This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft File: knr31AfwRdvqgHcyZbBM5XTQt-M.mft (raw, json) Hash identifier: 2UbfbVKTx2gv9zXpVjLVceR22zoGf5gPYtXBnbUYzEg= Subject key identifier: 5D:2E:97:1A:C3:51:6A:1E:A9:DA:8C:5E:72:07:88:11:9D:5F:68:AA Authority key identifier: 92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 Certificate issuer: /CN=927af7d407f045dbea80773265b04ce574d0b7e3 Certificate serial: 019B3A2180BBAB39D94AEE91EE16E058BF97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft Manifest number: 0C7F Signing time: Sat 20 Dec 2025 05:00:32 +0000 Manifest this update: Sat 20 Dec 2025 05:00:32 +0000 Manifest next update: Sun 21 Dec 2025 05:00:32 +0000 Files and hashes: 1: ZHzFDinK1k80ggnxUxtsbupidkM.roa (hash: yg5fYgvuSW1mcbtxUsNzoaC3gDNZ2ZnNC0pEO7y0Ebs=) 2: knr31AfwRdvqgHcyZbBM5XTQt-M.crl (hash: H1+TIeb8kPHNNiXV/Tyqymam+U22VMggDuNP82zuIb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:80:bb:ab:39:d9:4a:ee:91:ee:16:e0:58:bf:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927af7d407f045dbea80773265b04ce574d0b7e3 Validity Not Before: Dec 20 05:00:32 2025 GMT Not After : Dec 21 05:00:32 2025 GMT Subject: CN=5d2e971ac3516a1ea9da8c5e720788119d5f68aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:ce:ff:db:3f:15:d5:7f:d9:90:49:31:83: aa:d7:f9:6a:71:40:e0:8c:d3:c1:b9:09:27:a2:55: 80:f4:05:5e:6c:1f:f8:c3:08:50:85:2a:61:df:28: a1:05:94:64:b3:16:6d:c8:6e:35:2d:be:d6:78:6c: 2d:a0:c2:8b:cc:c7:ba:f5:5a:e1:d9:f1:38:7e:73: 8d:6f:01:f5:60:a0:df:ee:ee:40:6c:eb:c6:49:e1: 32:a1:9b:de:cf:35:ca:f5:56:50:27:02:2b:2f:41: aa:8f:87:9c:8b:69:4d:52:dc:f2:8f:98:82:bb:cb: a1:41:92:12:1b:c6:75:3c:85:05:04:b4:4a:aa:84: 0e:cb:62:59:70:45:95:d6:a8:47:cb:1f:e4:af:56: 25:2c:8d:d0:72:2c:59:ef:69:d5:76:0c:f1:7c:c6: 96:97:e4:fc:2b:fa:7f:06:81:13:ec:3b:5f:32:28: d1:41:fb:2a:c2:95:8b:4c:ec:ab:66:2d:be:78:8f: 09:59:03:cb:ea:3c:6a:f3:d7:5e:2a:b7:1f:46:99: 6d:17:fe:bf:cb:0b:87:9d:2b:55:59:84:ce:30:31: 52:3d:7a:0e:4b:a8:d5:07:3c:19:a0:f6:df:61:21: 6f:ed:83:9d:d6:17:25:4a:5c:f9:f4:a8:f2:35:7f: 98:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2E:97:1A:C3:51:6A:1E:A9:DA:8C:5E:72:07:88:11:9D:5F:68:AA X509v3 Authority Key Identifier: keyid:92:7A:F7:D4:07:F0:45:DB:EA:80:77:32:65:B0:4C:E5:74:D0:B7:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knr31AfwRdvqgHcyZbBM5XTQt-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d5e29-af6e-4c8c-b0ad-516e0b30eb10/1/knr31AfwRdvqgHcyZbBM5XTQt-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:cf:5f:61:41:66:40:a5:0a:c5:eb:15:7c:f5:e2:73:14:e3: 55:b0:21:9d:cb:43:db:e6:67:42:82:99:38:6e:c6:32:c9:ec: c7:03:99:75:b8:38:76:b3:dc:e7:e0:a8:71:c9:67:4b:ed:bd: ef:b2:ed:86:4d:ae:9e:23:d4:6c:43:1f:fc:9e:74:73:1a:74: 6c:93:83:fc:c4:4a:2e:85:e9:70:17:df:1a:8d:6b:4b:d1:01: ea:37:90:28:cb:e4:a8:6a:4a:66:43:a4:61:58:1d:9b:7e:ae: 47:f6:75:ed:a7:8c:c0:e7:4a:a5:bb:dc:3f:bc:cd:ca:09:d5: bc:4d:e0:45:8a:f9:7c:6f:17:49:34:fb:41:2f:de:3c:09:35: 41:33:5b:34:1b:30:61:6a:7b:78:4b:9b:ae:65:1f:46:5e:df: 9c:1a:f4:96:8d:57:50:d5:a0:d6:d2:c8:63:b5:92:dd:ea:0a: 71:f7:01:e0:fa:5f:85:77:7c:58:a4:d4:19:60:29:30:3c:c9: 67:47:c0:29:02:9a:a6:57:6f:21:8c:ba:ca:d9:64:4c:f8:23: ce:90:8f:01:b0:36:99:99:6a:b4:72:65:3a:a3:77:d4:a5:ca: 48:d8:b0:de:c5:8c:6e:9b:71:da:3f:b4:f7:5c:82:43:d4:a1: 2b:26:1e:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IYC7qznZSu6R7hbgWL+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2FmN2Q0MDdmMDQ1ZGJlYTgwNzczMjY1YjA0Y2U1NzRk MGI3ZTMwHhcNMjUxMjIwMDUwMDMyWhcNMjUxMjIxMDUwMDMyWjAzMTEwLwYDVQQD Eyg1ZDJlOTcxYWMzNTE2YTFlYTlkYThjNWU3MjA3ODgxMTlkNWY2OGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZPO/9s/FdV/2ZBJMYOq1/lqcUDg jNPBuQknolWA9AVebB/4wwhQhSph3yihBZRksxZtyG41Lb7WeGwtoMKLzMe69Vrh 2fE4fnONbwH1YKDf7u5AbOvGSeEyoZvezzXK9VZQJwIrL0Gqj4eci2lNUtzyj5iC u8uhQZISG8Z1PIUFBLRKqoQOy2JZcEWV1qhHyx/kr1YlLI3QcixZ72nVdgzxfMaW l+T8K/p/BoET7DtfMijRQfsqwpWLTOyrZi2+eI8JWQPL6jxq89deKrcfRpltF/6/ ywuHnStVWYTOMDFSPXoOS6jVBzwZoPbfYSFv7YOd1hclSlz59KjyNX+Y8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0ulxrDUWoeqdqMXnIHiBGdX2iqMB8GA1UdIwQY MBaAFJJ699QH8EXb6oB3MmWwTOV00LfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQt NTE2ZTBiMzBlYjEwLzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82ZDVlMjktYWY2ZS00YzhjLWIwYWQtNTE2ZTBiMzBlYjEw LzEva25yMzFBZndSZHZxZ0hjeVpiQk01WFRRdC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS89fYUFm QKUKxesVfPXicxTjVbAhnctD2+ZnQoKZOG7GMsnsxwOZdbg4drPc5+CocclnS+29 77Lthk2uniPUbEMf/J50cxp0bJOD/MRKLoXpcBffGo1rS9EB6jeQKMvkqGpKZkOk YVgdm36uR/Z17aeMwOdKpbvcP7zNygnVvE3gRYr5fG8XSTT7QS/ePAk1QTNbNBsw YWp7eEubrmUfRl7fnBr0lo1XUNWg1tLIY7WS3eoKcfcB4PpfhXd8WKTUGWApMDzJ Z0fAKQKapldvIYy6ytlkTPgjzpCPAbA2mZlqtHJlOqN31KXKSNiw3sWMbptx2j+0 91yCQ9ShKyYecQ== -----END CERTIFICATE-----Generated at Sat Dec 20 07:45:15 2025 by rpki-client