This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json) Hash identifier: Hs+Y7hLCbuYeI/Y+HO7DLvRNj8VRoHFTn640FnjnQ28= Subject key identifier: 68:96:9E:BB:1D:A1:DA:84:D7:C4:C9:D4:06:BE:EC:FB:5F:C0:BA:E6 Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6 Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6 Certificate serial: 019B3532C7BB5ACC99E0BC44A774E43C3E70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft Manifest number: 0B40 Signing time: Fri 19 Dec 2025 06:01:18 +0000 Manifest this update: Fri 19 Dec 2025 06:01:18 +0000 Manifest next update: Sat 20 Dec 2025 06:01:18 +0000 Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: pHKoZgcwQtjvrTVhv08pMw8GqygQMynHDK1lNfcv8Qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:c7:bb:5a:cc:99:e0:bc:44:a7:74:e4:3c:3e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6 Validity Not Before: Dec 19 06:01:18 2025 GMT Not After : Dec 20 06:01:18 2025 GMT Subject: CN=68969ebb1da1da84d7c4c9d406beecfb5fc0bae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:22:36:63:04:60:51:e6:39:9d:22:8e:c4:d4: 03:ca:e1:16:8e:9b:25:fb:91:a8:91:da:62:63:7b: 49:fe:bf:55:8f:5a:0c:15:44:07:e0:bd:46:04:83: a7:e2:99:01:8f:41:6e:6d:76:96:44:5f:b9:a7:a6: 01:da:f7:47:89:b1:69:5e:0f:0d:75:e6:d5:b3:29: 5c:89:be:f8:dd:eb:5b:90:39:4a:48:9f:0d:78:53: 08:50:cc:83:6a:47:cc:65:3e:0f:52:40:83:1a:12: 87:45:43:c0:a3:98:4c:a1:b6:33:f2:b5:c0:42:fe: 1b:49:07:4d:9d:21:d3:42:38:0e:d0:95:1f:9a:bb: 57:4c:79:aa:49:74:54:42:8d:46:86:7e:81:88:46: 70:35:8d:87:2f:39:16:f0:ba:1a:95:85:e0:06:7c: 71:5e:cc:36:6e:e6:d5:7b:37:62:cd:e3:85:a1:9a: 4e:d0:29:b0:3c:aa:24:e1:4e:9d:28:4f:66:fe:a4: 77:9a:37:02:89:19:b6:69:39:26:54:93:47:9b:aa: c6:20:d8:bc:1f:69:c2:7b:b1:c1:e4:e5:44:90:4b: 86:29:e6:db:4a:03:a8:8a:02:19:a8:cb:63:dd:ae: c7:ac:96:1d:2a:1f:49:4c:aa:7c:06:6c:34:95:86: c6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:96:9E:BB:1D:A1:DA:84:D7:C4:C9:D4:06:BE:EC:FB:5F:C0:BA:E6 X509v3 Authority Key Identifier: keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f0:dc:4f:43:ce:bd:e0:c6:41:57:0e:ab:c6:d9:fd:6d:00: 29:c8:04:a9:77:c5:71:db:53:e9:6a:97:7c:75:28:22:f0:36: e4:96:d5:b7:4c:a1:a0:d2:0b:1a:81:7c:e1:6b:28:8a:de:32: 91:f4:aa:93:51:33:ed:df:5b:80:99:74:b1:50:1d:df:89:3d: d5:f3:c2:04:90:79:9d:09:24:02:8f:24:5d:89:43:9f:33:29: 2c:8b:22:ee:31:29:cc:d4:ca:4b:e7:3a:78:b2:bb:fa:49:61: ff:82:f1:47:2b:25:ad:78:68:7f:f7:df:67:84:3b:55:ac:43: fa:90:0f:f7:67:b9:ba:fb:27:7c:db:3d:ea:96:de:04:04:9f: 11:3b:55:84:1f:e3:fd:b0:10:8a:b5:53:95:0f:34:3d:c7:57: 08:14:21:16:a8:6c:35:42:5b:fd:29:ff:58:ea:c8:fe:1d:95: 05:f0:f5:b9:3b:2a:b2:d8:97:cc:ac:e2:29:9e:1c:7e:30:25: a3:65:c9:23:7b:b1:7d:1c:58:8c:83:5a:46:ce:7b:c8:ca:44: 65:6a:35:62:81:df:da:5c:23:54:69:8c:07:19:64:c4:00:73: 3e:80:ad:b7:7b:05:65:37:e0:3e:7e:a6:9c:f2:4a:c6:11:9e: 68:1d:07:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mse7WsyZ4LxEp3TkPD5wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjdmMGZmNzRiN2M5ZmFlYTI5NzhlZDk1ZTg0MDk4NDkw NGRjZDYwHhcNMjUxMjE5MDYwMTE4WhcNMjUxMjIwMDYwMTE4WjAzMTEwLwYDVQQD Eyg2ODk2OWViYjFkYTFkYTg0ZDdjNGM5ZDQwNmJlZWNmYjVmYzBiYWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SI2YwRgUeY5nSKOxNQDyuEWjpsl +5GokdpiY3tJ/r9Vj1oMFUQH4L1GBIOn4pkBj0FubXaWRF+5p6YB2vdHibFpXg8N debVsylcib743etbkDlKSJ8NeFMIUMyDakfMZT4PUkCDGhKHRUPAo5hMobYz8rXA Qv4bSQdNnSHTQjgO0JUfmrtXTHmqSXRUQo1Ghn6BiEZwNY2HLzkW8LoalYXgBnxx Xsw2bubVezdizeOFoZpO0CmwPKok4U6dKE9m/qR3mjcCiRm2aTkmVJNHm6rGINi8 H2nCe7HB5OVEkEuGKebbSgOoigIZqMtj3a7HrJYdKh9JTKp8Bmw0lYbGxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiWnrsdodqE18TJ1Aa+7PtfwLrmMB8GA1UdIwQY MBaAFJH38P90t8n66il47ZXoQJhJBNzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2Zmd18zUzN5ZnJxS1hqdGxlaEFtRWtFM05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xNzRjM2UtZmE1Yi00OWQxLTlkMjEt ZTJiZDJlNGM1MjMyLzEva2Zmd18zUzN5ZnJxS1hqdGxlaEFtRWtFM05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8xNzRjM2UtZmE1Yi00OWQxLTlkMjEtZTJiZDJlNGM1MjMy LzEva2Zmd18zUzN5ZnJxS1hqdGxlaEFtRWtFM05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvDcT0PO veDGQVcOq8bZ/W0AKcgEqXfFcdtT6WqXfHUoIvA25JbVt0yhoNILGoF84Wsoit4y kfSqk1Ez7d9bgJl0sVAd34k91fPCBJB5nQkkAo8kXYlDnzMpLIsi7jEpzNTKS+c6 eLK7+klh/4LxRyslrXhof/ffZ4Q7VaxD+pAP92e5uvsnfNs96pbeBASfETtVhB/j /bAQirVTlQ80PcdXCBQhFqhsNUJb/Sn/WOrI/h2VBfD1uTsqstiXzKziKZ4cfjAl o2XJI3uxfRxYjINaRs57yMpEZWo1YoHf2lwjVGmMBxlkxABzPoCtt3sFZTfgPn6m nPJKxhGeaB0HWQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:47:15 2025 by rpki-client