This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json) Hash identifier: jxmy7SOW9s9nFyaYdNiFeDDcDQbUSkmgLFD+dvJixSs= Subject key identifier: 74:4A:D4:61:73:97:3C:4E:E4:C8:A6:B5:CF:2E:18:2C:DB:D0:A0:29 Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88 Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88 Certificate serial: 019AF31D357E0016D9DAC0FE84A2A10C22FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft Manifest number: 07EA Signing time: Sat 06 Dec 2025 10:02:49 +0000 Manifest this update: Sat 06 Dec 2025 10:02:49 +0000 Manifest next update: Sun 07 Dec 2025 10:02:49 +0000 Files and hashes: 1: 846C_HHWsmfMuTteTAyqZtSs9uU.roa (hash: tRlhHsbjfBDjcdUQyF9uDZ6h5rAZGUSUYhMVpEGLRx8=) 2: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: 7nYUMKxrJknjazw/s7u9cutn8P4fKoN3aOShlxyN+DY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:35:7e:00:16:d9:da:c0:fe:84:a2:a1:0c:22:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88 Validity Not Before: Dec 6 10:02:49 2025 GMT Not After : Dec 7 10:02:49 2025 GMT Subject: CN=744ad46173973c4ee4c8a6b5cf2e182cdbd0a029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:db:16:38:5a:7c:9f:74:a3:e3:2b:86:5b:52: 27:93:cc:da:11:55:b3:cc:c2:99:1b:48:d3:5b:6a: 45:1c:02:d3:d2:5e:b3:9f:ef:5c:93:d3:d2:eb:b4: 4f:c4:41:21:61:e1:65:01:d7:87:3b:54:ba:9d:81: bf:7d:2f:bc:bc:2c:7a:1d:b6:85:8c:18:4a:af:8a: f3:47:45:ff:0a:dc:a6:80:c3:4e:30:ee:d0:2b:85: 25:f0:df:7a:ca:9f:5a:c4:31:9f:ca:23:a4:b0:73: 4e:43:36:e9:cc:70:c6:7e:36:3b:d4:5c:89:b8:80: 88:eb:60:0d:10:82:86:ee:46:7e:23:e3:c5:14:91: 47:ef:57:8a:c7:a0:5d:14:2d:56:78:08:05:e9:a6: 6e:dc:68:3d:3b:14:61:dd:74:36:24:44:b3:0b:43: 6d:92:08:de:cd:07:e4:20:06:3a:6d:20:3e:e1:b7: b0:6e:1b:b8:3f:9d:83:14:47:48:17:fc:c7:b6:c0: 2f:76:19:38:6c:21:46:93:d1:cb:00:f3:d8:b8:aa: a5:8d:2a:b3:d4:4a:c7:d8:f4:e8:b6:ad:d7:d9:7d: b1:19:96:cb:eb:fc:28:3e:17:4a:aa:8a:45:74:97: 56:fd:79:89:53:75:f8:05:95:4c:a3:bb:cb:01:0b: 82:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:4A:D4:61:73:97:3C:4E:E4:C8:A6:B5:CF:2E:18:2C:DB:D0:A0:29 X509v3 Authority Key Identifier: keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:c2:89:35:ee:28:c0:b6:70:e7:71:81:c0:3a:fd:fc:e7:50: f4:db:67:5f:9d:5c:1b:60:3f:3e:1d:1f:14:f6:24:96:e0:e6: 13:22:b6:36:a5:9c:85:ef:4a:b5:dc:79:2c:a5:ff:86:64:4b: b1:0b:aa:95:9d:7b:e6:72:63:d2:20:ba:7e:22:a4:8a:7d:8b: 04:49:e3:72:7e:6f:21:61:17:09:e1:a1:d5:86:85:ab:4d:9d: ea:3c:e4:77:15:89:ba:f8:f0:cc:40:93:e8:94:0c:02:7f:5a: db:da:a8:ca:1f:4b:5b:a0:01:e3:3c:78:fc:5b:8b:5e:01:76: ae:7a:ae:80:8a:68:d0:85:dc:15:51:35:86:ef:5e:e8:47:6a: 22:a9:a0:b8:c2:6c:7d:ce:e9:5e:ea:25:9d:4b:e7:e6:3e:8b: ee:01:9b:5b:1a:9c:8e:d8:cf:71:05:cb:21:19:a8:d5:c5:ac: a6:cb:14:24:91:c0:38:10:d4:66:83:b9:62:67:6a:e5:96:f8: 40:1f:e2:de:6b:18:90:8d:c9:99:79:03:6b:49:95:11:4b:ed: 87:6c:c6:76:90:03:4e:19:af:be:18:5c:6a:4c:f0:50:12:3b: da:e6:25:ae:9f:4d:7b:77:a9:63:f6:54:97:d4:ad:7b:ec:f4: d8:06:4b:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTV+ABbZ2sD+hKKhDCL/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNDNjZjQwZjY5MWYxNGIzNWNhNjU3MDMyOTM0ODAyMDA1 Y2ZhODgwHhcNMjUxMjA2MTAwMjQ5WhcNMjUxMjA3MTAwMjQ5WjAzMTEwLwYDVQQD Eyg3NDRhZDQ2MTczOTczYzRlZTRjOGE2YjVjZjJlMTgyY2RiZDBhMDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutsWOFp8n3Sj4yuGW1Ink8zaEVWz zMKZG0jTW2pFHALT0l6zn+9ck9PS67RPxEEhYeFlAdeHO1S6nYG/fS+8vCx6HbaF jBhKr4rzR0X/CtymgMNOMO7QK4Ul8N96yp9axDGfyiOksHNOQzbpzHDGfjY71FyJ uICI62ANEIKG7kZ+I+PFFJFH71eKx6BdFC1WeAgF6aZu3Gg9OxRh3XQ2JESzC0Nt kgjezQfkIAY6bSA+4bewbhu4P52DFEdIF/zHtsAvdhk4bCFGk9HLAPPYuKqljSqz 1ErH2PTotq3X2X2xGZbL6/woPhdKqopFdJdW/XmJU3X4BZVMo7vLAQuCjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRK1GFzlzxO5Mimtc8uGCzb0KApMB8GA1UdIwQY MBaAFD1Dz0D2kfFLNcplcDKTSAIAXPqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2It MDdmYjYxNzFmMThmLzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2ItMDdmYjYxNzFmMThm LzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsKJNe4o wLZw53GBwDr9/OdQ9NtnX51cG2A/Ph0fFPYkluDmEyK2NqWche9Ktdx5LKX/hmRL sQuqlZ175nJj0iC6fiKkin2LBEnjcn5vIWEXCeGh1YaFq02d6jzkdxWJuvjwzECT 6JQMAn9a29qoyh9LW6AB4zx4/FuLXgF2rnqugIpo0IXcFVE1hu9e6EdqIqmguMJs fc7pXuolnUvn5j6L7gGbWxqcjtjPcQXLIRmo1cWspssUJJHAOBDUZoO5Ymdq5Zb4 QB/i3msYkI3JmXkDa0mVEUvth2zGdpADThmvvhhcakzwUBI72uYlrp9Ne3epY/ZU l9Ste+z02AZLuw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:21 2025 by rpki-client