This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json) Hash identifier: ArTzQDTWdSqMwEhflrKpExLqllN2K0HVAJCcUqXe/6g= Subject key identifier: DB:DA:72:C1:85:53:01:E3:59:21:32:27:82:82:28:68:7D:52:32:13 Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3 Certificate serial: 019C1F4D7DA5F22C307ED1E07A21106055A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft Manifest number: 0CF6 Signing time: Mon 02 Feb 2026 17:01:37 +0000 Manifest this update: Mon 02 Feb 2026 17:01:37 +0000 Manifest next update: Tue 03 Feb 2026 17:01:37 +0000 Files and hashes: 1: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: D5d5DkCHye3I6KaZWyFfu2LjpvFZssM4lKJEdexyaSc=) 2: zpeTK5PwMk-4Xj5vBZGegdo8ck8.roa (hash: CqrBs9z5utywXd/u1L7nQWwUGdydAl74Sn0Il70tRPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:4d:7d:a5:f2:2c:30:7e:d1:e0:7a:21:10:60:55:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3 Validity Not Before: Feb 2 17:01:37 2026 GMT Not After : Feb 3 17:01:37 2026 GMT Subject: CN=dbda72c1855301e359213227828228687d523213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:af:44:50:a8:00:6f:e9:ff:98:5f:2e:96:5a: d6:c6:66:58:5b:dc:5c:87:85:0c:0a:ff:9a:dd:95: 7d:3e:f8:4a:85:ea:5c:aa:65:56:65:27:55:e6:51: 81:01:17:7b:01:b8:0f:72:a2:3f:75:46:f3:ea:9d: 03:e7:f5:03:c1:06:ef:58:ed:98:37:a2:29:a7:55: 33:23:8a:48:49:7c:7b:ab:e9:09:74:5d:60:40:a6: 7d:e6:83:de:84:ec:dc:06:9d:d5:e8:17:48:f9:66: 4c:76:6a:1a:c1:5a:9c:e1:08:f5:b4:5a:ea:16:a7: 2f:9e:7a:e7:0d:c3:cd:51:96:67:0e:09:15:ea:1c: 87:a9:82:cf:17:31:41:42:ef:a3:a7:d4:d7:eb:95: 62:12:ad:9c:61:5a:57:04:32:c1:dd:11:5e:22:b2: 87:a7:a5:1f:f0:ca:43:e5:f3:0f:97:be:95:e0:9f: 4e:d9:f6:94:37:58:a5:8b:be:2a:37:88:86:fe:b0: 26:ea:5f:6c:1b:99:a1:05:fc:71:9e:10:62:d6:fd: 3a:f4:77:8a:06:3c:68:fa:67:85:fd:8b:11:bc:23: 6c:6e:76:06:59:ac:fe:ad:c5:ff:e0:13:47:8f:3b: 27:d1:ab:1a:dd:2d:f7:46:1d:a9:1d:5a:36:b9:56: 8c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DA:72:C1:85:53:01:E3:59:21:32:27:82:82:28:68:7D:52:32:13 X509v3 Authority Key Identifier: keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:c7:c4:85:49:36:32:db:55:c1:74:9f:c9:45:c0:ad:5f:90: 95:db:ab:98:a4:00:0c:ba:66:a1:7e:12:0e:b1:88:eb:21:4e: 02:28:34:66:ce:ad:5c:3d:da:41:4d:17:d8:3b:f5:51:3e:84: 18:c8:19:35:0e:3b:78:c8:24:26:38:16:68:48:e2:96:e1:37: 46:b9:f6:2f:9e:da:26:a6:c7:ad:08:f6:a3:00:f4:6e:f1:a5: 15:d7:21:7e:34:19:12:88:32:24:3f:0d:83:c6:94:e5:26:eb: 66:4a:21:d8:a5:83:a8:da:29:04:bf:dd:b2:dd:4d:b3:49:9a: a0:5b:a7:a4:55:f6:d8:f9:d1:35:e3:7e:17:55:57:a5:aa:45: d6:81:08:92:3b:cc:8f:65:b0:80:92:b9:73:35:95:96:f3:ae: 94:df:c3:c0:06:f1:3a:2f:13:1e:12:e5:df:e7:d1:b9:c9:a3: fc:b8:de:8c:db:ee:4a:88:a3:2b:d7:5d:96:49:cf:5b:7f:52: 7d:78:eb:99:c8:2f:d9:8f:4e:b2:58:85:e2:d7:39:1a:d7:6e: 83:50:ca:13:30:6b:57:5b:95:3e:f9:ba:ee:a8:fb:24:98:d9: 97:e9:df:c4:e0:95:d9:01:b6:24:26:96:30:fa:d6:b4:8e:76: 6d:0d:3f:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfTX2l8iwwftHgeiEQYFWhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2FmN2Q0MDdmMDQ1ZGJlYTgwNzczMjY1YjA0Y2U1NzRk MGI3ZTMwHhcNMjYwMjAyMTcwMTM3WhcNMjYwMjAzMTcwMTM3WjAzMTEwLwYDVQQD EyhkYmRhNzJjMTg1NTMwMWUzNTkyMTMyMjc4MjgyMjg2ODdkNTIzMjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy69EUKgAb+n/mF8ullrWxmZYW9xc h4UMCv+a3ZV9PvhKhepcqmVWZSdV5lGBARd7AbgPcqI/dUbz6p0D5/UDwQbvWO2Y N6Ipp1UzI4pISXx7q+kJdF1gQKZ95oPehOzcBp3V6BdI+WZMdmoawVqc4Qj1tFrq FqcvnnrnDcPNUZZnDgkV6hyHqYLPFzFBQu+jp9TX65ViEq2cYVpXBDLB3RFeIrKH p6Uf8MpD5fMPl76V4J9O2faUN1ili74qN4iG/rAm6l9sG5mhBfxxnhBi1v069HeK Bjxo+meF/YsRvCNsbnYGWaz+rcX/4BNHjzsn0asa3S33Rh2pHVo2uVaM7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvacsGFUwHjWSEyJ4KCKGh9UjITMB8GA1UdIwQY MBaAFJJ699QH8EXb6oB3MmWwTOV00LfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQt NTE2ZTBiMzBlYjEwLzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQtNTE2ZTBiMzBlYjEw LzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz8fEhUk2 MttVwXSfyUXArV+QldurmKQADLpmoX4SDrGI6yFOAig0Zs6tXD3aQU0X2Dv1UT6E GMgZNQ47eMgkJjgWaEjiluE3Rrn2L57aJqbHrQj2owD0bvGlFdchfjQZEogyJD8N g8aU5SbrZkoh2KWDqNopBL/dst1Ns0maoFunpFX22PnRNeN+F1VXpapF1oEIkjvM j2WwgJK5czWVlvOulN/DwAbxOi8THhLl3+fRucmj/LjejNvuSoijK9ddlknPW39S fXjrmcgv2Y9OsliF4tc5Gtdug1DKEzBrV1uVPvm67qj7JJjZl+nfxOCV2QG2JCaW MPrWtI52bQ0/FQ== -----END CERTIFICATE-----Generated at Tue Feb 3 01:55:38 2026 by rpki-client