This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json) Hash identifier: R+dSl7u5DfJLAlSb+PpChYDOkRtyv25FDjecfN+7diY= Subject key identifier: 44:E7:9D:E2:C0:31:CA:62:52:05:08:B8:C5:C4:FD:81:D9:47:85:3F Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Certificate serial: 019BF5AC2F56554AD3E2F0E9173B8FD21B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft Manifest number: 02FD Signing time: Sun 25 Jan 2026 15:01:00 +0000 Manifest this update: Sun 25 Jan 2026 15:01:00 +0000 Manifest next update: Mon 26 Jan 2026 15:01:00 +0000 Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: XS3FDfcm+qIYkDoI2WBn22ZNRZbGCj1srl6T3MerHO4=) 2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:2f:56:55:4a:d3:e2:f0:e9:17:3b:8f:d2:1b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Validity Not Before: Jan 25 15:01:00 2026 GMT Not After : Jan 26 15:01:00 2026 GMT Subject: CN=44e79de2c031ca62520508b8c5c4fd81d947853f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:07:ab:b6:c9:00:f8:65:65:c7:3d:89:b3: ae:88:be:99:f0:ee:86:38:33:75:e1:fe:18:30:55: 21:c1:70:ca:9e:72:14:d5:3a:0e:90:b6:5b:49:27: aa:c1:fc:43:49:a6:d1:e3:e2:76:8c:2f:84:2f:bb: c9:9e:df:3f:94:31:c8:73:b9:59:09:f0:d1:6c:83: c9:ce:cc:43:e1:1f:2c:81:cb:df:71:09:a3:0b:8c: 8d:df:e8:43:90:63:df:0d:4c:56:05:22:ec:c7:3c: 61:db:08:37:5e:42:70:97:57:80:74:32:87:b5:5a: 4f:f9:79:82:6d:eb:cf:b4:e5:e9:55:55:8a:42:bf: 44:82:a7:5a:34:6e:c2:d8:96:01:a8:c3:34:85:e2: 77:3f:47:88:bf:5f:b1:76:73:60:ed:ed:0b:97:71: 73:b9:da:7a:41:95:00:35:58:2c:4c:2c:54:ad:c1: 2e:6c:91:a9:18:e4:bc:2c:6c:f7:5f:47:84:93:bf: c9:53:90:54:85:25:48:0f:30:e8:6a:a4:51:12:2c: 77:fd:fb:42:27:bd:20:6f:7e:90:0f:9b:b4:9f:f4: 16:6d:3e:e3:fc:7d:9b:ad:95:e0:50:16:97:2b:58: f0:18:e1:88:ce:40:db:06:50:61:b9:4e:c7:60:05: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:9D:E2:C0:31:CA:62:52:05:08:B8:C5:C4:FD:81:D9:47:85:3F X509v3 Authority Key Identifier: keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:7f:7f:8c:ea:e5:72:e1:6f:d5:11:03:cd:d3:00:bc:09:b8: 70:47:e1:74:13:d9:48:25:0a:58:ef:5b:79:cc:9e:5b:96:86: 87:e7:f0:8b:cf:6c:12:78:f6:f2:ad:5f:b4:7a:37:75:e4:57: 05:f2:5c:8a:18:f4:5e:56:70:10:4b:39:44:8f:a7:15:0b:60: e9:e5:77:a4:9a:33:fb:86:21:d9:db:d2:7e:5b:d1:d6:3e:98: 9a:df:5c:fd:8a:39:45:9b:38:ac:0f:ef:92:5f:4d:63:57:62: 4c:b8:f8:b5:52:9e:54:f8:a6:e9:43:33:f0:87:11:aa:00:b3: 06:e3:34:66:1e:12:ae:53:69:b0:51:59:a3:f1:03:33:f8:29: 23:36:8e:8b:6e:99:dd:30:a1:f6:01:ab:c3:45:96:b0:8c:36: 33:1c:0e:14:c7:f7:4b:af:89:37:aa:75:f5:21:b9:41:d1:72: 4b:12:22:78:38:0b:5f:01:8b:d5:92:13:c1:a1:47:d0:c3:02: e6:f8:c1:5a:ce:69:c0:2b:c2:01:5c:fb:2e:6d:23:c0:1c:1f: 56:d8:ab:4a:b7:b1:54:24:df:ed:bc:a8:86:b0:98:61:b0:d6: b2:df:b4:e3:da:f5:38:fa:05:e5:e1:83:c9:df:59:ea:15:21: 96:79:e3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rC9WVUrT4vDpFzuP0huEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmM2Y2RmZTE5NmQ1YjM5ZDJlYTYwZTkwYzk1ZGI3MDQ0 NWQ5YjkwHhcNMjYwMTI1MTUwMTAwWhcNMjYwMTI2MTUwMTAwWjAzMTEwLwYDVQQD Eyg0NGU3OWRlMmMwMzFjYTYyNTIwNTA4YjhjNWM0ZmQ4MWQ5NDc4NTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQUHq7bJAPhlZcc9ibOuiL6Z8O6G ODN14f4YMFUhwXDKnnIU1ToOkLZbSSeqwfxDSabR4+J2jC+EL7vJnt8/lDHIc7lZ CfDRbIPJzsxD4R8sgcvfcQmjC4yN3+hDkGPfDUxWBSLsxzxh2wg3XkJwl1eAdDKH tVpP+XmCbevPtOXpVVWKQr9EgqdaNG7C2JYBqMM0heJ3P0eIv1+xdnNg7e0Ll3Fz udp6QZUANVgsTCxUrcEubJGpGOS8LGz3X0eEk7/JU5BUhSVIDzDoaqRREix3/ftC J70gb36QD5u0n/QWbT7j/H2brZXgUBaXK1jwGOGIzkDbBlBhuU7HYAU2EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETnneLAMcpiUgUIuMXE/YHZR4U/MB8GA1UdIwQY MBaAFD/8bN/hltWznS6mDpDJXbcERdm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMt MTU1YjM5ZTA3NmMyLzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMtMTU1YjM5ZTA3NmMy LzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArH9/jOrl cuFv1REDzdMAvAm4cEfhdBPZSCUKWO9becyeW5aGh+fwi89sEnj28q1ftHo3deRX BfJcihj0XlZwEEs5RI+nFQtg6eV3pJoz+4Yh2dvSflvR1j6Ymt9c/Yo5RZs4rA/v kl9NY1diTLj4tVKeVPim6UMz8IcRqgCzBuM0Zh4SrlNpsFFZo/EDM/gpIzaOi26Z 3TCh9gGrw0WWsIw2MxwOFMf3S6+JN6p19SG5QdFySxIieDgLXwGL1ZITwaFH0MMC 5vjBWs5pwCvCAVz7Lm0jwBwfVtirSrexVCTf7byohrCYYbDWst+049r1OPoF5eGD yd9Z6hUhlnnj+A== -----END CERTIFICATE-----Generated at Sun Jan 25 18:29:07 2026 by rpki-client