This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft File: PnDBS_JvrwGY8eeyRynNcbM1GN4.mft (raw, json) Hash identifier: jr3T0dBatk4iSq/2WSmlGkkmK9ynYTZJtYl+fRCU8Wo= Subject key identifier: 3A:9F:28:A7:59:0F:17:13:2B:A3:89:6A:53:6A:5C:E6:9A:4C:E6:7E Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de Certificate serial: 019B597595D63B84925B2BDF909A50FDAD51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft Manifest number: 048D Signing time: Fri 26 Dec 2025 07:00:36 +0000 Manifest this update: Fri 26 Dec 2025 07:00:36 +0000 Manifest next update: Sat 27 Dec 2025 07:00:36 +0000 Files and hashes: 1: 4d9jncgFcD3LQEVJLbIB2I3M9lo.roa (hash: seBbCSSGlRgW36OWqyme1v3t3KHDAPOFROvpxV8jwzE=) 2: 4uaLh2b-bHV2NsxIJY_pK9e3698.roa (hash: sMeMy3i5FoQg0v9xzPREgO0rI8VqgJmcA0uZMgg0uts=) 3: PnDBS_JvrwGY8eeyRynNcbM1GN4.crl (hash: wwG04DG0wcnQ8Agmyx9UR9Raa1F3/n4aygBvfpU0Ipg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:95:d6:3b:84:92:5b:2b:df:90:9a:50:fd:ad:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de Validity Not Before: Dec 26 07:00:36 2025 GMT Not After : Dec 27 07:00:36 2025 GMT Subject: CN=3a9f28a7590f17132ba3896a536a5ce69a4ce67e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:82:ca:af:29:16:b1:7e:49:d6:83:8e:ca:94: 67:d3:19:b1:b6:45:eb:3f:29:3d:2a:6c:56:2d:9b: 88:88:ef:3a:c0:44:96:26:17:b9:5d:69:5d:af:8b: a2:1a:5f:58:06:81:f9:08:0f:b0:cc:f0:23:d9:d1: 42:12:a4:a2:10:d2:cd:48:2c:38:87:22:5d:78:e3: 9c:8b:63:f7:4b:dd:b9:4f:a1:63:1f:48:b5:dd:7c: 89:ac:a2:8a:da:a2:9a:bc:ff:0a:fd:f5:ad:0f:6b: 2b:59:74:2e:74:d0:ae:17:fc:4c:d1:ce:f5:91:44: 6a:48:a5:de:7a:cc:85:a0:93:4f:f5:bf:aa:f6:d5: 64:2e:44:bf:e6:ae:6e:71:be:c8:40:77:0d:f9:17: 01:55:92:12:81:86:c8:d7:70:a3:1f:47:aa:f2:2e: 42:f6:1e:b2:df:53:ee:0e:35:90:8f:11:2a:04:7e: ee:7c:70:08:88:3e:9c:2b:d9:b2:34:a6:ca:12:e3: 59:4f:57:e7:8f:76:7c:a8:4a:3b:7a:42:f7:88:3d: 11:09:41:a1:f8:8e:9e:22:74:a7:05:66:5a:49:c6: 99:47:72:26:05:c0:ca:e7:96:99:59:1a:db:6d:00: 93:aa:54:4b:00:a6:01:87:78:b1:eb:a7:cf:84:c1: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9F:28:A7:59:0F:17:13:2B:A3:89:6A:53:6A:5C:E6:9A:4C:E6:7E X509v3 Authority Key Identifier: keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a4:47:dc:21:ce:27:8b:85:bb:07:af:f4:41:0a:80:be:4e: c7:77:bd:c7:88:d9:74:2e:fc:4a:47:49:23:88:0e:d8:74:46: f2:50:b7:7b:44:41:21:63:a4:10:55:a9:02:db:5a:44:10:fe: 7d:f5:24:e7:1c:b4:c4:53:42:d7:68:a1:d2:50:96:25:e8:43: 54:0f:99:93:5a:1e:22:65:a9:4d:ff:67:fb:1d:2e:79:10:71: 02:ab:a1:62:d6:85:82:0f:02:8a:ef:81:96:36:19:23:fa:c9: dc:33:ec:19:0d:cf:94:fb:a7:e4:3d:25:05:4b:f6:bb:8b:58: 8f:ce:37:5d:7a:33:e1:5b:5d:d9:4a:f0:3b:28:7d:ce:44:78: 62:d8:c8:65:2b:cc:8f:cc:c1:0b:d7:84:1b:0d:ef:5f:68:9f: 1a:04:c6:a2:1d:26:92:93:39:7e:e7:fe:d1:45:15:ff:a7:fe: 99:dc:62:c2:b2:7a:f9:9f:3c:6a:b5:da:6e:4f:d6:e9:60:9d: 93:95:40:92:8b:21:58:4a:89:de:00:79:61:1f:eb:21:0f:12: bd:3e:a6:8a:31:d9:7c:8b:b5:64:e0:cd:92:de:f6:09:f9:37: 9d:9d:bd:9c:3a:34:9b:3b:b2:e5:2f:6c:38:6e:14:be:2d:87: af:0d:5d:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdZXWO4SSWyvfkJpQ/a1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNzBjMTRiZjI2ZmFmMDE5OGYxZTdiMjQ3MjljZDcxYjMz NTE4ZGUwHhcNMjUxMjI2MDcwMDM2WhcNMjUxMjI3MDcwMDM2WjAzMTEwLwYDVQQD EygzYTlmMjhhNzU5MGYxNzEzMmJhMzg5NmE1MzZhNWNlNjlhNGNlNjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4LKrykWsX5J1oOOypRn0xmxtkXr Pyk9KmxWLZuIiO86wESWJhe5XWldr4uiGl9YBoH5CA+wzPAj2dFCEqSiENLNSCw4 hyJdeOOci2P3S925T6FjH0i13XyJrKKK2qKavP8K/fWtD2srWXQudNCuF/xM0c71 kURqSKXeesyFoJNP9b+q9tVkLkS/5q5ucb7IQHcN+RcBVZISgYbI13CjH0eq8i5C 9h6y31PuDjWQjxEqBH7ufHAIiD6cK9myNKbKEuNZT1fnj3Z8qEo7ekL3iD0RCUGh +I6eInSnBWZaScaZR3ImBcDK55aZWRrbbQCTqlRLAKYBh3ix66fPhMEIFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqfKKdZDxcTK6OJalNqXOaaTOZ+MB8GA1UdIwQY MBaAFD5wwUvyb68BmPHnskcpzXGzNRjeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xZDJkZjktOGY4Mi00NzE2LTg1M2Ut NTM4NTk0OTBkMjZmLzEvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8xZDJkZjktOGY4Mi00NzE2LTg1M2UtNTM4NTk0OTBkMjZm LzEvUG5EQlNfSnZyd0dZOGVleVJ5bk5jYk0xR040LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaRH3CHO J4uFuwev9EEKgL5Ox3e9x4jZdC78SkdJI4gO2HRG8lC3e0RBIWOkEFWpAttaRBD+ ffUk5xy0xFNC12ih0lCWJehDVA+Zk1oeImWpTf9n+x0ueRBxAquhYtaFgg8Ciu+B ljYZI/rJ3DPsGQ3PlPun5D0lBUv2u4tYj843XXoz4Vtd2UrwOyh9zkR4YtjIZSvM j8zBC9eEGw3vX2ifGgTGoh0mkpM5fuf+0UUV/6f+mdxiwrJ6+Z88arXabk/W6WCd k5VAkoshWEqJ3gB5YR/rIQ8SvT6mijHZfIu1ZODNkt72Cfk3nZ29nDo0mzuy5S9s OG4Uvi2Hrw1d4Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:55 2025 by rpki-client