This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft File: knpH10d_JWifZNBks-yglkfozqI.mft (raw, json) Hash identifier: 6FOvkh7OFBoeZa4/9nk7lWstCFCyL5vBOPzf5USrinQ= Subject key identifier: 9D:F4:F4:1E:6F:32:B7:3D:C4:84:5F:2A:FD:75:20:0C:39:DA:29:A2 Authority key identifier: 92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2 Certificate issuer: /CN=927a47d7477f25689f64d064b3eca09647e8cea2 Certificate serial: 019B53AC1388058C8B7AEAF8FC1917252326 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft Manifest number: 1292 Signing time: Thu 25 Dec 2025 04:02:24 +0000 Manifest this update: Thu 25 Dec 2025 04:02:24 +0000 Manifest next update: Fri 26 Dec 2025 04:02:24 +0000 Files and hashes: 1: Lb4_w3xo3b2R5NUCynuhYVfd8F0.roa (hash: InJIfmRDJ+fA/aUu2uO9nwQjhMlW3TmyfkS552qt2Xg=) 2: knpH10d_JWifZNBks-yglkfozqI.crl (hash: G3yLukUFRPC+79q5mA4JCwsC7FLay8101nHro1fOhvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ac:13:88:05:8c:8b:7a:ea:f8:fc:19:17:25:23:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927a47d7477f25689f64d064b3eca09647e8cea2 Validity Not Before: Dec 25 04:02:24 2025 GMT Not After : Dec 26 04:02:24 2025 GMT Subject: CN=9df4f41e6f32b73dc4845f2afd75200c39da29a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:fe:c7:0b:b3:b7:e9:78:37:46:55:29:a7: 11:01:92:8d:cf:76:86:f1:3d:37:87:52:ac:74:5c: 15:1b:88:3b:36:ff:18:b8:7b:29:34:f2:79:03:5e: 8f:ed:f7:43:b7:62:c5:d5:d1:28:5f:21:d1:7a:5a: 57:b6:d5:cd:06:15:52:53:c6:90:9a:94:0a:83:c1: 78:c2:49:68:f7:44:6f:cc:26:13:b6:d7:5a:48:9f: 8a:7f:96:58:fe:16:1f:1c:66:77:dd:3f:3e:31:55: 2c:8e:2c:c1:fe:4f:9d:45:50:c3:d9:b9:71:32:3f: 64:27:1a:de:c4:1a:c9:45:bc:01:c0:27:9f:3c:56: 10:52:07:e5:06:11:06:89:2f:6e:40:9f:2a:c6:2e: 91:d0:3d:a0:9b:12:73:92:de:75:64:69:f4:1a:17: e0:ec:bc:f5:98:80:61:59:ed:f3:40:e4:82:34:33: 7e:64:0d:1d:cb:75:23:d6:f7:f5:3e:a1:fe:b8:d6: 0a:fa:79:14:b6:61:bb:ff:51:cb:ea:b5:5f:1c:f5: bf:68:74:04:10:f7:d8:f2:d0:82:7d:9d:f8:35:4b: ae:93:9e:94:91:b5:1c:0d:ad:3e:3a:56:49:80:2a: 87:d2:5d:52:f7:92:e9:4f:1d:08:d5:83:ca:c7:05: 77:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F4:F4:1E:6F:32:B7:3D:C4:84:5F:2A:FD:75:20:0C:39:DA:29:A2 X509v3 Authority Key Identifier: keyid:92:7A:47:D7:47:7F:25:68:9F:64:D0:64:B3:EC:A0:96:47:E8:CE:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knpH10d_JWifZNBks-yglkfozqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b8c687-a23d-47b0-8462-93252014ccf8/1/knpH10d_JWifZNBks-yglkfozqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:a8:5b:54:5b:65:c1:f9:8d:3e:86:c3:ae:53:09:8a:7a:4a: 5f:50:cd:ed:46:a9:32:e1:ba:02:3a:0d:f2:02:6f:83:4d:a2: 97:1d:73:1b:85:87:57:d5:df:25:5d:9d:e9:77:0d:79:dd:58: a3:82:dc:64:2c:ab:dc:cc:26:1f:d3:80:78:33:39:e0:15:1e: 73:a8:f2:62:b1:96:6a:99:fb:52:fd:3b:fb:85:28:c4:99:fc: 8e:e3:89:1f:f1:cc:99:64:68:49:ab:69:41:58:22:36:da:1c: 87:0c:d1:56:54:af:f5:d4:54:e6:61:44:cb:89:63:53:80:01: 26:b0:fc:9d:d9:5a:79:da:a2:e1:d4:71:f9:29:0b:61:f6:ef: ec:e2:09:74:e0:23:7c:32:2d:c5:60:d4:3d:2d:60:43:c5:83: 9a:c8:6e:bd:94:08:2f:20:ec:3f:bd:ee:2d:9d:52:14:01:3f: c3:3f:c6:b7:9b:21:ad:58:e2:5f:eb:39:d3:93:2a:66:0e:ad: bd:2f:95:df:35:22:a9:94:87:69:23:2b:ef:52:d0:1d:b9:02: 8e:ec:d8:46:fc:39:9f:e1:c9:72:b6:fa:19:e9:cf:08:3e:94: b4:98:2d:8e:d4:ff:c4:4e:67:48:55:a0:4c:bb:5c:a1:15:16: c4:17:12:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTrBOIBYyLeur4/BkXJSMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyN2E0N2Q3NDc3ZjI1Njg5ZjY0ZDA2NGIzZWNhMDk2NDdl OGNlYTIwHhcNMjUxMjI1MDQwMjI0WhcNMjUxMjI2MDQwMjI0WjAzMTEwLwYDVQQD Eyg5ZGY0ZjQxZTZmMzJiNzNkYzQ4NDVmMmFmZDc1MjAwYzM5ZGEyOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAP+xwuzt+l4N0ZVKacRAZKNz3aG 8T03h1KsdFwVG4g7Nv8YuHspNPJ5A16P7fdDt2LF1dEoXyHRelpXttXNBhVSU8aQ mpQKg8F4wklo90RvzCYTttdaSJ+Kf5ZY/hYfHGZ33T8+MVUsjizB/k+dRVDD2blx Mj9kJxrexBrJRbwBwCefPFYQUgflBhEGiS9uQJ8qxi6R0D2gmxJzkt51ZGn0Ghfg 7Lz1mIBhWe3zQOSCNDN+ZA0dy3Uj1vf1PqH+uNYK+nkUtmG7/1HL6rVfHPW/aHQE EPfY8tCCfZ34NUuuk56UkbUcDa0+OlZJgCqH0l1S95LpTx0I1YPKxwV3xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ309B5vMrc9xIRfKv11IAw52imiMB8GA1UdIwQY MBaAFJJ6R9dHfyVon2TQZLPsoJZH6M6iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjIt OTMyNTIwMTRjY2Y4LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iOGM2ODctYTIzZC00N2IwLTg0NjItOTMyNTIwMTRjY2Y4 LzEva25wSDEwZF9KV2lmWk5Ca3MteWdsa2ZvenFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnqhbVFtl wfmNPobDrlMJinpKX1DN7UapMuG6AjoN8gJvg02ilx1zG4WHV9XfJV2d6XcNed1Y o4LcZCyr3MwmH9OAeDM54BUec6jyYrGWapn7Uv07+4UoxJn8juOJH/HMmWRoSatp QVgiNtochwzRVlSv9dRU5mFEy4ljU4ABJrD8ndlaedqi4dRx+SkLYfbv7OIJdOAj fDItxWDUPS1gQ8WDmshuvZQILyDsP73uLZ1SFAE/wz/Gt5shrVjiX+s505MqZg6t vS+V3zUiqZSHaSMr71LQHbkCjuzYRvw5n+HJcrb6GenPCD6UtJgtjtT/xE5nSFWg TLtcoRUWxBcSUA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:25:57 2025 by rpki-client