This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json) Hash identifier: wGcrQEEf1DmgwgdNDB+NI4FLxTs7i6Qy3wb/KvTx9TU= Subject key identifier: F1:80:58:BE:9D:B7:54:5A:35:B9:5C:18:08:AB:72:53:F1:86:D2:35 Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab Certificate serial: 019B1D99343A294826944AED4C2548535569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 16:02:18 +0000 Manifest this update: Sun 14 Dec 2025 16:02:18 +0000 Manifest next update: Mon 15 Dec 2025 16:02:18 +0000 Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: lIgSPwROFmsQ8btk9NFQauUrvQEpYha8MXivaPWnTj4=) 2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=) 3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:34:3a:29:48:26:94:4a:ed:4c:25:48:53:55:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab Validity Not Before: Dec 14 16:02:18 2025 GMT Not After : Dec 15 16:02:18 2025 GMT Subject: CN=f18058be9db7545a35b95c1808ab7253f186d235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0a:f5:3c:ba:05:55:6b:04:b3:e5:92:18:08: 95:8e:22:ad:00:8c:9f:1f:71:71:df:92:bb:40:6e: 01:b3:a5:b4:c5:2e:5c:4f:4d:1c:d5:83:7c:fe:3b: 4e:52:a4:6e:92:ed:43:05:02:27:01:2e:10:74:d1: b4:52:e8:cb:6a:ca:5d:9e:96:c3:d6:da:a2:b3:e8: 24:ad:11:44:16:14:68:48:13:ae:00:2c:87:ac:a2: 47:b2:4b:4d:6a:91:15:ff:bd:22:98:80:41:59:59: 20:e9:cc:23:c4:b9:ea:a6:32:15:43:4c:61:84:b8: ed:be:f1:63:cd:f6:38:b1:48:ea:42:ec:65:c4:42: 82:c6:5a:5a:21:8c:a5:a1:fb:cf:c6:09:5f:8e:eb: 8b:01:bf:bf:70:86:3d:00:ba:aa:80:72:72:0b:c6: 6e:56:74:61:76:4c:b9:99:07:9d:af:68:45:9d:b5: 51:cd:ce:fe:c4:a9:80:11:c6:a7:76:26:62:91:66: 62:bc:02:8a:d4:fa:7e:a2:0e:de:cd:53:38:61:12: 70:c1:22:11:d5:5e:ec:f9:04:d0:aa:07:e5:9f:9f: cc:51:75:11:e0:c0:85:a9:0a:da:5e:e8:91:6d:70: 14:5c:3b:a1:a6:37:40:da:e8:17:c1:92:7d:2b:da: 15:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:80:58:BE:9D:B7:54:5A:35:B9:5C:18:08:AB:72:53:F1:86:D2:35 X509v3 Authority Key Identifier: keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:af:77:79:ef:8c:54:66:a4:0f:08:81:bc:8b:e9:48:70:9d: 38:21:a8:e0:46:07:3f:ba:07:b7:02:0e:16:40:c9:86:bf:64: d6:b5:d0:b0:66:eb:dd:06:a5:d3:49:f1:77:42:6c:c7:bd:28: db:7c:88:74:7c:4e:e0:9b:76:17:72:40:a0:d9:d7:22:95:c9: 74:20:75:3b:db:8e:99:25:2e:b6:0d:cb:b6:c2:f1:78:65:a4: df:f6:0e:7a:69:6f:23:d3:4b:7d:a6:1e:2f:58:2e:38:6e:c1: db:26:bd:98:59:99:61:f9:89:88:a0:d2:be:49:45:a9:8a:7c: 7d:72:9a:8e:8b:cd:dd:3a:f7:75:92:e9:4f:ad:7c:2a:7a:7f: 71:01:39:f9:81:16:75:f0:c2:84:44:0e:3d:9d:bf:3a:34:e0: 3c:35:56:6e:52:1b:77:d4:65:72:a4:c0:99:66:03:39:c9:6c: 91:5b:94:6a:d6:10:f3:57:48:f2:5d:97:d6:0a:90:8c:48:e1: 43:5a:ba:bb:8b:d7:d0:4c:56:d2:4d:c3:cc:44:e9:db:bd:89: 99:8f:50:be:77:7f:07:57:19:d0:12:7a:53:85:7b:61:b8:f9: 61:e2:47:a5:41:0e:3b:91:c7:22:9c:a2:3e:c2:89:1f:e1:fb: 86:a4:92:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmTQ6KUgmlErtTCVIU1VpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2 YjFmYWIwHhcNMjUxMjE0MTYwMjE4WhcNMjUxMjE1MTYwMjE4WjAzMTEwLwYDVQQD EyhmMTgwNThiZTlkYjc1NDVhMzViOTVjMTgwOGFiNzI1M2YxODZkMjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ar1PLoFVWsEs+WSGAiVjiKtAIyf H3Fx35K7QG4Bs6W0xS5cT00c1YN8/jtOUqRuku1DBQInAS4QdNG0UujLaspdnpbD 1tqis+gkrRFEFhRoSBOuACyHrKJHsktNapEV/70imIBBWVkg6cwjxLnqpjIVQ0xh hLjtvvFjzfY4sUjqQuxlxEKCxlpaIYylofvPxglfjuuLAb+/cIY9ALqqgHJyC8Zu VnRhdky5mQedr2hFnbVRzc7+xKmAEcandiZikWZivAKK1Pp+og7ezVM4YRJwwSIR 1V7s+QTQqgfln5/MUXUR4MCFqQraXuiRbXAUXDuhpjdA2ugXwZJ9K9oVcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGAWL6dt1RaNblcGAirclPxhtI1MB8GA1UdIwQY MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZq93ee+M VGakDwiBvIvpSHCdOCGo4EYHP7oHtwIOFkDJhr9k1rXQsGbr3Qal00nxd0Jsx70o 23yIdHxO4Jt2F3JAoNnXIpXJdCB1O9uOmSUutg3LtsLxeGWk3/YOemlvI9NLfaYe L1guOG7B2ya9mFmZYfmJiKDSvklFqYp8fXKajovN3Tr3dZLpT618Knp/cQE5+YEW dfDChEQOPZ2/OjTgPDVWblIbd9RlcqTAmWYDOclskVuUatYQ81dI8l2X1gqQjEjh Q1q6u4vX0ExW0k3DzETp272JmY9Qvnd/B1cZ0BJ6U4V7Ybj5YeJHpUEOO5HHIpyi PsKJH+H7hqSSXQ== -----END CERTIFICATE-----Generated at Sun Dec 14 22:51:24 2025 by rpki-client