This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft File: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json) Hash identifier: OaO+889FT+UU8FJt+0fHLbcSbINoxgQplStunzSDYaU= Subject key identifier: BA:42:64:72:B5:54:F2:6D:2F:CA:4E:12:BA:3F:7A:A8:3B:53:47:35 Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598 Certificate serial: 019B0E26DBE734030A6F141EC28A438FAA0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft Manifest number: 1785 Signing time: Thu 11 Dec 2025 16:03:06 +0000 Manifest this update: Thu 11 Dec 2025 16:03:06 +0000 Manifest next update: Fri 12 Dec 2025 16:03:06 +0000 Files and hashes: 1: 30uzQGt2sOP8IgaSYaMTDquW3Z0.roa (hash: P6F3XLSWCNAXZxqOxgAo6zkRmbGUu0m7JhEJGVuwo+Y=) 2: 6FCLQHtozzvvT3rILarZx-dLMdk.roa (hash: CE/HPZOWQIhCk0/eQd5v6UrJlGl3+mfNdRJaoA8qyRQ=) 3: 9OoDrhEhbXk4ekzKyQm0jV-44SA.roa (hash: 6i+5X9C2TOzi7xmik76MYbzQQCGqHcJmrVsoOb79H80=) 4: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: cqFyXsT7yxi1lLjTkGyQFVGjkGQxLJqKWtIogApwc4I=) 5: PthqEj22M7At2kBHUijks0QzL2Y.roa (hash: mLNqUo+b6WtFCG82EqWZEk2WU+0M7VwjwYAWyGVtt1I=) 6: mnP6qn4_GBwg4u6pBxeQlf6iTVo.roa (hash: 0XbOSZ/9PP5b8D3OCSb6PfXvqNIMPwXQe0cizFkU/dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:db:e7:34:03:0a:6f:14:1e:c2:8a:43:8f:aa:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598 Validity Not Before: Dec 11 16:03:06 2025 GMT Not After : Dec 12 16:03:06 2025 GMT Subject: CN=ba426472b554f26d2fca4e12ba3f7aa83b534735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:17:46:99:03:28:4b:37:09:6b:8f:e6:5d:5c: 09:ec:e7:b2:fe:c7:90:2b:b8:25:ca:c9:3c:dc:39: 95:d6:41:8b:46:d6:ce:49:5b:89:c6:9e:b7:6d:47: ee:03:b6:a4:8e:37:0d:81:ce:fa:31:dc:b2:9d:7d: 59:6a:77:1a:6d:ed:e8:e6:e1:7f:c6:30:41:99:7a: de:fe:38:61:d7:84:27:2e:f0:c1:ee:d3:64:88:db: df:68:f5:f6:86:a8:41:44:88:cd:75:6a:7f:48:b9: 50:ec:49:7a:92:71:8f:53:36:ce:cd:e1:6b:af:bf: b6:51:76:3a:90:59:14:c9:70:9e:ff:e5:8c:ee:5a: 37:6e:80:ab:99:9f:6c:b2:06:74:bb:c0:05:6f:06: 1b:95:20:7a:42:ba:a5:c8:2c:36:81:47:c8:45:af: 8c:67:ef:14:f9:cf:10:64:53:12:74:f4:dc:00:8f: da:21:5b:c5:25:a8:3e:2d:26:89:b7:77:2d:42:c8: f5:a0:87:1d:2c:34:16:dc:96:af:1d:e9:00:26:48: 4c:37:d0:f7:02:a2:e3:9f:05:5c:44:ff:39:ce:2c: d2:d0:e3:5b:0c:47:8e:d0:44:68:59:58:c8:d4:b5: 2a:1b:87:5a:e5:86:51:6a:72:d8:4b:6b:cd:fb:a1: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:42:64:72:B5:54:F2:6D:2F:CA:4E:12:BA:3F:7A:A8:3B:53:47:35 X509v3 Authority Key Identifier: keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e4:cc:ea:0c:c0:a7:73:2e:29:63:12:38:ad:fc:af:75:82: 01:60:3f:9a:76:fc:fd:c2:76:1f:12:47:33:b1:5c:96:95:17: 4f:31:ab:3b:0b:02:06:51:3c:04:05:ba:19:5f:7d:e7:3f:0e: 82:db:a4:89:da:09:ed:16:36:81:a2:83:15:95:fc:91:e3:61: 7c:f9:84:84:36:cd:07:c3:f0:53:dd:0a:00:4d:62:9f:89:13: c9:d2:8a:a2:10:20:82:d6:d1:e8:a5:fa:fe:2d:6d:f1:69:1a: 9d:aa:46:f0:fc:c7:81:33:fc:d0:3a:11:bb:65:cc:13:e6:c4: 8a:f5:1e:d2:64:5e:c3:34:89:12:48:fe:e2:87:d9:ca:90:b6: e2:98:f4:82:e6:69:80:a1:fb:fd:c3:18:10:79:f2:c4:cc:31: 10:f6:4f:1f:50:e0:23:d1:b9:36:83:f6:e5:3b:e5:9c:f8:e3: 08:18:09:e4:90:68:42:e7:b6:ce:89:ea:db:f8:5c:4b:28:eb: ad:29:64:52:66:39:f8:1d:c3:71:57:41:a2:3f:1d:89:11:3f: 70:29:c6:d4:7a:19:5e:2c:a6:c7:fa:ce:81:c8:2b:3e:38:b6: b5:62:9d:0e:03:f8:9e:b2:d4:31:0c:f2:9d:55:d3:6c:4e:d7: 91:4f:60:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJtvnNAMKbxQewopDj6oMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh ZGY1OTgwHhcNMjUxMjExMTYwMzA2WhcNMjUxMjEyMTYwMzA2WjAzMTEwLwYDVQQD EyhiYTQyNjQ3MmI1NTRmMjZkMmZjYTRlMTJiYTNmN2FhODNiNTM0NzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xdGmQMoSzcJa4/mXVwJ7Oey/seQ K7glysk83DmV1kGLRtbOSVuJxp63bUfuA7akjjcNgc76MdyynX1Zancabe3o5uF/ xjBBmXre/jhh14QnLvDB7tNkiNvfaPX2hqhBRIjNdWp/SLlQ7El6knGPUzbOzeFr r7+2UXY6kFkUyXCe/+WM7lo3boCrmZ9ssgZ0u8AFbwYblSB6QrqlyCw2gUfIRa+M Z+8U+c8QZFMSdPTcAI/aIVvFJag+LSaJt3ctQsj1oIcdLDQW3JavHekAJkhMN9D3 AqLjnwVcRP85zizS0ONbDEeO0ERoWVjI1LUqG4da5YZRanLYS2vN+6HyZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpCZHK1VPJtL8pOEro/eqg7U0c1MB8GA1UdIwQY MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt YTkzODhmMzFiNDdlLzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+TM6gzA p3MuKWMSOK38r3WCAWA/mnb8/cJ2HxJHM7FclpUXTzGrOwsCBlE8BAW6GV995z8O gtukidoJ7RY2gaKDFZX8keNhfPmEhDbNB8PwU90KAE1in4kTydKKohAggtbR6KX6 /i1t8WkanapG8PzHgTP80DoRu2XME+bEivUe0mRewzSJEkj+4ofZypC24pj0guZp gKH7/cMYEHnyxMwxEPZPH1DgI9G5NoP25TvlnPjjCBgJ5JBoQue2zonq2/hcSyjr rSlkUmY5+B3DcVdBoj8diRE/cCnG1HoZXiymx/rOgcgrPji2tWKdDgP4nrLUMQzy nVXTbE7XkU9gQw== -----END CERTIFICATE-----Generated at Thu Dec 11 19:22:22 2025 by rpki-client