This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json) Hash identifier: v/WuIGYjAuYcSQFGuwN3vaeGAwI5mKoMRn6gOUOAGiI= Subject key identifier: 9C:8D:BD:53:49:50:8E:A4:51:4D:B9:90:9B:20:DD:23:76:FD:25:13 Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de Certificate serial: 019B3C7E028CC6DA9B563D3FF65304A4A5E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft Manifest number: 047E Signing time: Sat 20 Dec 2025 16:00:49 +0000 Manifest this update: Sat 20 Dec 2025 16:00:49 +0000 Manifest next update: Sun 21 Dec 2025 16:00:49 +0000 Files and hashes: 1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=) 2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=) 3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: VXG19XrGua0peNh1U+JrR+FuyOPJwqKK0pzJrfqwIM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:02:8c:c6:da:9b:56:3d:3f:f6:53:04:a4:a5:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de Validity Not Before: Dec 20 16:00:49 2025 GMT Not After : Dec 21 16:00:49 2025 GMT Subject: CN=9c8dbd5349508ea4514db9909b20dd2376fd2513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:a4:92:77:cb:48:ac:3a:28:08:55:c6:eb: 93:a7:ab:1d:a0:3b:4b:78:aa:44:07:1d:1e:5f:32: c1:6a:b8:47:30:49:f9:a5:27:bb:35:92:11:84:16: 03:b8:2d:66:5e:c9:a6:09:d1:f1:77:8e:7d:d1:57: e9:6e:70:7b:25:e2:f3:97:4d:a2:4e:b4:27:1f:54: 55:5b:7a:5f:35:6b:af:02:c4:32:fa:90:66:3f:68: 3a:fb:49:49:c1:dc:49:46:64:08:56:4d:13:0a:7c: 5a:4d:0c:31:5a:40:b8:90:d7:25:6f:c3:98:10:dc: 68:9f:4a:42:f8:de:23:4d:94:3f:a6:1b:58:a5:15: d2:b3:5f:c9:ae:22:b8:3f:d0:3d:1d:58:a5:1c:7d: 5b:b2:6f:59:84:be:f0:b3:a6:40:2e:d0:b2:36:5b: 43:3b:29:56:f4:1e:1e:1a:ed:e6:fa:db:da:fc:82: 33:ca:dc:cc:6c:a0:3a:a3:4c:3e:ea:bd:36:bd:68: d3:ce:8f:f0:11:39:3b:d4:a6:2e:06:03:7d:8e:e6: 44:8b:79:71:6e:4a:6e:d5:bd:d7:b8:c5:69:5c:28: ec:05:ec:6f:a2:5f:ac:f9:4b:ae:70:78:68:51:1b: b4:0f:0b:3e:72:b3:a0:2c:1b:7b:7d:f4:56:89:5a: 85:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8D:BD:53:49:50:8E:A4:51:4D:B9:90:9B:20:DD:23:76:FD:25:13 X509v3 Authority Key Identifier: keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:e4:4e:32:45:91:e0:71:32:d6:52:a7:ec:09:f3:28:37:3f: 5a:da:01:c0:06:b7:f2:81:3b:3e:ef:59:df:68:02:44:88:7f: b0:ec:82:ca:11:0f:5c:8a:d0:9f:31:28:d9:e0:5f:5f:99:3d: 39:6e:35:8b:cf:97:df:72:75:1f:06:f9:45:46:9a:62:5a:7c: 61:e9:1d:01:6b:c9:43:10:e3:80:f3:ba:a0:7c:20:3f:80:0d: 10:68:a3:63:9b:60:4b:c9:bb:c5:09:64:85:01:bf:ba:ba:8f: 7e:65:5a:c7:3f:30:6f:24:8c:46:99:9d:7d:15:25:c6:b0:6d: 46:9b:2e:df:50:b6:f3:3a:3c:f8:ef:0a:c6:2d:02:e1:ab:da: 62:31:7b:b6:f6:c5:91:e2:d5:bf:e8:f2:a0:66:9c:ae:f7:64: f2:88:13:9b:ea:91:ed:57:5f:56:a5:00:a2:63:9c:67:ab:be: a2:69:7d:61:04:db:bd:4e:06:53:17:31:1e:bb:02:71:63:f3: 11:2b:1f:a0:cd:ad:7b:a7:ba:e9:04:b7:77:43:9c:db:5a:46: ce:01:b0:32:7f:4b:d5:bb:f5:5c:88:df:d7:9b:19:5b:bf:67: 3d:ad:9d:93:2a:3b:c7:7a:3a:6b:b7:9f:87:78:26:eb:e7:3e: 1d:be:26:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fgKMxtqbVj0/9lMEpKXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzBjMTRiZjI2ZmFmMDE5OGYxZTdiMjQ3MjljZDcxYjMz NTE4ZGUwHhcNMjUxMjIwMTYwMDQ5WhcNMjUxMjIxMTYwMDQ5WjAzMTEwLwYDVQQD Eyg5YzhkYmQ1MzQ5NTA4ZWE0NTE0ZGI5OTA5YjIwZGQyMzc2ZmQyNTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0SkknfLSKw6KAhVxuuTp6sdoDtL eKpEBx0eXzLBarhHMEn5pSe7NZIRhBYDuC1mXsmmCdHxd4590VfpbnB7JeLzl02i TrQnH1RVW3pfNWuvAsQy+pBmP2g6+0lJwdxJRmQIVk0TCnxaTQwxWkC4kNclb8OY ENxon0pC+N4jTZQ/phtYpRXSs1/JriK4P9A9HVilHH1bsm9ZhL7ws6ZALtCyNltD OylW9B4eGu3m+tva/IIzytzMbKA6o0w+6r02vWjTzo/wETk71KYuBgN9juZEi3lx bkpu1b3XuMVpXCjsBexvol+s+UuucHhoURu0Dws+crOgLBt7ffRWiVqFnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyNvVNJUI6kUU25kJsg3SN2/SUTMB8GA1UdIwQY MBaAFD5wwUvyb68BmPHnskcpzXGzNRjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xZDJkZjktOGY4Mi00NzE2LTg1M2Ut NTM4NTk0OTBkMjZmLzEvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xZDJkZjktOGY4Mi00NzE2LTg1M2UtNTM4NTk0OTBkMjZm LzEvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABeROMkWR 4HEy1lKn7AnzKDc/WtoBwAa38oE7Pu9Z32gCRIh/sOyCyhEPXIrQnzEo2eBfX5k9 OW41i8+X33J1Hwb5RUaaYlp8YekdAWvJQxDjgPO6oHwgP4ANEGijY5tgS8m7xQlk hQG/urqPfmVaxz8wbySMRpmdfRUlxrBtRpsu31C28zo8+O8Kxi0C4avaYjF7tvbF keLVv+jyoGacrvdk8ogTm+qR7VdfVqUAomOcZ6u+oml9YQTbvU4GUxcxHrsCcWPz ESsfoM2te6e66QS3d0Oc21pGzgGwMn9L1bv1XIjf15sZW79nPa2dkyo7x3o6a7ef h3gm6+c+Hb4myw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:41:57 2025 by rpki-client