This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json) Hash identifier: yvzhInAbIqp94H9MSIYQHFezE6Q7uCKzMHx0q3OyrFk= Subject key identifier: 6E:1A:C2:8C:93:B9:56:72:FB:BC:88:E9:21:57:3C:7F:D5:5B:15:CD Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Certificate serial: 019AF276575F24DBC3A1665CF3E4DB5E95DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft Manifest number: 0276 Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: 2SNe6P83ixfhrrKm9yKqBWVzUm7+q8tUizZPVJUcUFM=) 2: STi4I8sG96eo3VPJ65NFCI64EAE.roa (hash: /qNhRrl9OQMqxbMusKPE+tUs21JHJCDgrFTNmZwrYmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:57:5f:24:db:c3:a1:66:5c:f3:e4:db:5e:95:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=6e1ac28c93b95672fbbc88e921573c7fd55b15cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bd:bf:46:b4:c0:1e:5b:2b:61:db:9c:80:29: f6:72:ae:60:94:e8:48:c5:a0:05:e2:db:2e:e3:2a: a8:f8:f1:f6:99:42:0b:90:0c:ba:e2:68:fc:f5:c4: 8a:fb:b0:ca:27:72:32:bf:6d:c0:db:89:46:7d:5f: ad:35:b9:65:12:5d:8d:25:4e:03:53:d9:32:c1:8c: 35:e1:21:60:e8:50:12:1a:ee:b7:aa:8c:21:32:4c: 08:d8:ca:b7:fd:2d:56:15:87:e9:cc:7c:28:bc:da: 8d:87:f3:34:d5:da:9c:a6:22:49:22:cf:d2:44:d3: 71:09:bf:0f:7f:9b:10:b6:dc:72:57:5b:5f:b6:55: 1d:c9:8f:9c:e7:12:c7:99:2e:0d:09:df:17:66:57: 4b:48:d6:6b:f5:29:89:84:7c:cc:00:aa:00:53:fb: 31:5b:ec:b3:8d:38:0a:56:d3:6b:81:42:11:e7:56: 80:fa:0d:c2:d9:4a:b2:06:3c:90:bf:6a:a3:2d:6e: e1:4c:1b:dd:21:1f:0a:37:ea:b6:90:5d:3d:65:f3: 86:42:73:e8:5b:d6:01:25:01:2f:a7:b3:cb:6c:83: b4:05:41:89:58:62:78:da:92:e7:3c:e2:6b:22:25: 39:8a:75:f8:32:cc:5d:55:68:4f:a6:47:7b:d1:c6: 13:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1A:C2:8C:93:B9:56:72:FB:BC:88:E9:21:57:3C:7F:D5:5B:15:CD X509v3 Authority Key Identifier: keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5a:fb:88:76:c3:1a:44:ca:68:6f:11:98:36:59:09:1c:2c: 16:55:8b:e0:12:a5:a7:52:20:e4:b5:40:cf:8d:4f:15:95:23: 9c:51:7b:11:55:34:76:8f:b8:87:2c:18:3c:32:b2:f8:d8:df: a7:4c:f1:7f:b1:35:f4:f6:53:ab:8b:99:18:66:fb:4a:91:a0: 34:5e:6f:88:75:40:d6:1f:07:9d:90:34:d6:85:a3:ad:35:b3: 5b:cc:d9:8f:99:2f:70:73:36:29:66:46:d1:1e:d4:02:7c:99: 28:04:11:5a:73:d3:7b:6e:9d:f7:d7:7a:6b:2b:fd:5e:a2:0c: 19:96:64:9a:2d:f4:ab:6e:74:95:99:1c:d5:c4:14:dd:9e:93: dd:78:57:9c:f9:ea:ba:75:16:02:9f:f0:3a:95:7a:65:30:95: 56:5d:d2:b6:70:fc:c0:ef:34:c8:db:84:b9:19:2e:97:53:9c: 54:48:f2:c4:5b:fb:8d:d8:02:c0:ec:55:a5:f5:56:9d:1f:61: 25:77:fd:5f:b9:16:1e:a4:12:c4:66:08:af:1f:f2:53:81:80: 6f:9a:29:d9:b2:11:f6:e2:87:0c:6a:4d:33:b7:2b:d3:ef:e0: 4a:51:4b:52:66:1a:c0:10:ff:cf:d9:02:71:26:7e:7a:35:88: f7:3a:fa:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydldfJNvDoWZc8+TbXpXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmM2Y2RmZTE5NmQ1YjM5ZDJlYTYwZTkwYzk1ZGI3MDQ0 NWQ5YjkwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD Eyg2ZTFhYzI4YzkzYjk1NjcyZmJiYzg4ZTkyMTU3M2M3ZmQ1NWIxNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL2/RrTAHlsrYducgCn2cq5glOhI xaAF4tsu4yqo+PH2mUILkAy64mj89cSK+7DKJ3Iyv23A24lGfV+tNbllEl2NJU4D U9kywYw14SFg6FASGu63qowhMkwI2Mq3/S1WFYfpzHwovNqNh/M01dqcpiJJIs/S RNNxCb8Pf5sQttxyV1tftlUdyY+c5xLHmS4NCd8XZldLSNZr9SmJhHzMAKoAU/sx W+yzjTgKVtNrgUIR51aA+g3C2UqyBjyQv2qjLW7hTBvdIR8KN+q2kF09ZfOGQnPo W9YBJQEvp7PLbIO0BUGJWGJ42pLnPOJrIiU5inX4MsxdVWhPpkd70cYTXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4awoyTuVZy+7yI6SFXPH/VWxXNMB8GA1UdIwQY MBaAFD/8bN/hltWznS6mDpDJXbcERdm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMt MTU1YjM5ZTA3NmMyLzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMtMTU1YjM5ZTA3NmMy LzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVr7iHbD GkTKaG8RmDZZCRwsFlWL4BKlp1Ig5LVAz41PFZUjnFF7EVU0do+4hywYPDKy+Njf p0zxf7E19PZTq4uZGGb7SpGgNF5viHVA1h8HnZA01oWjrTWzW8zZj5kvcHM2KWZG 0R7UAnyZKAQRWnPTe26d99d6ayv9XqIMGZZkmi30q250lZkc1cQU3Z6T3XhXnPnq unUWAp/wOpV6ZTCVVl3StnD8wO80yNuEuRkul1OcVEjyxFv7jdgCwOxVpfVWnR9h JXf9X7kWHqQSxGYIrx/yU4GAb5op2bIR9uKHDGpNM7cr0+/gSlFLUmYawBD/z9kC cSZ+ejWI9zr6Mw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:08:43 2025 by rpki-client