This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json) Hash identifier: wAnGWo8X23c0S8TNw/5jTiRTOBnLAjdbYJPZ8ZzwXFQ= Subject key identifier: 88:A8:93:47:3B:02:42:1F:03:03:64:F5:F4:C3:62:B6:C3:E9:D9:B9 Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab Certificate serial: 019B2EFA954B9524E45ED186C3E027DD9AF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 01:02:12 +0000 Manifest this update: Thu 18 Dec 2025 01:02:12 +0000 Manifest next update: Fri 19 Dec 2025 01:02:12 +0000 Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: XAOHCpbUv4ornMuFJ2P5S1p6qEokZD0KsXssnp70ff0=) 2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=) 3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:95:4b:95:24:e4:5e:d1:86:c3:e0:27:dd:9a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab Validity Not Before: Dec 18 01:02:12 2025 GMT Not After : Dec 19 01:02:12 2025 GMT Subject: CN=88a893473b02421f030364f5f4c362b6c3e9d9b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:37:57:16:8c:64:29:e4:25:bf:9c:81:ac: 25:6a:8d:8f:9e:0c:d2:32:21:c7:85:ea:f5:bf:7d: a6:23:8a:ff:5a:5b:3f:b8:82:ea:8a:f5:25:45:99: 30:0b:e3:c4:64:91:a7:fe:8a:24:14:84:0e:a4:22: ad:9d:f4:e5:ff:81:20:71:de:19:b7:e8:03:43:81: 81:92:ae:1a:06:fa:dd:90:34:24:31:98:54:72:f2: 0c:a8:e5:39:e6:01:d5:e3:7c:6c:19:43:44:0e:de: a3:98:5f:81:f5:5a:36:ac:ca:18:79:03:fc:68:dc: 72:e2:5b:89:c4:08:c9:90:b4:de:36:ca:fa:15:cd: 83:43:13:bc:c4:e3:3b:25:71:0a:47:14:03:f6:40: 26:4a:cd:80:da:43:26:50:62:34:8b:e8:94:16:f5: f9:27:3d:06:8e:7b:0f:7e:d9:f8:53:65:da:4c:30: c7:9d:21:d9:6e:45:a5:d9:e8:18:7f:28:99:3c:ed: 1f:44:23:08:89:a4:03:cd:f0:66:03:0e:c8:db:5a: f5:81:fa:7f:9c:8f:b8:87:9e:4f:92:1c:c6:e6:7f: b3:2d:4f:4d:cf:e5:d4:2a:28:d9:9f:27:1d:90:ab: 15:a5:a9:30:dc:2a:a9:09:f5:5a:ff:cb:9d:2a:3a: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A8:93:47:3B:02:42:1F:03:03:64:F5:F4:C3:62:B6:C3:E9:D9:B9 X509v3 Authority Key Identifier: keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:c9:ae:67:e1:44:4f:82:27:04:e9:54:b1:90:2e:8a:79:86: 86:45:f5:6e:c3:36:50:0b:56:b0:42:d9:14:e2:7d:04:c1:6b: 07:9b:34:b5:6c:37:f2:1b:b5:e6:7a:f2:3c:57:0b:2f:57:82: b7:7c:dc:4f:af:e4:8b:69:a5:93:44:bf:5b:af:6a:06:df:d7: ec:15:35:53:91:62:4e:6c:2d:2d:a5:68:99:94:13:04:3b:e1: 3f:01:3e:fe:4c:cc:55:0e:ef:6c:cf:96:d2:8a:5d:09:69:2d: 0f:6e:65:1a:aa:54:c5:53:cd:4a:f7:02:2e:2a:f4:11:2a:df: 0a:03:f5:af:d1:b7:cb:67:31:ba:75:4e:4d:a7:12:a8:63:32: e1:ac:44:ec:0c:8d:05:f0:79:1f:27:c4:00:ed:a7:78:e9:2c: d7:21:0f:5b:c6:3e:35:78:32:d1:49:71:7b:b2:fc:3b:36:ca: 20:41:42:17:d1:b4:d3:55:6e:6a:27:d2:ec:cf:19:12:ff:91: 5e:b4:a9:e8:57:d0:13:49:fc:94:fb:7a:e7:55:78:69:4f:52: 9e:49:60:63:48:76:d0:1e:70:a8:e9:f6:a8:d6:f1:da:05:2d: c8:ed:44:57:3e:00:f8:c5:51:a5:04:eb:08:59:bf:5a:20:4d: d1:20:e5:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+pVLlSTkXtGGw+An3Zr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNzM0ZWFiY2ZiNWI2YzJhNGU0ODM4OGVkYjNhZjhmNTA2 YjFmYWIwHhcNMjUxMjE4MDEwMjEyWhcNMjUxMjE5MDEwMjEyWjAzMTEwLwYDVQQD Eyg4OGE4OTM0NzNiMDI0MjFmMDMwMzY0ZjVmNGMzNjJiNmMzZTlkOWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK43VxaMZCnkJb+cgawlao2PngzS MiHHher1v32mI4r/Wls/uILqivUlRZkwC+PEZJGn/ookFIQOpCKtnfTl/4Egcd4Z t+gDQ4GBkq4aBvrdkDQkMZhUcvIMqOU55gHV43xsGUNEDt6jmF+B9Vo2rMoYeQP8 aNxy4luJxAjJkLTeNsr6Fc2DQxO8xOM7JXEKRxQD9kAmSs2A2kMmUGI0i+iUFvX5 Jz0GjnsPftn4U2XaTDDHnSHZbkWl2egYfyiZPO0fRCMIiaQDzfBmAw7I21r1gfp/ nI+4h55PkhzG5n+zLU9Nz+XUKijZnycdkKsVpakw3CqpCfVa/8udKjpSgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiok0c7AkIfAwNk9fTDYrbD6dm5MB8GA1UdIwQY MBaAFCpzTqvPtbbCpOSDiO2zr49Qax+rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3Yzct MDlhYWMwNzg5YjkzLzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS82Zjk1MmEtYWQ1OS00YjlmLWI3YzctMDlhYWMwNzg5Yjkz LzEvS25OT3E4LTF0c0trNUlPSTdiT3ZqMUJySDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFsmuZ+FE T4InBOlUsZAuinmGhkX1bsM2UAtWsELZFOJ9BMFrB5s0tWw38hu15nryPFcLL1eC t3zcT6/ki2mlk0S/W69qBt/X7BU1U5FiTmwtLaVomZQTBDvhPwE+/kzMVQ7vbM+W 0opdCWktD25lGqpUxVPNSvcCLir0ESrfCgP1r9G3y2cxunVOTacSqGMy4axE7AyN BfB5HyfEAO2neOks1yEPW8Y+NXgy0Ulxe7L8OzbKIEFCF9G001VuaifS7M8ZEv+R XrSp6FfQE0n8lPt651V4aU9SnklgY0h20B5wqOn2qNbx2gUtyO1EVz4A+MVRpQTr CFm/WiBN0SDlNA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:48:16 2025 by rpki-client