrpvODwc5zoUdTozOJrfI52kIbo2aP/YkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:38:39:54:ec:03:ab:2f:97:a9:ed:70:1e:41:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927bfe6e9fb6804cd928ba81272d660856b53df7 Validity Not Before: Dec 6 01:01:03 2025 GMT Not After : Dec 7 01:01:03 2025 GMT Subject: CN=64dc8dc115f266d4b0fb5bf69735f0e28159d8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:2e:43:b1:97:ed:6b:86:6b:f4:4e:ac:fb: cf:89:e0:b1:08:b8:89:3b:6e:fd:d1:e8:c4:c2:e5: dd:86:be:6a:13:fd:88:fc:e3:17:5c:0c:08:98:ff: f6:be:4c:7b:e5:4b:c8:53:f8:90:d9:20:9a:eb:68: 33:8f:81:e2:04:b6:72:62:39:fe:fd:ef:fa:0c:93: 49:c3:ea:fb:15:d9:62:e4:71:b6:9f:cd:e0:53:cf: bd:6b:99:f5:1b:6c:ac:f9:48:e7:6c:69:f8:9d:73: 61:07:c5:38:30:b7:55:26:08:c9:b3:d3:45:29:a5: cb:cd:72:3e:86:a2:40:e1:03:5f:10:64:b4:9b:cc: d1:a6:8c:fb:0a:1a:73:53:4a:80:25:20:74:87:7d: b6:b4:d4:b7:62:38:10:ea:1b:55:4d:a9:16:12:9a: 6b:49:d3:a8:c7:5d:d4:e1:ab:43:06:90:9c:cf:a8: 38:cd:f7:6d:cb:dd:fe:02:6f:12:25:31:a3:a0:95: dd:98:a1:9d:cf:f9:a5:e6:df:8e:4d:a6:30:91:2c: 7f:0d:e2:69:59:ae:19:3c:bb:dd:86:1d:36:d2:1a: 4d:b4:e2:d6:b5:0d:3a:7f:f1:fc:6a:39:a0:00:8a: d8:48:9e:1c:c0:18:27:8b:ce:60:53:1a:41:53:de: 67:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DC:8D:C1:15:F2:66:D4:B0:FB:5B:F6:97:35:F0:E2:81:59:D8:EE X509v3 Authority Key Identifier: keyid:92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:1f:49:b3:91:6a:bc:a4:a0:eb:ed:f4:ea:7e:49:38:db:ce: 76:23:b7:5d:fb:c7:5d:7e:82:37:ab:41:4d:39:d5:49:f8:39: fd:70:8f:35:65:d9:1f:e6:e1:ae:4a:15:d3:5b:ca:27:ae:c3: 47:b8:24:94:87:0b:44:55:10:74:6e:e2:ff:6f:2f:9b:71:b5: be:c2:76:12:b0:d4:00:51:69:91:37:8a:c8:23:17:b2:6d:e2: 3e:b7:0e:14:a3:30:de:98:ca:eb:f2:02:17:1d:25:37:27:a2: 24:f6:2a:41:db:be:cb:c1:07:59:7d:b5:3d:38:4a:2f:61:3a: 5f:f6:d2:55:4a:22:93:62:a3:30:90:21:8a:7e:44:03:5b:ee: 51:81:5d:5c:97:06:87:29:1d:ec:27:99:ff:6c:39:ff:ed:f9: 10:71:7e:b4:b1:20:2e:89:46:b3:0f:0e:e3:90:03:6e:44:7a: 87:c0:5c:1c:92:66:90:39:cf:9b:49:67:ba:96:a7:51:d7:09: 48:fa:de:66:fa:99:d5:9f:34:62:1c:57:e0:cb:48:a8:7c:08: 2d:e3:d5:3e:41:d7:d8:19:4c:94:48:b8:27:ef:a1:2d:83:e3: 80:d6:88:1e:57:4c:26:68:63:41:2b:42:10:ea:70:f5:58:8b: 67:a9:29:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLTg5VOwDqy+Xqe1wHkExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2JmZTZlOWZiNjgwNGNkOTI4YmE4MTI3MmQ2NjA4NTZi NTNkZjcwHhcNMjUxMjA2MDEwMTAzWhcNMjUxMjA3MDEwMTAzWjAzMTEwLwYDVQQD Eyg2NGRjOGRjMTE1ZjI2NmQ0YjBmYjViZjY5NzM1ZjBlMjgxNTlkOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukMuQ7GX7WuGa/ROrPvPieCxCLiJ O2790ejEwuXdhr5qE/2I/OMXXAwImP/2vkx75UvIU/iQ2SCa62gzj4HiBLZyYjn+ /e/6DJNJw+r7Fdli5HG2n83gU8+9a5n1G2ys+UjnbGn4nXNhB8U4MLdVJgjJs9NF KaXLzXI+hqJA4QNfEGS0m8zRpoz7ChpzU0qAJSB0h322tNS3YjgQ6htVTakWEppr SdOox13U4atDBpCcz6g4zfdty93+Am8SJTGjoJXdmKGdz/ml5t+OTaYwkSx/DeJp Wa4ZPLvdhh020hpNtOLWtQ06f/H8ajmgAIrYSJ4cwBgni85gUxpBU95nnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTcjcEV8mbUsPtb9pc18OKBWdjuMB8GA1UdIwQY MBaAFJJ7/m6ftoBM2Si6gSctZghWtT33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva252LWJwLTJnRXpaS0xxQkp5MW1DRmExUGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jNmY2ZTctNWEzOC00NGIwLTg4MDct Nzc1ZmMwZDYxZmM1LzEva252LWJwLTJnRXpaS0xxQkp5MW1DRmExUGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jNmY2ZTctNWEzOC00NGIwLTg4MDctNzc1ZmMwZDYxZmM1 LzEva252LWJwLTJnRXpaS0xxQkp5MW1DRmExUGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADx9Js5Fq vKSg6+306n5JONvOdiO3XfvHXX6CN6tBTTnVSfg5/XCPNWXZH+bhrkoV01vKJ67D R7gklIcLRFUQdG7i/28vm3G1vsJ2ErDUAFFpkTeKyCMXsm3iPrcOFKMw3pjK6/IC Fx0lNyeiJPYqQdu+y8EHWX21PThKL2E6X/bSVUoik2KjMJAhin5EA1vuUYFdXJcG hykd7CeZ/2w5/+35EHF+tLEgLolGsw8O45ADbkR6h8BcHJJmkDnPm0lnupanUdcJ SPreZvqZ1Z80YhxX4MtIqHwILePVPkHX2BlMlEi4J++hLYPjgNaIHldMJmhjQStC EOpw9ViLZ6kp6g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:17 2025 by rpki-client