This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft File: kffw_3S3yfrqKXjtlehAmEkE3NY.mft (raw, json) Hash identifier: 3t5IFQ+wZ0E6euIvG9uWGahXN9X6aTbo1nxQbm95hPA= Subject key identifier: 1D:BD:51:0F:0D:EA:B4:32:8A:1E:2E:44:EC:BF:13:AB:E1:D1:7D:DC Authority key identifier: 91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6 Certificate issuer: /CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6 Certificate serial: 019C438FAFD4F2D11CDAC6DF630828CB2D81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft Manifest number: 0BCC Signing time: Mon 09 Feb 2026 18:00:16 +0000 Manifest this update: Mon 09 Feb 2026 18:00:16 +0000 Manifest next update: Tue 10 Feb 2026 18:00:16 +0000 Files and hashes: 1: kffw_3S3yfrqKXjtlehAmEkE3NY.crl (hash: qb62BTMUpRXQDB5sVQa+5kbJd5rzJCxidcKjjB16blI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:af:d4:f2:d1:1c:da:c6:df:63:08:28:cb:2d:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91f7f0ff74b7c9faea2978ed95e840984904dcd6 Validity Not Before: Feb 9 18:00:16 2026 GMT Not After : Feb 10 18:00:16 2026 GMT Subject: CN=1dbd510f0deab4328a1e2e44ecbf13abe1d17ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5e:37:ad:d2:78:3c:1a:a4:71:0c:f9:d9:1a: 60:24:2a:79:58:b2:76:35:c9:69:49:72:6e:7d:ea: 55:60:c1:bf:53:a9:52:96:03:28:31:d8:2b:c2:52: 20:4c:ba:cb:e6:dd:8e:8e:0e:f0:7a:c1:7e:05:ff: 6f:5a:dc:84:49:ed:a9:e9:a4:a5:db:d2:e4:53:05: fa:08:fb:58:c5:3a:6c:ff:fc:fd:01:8c:14:3d:52: da:83:62:da:45:b6:42:9c:51:f5:c0:25:a9:47:55: 42:5f:f8:9e:69:ba:aa:fa:1c:24:87:69:d1:b4:03: 4b:46:24:d0:19:1e:fe:bb:6d:cf:79:84:d3:5a:96: 98:fd:5f:56:56:10:46:6f:c2:11:47:b5:04:17:49: 38:1d:48:79:e4:b8:f9:e8:45:43:58:1f:83:1b:5c: a0:62:ee:36:a5:5a:96:79:7d:42:fe:1a:79:3c:74: 84:e7:72:ff:8f:31:b7:f4:9f:e3:ab:fb:2e:30:63: 07:a5:33:c8:2b:d4:20:51:a6:e6:08:4c:11:5e:7b: 43:6c:b5:72:0a:39:2b:cd:9e:62:3a:15:ff:9e:1d: 74:56:59:54:0e:11:83:ab:4a:79:33:d1:2d:11:0f: 4b:c5:0f:a6:41:6b:ab:38:40:d4:97:a3:7c:02:c8: 33:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BD:51:0F:0D:EA:B4:32:8A:1E:2E:44:EC:BF:13:AB:E1:D1:7D:DC X509v3 Authority Key Identifier: keyid:91:F7:F0:FF:74:B7:C9:FA:EA:29:78:ED:95:E8:40:98:49:04:DC:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kffw_3S3yfrqKXjtlehAmEkE3NY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/174c3e-fa5b-49d1-9d21-e2bd2e4c5232/1/kffw_3S3yfrqKXjtlehAmEkE3NY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:65:9a:36:30:25:24:2d:2e:2d:d2:c4:99:ac:81:f4:97:5d: f7:f1:3a:06:76:e9:da:bc:24:7b:d6:f1:58:6f:a8:a7:2c:7d: 4d:79:6c:0a:2f:11:a0:78:e8:47:66:c1:8a:7d:d0:13:5d:09: 76:34:db:d2:f5:fb:dc:73:6c:e1:17:5b:9a:31:34:ff:19:64: 98:c9:c7:29:93:ec:83:ad:96:2d:8e:72:aa:1a:6e:ff:bf:82: 24:d2:42:8a:47:92:6d:64:61:64:05:77:bf:73:64:dc:8c:65: c8:4c:31:d6:fe:b5:72:a9:a0:5f:2c:a5:c7:93:cd:4b:9d:9f: fc:b6:c4:55:25:5b:8f:3a:bd:5a:6f:8f:64:05:81:7a:67:67: 4e:e6:46:95:e1:bb:51:5a:cc:79:55:67:82:e2:19:c0:f2:a6: 5d:1a:30:dd:1b:a2:5a:e5:16:6f:2f:ab:07:ef:b4:36:12:3e: 19:46:c5:b1:9c:85:20:87:7f:85:ff:cc:83:9f:ab:cd:20:52: ef:4b:04:52:a4:7c:1e:33:79:da:09:94:06:58:9d:2c:42:51: 34:39:d9:40:73:dc:f3:c5:ae:f5:cd:89:a6:18:cf:81:cf:ce: 12:d0:97:9d:19:1c:6d:2f:c2:f8:b8:ce:81:57:fe:ee:0e:ce: 09:9b:bd:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj6/U8tEc2sbfYwgoyy2BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZjdmMGZmNzRiN2M5ZmFlYTI5NzhlZDk1ZTg0MDk4NDkw NGRjZDYwHhcNMjYwMjA5MTgwMDE2WhcNMjYwMjEwMTgwMDE2WjAzMTEwLwYDVQQD EygxZGJkNTEwZjBkZWFiNDMyOGExZTJlNDRlY2JmMTNhYmUxZDE3ZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv143rdJ4PBqkcQz52RpgJCp5WLJ2 NclpSXJufepVYMG/U6lSlgMoMdgrwlIgTLrL5t2Ojg7wesF+Bf9vWtyESe2p6aSl 29LkUwX6CPtYxTps//z9AYwUPVLag2LaRbZCnFH1wCWpR1VCX/ieabqq+hwkh2nR tANLRiTQGR7+u23PeYTTWpaY/V9WVhBGb8IRR7UEF0k4HUh55Lj56EVDWB+DG1yg Yu42pVqWeX1C/hp5PHSE53L/jzG39J/jq/suMGMHpTPIK9QgUabmCEwRXntDbLVy CjkrzZ5iOhX/nh10VllUDhGDq0p5M9EtEQ9LxQ+mQWurOEDUl6N8AsgzEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB29UQ8N6rQyih4uROy/E6vh0X3cMB8GA1UdIwQY MBaAFJH38P90t8n66il47ZXoQJhJBNzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2Zmd18zUzN5ZnJxS1hqdGxlaEFtRWtFM05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xNzRjM2UtZmE1Yi00OWQxLTlkMjEt ZTJiZDJlNGM1MjMyLzEva2Zmd18zUzN5ZnJxS1hqdGxlaEFtRWtFM05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8xNzRjM2UtZmE1Yi00OWQxLTlkMjEtZTJiZDJlNGM1MjMy LzEva2Zmd18zUzN5ZnJxS1hqdGxlaEFtRWtFM05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2WaNjAl JC0uLdLEmayB9Jdd9/E6Bnbp2rwke9bxWG+opyx9TXlsCi8RoHjoR2bBin3QE10J djTb0vX73HNs4RdbmjE0/xlkmMnHKZPsg62WLY5yqhpu/7+CJNJCikeSbWRhZAV3 v3Nk3IxlyEwx1v61cqmgXyylx5PNS52f/LbEVSVbjzq9Wm+PZAWBemdnTuZGleG7 UVrMeVVnguIZwPKmXRow3RuiWuUWby+rB++0NhI+GUbFsZyFIId/hf/Mg5+rzSBS 70sEUqR8HjN52gmUBlidLEJRNDnZQHPc88Wu9c2JphjPgc/OEtCXnRkcbS/C+LjO gVf+7g7OCZu9wA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:21 2026 by rpki-client