This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft File: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json) Hash identifier: BXlk5Z6AeS9FSj6Ci1eeR/tiLEBzczUxYHwifHEA1C4= Subject key identifier: E7:AF:41:3F:32:1D:30:51:07:81:91:41:57:F2:91:30:2C:98:EA:FE Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598 Certificate serial: 019BF7636CD32BA2C1184E9ED2250F0BDD34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft Manifest number: 17FE Signing time: Sun 25 Jan 2026 23:00:46 +0000 Manifest this update: Sun 25 Jan 2026 23:00:46 +0000 Manifest next update: Mon 26 Jan 2026 23:00:46 +0000 Files and hashes: 1: 0M2CPdV7Xjvt7nrRqNi49Y_5Q0w.roa (hash: /s2MC65jvamRWE4E3LzZLmVB6N6rAH4buP8PZFgnBKc=) 2: 4bNlVON9xCdsARp_CZ5ll0ht23Q.roa (hash: r8pI01bxr501PmXiSeH2G+Xx+qveym+0Uqo3tM8jR6I=) 3: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: HYWpe2v3rBg1mDCz2cJeUBjbsx6KDOceHI+vXLhu8/c=) 4: SRrECMJ3ZMD_TfSXLnYqpll22u4.roa (hash: qizHkZ1GpDS36mFIdR1OgqUp05JcTddRBFeSdEQ59Wg=) 5: hd00NiPZ1KbbE5ODb-CMk8sWFr4.roa (hash: ivJHfYiQfBFcxIzEkszt8mO2O17yh2Xq/VLRYE4MQxY=) 6: v39I0Zjco7iTKjESnYevB85gpxs.roa (hash: h5IwzouSq0u0o63m4FX0dLx1gQy0nggHUf/mhXSXzYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:6c:d3:2b:a2:c1:18:4e:9e:d2:25:0f:0b:dd:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598 Validity Not Before: Jan 25 23:00:46 2026 GMT Not After : Jan 26 23:00:46 2026 GMT Subject: CN=e7af413f321d30510781914157f291302c98eafe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:74:fb:5e:3c:05:f9:a8:a1:5b:93:b5:7c: 2f:7a:00:96:6e:7a:c2:70:16:a0:7d:65:a2:24:70: 34:8a:af:95:19:31:88:5e:17:41:46:f3:04:e1:7a: 66:92:9c:c3:9b:5f:b3:41:75:01:24:ec:ef:50:50: 54:14:d7:84:17:39:db:52:1f:68:d9:6e:ee:9c:f2: 95:68:bf:1d:d0:ab:1f:ae:1e:4b:c9:4d:7a:40:d8: d3:3e:f1:aa:27:f1:85:7b:d6:8f:97:d3:60:67:4f: c0:04:5b:9b:05:47:df:cc:4f:25:ef:28:13:ee:7b: 68:f9:20:62:b4:0c:a1:58:3c:3e:f3:6c:a5:99:b3: 61:9b:83:61:15:26:61:34:d1:fb:69:21:a0:de:bc: 34:78:79:58:f2:f8:77:5d:94:3f:5f:7b:31:4f:ce: ae:04:79:95:9a:3d:b9:46:fa:51:d8:2a:79:7e:23: f3:6c:b8:ad:6c:fb:31:98:60:32:ea:f3:4a:1d:06: 28:bb:3b:ed:b3:56:41:fd:fe:0a:78:c8:fd:b5:bd: 91:c1:4b:81:fb:6d:64:90:47:00:35:c9:54:e1:14: de:83:43:39:29:97:13:fa:94:ad:df:ff:66:c4:ad: 89:59:39:c2:0d:b6:88:1c:b2:6b:03:fa:5b:38:74: cb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:AF:41:3F:32:1D:30:51:07:81:91:41:57:F2:91:30:2C:98:EA:FE X509v3 Authority Key Identifier: keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:09:e9:1b:4d:b7:46:83:55:89:0a:14:5a:ce:32:75:56:8e: b2:19:6a:46:17:76:42:3a:b3:47:f7:e1:28:5f:1f:b4:a4:07: 48:0f:4d:ab:38:26:a2:66:f1:57:71:1e:d1:f9:1c:51:63:3e: b0:57:31:55:f5:c5:da:0d:32:65:53:a8:a8:b5:c0:52:7d:45: cf:2c:c3:51:f3:8b:e6:40:94:d2:72:ad:90:e5:d6:74:58:7a: 4d:e4:3c:6d:1f:0d:5a:a1:76:96:35:0f:2a:2a:4a:ec:b0:3b: 51:1a:32:b2:36:d1:2d:b5:c5:67:04:f2:36:81:0d:57:2a:65: d2:e6:07:4c:86:6a:da:59:0b:19:93:15:79:d5:3c:f6:c5:4a: ca:03:b0:37:d2:14:4e:4b:21:9b:c9:d9:b5:25:3a:f4:6f:b1: 71:67:02:ee:f4:e3:ab:c0:76:78:55:f2:91:7c:81:96:6f:52: 21:55:09:a8:62:9f:2a:85:a4:56:bd:72:50:96:a2:0b:d9:8e: 8d:02:56:7b:54:e7:0b:3e:57:3a:75:46:3f:fc:ec:99:cc:7a: 12:dd:0e:ff:ae:eb:d4:4d:d4:6a:ee:cd:4e:af:57:d5:31:67: c0:c5:a3:b4:fc:23:0b:61:c2:c9:cf:f5:d6:b5:d0:e4:63:c5: f4:ef:d4:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y2zTK6LBGE6e0iUPC900MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh ZGY1OTgwHhcNMjYwMTI1MjMwMDQ2WhcNMjYwMTI2MjMwMDQ2WjAzMTEwLwYDVQQD EyhlN2FmNDEzZjMyMWQzMDUxMDc4MTkxNDE1N2YyOTEzMDJjOThlYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVR0+148BfmooVuTtXwvegCWbnrC cBagfWWiJHA0iq+VGTGIXhdBRvME4XpmkpzDm1+zQXUBJOzvUFBUFNeEFznbUh9o 2W7unPKVaL8d0Ksfrh5LyU16QNjTPvGqJ/GFe9aPl9NgZ0/ABFubBUffzE8l7ygT 7nto+SBitAyhWDw+82ylmbNhm4NhFSZhNNH7aSGg3rw0eHlY8vh3XZQ/X3sxT86u BHmVmj25RvpR2Cp5fiPzbLitbPsxmGAy6vNKHQYouzvts1ZB/f4KeMj9tb2RwUuB +21kkEcANclU4RTeg0M5KZcT+pSt3/9mxK2JWTnCDbaIHLJrA/pbOHTLRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOevQT8yHTBRB4GRQVfykTAsmOr+MB8GA1UdIwQY MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt YTkzODhmMzFiNDdlLzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAnpG023 RoNViQoUWs4ydVaOshlqRhd2QjqzR/fhKF8ftKQHSA9NqzgmombxV3Ee0fkcUWM+ sFcxVfXF2g0yZVOoqLXAUn1FzyzDUfOL5kCU0nKtkOXWdFh6TeQ8bR8NWqF2ljUP KipK7LA7URoysjbRLbXFZwTyNoENVypl0uYHTIZq2lkLGZMVedU89sVKygOwN9IU Tkshm8nZtSU69G+xcWcC7vTjq8B2eFXykXyBlm9SIVUJqGKfKoWkVr1yUJaiC9mO jQJWe1TnCz5XOnVGP/zsmcx6Et0O/67r1E3Uau7NTq9X1TFnwMWjtPwjC2HCyc/1 1rXQ5GPF9O/U7w== -----END CERTIFICATE-----Generated at Mon Jan 26 02:39:41 2026 by rpki-client