This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft File: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft (raw, json) Hash identifier: AKNjzXuSuuJbMYwZ7z9HGanP1KP0Jp4DPhlc/uD60Gk= Subject key identifier: 97:77:F2:19:3C:90:5E:A9:DC:82:76:6E:D5:45:FC:34:CC:AE:C8:87 Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598 Certificate serial: 019AF31B9888999E547BEEE7F1B327EEB48A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 10:01:03 +0000 Manifest this update: Sat 06 Dec 2025 10:01:03 +0000 Manifest next update: Sun 07 Dec 2025 10:01:03 +0000 Files and hashes: 1: 30uzQGt2sOP8IgaSYaMTDquW3Z0.roa (hash: P6F3XLSWCNAXZxqOxgAo6zkRmbGUu0m7JhEJGVuwo+Y=) 2: 6FCLQHtozzvvT3rILarZx-dLMdk.roa (hash: CE/HPZOWQIhCk0/eQd5v6UrJlGl3+mfNdRJaoA8qyRQ=) 3: 9OoDrhEhbXk4ekzKyQm0jV-44SA.roa (hash: 6i+5X9C2TOzi7xmik76MYbzQQCGqHcJmrVsoOb79H80=) 4: PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl (hash: 1m6HUoqPZs7ePUubkTGXl4FZOJe+PBD1Y/YWk36dAFA=) 5: PthqEj22M7At2kBHUijks0QzL2Y.roa (hash: mLNqUo+b6WtFCG82EqWZEk2WU+0M7VwjwYAWyGVtt1I=) 6: mnP6qn4_GBwg4u6pBxeQlf6iTVo.roa (hash: 0XbOSZ/9PP5b8D3OCSb6PfXvqNIMPwXQe0cizFkU/dQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:98:88:99:9e:54:7b:ee:e7:f1:b3:27:ee:b4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598 Validity Not Before: Dec 6 10:01:03 2025 GMT Not After : Dec 7 10:01:03 2025 GMT Subject: CN=9777f2193c905ea9dc82766ed545fc34ccaec887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:24:ea:66:f7:db:94:7e:d5:c8:88:9b:84: b4:71:24:9c:af:f1:ae:86:98:6e:57:e5:a9:0d:25: 64:04:a9:3c:f8:57:75:14:05:72:dc:69:a2:8a:08: c7:ef:42:de:62:ea:ba:fb:bc:95:f3:cd:a4:be:b0: fd:fb:4f:0d:d1:95:eb:de:38:82:f4:2d:87:51:6e: d5:01:06:7a:73:f8:7c:c9:71:e1:6d:31:ad:62:65: ac:93:d9:bb:b4:a0:74:0c:21:45:b0:6a:ce:f2:49: 3b:24:77:d2:b0:7f:3e:d9:82:9c:84:ad:65:5a:4d: 3b:00:95:ed:3a:91:a9:8e:71:cf:b2:78:69:64:56: 62:6b:82:ad:b2:cc:01:a8:29:e2:61:c3:bf:b9:4e: 15:37:af:4e:fe:58:9c:aa:77:4c:c4:ff:59:13:32: b7:a9:9b:b6:d2:49:d8:8a:4d:28:f4:2b:0c:f1:85: b7:21:fe:a2:8f:95:47:26:fa:b5:10:3d:65:88:dc: c7:24:79:01:7b:c6:72:a0:2d:47:98:77:b0:e8:bc: ac:ef:35:c1:fc:3c:8a:db:9f:bb:7f:fc:56:13:5d: 6f:d1:9a:6e:f2:b8:32:e2:2f:27:00:09:71:ab:13: 42:c5:89:36:a8:f6:15:ac:53:90:47:17:92:ac:d0: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:77:F2:19:3C:90:5E:A9:DC:82:76:6E:D5:45:FC:34:CC:AE:C8:87 X509v3 Authority Key Identifier: keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8e:ec:47:e8:86:aa:03:92:6b:05:e2:e0:6a:1a:3c:bd:60: 21:1c:d1:47:c2:94:c8:9e:fc:51:12:10:b3:58:3d:93:0b:6d: a3:61:e1:a4:5b:9f:62:37:f6:08:d4:23:52:3d:c9:9b:b7:a2: 39:b2:59:7c:65:1c:8c:f1:53:c4:a8:40:20:8e:2f:27:d8:d2: 1b:ed:4f:69:25:d3:a9:e6:ad:e6:65:ee:c5:cb:fa:9f:a2:64: 04:d4:40:a9:42:f5:14:2c:be:af:87:78:bc:68:e5:2b:57:bf: 20:95:0d:62:2e:29:1d:77:b6:fe:d4:2c:00:7c:2f:1a:37:28: 08:c7:be:67:83:78:79:ec:37:51:0e:fe:e9:cf:fa:c7:1f:15: 67:1d:90:94:e5:40:7e:d6:ed:7f:9d:90:37:e1:ed:99:fc:9b: 86:66:58:12:f5:3c:81:5d:ea:34:b1:12:b8:ee:eb:0e:4c:b6: 19:5c:b9:e8:27:af:38:86:81:9d:8e:f9:89:a5:a9:5a:66:51: ab:68:2f:5c:13:e4:ed:35:ad:97:87:2e:68:dd:16:58:88:95: 80:5b:4c:68:b6:d3:65:18:cb:ef:31:25:22:09:34:2e:8d:2c: 21:8e:d0:c6:69:8c:42:dd:2e:d4:d3:d8:9a:5b:a8:d3:1a:4e: af:0c:cc:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5iImZ5Ue+7n8bMn7rSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZDM3ZWMyMzcxOWIyZjE0MmY0NmU2ZjMzMTc2NjQwMzRh ZGY1OTgwHhcNMjUxMjA2MTAwMTAzWhcNMjUxMjA3MTAwMTAzWjAzMTEwLwYDVQQD Eyg5Nzc3ZjIxOTNjOTA1ZWE5ZGM4Mjc2NmVkNTQ1ZmMzNGNjYWVjODg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Yk6mb325R+1ciIm4S0cSScr/Gu hphuV+WpDSVkBKk8+Fd1FAVy3GmiigjH70LeYuq6+7yV882kvrD9+08N0ZXr3jiC 9C2HUW7VAQZ6c/h8yXHhbTGtYmWsk9m7tKB0DCFFsGrO8kk7JHfSsH8+2YKchK1l Wk07AJXtOpGpjnHPsnhpZFZia4KtsswBqCniYcO/uU4VN69O/licqndMxP9ZEzK3 qZu20knYik0o9CsM8YW3If6ij5VHJvq1ED1liNzHJHkBe8ZyoC1HmHew6Lys7zXB /DyK25+7f/xWE11v0Zpu8rgy4i8nAAlxqxNCxYk2qPYVrFOQRxeSrNDB2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJd38hk8kF6p3IJ2btVF/DTMrsiHMB8GA1UdIwQY MBaAFDzTfsI3GbLxQvRubzMXZkA0rfWYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYt YTkzODhmMzFiNDdlLzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS8zZjdlNTYtMDkxNi00N2FjLTg1ODYtYTkzODhmMzFiNDdl LzEvUE5OLXdqY1pzdkZDOUc1dk14ZG1RRFN0OVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMI7sR+iG qgOSawXi4GoaPL1gIRzRR8KUyJ78URIQs1g9kwtto2HhpFufYjf2CNQjUj3Jm7ei ObJZfGUcjPFTxKhAII4vJ9jSG+1PaSXTqeat5mXuxcv6n6JkBNRAqUL1FCy+r4d4 vGjlK1e/IJUNYi4pHXe2/tQsAHwvGjcoCMe+Z4N4eew3UQ7+6c/6xx8VZx2QlOVA ftbtf52QN+HtmfybhmZYEvU8gV3qNLESuO7rDky2GVy56CevOIaBnY75iaWpWmZR q2gvXBPk7TWtl4cuaN0WWIiVgFtMaLbTZRjL7zElIgk0Lo0sIY7QxmmMQt0u1NPY mluo0xpOrwzMQg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:06 2025 by rpki-client