This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json) Hash identifier: EoPy+an0cUqa8gXZiQj5XNRbLoHmK9wn4hndwHGshQ0= Subject key identifier: 2B:3F:A5:AE:8A:7D:35:04:AF:CF:BC:21:B3:95:C9:B5:B5:45:2A:07 Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Certificate serial: 019B1B0471C09C659E5859563D483D639BAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft Manifest number: 028B Signing time: Sun 14 Dec 2025 04:00:34 +0000 Manifest this update: Sun 14 Dec 2025 04:00:34 +0000 Manifest next update: Mon 15 Dec 2025 04:00:34 +0000 Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: ZkkLscpCOeFGKk0sKFceswyYEudWANj4pIy+XJXqXzc=) 2: STi4I8sG96eo3VPJ65NFCI64EAE.roa (hash: /qNhRrl9OQMqxbMusKPE+tUs21JHJCDgrFTNmZwrYmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:71:c0:9c:65:9e:58:59:56:3d:48:3d:63:9b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Validity Not Before: Dec 14 04:00:34 2025 GMT Not After : Dec 15 04:00:34 2025 GMT Subject: CN=2b3fa5ae8a7d3504afcfbc21b395c9b5b5452a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:1b:e8:ef:72:f3:91:65:e8:33:19:74:df: 7c:1f:4d:2d:e2:75:fc:01:a3:5b:71:07:2e:c5:8b: d0:98:f9:ed:9e:fa:16:02:21:0a:44:47:08:da:61: e3:26:0b:0f:a6:d3:c0:f0:dd:9c:14:ce:54:5f:a0: 9f:25:80:7b:c4:3b:7b:60:3f:9a:11:06:e7:05:30: 51:65:31:0d:c1:ca:82:1a:05:11:42:87:bb:8c:77: 73:e2:0e:02:61:57:cf:a9:77:38:2f:c1:ff:52:bd: ef:c1:11:e3:10:df:6e:33:3e:70:7e:54:45:18:c4: 09:bb:03:a4:67:af:f0:78:d8:bd:97:e9:2d:08:6d: 00:3f:5d:d9:a5:5d:dc:14:81:75:01:de:06:e1:9a: f0:58:62:f1:76:4f:a0:65:ba:7a:c3:fc:56:19:db: 17:9a:fe:cd:05:20:c9:a6:3a:37:1d:9c:70:a5:52: c3:86:b2:fa:ef:3f:82:e4:71:6e:54:a1:52:c2:24: ac:0d:c5:97:ee:d1:9d:f3:8b:ea:d1:4e:16:46:55: fc:d4:3a:a1:d4:f2:82:1c:75:c5:4b:cd:c2:4d:5b: ba:87:c2:89:32:84:e0:30:15:72:3a:01:61:f9:a8: 57:46:67:06:f8:99:ec:67:ca:75:41:dd:bc:8e:f5: 4a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3F:A5:AE:8A:7D:35:04:AF:CF:BC:21:B3:95:C9:B5:B5:45:2A:07 X509v3 Authority Key Identifier: keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:86:a9:44:ca:f4:37:b6:3a:3d:32:77:af:d6:6e:90:c1:47: f9:de:6b:3d:8b:8e:27:1f:77:96:fe:13:96:fc:a6:ae:05:08: 2b:45:cd:7a:57:2f:97:41:12:a0:80:8a:1c:9e:5f:9a:1d:90: ae:5c:70:ca:6a:fd:96:06:75:e8:b5:8d:19:f1:20:a3:c4:e0: a0:e9:cc:2d:57:bb:84:a5:f2:0f:74:ed:c9:93:ec:48:45:7a: f0:25:80:cb:7d:bb:78:b8:d3:4c:83:e2:e8:75:16:74:d4:1d: fb:1d:c4:d0:01:54:35:27:d8:95:9d:82:79:34:09:35:43:62: 47:5b:71:2e:75:1a:2e:10:fd:49:c6:56:46:75:24:7b:dd:8c: 41:b4:45:1b:73:6a:d2:2a:d4:9c:99:0f:f8:21:fb:6a:cc:46: cf:5d:56:d2:17:f9:d7:13:28:8e:88:f9:81:0d:ba:ec:2a:04: 5d:9a:ef:f0:ac:57:b5:c6:a4:0e:0d:19:1d:3b:27:f0:68:7f: e3:70:77:92:2f:c2:93:17:34:bc:bf:b7:00:ac:b5:1f:b9:ab: c8:65:c2:be:84:1f:55:6d:c2:aa:54:5d:f2:12:11:3f:e3:9e: 80:b0:0a:7a:a3:6c:ee:3b:c5:28:8b:45:5c:d0:1c:82:c6:fe: ac:6b:bf:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBHHAnGWeWFlWPUg9Y5uvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmM2Y2RmZTE5NmQ1YjM5ZDJlYTYwZTkwYzk1ZGI3MDQ0 NWQ5YjkwHhcNMjUxMjE0MDQwMDM0WhcNMjUxMjE1MDQwMDM0WjAzMTEwLwYDVQQD EygyYjNmYTVhZThhN2QzNTA0YWZjZmJjMjFiMzk1YzliNWI1NDUyYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpAb6O9y85Fl6DMZdN98H00t4nX8 AaNbcQcuxYvQmPntnvoWAiEKREcI2mHjJgsPptPA8N2cFM5UX6CfJYB7xDt7YD+a EQbnBTBRZTENwcqCGgURQoe7jHdz4g4CYVfPqXc4L8H/Ur3vwRHjEN9uMz5wflRF GMQJuwOkZ6/weNi9l+ktCG0AP13ZpV3cFIF1Ad4G4ZrwWGLxdk+gZbp6w/xWGdsX mv7NBSDJpjo3HZxwpVLDhrL67z+C5HFuVKFSwiSsDcWX7tGd84vq0U4WRlX81Dqh 1PKCHHXFS83CTVu6h8KJMoTgMBVyOgFh+ahXRmcG+JnsZ8p1Qd28jvVKHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCs/pa6KfTUEr8+8IbOVybW1RSoHMB8GA1UdIwQY MBaAFD/8bN/hltWznS6mDpDJXbcERdm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMt MTU1YjM5ZTA3NmMyLzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMtMTU1YjM5ZTA3NmMy LzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIapRMr0 N7Y6PTJ3r9ZukMFH+d5rPYuOJx93lv4TlvymrgUIK0XNelcvl0ESoICKHJ5fmh2Q rlxwymr9lgZ16LWNGfEgo8TgoOnMLVe7hKXyD3TtyZPsSEV68CWAy327eLjTTIPi 6HUWdNQd+x3E0AFUNSfYlZ2CeTQJNUNiR1txLnUaLhD9ScZWRnUke92MQbRFG3Nq 0irUnJkP+CH7asxGz11W0hf51xMojoj5gQ267CoEXZrv8KxXtcakDg0ZHTsn8Gh/ 43B3ki/Ckxc0vL+3AKy1H7mryGXCvoQfVW3CqlRd8hIRP+OegLAKeqNs7jvFKItF XNAcgsb+rGu/Bg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:15 2025 by rpki-client