This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
File:                     PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json)
Hash identifier:          RFFvyWstgNSmrB9ymUPevU9jxW0uotC7A7SfWgag+BQ=
Subject key identifier:   78:04:80:4A:46:FC:A1:4B:23:78:08:EA:04:FF:81:30:E0:57:86:75
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Certificate issuer:       /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial:       019B3C7FD0A158535A92A011C1A64A815250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
Manifest number:          179D
Signing time:             Sat 20 Dec 2025 16:02:47 +0000
Manifest this update:     Sat 20 Dec 2025 16:02:47 +0000
Manifest next update:     Sun 21 Dec 2025 16:02:47 +0000
Files and hashes:         1: 30uzQGt2sOP8IgaSYaMTDquW3Z0.roa (hash: P6F3XLSWCNAXZxqOxgAo6zkRmbGUu0m7JhEJGVuwo+Y=)
                          2: 6FCLQHtozzvvT3rILarZx-dLMdk.roa (hash: CE/HPZOWQIhCk0/eQd5v6UrJlGl3+mfNdRJaoA8qyRQ=)
                          3: 9OoDrhEhbXk4ekzKyQm0jV-44SA.roa (hash: 6i+5X9C2TOzi7xmik76MYbzQQCGqHcJmrVsoOb79H80=)
                          4: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: QHEMLaYVmWE091mv391IkaeFJeEOywN8ghK9/q9BE0k=)
                          5: PthqEj22M7At2kBHUijks0QzL2Y.roa (hash: mLNqUo+b6WtFCG82EqWZEk2WU+0M7VwjwYAWyGVtt1I=)
                          6: mnP6qn4_GBwg4u6pBxeQlf6iTVo.roa (hash: 0XbOSZ/9PP5b8D3OCSb6PfXvqNIMPwXQe0cizFkU/dQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 10:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3c:7f:d0:a1:58:53:5a:92:a0:11:c1:a6:4a:81:52:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
        Validity
            Not Before: Dec 20 16:02:47 2025 GMT
            Not After : Dec 21 16:02:47 2025 GMT
        Subject: CN=7804804a46fca14b237808ea04ff8130e0578675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:12:0c:86:77:5e:35:fb:a3:1b:1d:2e:71:1f:
                    ba:23:78:61:58:ba:3c:68:8b:3a:22:49:ed:f7:ea:
                    a2:ef:de:f2:75:d7:f7:1d:ec:be:d3:82:b9:f0:f4:
                    b5:b9:38:75:b9:40:4d:5a:31:88:b2:fc:2b:23:c8:
                    1f:b8:21:b1:29:34:3e:e8:da:37:45:0e:07:b3:86:
                    62:88:3a:db:f1:21:d1:e4:08:9d:89:a9:de:af:e1:
                    54:cb:d3:50:db:df:e9:49:8a:94:1d:82:60:84:5e:
                    2a:27:73:a9:7e:d7:10:e3:81:bd:e2:07:e2:43:56:
                    b4:82:3e:df:0d:19:b9:6c:d1:6c:37:bb:d7:68:36:
                    c2:f8:04:f0:a9:ef:92:78:5c:37:c5:bd:f5:9f:93:
                    54:1f:5b:39:59:e7:8e:7d:3a:7e:38:7f:d9:bd:a0:
                    69:25:61:bd:88:97:a6:4a:9f:12:01:63:35:8e:64:
                    42:7b:fe:52:f6:6f:53:8f:41:3f:08:bf:d3:5e:13:
                    9a:52:c7:36:27:d7:4e:f7:9b:c4:ca:b2:6c:6d:87:
                    c0:0a:56:ac:f5:36:91:ce:64:71:70:1c:3a:08:d4:
                    97:4f:0e:39:7a:cd:4e:5a:ea:89:ab:b1:f7:68:61:
                    d2:bf:0c:74:5f:c6:d6:7c:d0:03:aa:a1:f2:c5:25:
                    b3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:04:80:4A:46:FC:A1:4B:23:78:08:EA:04:FF:81:30:E0:57:86:75
            X509v3 Authority Key Identifier:
                keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c2:11:60:00:95:ab:24:c9:72:16:a3:5e:78:91:b0:49:f7:
         d3:a3:3b:db:6a:8c:86:b8:5e:41:f3:89:2c:23:f5:df:cb:af:
         c9:7b:9e:d7:ab:b2:bd:21:ed:89:73:c1:6f:29:4d:aa:97:45:
         8c:ec:cf:11:d5:79:03:aa:a3:0d:67:1b:02:a3:57:40:32:81:
         aa:7c:d4:8e:78:3d:cc:57:28:d2:fc:8f:0e:58:35:4c:74:b4:
         dd:59:c8:c5:bb:ab:bf:e7:14:d8:df:86:e2:05:19:f5:d6:5d:
         01:4a:f9:a5:6d:f0:fb:56:1e:23:3c:ee:70:d5:f5:3b:84:a6:
         eb:2f:64:c3:2c:5e:c8:73:b4:c8:5a:67:fa:4c:4e:5b:7d:f9:
         36:5f:3e:c5:2f:3f:9e:14:bf:a3:f8:66:04:0f:d8:6f:d7:78:
         d8:a9:29:45:aa:05:c3:48:2a:57:89:cd:6b:c2:a5:66:92:c8:
         cc:71:c8:f7:03:01:fd:c4:6c:78:55:20:b3:ab:71:51:03:75:
         44:00:bc:7c:7e:dc:74:6b:2f:ed:74:50:10:08:6b:24:ea:06:
         5c:b1:19:86:d4:a8:c6:d7:1c:b6:cb:7d:83:86:85:08:b0:42:
         15:c8:54:2c:d6:49:32:6b:1e:d7:86:72:e2:33:b9:08:84:b6:
         1d:ee:ae:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:52:16 2025 by rpki-client