This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft File: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json) Hash identifier: y5ujBvC7zSaILPpeRloASD5Ls1rIhZt2usXe6pZ2kEw= Subject key identifier: 85:A1:0E:04:33:77:71:DA:04:65:4F:F0:6B:08:56:11:8C:E8:32:8A Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598 Certificate serial: 019B66FBAE65CC0CB7166B6FBB1E374157AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft Manifest number: 17B3 Signing time: Sun 28 Dec 2025 22:02:08 +0000 Manifest this update: Sun 28 Dec 2025 22:02:08 +0000 Manifest next update: Mon 29 Dec 2025 22:02:08 +0000 Files and hashes: 1: 30uzQGt2sOP8IgaSYaMTDquW3Z0.roa (hash: P6F3XLSWCNAXZxqOxgAo6zkRmbGUu0m7JhEJGVuwo+Y=) 2: 6FCLQHtozzvvT3rILarZx-dLMdk.roa (hash: CE/HPZOWQIhCk0/eQd5v6UrJlGl3+mfNdRJaoA8qyRQ=) 3: 9OoDrhEhbXk4ekzKyQm0jV-44SA.roa (hash: 6i+5X9C2TOzi7xmik76MYbzQQCGqHcJmrVsoOb79H80=) 4: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: c8Cd30ropv46p67AV/8ZtDsAFVGwvhfql6HUrqdMPJs=) 5: PthqEj22M7At2kBHUijks0QzL2Y.roa (hash: mLNqUo+b6WtFCG82EqWZEk2WU+0M7VwjwYAWyGVtt1I=) 6: mnP6qn4_GBwg4u6pBxeQlf6iTVo.roa (hash: 0XbOSZ/9PP5b8D3OCSb6PfXvqNIMPwXQe0cizFkU/dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fb:ae:65:cc:0c:b7:16:6b:6f:bb:1e:37:41:57:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598 Validity Not Before: Dec 28 22:02:08 2025 GMT Not After : Dec 29 22:02:08 2025 GMT Subject: CN=85a10e04337771da04654ff06b0856118ce8328a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ce:c9:12:a5:d8:75:6b:f8:19:3a:dc:9c:48: 5d:9b:51:bc:2b:90:d0:3d:04:c7:01:37:af:1a:c2: 5e:5a:71:77:ba:41:20:98:aa:85:25:68:46:a3:7d: 2c:8b:89:ce:33:e9:94:4b:97:aa:61:ca:7c:e8:c0: 25:47:21:75:76:bb:07:1c:79:cc:3d:9d:fe:8c:95: d8:4d:a0:0a:0e:d4:16:8e:be:90:00:03:53:17:c6: 3e:41:ce:c3:81:8b:4b:c0:5f:c7:86:25:40:2b:bf: a9:a1:17:6e:ac:52:60:17:6a:61:e8:94:ae:e8:ac: 07:72:16:b6:45:f7:8d:51:91:de:fe:bd:f5:97:95: 61:1d:24:0a:45:1b:8e:df:d4:d9:e5:b0:6b:6a:93: 5e:11:d9:f5:c2:35:36:2f:f4:54:2c:1c:04:bd:7d: 2b:29:69:a8:cd:eb:5a:30:6a:65:5d:24:a8:67:c0: da:e3:6e:5d:b4:fb:fa:87:37:e8:42:ae:22:98:70: cf:da:ea:32:cd:48:32:8b:6d:58:7e:58:b0:28:bf: 1b:74:26:8e:e5:61:e6:ff:ce:77:af:d2:3c:27:e2: f1:3b:5b:98:95:ac:ed:bf:91:4a:dc:dc:8a:ff:3f: 72:e0:73:9b:86:a8:18:fd:76:00:dc:db:22:86:27: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A1:0E:04:33:77:71:DA:04:65:4F:F0:6B:08:56:11:8C:E8:32:8A X509v3 Authority Key Identifier: keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6f:06:09:d9:5b:f5:08:42:10:ce:8d:46:a6:47:5e:0c:62: d8:4c:80:90:4a:a6:54:1a:b4:c9:01:8c:99:2c:8b:7a:cf:b1: dc:ac:05:78:89:69:7f:9c:c5:4c:8d:66:de:e9:7a:26:6b:9c: 66:e8:26:d6:a7:d9:92:01:58:5b:3e:ab:02:bb:d8:54:2d:18: 65:b9:69:64:fd:0a:69:cb:f0:92:18:8b:2d:f8:19:13:71:13: 1c:af:52:f0:cf:c2:98:b5:93:47:86:af:ac:0a:df:30:89:90: 9b:91:47:ed:22:f6:20:2b:16:f2:58:41:28:0f:8a:2c:7d:d4: 62:3d:01:7c:46:df:2a:77:03:89:cf:01:ba:d6:8a:6c:16:63: ad:75:4e:c7:1a:ac:84:08:55:5b:e2:d4:b2:8b:22:22:81:94: 82:ad:5d:c2:16:e3:5a:81:4f:2c:7e:ca:10:ab:ab:3a:83:ba: 2a:27:f2:70:e2:1e:07:1b:a6:f0:e5:fe:7f:03:66:46:28:5c: 80:3a:00:83:b5:8f:e2:c0:c6:f8:58:8f:35:9a:59:3b:5e:11: 6c:8f:7f:79:f1:ea:75:49:1c:71:70:02:62:b2:79:d1:b9:56: 4c:03:93:1e:fc:3b:c2:19:74:f2:64:4e:81:52:77:d9:bb:c6: 8b:aa:db:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm+65lzAy3Fmtvux43QVesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh ZGY1OTgwHhcNMjUxMjI4MjIwMjA4WhcNMjUxMjI5MjIwMjA4WjAzMTEwLwYDVQQD Eyg4NWExMGUwNDMzNzc3MWRhMDQ2NTRmZjA2YjA4NTYxMThjZTgzMjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis7JEqXYdWv4GTrcnEhdm1G8K5DQ PQTHATevGsJeWnF3ukEgmKqFJWhGo30si4nOM+mUS5eqYcp86MAlRyF1drsHHHnM PZ3+jJXYTaAKDtQWjr6QAANTF8Y+Qc7DgYtLwF/HhiVAK7+poRdurFJgF2ph6JSu 6KwHcha2RfeNUZHe/r31l5VhHSQKRRuO39TZ5bBrapNeEdn1wjU2L/RULBwEvX0r KWmozetaMGplXSSoZ8Da425dtPv6hzfoQq4imHDP2uoyzUgyi21YfliwKL8bdCaO 5WHm/853r9I8J+LxO1uYlaztv5FK3NyK/z9y4HObhqgY/XYA3NsihidTEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWhDgQzd3HaBGVP8GsIVhGM6DKKMB8GA1UdIwQY MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt YTkzODhmMzFiNDdlLzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE28GCdlb 9QhCEM6NRqZHXgxi2EyAkEqmVBq0yQGMmSyLes+x3KwFeIlpf5zFTI1m3ul6Jmuc Zugm1qfZkgFYWz6rArvYVC0YZblpZP0KacvwkhiLLfgZE3ETHK9S8M/CmLWTR4av rArfMImQm5FH7SL2ICsW8lhBKA+KLH3UYj0BfEbfKncDic8ButaKbBZjrXVOxxqs hAhVW+LUsosiIoGUgq1dwhbjWoFPLH7KEKurOoO6KifycOIeBxum8OX+fwNmRihc gDoAg7WP4sDG+FiPNZpZO14RbI9/efHqdUkccXACYrJ50blWTAOTHvw7whl08mRO gVJ32bvGi6rbeQ== -----END CERTIFICATE-----Generated at Mon Dec 29 01:53:15 2025 by rpki-client