This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft File: knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft (raw, json) Hash identifier: PNLlFXHuzoJ8fZog7MetUX7Gvyl42Iipbd7oaR8wZ04= Subject key identifier: 4D:78:A2:2F:A8:75:34:00:38:BB:B5:C3:8F:ED:46:88:8B:6E:73:96 Authority key identifier: 92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7 Certificate issuer: /CN=927bfe6e9fb6804cd928ba81272d660856b53df7 Certificate serial: 019C4321E4BAEB5AB2222264D55089145173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 16:00:20 +0000 Manifest this update: Mon 09 Feb 2026 16:00:20 +0000 Manifest next update: Tue 10 Feb 2026 16:00:20 +0000 Files and hashes: 1: knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl (hash: b+ovGu+KbJXiDBDzE3ajjdJ5zEYKUk3UxAWcc+dHuwE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e4:ba:eb:5a:b2:22:22:64:d5:50:89:14:51:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927bfe6e9fb6804cd928ba81272d660856b53df7 Validity Not Before: Feb 9 16:00:20 2026 GMT Not After : Feb 10 16:00:20 2026 GMT Subject: CN=4d78a22fa875340038bbb5c38fed46888b6e7396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:71:d6:59:f0:a8:3e:79:a7:a7:93:59:7c:5e: 57:0f:7b:ce:e2:99:f7:cf:8b:30:7e:c8:23:06:f5: cc:29:9d:b8:83:57:4f:77:ad:65:c2:9f:6a:e7:9c: 0c:8c:29:59:74:73:ea:4c:97:57:f2:f9:66:66:bd: 07:c0:82:82:1b:f2:8f:98:e0:a0:e3:5e:3e:26:a2: 02:90:fd:6c:5d:99:81:3e:57:75:91:b2:e0:61:ba: 71:dc:0a:7b:62:05:f3:71:29:77:d6:4b:32:35:81: b4:c7:e0:40:9e:4e:af:51:e4:7b:d5:c3:55:f6:8b: af:b0:94:c7:75:ce:90:33:8c:db:fa:c3:63:a7:ad: b2:c2:c0:c1:d0:13:1c:73:b6:23:85:51:a2:f5:20: ec:bd:57:39:55:18:90:ef:aa:33:9a:91:60:ae:c2: 70:3d:c9:4d:78:cc:e9:7f:c2:8d:99:b8:4b:ca:d1: fe:8e:2c:16:4c:d3:fb:4f:4e:cb:f9:2c:df:84:03: 97:93:33:b4:61:57:4c:86:2a:a6:35:10:ea:1f:17: c0:a3:bc:e1:40:63:10:0a:de:61:eb:03:a6:b4:ee: f1:f5:0b:a9:c6:1a:21:03:2b:8f:69:7e:a6:49:b3: 81:66:90:6f:2b:d7:c8:48:65:85:20:d7:4c:06:4f: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:78:A2:2F:A8:75:34:00:38:BB:B5:C3:8F:ED:46:88:8B:6E:73:96 X509v3 Authority Key Identifier: keyid:92:7B:FE:6E:9F:B6:80:4C:D9:28:BA:81:27:2D:66:08:56:B5:3D:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knv-bp-2gEzZKLqBJy1mCFa1Pfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c6f6e7-5a38-44b0-8807-775fc0d61fc5/1/knv-bp-2gEzZKLqBJy1mCFa1Pfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e5:b4:d3:63:91:6e:4d:49:43:88:da:a8:67:7d:6e:c6:8e: 28:d4:52:4c:21:a2:d4:22:69:90:af:83:c2:20:03:95:52:40: 18:da:1b:3b:fb:89:b2:8c:45:ce:d9:08:64:18:bd:aa:3f:01: 76:c8:9d:ec:5e:20:82:d3:3f:6f:f3:25:ee:96:f8:e8:bd:75: 2c:e0:e6:cf:41:f1:cd:f8:89:36:85:1a:cb:f5:1f:c9:95:c0: d3:50:f8:80:1d:80:6c:ad:55:d5:13:46:65:e6:ea:b8:fc:1b: d3:52:d4:9a:e6:01:b7:f4:dd:00:87:f1:d4:05:9b:a7:81:48: a4:19:32:6c:2b:0c:ec:58:2c:f2:24:83:7f:b4:c2:4b:c1:64: 8e:25:b2:dd:85:3c:12:0c:6b:39:a1:99:73:d3:cd:e5:d9:69: b1:65:41:ad:dd:e2:52:6c:31:2b:d6:e1:56:0e:89:aa:a1:35: 61:a1:50:70:0d:8d:e2:e0:6f:eb:8e:28:78:6f:49:67:1d:67: 4e:52:0f:5c:cf:7e:8f:cc:33:45:70:13:3b:2f:1b:7f:ee:8b: 86:aa:3d:8f:11:30:14:fa:14:f5:d1:73:5a:5a:18:39:c4:20: 38:ee:3b:4c:19:89:b2:55:f5:30:94:09:f3:d3:8b:ee:5c:d1: e2:6d:b1:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeS661qyIiJk1VCJFFFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2JmZTZlOWZiNjgwNGNkOTI4YmE4MTI3MmQ2NjA4NTZi NTNkZjcwHhcNMjYwMjA5MTYwMDIwWhcNMjYwMjEwMTYwMDIwWjAzMTEwLwYDVQQD Eyg0ZDc4YTIyZmE4NzUzNDAwMzhiYmI1YzM4ZmVkNDY4ODhiNmU3Mzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HHWWfCoPnmnp5NZfF5XD3vO4pn3 z4swfsgjBvXMKZ24g1dPd61lwp9q55wMjClZdHPqTJdX8vlmZr0HwIKCG/KPmOCg 414+JqICkP1sXZmBPld1kbLgYbpx3Ap7YgXzcSl31ksyNYG0x+BAnk6vUeR71cNV 9ouvsJTHdc6QM4zb+sNjp62ywsDB0BMcc7YjhVGi9SDsvVc5VRiQ76ozmpFgrsJw PclNeMzpf8KNmbhLytH+jiwWTNP7T07L+SzfhAOXkzO0YVdMhiqmNRDqHxfAo7zh QGMQCt5h6wOmtO7x9QupxhohAyuPaX6mSbOBZpBvK9fISGWFINdMBk8Y2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE14oi+odTQAOLu1w4/tRoiLbnOWMB8GA1UdIwQY MBaAFJJ7/m6ftoBM2Si6gSctZghWtT33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva252LWJwLTJnRXpaS0xxQkp5MW1DRmExUGZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9jNmY2ZTctNWEzOC00NGIwLTg4MDct Nzc1ZmMwZDYxZmM1LzEva252LWJwLTJnRXpaS0xxQkp5MW1DRmExUGZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9jNmY2ZTctNWEzOC00NGIwLTg4MDctNzc1ZmMwZDYxZmM1 LzEva252LWJwLTJnRXpaS0xxQkp5MW1DRmExUGZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+W002OR bk1JQ4jaqGd9bsaOKNRSTCGi1CJpkK+DwiADlVJAGNobO/uJsoxFztkIZBi9qj8B dsid7F4ggtM/b/Ml7pb46L11LODmz0HxzfiJNoUay/UfyZXA01D4gB2AbK1V1RNG ZebquPwb01LUmuYBt/TdAIfx1AWbp4FIpBkybCsM7Fgs8iSDf7TCS8FkjiWy3YU8 EgxrOaGZc9PN5dlpsWVBrd3iUmwxK9bhVg6JqqE1YaFQcA2N4uBv644oeG9JZx1n TlIPXM9+j8wzRXATOy8bf+6Lhqo9jxEwFPoU9dFzWloYOcQgOO47TBmJslX1MJQJ 89OL7lzR4m2xUA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:05 2026 by rpki-client