This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft File: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json) Hash identifier: b7BAwpPe9Kk/wqVBfF+YQGboksET0I7pZ+qjdRlvVRY= Subject key identifier: C0:38:B7:56:B7:F8:C4:A2:8B:33:11:F2:9B:85:69:41:53:87:04:09 Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598 Certificate serial: 019AF50B30CFDF54A2CA8EEA2C28518CBD37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft Manifest number: 1778 Signing time: Sat 06 Dec 2025 19:02:22 +0000 Manifest this update: Sat 06 Dec 2025 19:02:22 +0000 Manifest next update: Sun 07 Dec 2025 19:02:22 +0000 Files and hashes: 1: 30uzQGt2sOP8IgaSYaMTDquW3Z0.roa (hash: P6F3XLSWCNAXZxqOxgAo6zkRmbGUu0m7JhEJGVuwo+Y=) 2: 6FCLQHtozzvvT3rILarZx-dLMdk.roa (hash: CE/HPZOWQIhCk0/eQd5v6UrJlGl3+mfNdRJaoA8qyRQ=) 3: 9OoDrhEhbXk4ekzKyQm0jV-44SA.roa (hash: 6i+5X9C2TOzi7xmik76MYbzQQCGqHcJmrVsoOb79H80=) 4: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: Ve2+HBYZmzCwpXEJ06+hz605zs7HRb3HW/LUmh3GDP0=) 5: PthqEj22M7At2kBHUijks0QzL2Y.roa (hash: mLNqUo+b6WtFCG82EqWZEk2WU+0M7VwjwYAWyGVtt1I=) 6: mnP6qn4_GBwg4u6pBxeQlf6iTVo.roa (hash: 0XbOSZ/9PP5b8D3OCSb6PfXvqNIMPwXQe0cizFkU/dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:30:cf:df:54:a2:ca:8e:ea:2c:28:51:8c:bd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598 Validity Not Before: Dec 6 19:02:22 2025 GMT Not After : Dec 7 19:02:22 2025 GMT Subject: CN=c038b756b7f8c4a28b3311f29b85694153870409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6f:59:ce:57:1a:4e:93:ff:2d:60:bd:30:d9: 2c:fd:f1:f0:99:da:a7:b6:04:56:06:5e:12:cf:26: e5:dd:0b:eb:02:c0:d2:13:f9:a3:56:ed:f4:fa:0b: da:d8:fe:21:5d:b4:e0:1e:6d:28:8d:d4:64:f1:fa: be:3e:89:95:61:23:15:46:16:1b:46:cd:64:21:0c: ce:7d:88:86:28:92:37:44:de:17:35:4e:a1:d7:23: 46:06:0c:91:8c:68:17:9b:bb:b4:4e:c4:8b:c7:cf: 7a:3e:05:e6:2c:d4:8d:b3:49:ce:6e:94:e7:6c:34: 94:35:c1:6e:2e:ad:f2:79:de:24:ea:e1:fd:00:9c: d3:a0:f2:d3:16:6b:d3:82:32:af:42:c3:54:57:f6: 8d:d0:97:e8:57:6f:cc:88:10:76:cf:69:dc:f0:d5: 45:52:8b:a4:9a:2a:fa:e2:6e:72:3b:00:99:9a:6c: af:0f:b1:59:8f:c2:e2:c0:c2:a4:67:d0:a5:1b:ce: c6:f8:7a:5b:36:46:0e:98:85:bf:3f:fc:db:e7:ee: bf:4d:45:78:24:0d:5b:58:78:25:c5:41:c8:93:82: de:2e:5e:98:92:ad:ff:2d:ee:3e:7f:5f:45:6d:ec: 8b:47:4e:55:96:50:50:7e:01:71:25:83:4c:45:8d: 56:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:38:B7:56:B7:F8:C4:A2:8B:33:11:F2:9B:85:69:41:53:87:04:09 X509v3 Authority Key Identifier: keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:76:34:fb:3a:e6:14:73:3e:e6:01:a0:d4:a6:ff:37:64:35: 16:89:01:09:76:d1:b4:2c:e8:bd:c4:c2:5e:08:5f:b0:50:29: cd:aa:c1:e3:c7:6a:2d:1f:b6:92:0a:ba:ea:cc:33:87:74:1c: 9f:13:26:0d:2e:1f:1a:b1:5c:c9:a6:fc:7d:a4:0e:72:4c:e6: ab:43:53:c9:04:cf:a4:50:b6:bb:42:71:a7:51:43:22:cd:e1: ef:d0:bd:81:94:8d:7e:96:7d:3a:7f:41:4d:92:02:33:35:3f: e8:af:c7:80:75:06:6b:0d:af:31:75:90:f5:77:bf:29:b0:ff: 5e:50:06:26:32:b0:3e:8d:f8:34:65:f5:1c:f0:9b:eb:30:26: b6:f8:2f:23:f9:cf:a3:64:4a:a7:7c:f5:33:77:fa:90:fa:52: 42:aa:46:8b:76:19:e3:fe:b5:7e:c5:66:ae:e7:82:72:db:ca: 25:f3:43:bc:0d:ef:bf:da:14:40:8f:03:3f:b1:5c:a7:b7:6a: 4c:23:73:91:10:47:50:65:d7:77:38:b9:a3:c6:53:07:ad:ca: fa:03:7b:be:e8:a5:7f:29:5c:9b:d5:54:b1:8e:ac:02:1b:37: e0:e6:c3:23:db:7b:a2:1d:f2:41:1b:cf:7a:5a:08:d7:1c:d6: 3e:2e:90:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CzDP31Siyo7qLChRjL03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh ZGY1OTgwHhcNMjUxMjA2MTkwMjIyWhcNMjUxMjA3MTkwMjIyWjAzMTEwLwYDVQQD EyhjMDM4Yjc1NmI3ZjhjNGEyOGIzMzExZjI5Yjg1Njk0MTUzODcwNDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW9ZzlcaTpP/LWC9MNks/fHwmdqn tgRWBl4Szybl3QvrAsDSE/mjVu30+gva2P4hXbTgHm0ojdRk8fq+PomVYSMVRhYb Rs1kIQzOfYiGKJI3RN4XNU6h1yNGBgyRjGgXm7u0TsSLx896PgXmLNSNs0nObpTn bDSUNcFuLq3yed4k6uH9AJzToPLTFmvTgjKvQsNUV/aN0JfoV2/MiBB2z2nc8NVF Uoukmir64m5yOwCZmmyvD7FZj8LiwMKkZ9ClG87G+HpbNkYOmIW/P/zb5+6/TUV4 JA1bWHglxUHIk4LeLl6Ykq3/Le4+f19FbeyLR05VllBQfgFxJYNMRY1WqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMA4t1a3+MSiizMR8puFaUFThwQJMB8GA1UdIwQY MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt YTkzODhmMzFiNDdlLzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3Y0+zrm FHM+5gGg1Kb/N2Q1FokBCXbRtCzovcTCXghfsFApzarB48dqLR+2kgq66swzh3Qc nxMmDS4fGrFcyab8faQOckzmq0NTyQTPpFC2u0Jxp1FDIs3h79C9gZSNfpZ9On9B TZICMzU/6K/HgHUGaw2vMXWQ9Xe/KbD/XlAGJjKwPo34NGX1HPCb6zAmtvgvI/nP o2RKp3z1M3f6kPpSQqpGi3YZ4/61fsVmrueCctvKJfNDvA3vv9oUQI8DP7Fcp7dq TCNzkRBHUGXXdzi5o8ZTB63K+gN7vuilfylcm9VUsY6sAhs34ObDI9t7oh3yQRvP eloI1xzWPi6Qvg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:22:33 2025 by rpki-client