This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json) Hash identifier: mW98f7qK7iYKhmB2NtF087t4eUYai+j5m2ewVkxhmGM= Subject key identifier: AB:1A:05:E8:FA:3E:24:3D:5B:8B:87:2D:D2:69:00:59:DA:FD:7E:47 Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Certificate serial: 019C42EB8DF8333AE3DC6E5B05D36D38AEC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft Manifest number: 0325 Signing time: Mon 09 Feb 2026 15:00:59 +0000 Manifest this update: Mon 09 Feb 2026 15:00:59 +0000 Manifest next update: Tue 10 Feb 2026 15:00:59 +0000 Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: w/n+eOTSo5FNa2YzEF39zGU6h7WtNHpfy9rU2rP7qXM=) 2: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (hash: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:8d:f8:33:3a:e3:dc:6e:5b:05:d3:6d:38:ae:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Validity Not Before: Feb 9 15:00:59 2026 GMT Not After : Feb 10 15:00:59 2026 GMT Subject: CN=ab1a05e8fa3e243d5b8b872dd2690059dafd7e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9e:55:c5:b9:3a:8a:8d:c3:6f:4c:3c:b8:4b: 3c:35:7e:18:5d:47:34:f4:13:59:3e:8f:86:29:20: db:dc:69:e5:af:03:13:fd:7c:8e:df:9c:33:93:d5: 82:37:b1:64:51:3f:d0:f7:34:b9:77:79:d5:99:8a: 46:a1:df:d1:de:d1:ec:ce:15:f1:2d:84:d8:22:88: 73:d1:b2:2f:34:8f:07:35:6d:f5:4c:a5:a8:8c:f5: 04:ea:2b:ae:39:ba:5f:02:8a:a9:1f:1a:49:11:74: c9:7b:1b:e8:1e:23:a6:2b:6d:07:89:d3:a2:4f:2f: 84:e5:d8:3c:5b:1a:5a:af:f3:73:0e:89:09:d3:8d: 97:63:1c:b9:ee:08:df:52:4d:36:2a:aa:43:1b:d6: 53:2d:b2:7f:20:be:50:db:df:36:f7:b9:48:9d:b1: 0f:58:db:01:b1:0e:e6:9e:2d:6b:ab:35:30:cd:3d: 1b:54:40:3d:e7:6c:be:57:f4:c8:7a:97:7e:1e:46: 9f:66:f2:10:ec:67:28:f0:82:19:15:29:06:9c:3f: bf:93:50:09:57:d0:00:f6:67:23:a8:1f:21:88:cc: 51:63:54:ef:27:97:8a:30:d5:ec:67:9f:87:4c:7f: c2:34:25:57:e2:ca:35:29:ae:38:8f:2f:3c:29:d0: 90:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:05:E8:FA:3E:24:3D:5B:8B:87:2D:D2:69:00:59:DA:FD:7E:47 X509v3 Authority Key Identifier: keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:91:f1:52:4a:a1:42:51:1e:54:34:ee:c8:52:60:ab:90:dc: d7:da:84:97:7c:3f:d6:b5:0d:07:e1:59:dd:32:b0:bd:80:2d: 1d:35:96:4d:fc:a9:07:08:e8:c8:92:0a:ff:46:76:d1:5f:ac: 49:09:e3:e6:6c:ca:02:11:aa:79:8a:9b:33:f5:7c:76:bf:51: 7f:35:ac:8e:af:a0:d8:74:e8:70:dc:66:2f:84:5e:97:3b:0a: d3:43:f6:a2:12:f9:d5:09:17:cd:d1:8f:a3:b3:af:eb:48:2e: 25:07:da:a0:36:fd:23:db:47:09:1f:73:f5:36:03:c6:7d:5d: 6b:d5:6f:96:49:a3:6d:4c:88:81:20:61:c0:a1:e5:13:59:49: e6:20:3e:d4:7c:5b:2b:0d:07:2c:00:4a:cc:ad:7d:6e:a2:41: a4:18:7d:bd:90:48:05:7c:c6:58:30:b6:ef:54:b5:4f:0c:11: 97:41:5a:18:8b:11:82:d1:d0:a8:25:96:ef:85:32:09:4f:4f: 2c:1e:86:df:3e:87:b3:6d:96:c5:5c:6e:1e:9f:15:20:b3:cf: 0a:71:b2:b5:f9:0d:d9:e3:f0:d4:f3:4f:71:a3:11:39:e0:53: e1:5e:09:4b:6b:c2:c5:87:ab:4d:cd:eb:9c:4e:ba:cc:6c:6d: 1b:79:38:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6434Mzrj3G5bBdNtOK7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmM2Y2RmZTE5NmQ1YjM5ZDJlYTYwZTkwYzk1ZGI3MDQ0 NWQ5YjkwHhcNMjYwMjA5MTUwMDU5WhcNMjYwMjEwMTUwMDU5WjAzMTEwLwYDVQQD EyhhYjFhMDVlOGZhM2UyNDNkNWI4Yjg3MmRkMjY5MDA1OWRhZmQ3ZTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z5Vxbk6io3Db0w8uEs8NX4YXUc0 9BNZPo+GKSDb3GnlrwMT/XyO35wzk9WCN7FkUT/Q9zS5d3nVmYpGod/R3tHszhXx LYTYIohz0bIvNI8HNW31TKWojPUE6iuuObpfAoqpHxpJEXTJexvoHiOmK20HidOi Ty+E5dg8Wxpar/NzDokJ042XYxy57gjfUk02KqpDG9ZTLbJ/IL5Q298297lInbEP WNsBsQ7mni1rqzUwzT0bVEA952y+V/TIepd+HkafZvIQ7Gco8IIZFSkGnD+/k1AJ V9AA9mcjqB8hiMxRY1TvJ5eKMNXsZ5+HTH/CNCVX4so1Ka44jy88KdCQDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsaBej6PiQ9W4uHLdJpAFna/X5HMB8GA1UdIwQY MBaAFD/8bN/hltWznS6mDpDJXbcERdm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMt MTU1YjM5ZTA3NmMyLzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMtMTU1YjM5ZTA3NmMy LzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpHxUkqh QlEeVDTuyFJgq5Dc19qEl3w/1rUNB+FZ3TKwvYAtHTWWTfypBwjoyJIK/0Z20V+s SQnj5mzKAhGqeYqbM/V8dr9RfzWsjq+g2HTocNxmL4RelzsK00P2ohL51QkXzdGP o7Ov60guJQfaoDb9I9tHCR9z9TYDxn1da9VvlkmjbUyIgSBhwKHlE1lJ5iA+1Hxb Kw0HLABKzK19bqJBpBh9vZBIBXzGWDC271S1TwwRl0FaGIsRgtHQqCWW74UyCU9P LB6G3z6Hs22WxVxuHp8VILPPCnGytfkN2ePw1PNPcaMROeBT4V4JS2vCxYerTc3r nE66zGxtG3k4zA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:12 2026 by rpki-client