This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json) Hash identifier: TpJccp8tlmu8zUCF77nMldsIbEJxzs6D6DRNfwHjlPs= Subject key identifier: A2:88:F5:10:78:D5:18:FA:55:4F:8C:A1:66:E0:47:DC:1A:42:3E:0F Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88 Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88 Certificate serial: 019BFF53D8883323565FEE3F8C64D8ECD73D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft Manifest number: 0875 Signing time: Tue 27 Jan 2026 12:00:43 +0000 Manifest this update: Tue 27 Jan 2026 12:00:43 +0000 Manifest next update: Wed 28 Jan 2026 12:00:43 +0000 Files and hashes: 1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: HLoJTd7TE0oHp0HHFztHU4IEk5+bX56yf6L33iPjs84=) 2: SRouw1ACmOxsP7DYIDJnot7Wy0M.roa (hash: Axkim79AjMG7Hlgx6O/xdzgLE7UsB+oDhwA5WGJg0Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:53:d8:88:33:23:56:5f:ee:3f:8c:64:d8:ec:d7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88 Validity Not Before: Jan 27 12:00:43 2026 GMT Not After : Jan 28 12:00:43 2026 GMT Subject: CN=a288f51078d518fa554f8ca166e047dc1a423e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:26:e2:8b:d4:48:33:be:22:6b:c3:e5:a3:3c: b5:8b:18:95:1b:26:bc:b8:96:f7:4f:e2:ed:ae:4c: 5f:25:40:22:d3:59:7a:8b:c9:1a:94:35:b5:7f:0f: 2d:1a:08:b8:ec:0a:ea:5b:08:64:22:6f:2e:e3:23: ee:81:ea:84:0f:9e:3a:09:d6:22:a5:38:c6:54:b9: 60:ea:a4:b2:f3:b9:5a:46:b7:1c:03:6a:51:85:ce: 95:65:7c:f8:e6:31:09:00:f3:e9:25:be:93:08:79: 63:c8:9c:ae:1c:3b:f5:9d:65:03:92:bc:9f:9d:bc: 43:26:af:5e:fb:61:1e:58:6e:4a:7e:d5:1d:f4:bd: 39:e0:93:e8:30:e1:e3:f5:56:2b:a5:ff:1a:f2:fb: c5:99:91:dc:2d:83:47:cb:16:3e:e9:22:c8:0f:40: cf:de:9e:c2:89:3c:9d:64:0f:e9:92:01:a9:a8:37: 10:b1:16:69:89:fd:be:db:01:5d:0d:a4:47:1e:2a: d4:98:c3:1c:43:20:d6:ed:a3:43:aa:0b:05:8e:73: 15:95:31:ce:2b:9f:da:7d:87:b9:4e:88:85:52:81: 32:2e:54:30:6c:0f:fa:3e:2b:96:6e:ae:db:a1:10: d6:1b:76:82:7d:d2:96:23:2d:ca:fb:33:64:75:6e: a2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:88:F5:10:78:D5:18:FA:55:4F:8C:A1:66:E0:47:DC:1A:42:3E:0F X509v3 Authority Key Identifier: keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7a:23:91:11:71:6a:b9:3c:26:5a:e2:cf:15:49:bc:61:50: a0:bf:66:5d:48:07:a6:79:9c:c7:a3:34:b4:9c:94:80:59:f0: d7:b9:ca:a6:d8:d7:48:dc:47:af:b1:d0:55:e8:ab:b2:23:cd: f7:75:35:f2:c4:fe:7e:97:17:a0:d4:ea:de:ef:c4:47:f1:cd: 23:42:f3:7c:c5:62:7d:6c:d6:9e:53:28:d8:01:5e:8c:bf:b1: 65:26:48:95:82:c1:31:db:f0:ea:cc:ea:4b:70:63:d6:46:7c: be:e7:15:0e:33:06:49:03:3a:69:25:c5:ab:5e:63:9d:3e:12: 8b:21:31:fc:1b:13:98:a5:52:1e:9a:08:fc:40:b0:da:da:a5: ae:52:2e:de:57:3c:18:f5:8a:98:56:5a:32:57:e2:78:59:d3: 26:b2:e8:11:bf:74:77:a9:62:2b:81:5c:46:5d:3a:37:61:4f: ae:77:39:e3:11:aa:a1:09:b3:9b:9d:03:8e:dd:1b:11:a4:cf: 9a:d5:8e:02:26:a5:83:a0:b7:76:b1:63:10:f1:5a:c0:7b:d7: 83:19:65:10:93:05:95:60:fe:e4:2e:70:ce:98:ab:05:8c:79: 80:a9:3e:f0:cb:4a:52:cf:6f:ac:57:6f:5f:78:07:d7:4d:d6: 15:18:e6:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/U9iIMyNWX+4/jGTY7Nc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNDNjZjQwZjY5MWYxNGIzNWNhNjU3MDMyOTM0ODAyMDA1 Y2ZhODgwHhcNMjYwMTI3MTIwMDQzWhcNMjYwMTI4MTIwMDQzWjAzMTEwLwYDVQQD EyhhMjg4ZjUxMDc4ZDUxOGZhNTU0ZjhjYTE2NmUwNDdkYzFhNDIzZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Cbii9RIM74ia8Plozy1ixiVGya8 uJb3T+LtrkxfJUAi01l6i8kalDW1fw8tGgi47ArqWwhkIm8u4yPugeqED546CdYi pTjGVLlg6qSy87laRrccA2pRhc6VZXz45jEJAPPpJb6TCHljyJyuHDv1nWUDkryf nbxDJq9e+2EeWG5KftUd9L054JPoMOHj9VYrpf8a8vvFmZHcLYNHyxY+6SLID0DP 3p7CiTydZA/pkgGpqDcQsRZpif2+2wFdDaRHHirUmMMcQyDW7aNDqgsFjnMVlTHO K5/afYe5ToiFUoEyLlQwbA/6PiuWbq7boRDWG3aCfdKWIy3K+zNkdW6iyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKI9RB41Rj6VU+MoWbgR9waQj4PMB8GA1UdIwQY MBaAFD1Dz0D2kfFLNcplcDKTSAIAXPqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2It MDdmYjYxNzFmMThmLzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2ItMDdmYjYxNzFmMThm LzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXXojkRFx ark8JlrizxVJvGFQoL9mXUgHpnmcx6M0tJyUgFnw17nKptjXSNxHr7HQVeirsiPN 93U18sT+fpcXoNTq3u/ER/HNI0LzfMVifWzWnlMo2AFejL+xZSZIlYLBMdvw6szq S3Bj1kZ8vucVDjMGSQM6aSXFq15jnT4SiyEx/BsTmKVSHpoI/ECw2tqlrlIu3lc8 GPWKmFZaMlfieFnTJrLoEb90d6liK4FcRl06N2FPrnc54xGqoQmzm50Djt0bEaTP mtWOAialg6C3drFjEPFawHvXgxllEJMFlWD+5C5wzpirBYx5gKk+8MtKUs9vrFdv X3gH103WFRjmPw== -----END CERTIFICATE-----Generated at Tue Jan 27 17:12:27 2026 by rpki-client