This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft File: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json) Hash identifier: 0slC341+ndhzDK/8Oc6dO8AY6fkYu/K/cmhaTXOv09A= Subject key identifier: 94:20:80:5D:C6:78:71:14:2F:D3:DA:37:E0:D9:07:40:68:0D:84:6A Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598 Certificate serial: 019BF57506096C892770D205C7032683DE10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft Manifest number: 17FD Signing time: Sun 25 Jan 2026 14:00:45 +0000 Manifest this update: Sun 25 Jan 2026 14:00:45 +0000 Manifest next update: Mon 26 Jan 2026 14:00:45 +0000 Files and hashes: 1: 0M2CPdV7Xjvt7nrRqNi49Y_5Q0w.roa (hash: /s2MC65jvamRWE4E3LzZLmVB6N6rAH4buP8PZFgnBKc=) 2: 4bNlVON9xCdsARp_CZ5ll0ht23Q.roa (hash: r8pI01bxr501PmXiSeH2G+Xx+qveym+0Uqo3tM8jR6I=) 3: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: +JrGjyOTDSSjekeGoFrS2XIXwB8jIbQcP2erwuKLrc0=) 4: SRrECMJ3ZMD_TfSXLnYqpll22u4.roa (hash: qizHkZ1GpDS36mFIdR1OgqUp05JcTddRBFeSdEQ59Wg=) 5: hd00NiPZ1KbbE5ODb-CMk8sWFr4.roa (hash: ivJHfYiQfBFcxIzEkszt8mO2O17yh2Xq/VLRYE4MQxY=) 6: v39I0Zjco7iTKjESnYevB85gpxs.roa (hash: h5IwzouSq0u0o63m4FX0dLx1gQy0nggHUf/mhXSXzYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:06:09:6c:89:27:70:d2:05:c7:03:26:83:de:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598 Validity Not Before: Jan 25 14:00:45 2026 GMT Not After : Jan 26 14:00:45 2026 GMT Subject: CN=9420805dc67871142fd3da37e0d90740680d846a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:0c:4e:ec:a1:d9:00:34:74:80:73:14:85: 3b:44:17:43:d1:ee:c7:7e:90:6c:5f:63:7c:c9:9b: 38:7e:5e:1f:04:82:4b:0f:54:91:e7:bc:e9:24:c8: 1d:72:62:3d:36:e4:f4:2d:63:fa:5d:c5:f4:f6:eb: 93:f7:14:5f:3f:3a:af:7a:f7:13:b5:c5:56:6d:f6: 67:f1:fa:eb:0b:9a:8d:ea:6e:61:87:02:2b:39:92: 20:f1:f3:ea:b9:9c:1c:f2:cd:a6:59:46:d7:c4:34: a1:b0:09:46:78:1d:63:98:07:7a:f7:6e:36:21:3b: 28:bd:e2:62:43:29:0e:b2:f6:6a:3c:35:72:56:61: 38:98:da:42:ca:df:fe:12:2c:c5:b7:b9:5c:56:50: 59:20:26:2a:a4:52:17:10:09:ef:6c:84:49:93:ae: 9d:1f:9f:80:2b:da:5c:8a:fc:d3:6c:9c:26:af:af: 5c:cb:36:37:cd:50:b2:12:e1:69:d1:12:10:2d:46: 9a:c9:95:b4:48:0c:e1:8d:9d:4f:5a:ba:79:24:31: 38:e5:5b:12:32:10:c9:96:96:f0:4e:cf:33:4b:db: 26:e7:73:ac:f6:5d:f1:b2:78:15:11:75:1e:d2:57: a3:0f:85:62:c9:f9:e2:0f:99:1d:1a:fc:ac:c0:35: d9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:20:80:5D:C6:78:71:14:2F:D3:DA:37:E0:D9:07:40:68:0D:84:6A X509v3 Authority Key Identifier: keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c3:89:82:e1:b9:58:8d:d2:a0:5f:d3:13:ae:c7:a5:4b:35: 4c:ce:a0:ea:9b:57:d7:c1:0a:0f:c5:1a:6f:79:85:3e:fe:05: f6:8d:8f:a4:db:9c:ec:b4:cc:09:d5:7f:08:60:9d:ab:7e:f8: 13:2d:da:20:a1:23:00:f9:bf:9b:13:4b:6e:2f:c5:68:f8:c4: 23:6f:11:70:1b:55:21:91:9b:5c:6f:87:e9:87:62:f1:bd:33: 14:50:29:48:ab:ec:1a:24:c9:29:b3:e8:53:08:cb:4d:c8:ae: 1e:d9:a3:76:e6:66:3f:da:0b:59:ce:24:0c:b6:19:2c:96:09: e3:06:30:3f:6e:59:4a:b6:47:90:5c:c3:af:cd:ef:04:bc:03: e8:ad:5d:dd:0f:d9:15:de:ee:44:96:d1:32:04:91:7f:d5:13: 5e:a0:49:0f:ed:6a:f5:75:cc:7b:29:de:73:cc:38:92:d8:e1: 3e:90:49:ee:4f:47:bc:c4:73:8c:f3:36:fe:bf:37:d3:9a:e8: 00:35:42:50:2a:1f:08:9b:83:01:21:fd:6e:6d:c5:8a:ea:45: 03:69:41:64:01:7e:ba:f7:65:b2:21:d8:4e:1e:1c:bf:7f:de: f2:b9:9d:88:93:7e:e6:9f:8d:40:f3:4f:a4:45:be:32:34:73: 63:15:74:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQYJbIkncNIFxwMmg94QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh ZGY1OTgwHhcNMjYwMTI1MTQwMDQ1WhcNMjYwMTI2MTQwMDQ1WjAzMTEwLwYDVQQD Eyg5NDIwODA1ZGM2Nzg3MTE0MmZkM2RhMzdlMGQ5MDc0MDY4MGQ4NDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFwMTuyh2QA0dIBzFIU7RBdD0e7H fpBsX2N8yZs4fl4fBIJLD1SR57zpJMgdcmI9NuT0LWP6XcX09uuT9xRfPzqvevcT tcVWbfZn8frrC5qN6m5hhwIrOZIg8fPquZwc8s2mWUbXxDShsAlGeB1jmAd69242 ITsoveJiQykOsvZqPDVyVmE4mNpCyt/+EizFt7lcVlBZICYqpFIXEAnvbIRJk66d H5+AK9pcivzTbJwmr69cyzY3zVCyEuFp0RIQLUaayZW0SAzhjZ1PWrp5JDE45VsS MhDJlpbwTs8zS9sm53Os9l3xsngVEXUe0lejD4ViyfniD5kdGvyswDXZ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQggF3GeHEUL9PaN+DZB0BoDYRqMB8GA1UdIwQY MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt YTkzODhmMzFiNDdlLzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8OJguG5 WI3SoF/TE67HpUs1TM6g6ptX18EKD8Uab3mFPv4F9o2PpNuc7LTMCdV/CGCdq374 Ey3aIKEjAPm/mxNLbi/FaPjEI28RcBtVIZGbXG+H6Ydi8b0zFFApSKvsGiTJKbPo UwjLTciuHtmjduZmP9oLWc4kDLYZLJYJ4wYwP25ZSrZHkFzDr83vBLwD6K1d3Q/Z Fd7uRJbRMgSRf9UTXqBJD+1q9XXMeynec8w4ktjhPpBJ7k9HvMRzjPM2/r8305ro ADVCUCofCJuDASH9bm3FiupFA2lBZAF+uvdlsiHYTh4cv3/e8rmdiJN+5p+NQPNP pEW+MjRzYxV0Sw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:36:24 2026 by rpki-client