This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft File: knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft (raw, json) Hash identifier: VPGWFuhiiI/kQWvuwLFbycKa4cclAcFsgQdoa3UK9aA= Subject key identifier: 3E:28:06:FB:64:03:AB:8E:50:9E:D5:D9:3A:4D:6B:38:76:4E:D9:82 Authority key identifier: 92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7 Certificate issuer: /CN=927bfe6e9fb6804cd928ba81272d660856b53df7 Certificate serial: 019B5976D534E25AE3AA85E079529AC0D6D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft Manifest number: 024B Signing time: Fri 26 Dec 2025 07:01:58 +0000 Manifest this update: Fri 26 Dec 2025 07:01:58 +0000 Manifest next update: Sat 27 Dec 2025 07:01:58 +0000 Files and hashes: 1: knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl (hash: TVE08EQmpY4Y6WvlkCS9Z98FrWcQk+sPGn95TWqgwEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:d5:34:e2:5a:e3:aa:85:e0:79:52:9a:c0:d6:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927bfe6e9fb6804cd928ba81272d660856b53df7 Validity Not Before: Dec 26 07:01:58 2025 GMT Not After : Dec 27 07:01:58 2025 GMT Subject: CN=3e2806fb6403ab8e509ed5d93a4d6b38764ed982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b0:16:d3:cd:90:a4:64:46:b9:24:f3:41:47: f1:f8:51:f1:70:04:fb:c7:ba:fb:88:22:25:1d:d2: 27:e4:6d:de:9d:fe:4b:43:fc:20:ce:db:e5:a4:46: 9e:19:90:69:3a:94:f8:76:79:31:83:94:c6:57:92: a6:91:3c:40:5a:dd:ed:9b:54:57:d6:40:5f:d8:d1: 04:e2:d9:1b:fe:ab:b6:ca:29:ec:ba:de:80:45:83: 99:87:56:9b:3c:d0:bc:df:bd:c6:0d:65:21:08:65: 6b:c9:ad:ea:9b:51:d1:6c:e2:53:6d:02:3b:f1:7a: 31:49:73:d2:09:6c:44:8a:33:7a:65:f5:4a:67:dc: 5b:59:f1:06:47:30:e0:c1:fa:10:65:ec:de:1e:b5: e5:5b:5a:31:37:b1:68:cf:5a:2b:ad:70:78:20:4e: 67:59:4b:b0:3b:b6:27:cb:cf:3c:f0:7d:6d:7b:87: 0a:79:76:74:c1:68:ed:0f:2c:61:ec:c0:a1:d6:65: 9b:00:c7:f6:be:f2:a8:85:e1:cd:13:9a:7f:7b:b7: 0e:2a:8b:3a:a1:3d:31:a5:d6:93:a5:0c:26:98:2d: 11:2c:45:b2:de:a3:1b:de:58:40:d3:fa:38:d2:41: e5:b7:1d:4d:16:8e:f1:bc:5d:24:70:f7:3c:c0:81: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:28:06:FB:64:03:AB:8E:50:9E:D5:D9:3A:4D:6B:38:76:4E:D9:82 X509v3 Authority Key Identifier: keyid:92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e2:f4:b8:eb:8c:a4:b1:49:21:ee:ad:d6:ca:09:9e:17:2f: ce:ff:94:71:09:72:f4:8b:0c:25:7c:4e:10:db:52:6c:54:f0: a6:c3:d7:f1:aa:78:10:fa:58:75:74:ac:75:b3:0b:51:07:d7: 87:c9:3e:de:cd:07:2c:8a:5b:08:ea:48:fd:2c:b6:2a:2e:e6: be:96:a9:0a:95:28:d2:e6:af:5f:66:ab:9d:ce:95:7b:c1:97: fc:34:b1:e8:8c:b5:6c:e0:56:59:c1:26:11:da:d4:77:f0:55: 23:a6:36:72:e0:92:5b:b9:df:95:d9:92:f8:2b:28:4c:e9:e2: fc:75:6b:12:fb:21:5a:24:d7:a8:6b:ab:fb:0a:2e:22:c6:f1: ab:06:60:cd:b5:f6:c6:b4:be:40:7c:1a:c7:4e:9a:fb:c0:f4: bd:49:90:5c:95:fd:6c:ff:59:a0:1a:02:e4:66:35:8a:d7:2b: fa:42:ce:11:91:ab:73:14:60:fe:ce:93:1a:b2:8f:0e:af:23: 89:85:43:1f:c8:6a:27:6c:60:cc:2b:bb:a3:1d:63:15:39:fe: 9b:8e:cf:a0:fd:d7:5b:bb:0d:29:18:ef:b8:37:58:b0:1e:87: 27:50:fe:87:9b:d8:c1:b0:6b:37:80:9d:a7:f0:21:ca:62:ba: 87:f0:07:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdtU04lrjqoXgeVKawNbUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2JmZTZlOWZiNjgwNGNkOTI4YmE4MTI3MmQ2NjA4NTZi NTNkZjcwHhcNMjUxMjI2MDcwMTU4WhcNMjUxMjI3MDcwMTU4WjAzMTEwLwYDVQQD EygzZTI4MDZmYjY0MDNhYjhlNTA5ZWQ1ZDkzYTRkNmIzODc2NGVkOTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7AW082QpGRGuSTzQUfx+FHxcAT7 x7r7iCIlHdIn5G3enf5LQ/wgztvlpEaeGZBpOpT4dnkxg5TGV5KmkTxAWt3tm1RX 1kBf2NEE4tkb/qu2yinsut6ARYOZh1abPNC8373GDWUhCGVrya3qm1HRbOJTbQI7 8XoxSXPSCWxEijN6ZfVKZ9xbWfEGRzDgwfoQZezeHrXlW1oxN7Foz1orrXB4IE5n WUuwO7Yny8888H1te4cKeXZ0wWjtDyxh7MCh1mWbAMf2vvKoheHNE5p/e7cOKos6 oT0xpdaTpQwmmC0RLEWy3qMb3lhA0/o40kHltx1NFo7xvF0kcPc8wIEviwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4oBvtkA6uOUJ7V2TpNazh2TtmCMB8GA1UdIwQY MBaAFJJ7/m6ftoBM2Si6gSctZghWtT33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva252LWJwLTJnRXpaS0xxQkp5MW1DRmExUGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jNmY2ZTctNWEzOC00NGIwLTg4MDct Nzc1ZmMwZDYxZmM1LzEva252LWJwLTJnRXpaS0xxQkp5MW1DRmExUGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jNmY2ZTctNWEzOC00NGIwLTg4MDctNzc1ZmMwZDYxZmM1 LzEva252LWJwLTJnRXpaS0xxQkp5MW1DRmExUGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOL0uOuM pLFJIe6t1soJnhcvzv+UcQly9IsMJXxOENtSbFTwpsPX8ap4EPpYdXSsdbMLUQfX h8k+3s0HLIpbCOpI/Sy2Ki7mvpapCpUo0uavX2arnc6Ve8GX/DSx6Iy1bOBWWcEm EdrUd/BVI6Y2cuCSW7nfldmS+CsoTOni/HVrEvshWiTXqGur+wouIsbxqwZgzbX2 xrS+QHwax06a+8D0vUmQXJX9bP9ZoBoC5GY1itcr+kLOEZGrcxRg/s6TGrKPDq8j iYVDH8hqJ2xgzCu7ox1jFTn+m47PoP3XW7sNKRjvuDdYsB6HJ1D+h5vYwbBrN4Cd p/AhymK6h/AHaw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:46 2025 by rpki-client