This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft File: P_xs3-GW1bOdLqYOkMldtwRF2bk.mft (raw, json) Hash identifier: otyxx+JJzjZIlWbxqvGW/5TG/DWKRkRMHJwBc7CGMG8= Subject key identifier: 96:0D:76:D6:E5:33:BE:9C:4E:1F:31:EB:3C:0E:CA:83:61:88:22:F9 Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Certificate serial: 019B3FB5C9232D07E257F8F4AAE00EBD8143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft Manifest number: 029E Signing time: Sun 21 Dec 2025 07:00:36 +0000 Manifest this update: Sun 21 Dec 2025 07:00:36 +0000 Manifest next update: Mon 22 Dec 2025 07:00:36 +0000 Files and hashes: 1: P_xs3-GW1bOdLqYOkMldtwRF2bk.crl (hash: THJNb1ynnrgaEOCD+6kT7XwJPeoleHZGgPeq2F/GF9E=) 2: STi4I8sG96eo3VPJ65NFCI64EAE.roa (hash: /qNhRrl9OQMqxbMusKPE+tUs21JHJCDgrFTNmZwrYmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:c9:23:2d:07:e2:57:f8:f4:aa:e0:0e:bd:81:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Validity Not Before: Dec 21 07:00:36 2025 GMT Not After : Dec 22 07:00:36 2025 GMT Subject: CN=960d76d6e533be9c4e1f31eb3c0eca83618822f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:ba:24:af:1b:43:76:24:f0:f4:a5:f7:fe: 1b:83:7f:14:99:33:8f:79:25:ae:d5:b0:32:87:b3: 90:30:db:e2:6f:7f:98:0a:31:2b:d8:aa:de:e7:2a: 49:10:02:aa:ed:62:59:59:ee:a2:83:f2:09:bb:e8: 40:02:05:c5:53:08:09:3d:b9:1c:69:e9:2a:35:e3: de:d0:3d:f8:77:f3:f1:d4:bf:a6:98:bf:c9:25:e5: ef:6f:18:ba:ad:d4:84:da:17:06:ad:19:cd:08:da: 16:01:f3:4e:32:ba:7c:43:62:f1:f4:eb:9e:3d:b0: c4:7c:96:9b:f6:4f:c2:65:fd:7d:7f:47:4b:3e:87: 00:7c:48:37:66:7a:c8:e2:b5:70:a7:c0:99:3b:81: ff:cf:14:97:5f:f1:e7:13:6b:92:71:db:0f:7e:04: 07:5d:e9:32:4d:ae:5d:84:e9:3d:42:e9:ce:ef:37: d6:51:99:a9:d6:dc:70:6e:76:06:06:d5:55:92:3f: a8:25:81:eb:0a:fd:63:67:67:4d:ef:98:08:1f:e7: 68:1c:6a:85:02:cb:2c:99:2b:a3:3b:e0:33:4b:66: 34:6d:a7:d3:d2:2e:3e:78:1a:15:a2:20:58:c0:14: 4d:d4:b8:6a:27:06:21:d9:09:09:3b:be:16:e8:c4: 99:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:0D:76:D6:E5:33:BE:9C:4E:1F:31:EB:3C:0E:CA:83:61:88:22:F9 X509v3 Authority Key Identifier: keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:10:f3:86:95:76:92:e6:13:1f:69:db:e3:ba:7b:57:32:6b: 1e:90:56:84:70:23:44:8a:82:4a:50:19:98:66:8f:f0:94:0d: a4:74:8f:42:4f:c3:e7:eb:db:d9:55:35:26:95:ab:98:0d:4d: 95:ab:52:aa:cc:ad:26:bd:7e:9b:e7:aa:99:03:db:2a:89:76: 84:45:b4:53:70:f5:b4:37:b3:12:69:a6:6f:f2:d3:fe:05:e5: 51:f2:c0:ac:45:65:ea:bd:cb:63:de:a9:ae:24:30:8a:12:47: 64:a1:f5:eb:2b:dc:2b:76:0c:be:b0:ad:2a:23:ad:28:f5:93: f0:1b:8a:db:1e:d2:cb:81:a8:2e:4b:73:87:62:30:f9:d6:f2: 9a:87:68:bf:be:fe:ec:95:df:7e:91:d1:1e:ac:5e:60:dc:60: f3:4e:e7:5b:a4:e3:7c:a3:59:c3:75:1d:f8:0b:ea:df:36:45: 4c:f9:b5:0b:3f:7e:95:6f:8d:9b:a9:ea:5c:39:e1:d8:7f:df: bf:3e:48:fa:7e:4c:c4:a1:eb:3a:3d:e6:51:a6:5e:71:ee:25: 12:bd:8d:6e:5f:98:27:81:0f:f4:dd:4c:93:43:c7:9b:2d:c7: ad:ec:26:6b:0b:e4:7f:67:4d:3e:8d:1a:70:64:de:12:87:84: 56:e4:ca:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tckjLQfiV/j0quAOvYFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmM2Y2RmZTE5NmQ1YjM5ZDJlYTYwZTkwYzk1ZGI3MDQ0 NWQ5YjkwHhcNMjUxMjIxMDcwMDM2WhcNMjUxMjIyMDcwMDM2WjAzMTEwLwYDVQQD Eyg5NjBkNzZkNmU1MzNiZTljNGUxZjMxZWIzYzBlY2E4MzYxODgyMmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSS6JK8bQ3Yk8PSl9/4bg38UmTOP eSWu1bAyh7OQMNvib3+YCjEr2Kre5ypJEAKq7WJZWe6ig/IJu+hAAgXFUwgJPbkc aekqNePe0D34d/Px1L+mmL/JJeXvbxi6rdSE2hcGrRnNCNoWAfNOMrp8Q2Lx9Oue PbDEfJab9k/CZf19f0dLPocAfEg3ZnrI4rVwp8CZO4H/zxSXX/HnE2uScdsPfgQH XekyTa5dhOk9QunO7zfWUZmp1txwbnYGBtVVkj+oJYHrCv1jZ2dN75gIH+doHGqF AsssmSujO+AzS2Y0bafT0i4+eBoVoiBYwBRN1LhqJwYh2QkJO74W6MSZ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYNdtblM76cTh8x6zwOyoNhiCL5MB8GA1UdIwQY MBaAFD/8bN/hltWznS6mDpDJXbcERdm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMt MTU1YjM5ZTA3NmMyLzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMtMTU1YjM5ZTA3NmMy LzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwRDzhpV2 kuYTH2nb47p7VzJrHpBWhHAjRIqCSlAZmGaP8JQNpHSPQk/D5+vb2VU1JpWrmA1N latSqsytJr1+m+eqmQPbKol2hEW0U3D1tDezEmmmb/LT/gXlUfLArEVl6r3LY96p riQwihJHZKH16yvcK3YMvrCtKiOtKPWT8BuK2x7Sy4GoLktzh2Iw+dbymodov77+ 7JXffpHRHqxeYNxg807nW6TjfKNZw3Ud+Avq3zZFTPm1Cz9+lW+Nm6nqXDnh2H/f vz5I+n5MxKHrOj3mUaZece4lEr2Nbl+YJ4EP9N1Mk0PHmy3Hrewmawvkf2dNPo0a cGTeEoeEVuTKow== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:17 2025 by rpki-client