This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json) Hash identifier: /0adIL72ZS08gatrc2IJu+EWM5C6Xa1kTbg0tReprGY= Subject key identifier: A1:C9:9C:69:7F:E1:E9:6A:82:2D:6A:60:6E:96:B2:89:09:A5:B9:04 Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6 Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6 Certificate serial: 019AF19ADE59820061AB169FBECE5A509E4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft Manifest number: 0B1D Signing time: Sat 06 Dec 2025 03:00:49 +0000 Manifest this update: Sat 06 Dec 2025 03:00:49 +0000 Manifest next update: Sun 07 Dec 2025 03:00:49 +0000 Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: AezetBjon6z89/1iC3vSTbllAy+bxis1fiELlf2OEAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:de:59:82:00:61:ab:16:9f:be:ce:5a:50:9e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6 Validity Not Before: Dec 6 03:00:49 2025 GMT Not After : Dec 7 03:00:49 2025 GMT Subject: CN=a1c99c697fe1e96a822d6a606e96b28909a5b904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:03:b3:c4:9e:08:00:e7:14:38:ce:dc:18: 4f:b5:d0:ce:54:f7:ee:36:e5:7c:38:3a:b5:25:f7: 3a:5e:32:f6:47:67:b8:44:12:bd:f5:f7:9e:d7:31: ec:25:e9:e1:48:18:2c:63:3a:08:23:d2:15:d2:8b: 4d:6a:6a:da:41:ef:e5:b8:2d:ac:31:97:89:1d:15: 3e:e1:68:00:84:7e:a4:72:2c:ec:3f:05:3f:1e:98: 6c:d4:58:c7:36:00:df:99:69:d9:36:4a:b7:c2:cb: 13:6b:41:a3:3e:17:a4:78:ad:0e:32:4e:bb:fe:3d: bf:f6:5c:68:22:a5:75:e6:0c:09:d1:13:28:46:74: 26:dc:b8:2a:de:b5:0e:93:7e:eb:67:70:f7:b8:3d: 70:5d:00:65:dc:98:e0:79:81:88:0d:58:e8:c1:0f: 35:c1:6d:b2:c0:52:0f:49:51:82:8c:c8:a0:40:a6: 9b:6b:b7:4d:08:1f:3d:c4:53:fe:64:b5:4d:44:68: ab:5a:bc:c2:a5:74:b9:44:b6:54:c3:57:09:c9:70: cf:88:66:e6:71:54:f1:59:00:36:e0:f7:f6:c9:e8: 16:10:5d:ec:90:32:14:fd:77:f0:b7:6d:96:8d:6d: c1:d4:ba:db:05:af:6a:68:a6:56:64:5b:d5:ed:85: 34:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C9:9C:69:7F:E1:E9:6A:82:2D:6A:60:6E:96:B2:89:09:A5:B9:04 X509v3 Authority Key Identifier: keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:81:8d:c6:ca:bf:d9:bf:82:ee:0b:24:f4:80:be:db:b9:c7: 25:7a:0a:90:bf:08:4d:fb:a2:2b:98:89:72:fc:7d:fe:4b:c7: 33:c5:b3:eb:3e:5b:d3:a1:f5:c5:ca:c5:fa:2d:2c:b2:32:11: 75:de:60:5b:ca:fd:d7:e0:ff:27:01:6f:75:f5:c8:de:8a:a7: 0b:e0:b5:80:54:87:1a:86:c4:e2:9f:70:0f:a0:9a:b7:fc:36: be:e1:41:ac:4a:98:4e:b0:59:44:de:60:73:b7:3e:8b:ef:35: c9:1b:c0:2a:1e:9a:f2:b4:cc:09:b1:5c:86:a5:cd:5e:e1:31: b1:25:bb:6b:fc:48:c6:f9:b9:fb:8b:96:61:2e:63:85:fa:db: c4:71:9c:2f:54:0b:cc:eb:d8:b6:02:8c:10:ba:d3:0a:77:71: 7d:69:c0:60:b3:da:4c:8e:61:df:ba:1b:49:8d:fa:6c:29:76: e6:5e:c3:10:8e:cd:e7:23:a5:86:72:b3:0a:db:01:b7:ad:71: 44:7f:e7:61:6b:6c:ce:9c:92:24:1f:a7:88:00:c8:87:ca:e8: 40:b5:7e:94:a6:a2:e3:6e:e8:7f:5e:8f:d2:36:62:4f:22:b6: 77:a0:60:68:84:40:c8:45:38:46:d3:8e:c0:a5:c5:4f:ab:e1: 10:d7:a3:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmt5ZggBhqxafvs5aUJ5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjdmMGZmNzRiN2M5ZmFlYTI5NzhlZDk1ZTg0MDk4NDkw NGRjZDYwHhcNMjUxMjA2MDMwMDQ5WhcNMjUxMjA3MDMwMDQ5WjAzMTEwLwYDVQQD EyhhMWM5OWM2OTdmZTFlOTZhODIyZDZhNjA2ZTk2YjI4OTA5YTViOTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpMDs8SeCADnFDjO3BhPtdDOVPfu NuV8ODq1Jfc6XjL2R2e4RBK99fee1zHsJenhSBgsYzoII9IV0otNamraQe/luC2s MZeJHRU+4WgAhH6kcizsPwU/Hphs1FjHNgDfmWnZNkq3wssTa0GjPhekeK0OMk67 /j2/9lxoIqV15gwJ0RMoRnQm3Lgq3rUOk37rZ3D3uD1wXQBl3JjgeYGIDVjowQ81 wW2ywFIPSVGCjMigQKaba7dNCB89xFP+ZLVNRGirWrzCpXS5RLZUw1cJyXDPiGbm cVTxWQA24Pf2yegWEF3skDIU/Xfwt22WjW3B1LrbBa9qaKZWZFvV7YU08wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHJnGl/4elqgi1qYG6WsokJpbkEMB8GA1UdIwQY MBaAFJH38P90t8n66il47ZXoQJhJBNzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2Zmd18zUzN5ZnJxS1hqdGxlaEFtRWtFM05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xNzRjM2UtZmE1Yi00OWQxLTlkMjEt ZTJiZDJlNGM1MjMyLzEva2Zmd18zUzN5ZnJxS1hqdGxlaEFtRWtFM05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8xNzRjM2UtZmE1Yi00OWQxLTlkMjEtZTJiZDJlNGM1MjMy LzEva2Zmd18zUzN5ZnJxS1hqdGxlaEFtRWtFM05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIGNxsq/ 2b+C7gsk9IC+27nHJXoKkL8ITfuiK5iJcvx9/kvHM8Wz6z5b06H1xcrF+i0ssjIR dd5gW8r91+D/JwFvdfXI3oqnC+C1gFSHGobE4p9wD6Cat/w2vuFBrEqYTrBZRN5g c7c+i+81yRvAKh6a8rTMCbFchqXNXuExsSW7a/xIxvm5+4uWYS5jhfrbxHGcL1QL zOvYtgKMELrTCndxfWnAYLPaTI5h37obSY36bCl25l7DEI7N5yOlhnKzCtsBt61x RH/nYWtszpySJB+niADIh8roQLV+lKai427of16P0jZiTyK2d6BgaIRAyEU4RtOO wKXFT6vhENejiA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:13:18 2025 by rpki-client