This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json) Hash identifier: mZm8JmqvWnUxSWTbgvzJA0dwfSAn1i1wHDeooScdbbQ= Subject key identifier: 94:1E:D4:FD:4B:80:46:47:A6:CC:4F:9E:B1:96:38:5E:D9:20:96:1E Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88 Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88 Certificate serial: 019B1202DA8933378AEE0423F8C7015A0815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft Manifest number: 07FA Signing time: Fri 12 Dec 2025 10:02:15 +0000 Manifest this update: Fri 12 Dec 2025 10:02:15 +0000 Manifest next update: Sat 13 Dec 2025 10:02:15 +0000 Files and hashes: 1: 846C_HHWsmfMuTteTAyqZtSs9uU.roa (hash: tRlhHsbjfBDjcdUQyF9uDZ6h5rAZGUSUYhMVpEGLRx8=) 2: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: lfBbtq3HS/n2XJGibDeOnyvTqM0iFV8/1EfHOM7nN10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:da:89:33:37:8a:ee:04:23:f8:c7:01:5a:08:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88 Validity Not Before: Dec 12 10:02:15 2025 GMT Not After : Dec 13 10:02:15 2025 GMT Subject: CN=941ed4fd4b804647a6cc4f9eb196385ed920961e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:a0:c2:2d:16:52:d5:bc:8f:a0:49:89:cf: c7:90:66:ce:20:9b:b6:15:4c:07:e7:88:c8:39:1a: 84:f6:33:28:1f:f1:29:66:ab:17:86:92:e9:2b:6a: 25:b4:35:7e:f4:51:ed:6b:c1:3b:4f:ef:15:9f:d4: e4:b8:7c:27:20:fa:31:61:56:49:00:9d:df:60:e3: e5:64:e2:69:6e:c8:8b:07:24:ac:c5:bb:88:76:8c: 8c:97:8b:e7:7d:86:a0:8e:09:a2:61:85:aa:de:07: 90:1e:10:f1:20:2a:c6:66:55:6d:41:73:3e:1f:ef: af:5b:83:ac:8f:e4:e3:2e:7d:11:ed:e7:a4:19:52: 84:24:3d:ba:78:23:af:01:f2:8b:19:99:d2:c1:7f: 85:b4:82:7a:f3:1e:63:c7:e7:01:ac:22:5a:36:5c: 23:44:4d:9c:64:f3:5a:99:bd:5f:01:81:72:5c:93: 0c:a1:cc:6b:1f:e9:b2:5a:03:c9:90:71:11:13:2b: 80:2c:16:8f:53:2e:ef:54:e7:44:20:5b:0c:07:36: 6c:9f:ff:cb:59:95:92:ff:7d:30:57:61:bd:c5:fd: fe:44:81:69:30:76:a6:14:89:93:f8:d4:1e:28:5b: 45:e0:12:da:e9:d7:97:3d:80:c3:27:5b:64:ff:c5: 89:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1E:D4:FD:4B:80:46:47:A6:CC:4F:9E:B1:96:38:5E:D9:20:96:1E X509v3 Authority Key Identifier: keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:c9:51:1f:0f:1f:72:41:20:16:81:61:d3:77:08:b6:09:f5: 02:37:74:06:fc:93:92:21:f3:17:3d:22:3b:13:c2:d2:be:23: 18:ef:11:8d:01:e2:ec:05:a2:99:be:c3:0a:df:ea:ec:b8:78: b3:c0:99:dc:36:02:b3:1d:9e:ad:b9:ab:ef:65:cc:2f:3a:3f: c0:51:a5:4e:69:52:3a:58:5b:e3:50:a5:1a:32:1c:34:3e:5e: 90:9e:70:48:dc:01:9a:4c:ae:71:28:b6:79:3a:99:ab:e4:8f: d7:d8:da:3d:82:7c:8a:e2:33:b4:29:ac:23:58:38:53:07:85: d5:46:b4:6c:e3:1f:fa:1b:f0:01:27:4c:64:35:af:45:cb:26: 55:c4:da:fb:d0:6f:9d:18:d9:31:22:05:2d:49:dc:b8:77:ae: 12:b0:10:e2:1c:1c:a6:1a:5f:b3:9c:8a:3d:4e:8e:86:6d:eb: dc:01:09:19:64:b1:97:79:c1:48:2a:56:62:11:78:88:7b:5b: 03:c8:72:c8:84:bd:2e:71:87:17:c6:fa:5c:26:3a:be:c0:b8: 66:6f:dc:7e:33:ad:57:94:66:83:1a:2c:77:06:c0:3f:cb:66: bc:4b:0c:da:6b:95:d9:40:62:0c:b0:1e:98:3a:53:6e:1a:2b: 39:f3:23:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAtqJMzeK7gQj+McBWggVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNDNjZjQwZjY5MWYxNGIzNWNhNjU3MDMyOTM0ODAyMDA1 Y2ZhODgwHhcNMjUxMjEyMTAwMjE1WhcNMjUxMjEzMTAwMjE1WjAzMTEwLwYDVQQD Eyg5NDFlZDRmZDRiODA0NjQ3YTZjYzRmOWViMTk2Mzg1ZWQ5MjA5NjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Kgwi0WUtW8j6BJic/HkGbOIJu2 FUwH54jIORqE9jMoH/EpZqsXhpLpK2oltDV+9FHta8E7T+8Vn9TkuHwnIPoxYVZJ AJ3fYOPlZOJpbsiLBySsxbuIdoyMl4vnfYagjgmiYYWq3geQHhDxICrGZlVtQXM+ H++vW4Osj+TjLn0R7eekGVKEJD26eCOvAfKLGZnSwX+FtIJ68x5jx+cBrCJaNlwj RE2cZPNamb1fAYFyXJMMocxrH+myWgPJkHEREyuALBaPUy7vVOdEIFsMBzZsn//L WZWS/30wV2G9xf3+RIFpMHamFImT+NQeKFtF4BLa6deXPYDDJ1tk/8WJoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQe1P1LgEZHpsxPnrGWOF7ZIJYeMB8GA1UdIwQY MBaAFD1Dz0D2kfFLNcplcDKTSAIAXPqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2It MDdmYjYxNzFmMThmLzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2ItMDdmYjYxNzFmMThm LzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA08lRHw8f ckEgFoFh03cItgn1Ajd0BvyTkiHzFz0iOxPC0r4jGO8RjQHi7AWimb7DCt/q7Lh4 s8CZ3DYCsx2erbmr72XMLzo/wFGlTmlSOlhb41ClGjIcND5ekJ5wSNwBmkyucSi2 eTqZq+SP19jaPYJ8iuIztCmsI1g4UweF1Ua0bOMf+hvwASdMZDWvRcsmVcTa+9Bv nRjZMSIFLUncuHeuErAQ4hwcphpfs5yKPU6Ohm3r3AEJGWSxl3nBSCpWYhF4iHtb A8hyyIS9LnGHF8b6XCY6vsC4Zm/cfjOtV5RmgxosdwbAP8tmvEsM2muV2UBiDLAe mDpTbhorOfMjhQ== -----END CERTIFICATE-----Generated at Fri Dec 12 17:53:39 2025 by rpki-client