This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json) Hash identifier: qbVxIIqfvLiodmr3OJH6vgCIYhCW1ZgUYeEsLa5G+0Y= Subject key identifier: 26:AF:CB:DF:93:91:1C:9B:AA:E8:8F:33:F6:B4:B5:A2:AE:7A:EE:27 Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f Certificate serial: 019BFC1CDECC66CC6CC0211EEB3EFA55A9C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft Manifest number: 15AB Signing time: Mon 26 Jan 2026 21:01:48 +0000 Manifest this update: Mon 26 Jan 2026 21:01:48 +0000 Manifest next update: Tue 27 Jan 2026 21:01:48 +0000 Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: kHVJZ7GKHZDjopNinXY1lU56bZEi5FwDmuwvJcVNYEY=) 2: miIF7cKPQgBw0FAQgFgTnKxWG70.roa (hash: RlEN9ZFVRfvKtRA7xfX2xwkOVgWXXIc6PBrgfB1+iXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:de:cc:66:cc:6c:c0:21:1e:eb:3e:fa:55:a9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f Validity Not Before: Jan 26 21:01:48 2026 GMT Not After : Jan 27 21:01:48 2026 GMT Subject: CN=26afcbdf93911c9baae88f33f6b4b5a2ae7aee27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e9:18:f3:65:a4:ea:b0:fc:e4:cf:6d:37:6f: a6:ab:2d:0b:f6:ac:b0:59:0f:be:6b:94:f1:4c:e0: ec:ea:7d:d1:03:7f:12:e5:50:23:72:d4:9f:02:d7: 1b:7e:93:5b:ab:53:a6:53:90:60:98:b3:0e:93:b4: ee:ee:fe:cd:a6:ef:28:d2:e7:21:b1:0a:c2:07:a1: c6:ef:72:9d:52:1a:d4:f5:40:4e:4b:71:d7:76:8f: cb:56:dc:62:c7:3a:94:1d:7b:90:b3:7e:ca:33:78: f8:b1:b5:ec:63:62:f4:63:9e:96:91:44:ee:ab:f3: d4:6e:6b:7b:40:d3:7a:c7:d6:da:be:77:4b:b3:17: 57:ed:41:3f:4c:7e:15:f6:d6:cc:5b:d8:92:fe:8b: b0:61:9e:90:16:05:48:b1:7b:10:7d:33:77:74:07: 34:43:0c:71:79:65:88:b1:7d:0f:c8:c5:67:3e:57: c5:12:5d:bf:f7:47:30:ec:66:29:e5:4b:dd:df:e6: 2d:34:32:12:37:21:57:30:21:68:34:39:85:d8:1a: bd:cf:8e:f4:f6:57:a9:12:e9:a3:08:53:7d:64:be: 2b:17:5a:9b:36:2f:5d:d0:b8:70:31:8a:5d:33:0e: d9:ed:8a:c6:91:2c:b3:b4:98:c6:04:ff:27:0b:d0: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:AF:CB:DF:93:91:1C:9B:AA:E8:8F:33:F6:B4:B5:A2:AE:7A:EE:27 X509v3 Authority Key Identifier: keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:44:da:22:cb:65:cf:86:d9:4f:00:7d:d6:68:3b:14:bc:76: b1:e6:1c:ae:4b:75:f3:c2:e9:33:d5:7b:0b:a5:68:d4:8b:c8: 9b:74:cb:dd:81:46:bf:d5:c3:23:05:95:ec:d2:82:59:b8:4f: df:86:93:bb:9a:33:8d:99:aa:56:7e:21:70:fe:9e:41:0c:fe: b3:4f:d0:54:d6:f7:18:7e:d2:5c:3b:02:c7:47:65:12:24:8c: b5:74:66:f6:9a:68:76:b0:43:86:a9:65:f6:a8:95:1d:46:f9: 32:77:99:e6:74:16:1e:d5:90:90:41:da:6a:78:59:81:4b:a6: c2:c0:cd:77:78:48:d4:59:41:4b:8c:91:79:58:46:33:c1:d0: 91:7a:8a:fb:06:3f:60:7e:0c:9e:65:d4:e2:e8:41:4b:b9:e5: de:63:ca:78:69:7d:5d:b7:31:07:6c:c2:e1:e2:30:7c:47:c9: ab:b0:6c:80:0c:83:7e:77:32:c7:c9:da:a4:d2:18:b5:57:17: fd:d9:07:15:af:fa:9e:de:d4:7b:de:b6:14:73:7a:4a:d0:13: 97:e6:ff:89:38:a1:e9:0d:f3:00:ea:cb:6e:18:32:26:38:91: 00:59:ec:c0:3a:7b:63:84:14:e8:0d:f6:4a:45:99:d1:bc:ef: e7:3a:65:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HN7MZsxswCEe6z76VanIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTkzZWI3ZDRiNWJhZmY3MjA2ODU1YjE0ZTBlZTU4NjEx M2QwOWYwHhcNMjYwMTI2MjEwMTQ4WhcNMjYwMTI3MjEwMTQ4WjAzMTEwLwYDVQQD EygyNmFmY2JkZjkzOTExYzliYWFlODhmMzNmNmI0YjVhMmFlN2FlZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtukY82Wk6rD85M9tN2+mqy0L9qyw WQ++a5TxTODs6n3RA38S5VAjctSfAtcbfpNbq1OmU5BgmLMOk7Tu7v7Npu8o0uch sQrCB6HG73KdUhrU9UBOS3HXdo/LVtxixzqUHXuQs37KM3j4sbXsY2L0Y56WkUTu q/PUbmt7QNN6x9bavndLsxdX7UE/TH4V9tbMW9iS/ouwYZ6QFgVIsXsQfTN3dAc0 QwxxeWWIsX0PyMVnPlfFEl2/90cw7GYp5Uvd3+YtNDISNyFXMCFoNDmF2Bq9z470 9lepEumjCFN9ZL4rF1qbNi9d0LhwMYpdMw7Z7YrGkSyztJjGBP8nC9AcKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCavy9+TkRybquiPM/a0taKueu4nMB8GA1UdIwQY MBaAFD7pPrfUtbr/cgaFWxTg7lhhE9CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjct OThkOTA0NjY5NGU3LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjctOThkOTA0NjY5NGU3 LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkTaIstl z4bZTwB91mg7FLx2seYcrkt188LpM9V7C6Vo1IvIm3TL3YFGv9XDIwWV7NKCWbhP 34aTu5ozjZmqVn4hcP6eQQz+s0/QVNb3GH7SXDsCx0dlEiSMtXRm9ppodrBDhqll 9qiVHUb5MneZ5nQWHtWQkEHaanhZgUumwsDNd3hI1FlBS4yReVhGM8HQkXqK+wY/ YH4MnmXU4uhBS7nl3mPKeGl9XbcxB2zC4eIwfEfJq7BsgAyDfncyx8napNIYtVcX /dkHFa/6nt7Ue962FHN6StATl+b/iTih6Q3zAOrLbhgyJjiRAFnswDp7Y4QU6A32 SkWZ0bzv5zplBQ== -----END CERTIFICATE-----Generated at Tue Jan 27 01:18:28 2026 by rpki-client