This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft File: knp_OqYbIkEYI14yAR7ey-P2pkk.mft (raw, json) Hash identifier: gwocnsp2jjXxfwpQcPpDoK1og5+tXHnfzeO1bxi8i44= Subject key identifier: 98:87:D5:17:89:0D:5C:A5:FE:A1:36:2B:7F:8E:72:FB:0F:18:C9:E4 Authority key identifier: 92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49 Certificate issuer: /CN=927a7f3aa61b224118235e32011edecbe3f6a649 Certificate serial: 019B341F76A8559243FA86B34C3708E30A01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft Manifest number: 032C Signing time: Fri 19 Dec 2025 01:00:35 +0000 Manifest this update: Fri 19 Dec 2025 01:00:35 +0000 Manifest next update: Sat 20 Dec 2025 01:00:35 +0000 Files and hashes: 1: 2lpFexxe3_Ac4dcdM3bYGAow3NU.roa (hash: p5V0q0cPZ8lwGeilVxXZ3Q9iOjoW9+XEWeFjk4FsqTc=) 2: knp_OqYbIkEYI14yAR7ey-P2pkk.crl (hash: cjc6Phe2XB+djpHzGRa9JK9MhRFwbknr4AsTbNWNQDo=) 3: vvR3iZhxksZaf5ZtlUFG8sHgTwA.roa (hash: brocX5Nu7+UsTDQrzkSzsbDZjaym0Lw9E9mvwUm3aco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:76:a8:55:92:43:fa:86:b3:4c:37:08:e3:0a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927a7f3aa61b224118235e32011edecbe3f6a649 Validity Not Before: Dec 19 01:00:35 2025 GMT Not After : Dec 20 01:00:35 2025 GMT Subject: CN=9887d517890d5ca5fea1362b7f8e72fb0f18c9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:a6:77:ac:64:bb:77:40:47:af:3e:ff:59: 0c:f3:d9:7b:28:9a:f1:4c:02:71:b0:2f:2a:08:b0: 05:4c:ff:30:41:7e:c0:7d:2b:0a:8c:69:8c:c3:5c: c3:da:ab:4b:aa:c9:5f:93:7c:85:ed:e2:b1:6e:d9: 2d:1f:10:bd:01:09:05:ef:bc:34:65:ae:07:da:a7: 1e:97:51:c8:ef:a2:2d:75:ec:8e:3a:f9:15:a3:98: 3f:fe:36:1f:b9:4e:e8:a5:8f:d0:87:b7:2b:1c:60: 23:cd:b0:5d:20:5f:a0:00:ce:65:fe:12:a5:2a:53: 25:d2:de:97:2d:e0:7b:f5:7d:43:d8:4f:6c:60:f1: 57:8f:67:a2:93:96:0c:07:17:e7:ab:48:1f:6f:50: d3:67:ba:ed:27:fe:77:d5:8f:9b:dd:bd:fa:4d:8f: ac:f6:16:78:c3:78:48:44:55:ba:f5:e0:79:1d:f2: 22:e2:6d:f1:20:70:46:09:f4:f1:c3:dd:58:43:8c: 6d:97:a8:90:89:28:c0:9b:16:41:d9:88:dd:ed:e4: 1d:8c:97:16:1e:71:24:72:bb:02:4f:2f:58:b1:d2: 5f:0a:2f:cf:af:c6:03:11:40:9a:9c:2b:63:4b:db: 2f:9b:48:ab:0b:b7:04:cc:b0:d7:c7:5d:0b:9b:06: 14:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:87:D5:17:89:0D:5C:A5:FE:A1:36:2B:7F:8E:72:FB:0F:18:C9:E4 X509v3 Authority Key Identifier: keyid:92:7A:7F:3A:A6:1B:22:41:18:23:5E:32:01:1E:DE:CB:E3:F6:A6:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knp_OqYbIkEYI14yAR7ey-P2pkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e5e206-23c8-4f82-b6e3-501c71c43b09/1/knp_OqYbIkEYI14yAR7ey-P2pkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ba:d5:71:b0:44:e2:e0:78:94:d8:4e:ac:cf:fe:6c:43:0c: 19:2f:48:6e:b0:12:3c:bf:69:19:3d:e1:b3:05:2e:29:1f:19: a3:dc:23:ae:9f:39:d0:1a:75:e6:f8:bf:ad:98:3b:81:9a:f8: 0e:a0:ca:41:86:4f:9b:4c:67:99:8e:d0:66:2b:eb:65:ed:f1: 50:d6:b4:f9:c5:3a:b3:62:73:8a:b0:a3:be:b0:04:83:c7:97: 82:46:12:4e:67:e0:97:61:74:46:a4:0e:8c:fc:a3:ad:4a:20: 54:77:d6:77:ab:7e:d8:cd:8e:ce:4e:ab:5c:ac:d1:40:c1:3f: e6:01:0f:29:e1:54:46:b0:32:d7:3a:c1:f6:e1:3d:64:ca:63: 18:77:1f:ad:8e:a8:c1:ef:ff:c5:db:4b:27:e9:f5:f9:60:d0: d6:2c:ba:49:47:91:f7:17:f4:6f:31:32:ea:9e:14:57:69:7e: 4f:ca:1d:12:78:1e:11:c4:e3:35:42:b9:71:88:f9:06:7a:df: fb:d6:0f:18:c2:fe:fe:0b:5c:aa:6a:b2:51:52:99:ef:bd:b2: 7f:41:30:02:64:a8:01:b9:33:e7:7d:05:0c:ff:9b:c4:85:9b: 9a:20:36:7a:f0:25:49:61:a7:e0:5b:6e:d1:70:a9:a2:79:59: c7:98:76:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H3aoVZJD+oazTDcI4woBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2E3ZjNhYTYxYjIyNDExODIzNWUzMjAxMWVkZWNiZTNm NmE2NDkwHhcNMjUxMjE5MDEwMDM1WhcNMjUxMjIwMDEwMDM1WjAzMTEwLwYDVQQD Eyg5ODg3ZDUxNzg5MGQ1Y2E1ZmVhMTM2MmI3ZjhlNzJmYjBmMThjOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7+md6xku3dAR68+/1kM89l7KJrx TAJxsC8qCLAFTP8wQX7AfSsKjGmMw1zD2qtLqslfk3yF7eKxbtktHxC9AQkF77w0 Za4H2qcel1HI76ItdeyOOvkVo5g//jYfuU7opY/Qh7crHGAjzbBdIF+gAM5l/hKl KlMl0t6XLeB79X1D2E9sYPFXj2eik5YMBxfnq0gfb1DTZ7rtJ/531Y+b3b36TY+s 9hZ4w3hIRFW69eB5HfIi4m3xIHBGCfTxw91YQ4xtl6iQiSjAmxZB2Yjd7eQdjJcW HnEkcrsCTy9YsdJfCi/Pr8YDEUCanCtjS9svm0irC7cEzLDXx10LmwYUSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJiH1ReJDVyl/qE2K3+OcvsPGMnkMB8GA1UdIwQY MBaAFJJ6fzqmGyJBGCNeMgEe3svj9qZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMt NTAxYzcxYzQzYjA5LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lNWUyMDYtMjNjOC00ZjgyLWI2ZTMtNTAxYzcxYzQzYjA5 LzEva25wX09xWWJJa0VZSTE0eUFSN2V5LVAycGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATrrVcbBE 4uB4lNhOrM/+bEMMGS9IbrASPL9pGT3hswUuKR8Zo9wjrp850Bp15vi/rZg7gZr4 DqDKQYZPm0xnmY7QZivrZe3xUNa0+cU6s2JzirCjvrAEg8eXgkYSTmfgl2F0RqQO jPyjrUogVHfWd6t+2M2Ozk6rXKzRQME/5gEPKeFURrAy1zrB9uE9ZMpjGHcfrY6o we//xdtLJ+n1+WDQ1iy6SUeR9xf0bzEy6p4UV2l+T8odEngeEcTjNUK5cYj5Bnrf +9YPGML+/gtcqmqyUVKZ772yf0EwAmSoAbkz530FDP+bxIWbmiA2evAlSWGn4Ftu 0XCponlZx5h2gQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:23:12 2025 by rpki-client