This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json) Hash identifier: /4dXz+9MJ9xXlc+MePLBNylfXTAGykRAziNWRoNWKgM= Subject key identifier: 27:FB:75:24:69:51:4F:C5:1E:F7:71:78:6F:29:3F:E0:64:8F:3D:BB Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88 Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88 Certificate serial: 019BF79A49BEF8303FBF77D34D3402BC30DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft Manifest number: 0871 Signing time: Mon 26 Jan 2026 00:00:42 +0000 Manifest this update: Mon 26 Jan 2026 00:00:42 +0000 Manifest next update: Tue 27 Jan 2026 00:00:42 +0000 Files and hashes: 1: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: uZpBDaa17oCBFo/64wJzcFwBwdCW2LgA7m1bfrNKvew=) 2: SRouw1ACmOxsP7DYIDJnot7Wy0M.roa (hash: Axkim79AjMG7Hlgx6O/xdzgLE7UsB+oDhwA5WGJg0Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:49:be:f8:30:3f:bf:77:d3:4d:34:02:bc:30:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88 Validity Not Before: Jan 26 00:00:42 2026 GMT Not After : Jan 27 00:00:42 2026 GMT Subject: CN=27fb752469514fc51ef771786f293fe0648f3dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:09:0e:2b:2f:21:a1:d9:9a:ab:7c:dc:58:ff: 22:47:c8:93:92:1a:80:51:1a:8f:6d:46:19:06:a5: 3e:99:8e:02:e4:fc:bd:3d:bc:09:9a:11:71:5a:cf: 96:22:5b:06:d0:07:37:8a:06:c6:9b:9c:89:ec:5a: 0b:35:70:54:b7:35:ff:9f:84:67:6c:56:77:14:3c: 1a:7e:86:4d:16:60:f2:f7:98:ad:34:14:c9:2a:c0: 08:c3:66:c4:31:c3:94:c4:66:dd:27:2f:ac:e2:54: cf:b6:f1:68:36:06:1d:d4:c8:08:70:54:47:00:c6: 5a:5d:fe:72:85:83:65:2f:7c:4f:35:ab:89:05:a5: 78:f9:ce:77:a0:38:c1:4f:a0:5b:a6:ff:5a:7d:eb: 19:a5:3f:de:8e:31:b9:43:f4:15:4e:93:6c:58:58: 6c:a4:5f:93:b2:6b:df:04:c2:9d:30:26:95:ac:84: 82:68:2f:69:1e:3b:4d:2e:00:5d:b8:bb:69:03:84: 7b:33:1b:5c:08:de:6c:88:bc:8f:b7:42:1e:1c:b9: 57:cc:6a:9c:68:f9:e6:ec:d0:c6:f9:6c:78:71:8d: b3:97:fb:29:ab:cb:ee:25:a7:0c:97:2c:ea:ae:7d: cb:97:07:6b:bc:55:33:b3:8a:75:f6:3e:47:c6:fc: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FB:75:24:69:51:4F:C5:1E:F7:71:78:6F:29:3F:E0:64:8F:3D:BB X509v3 Authority Key Identifier: keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:33:1d:45:ff:40:df:40:1e:eb:9d:bf:0d:79:6f:d1:5c:bc: d2:f2:a2:5d:24:a5:81:52:bc:8b:79:d5:5e:e2:0c:9d:3f:4c: d5:f0:9f:2f:16:e2:7f:f4:75:bf:2e:3a:07:af:ed:3f:d8:d6: 07:3a:eb:5d:4a:15:99:21:73:b4:61:17:ac:fd:c2:b6:48:c4: 78:3d:68:b7:9f:e4:0d:5b:c2:ca:f6:0f:b9:07:f4:34:76:e5: 01:bc:43:e1:f6:9e:ff:af:b0:ea:1f:de:0c:ad:98:6d:44:1c: 86:2a:b3:81:a0:f4:9d:2e:26:f2:4b:55:b0:46:b9:13:e0:1e: b7:b6:8e:98:ab:91:d0:6c:5c:d0:2c:87:91:b6:63:b1:8f:79: 06:2d:67:de:9b:0f:56:04:c5:12:d7:1a:e2:26:fe:55:2c:c8: 36:7c:8c:2b:47:2a:3e:c3:00:f9:e0:6e:5f:0a:0b:be:e7:ad: 63:ed:12:b0:f6:11:9a:54:8b:6c:2b:72:6f:e5:86:66:b4:a4: f7:9d:23:c9:9e:28:03:08:9b:a6:a8:cb:5b:15:05:9c:20:d6: b8:b8:3a:bc:52:30:7c:a2:4f:2f:ac:a2:82:52:3b:7d:1b:60: 40:13:0a:44:a0:5f:3b:0f:10:1d:fb:c7:44:dd:3f:fb:f5:a5: 28:60:c6:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mkm++DA/v3fTTTQCvDDdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNDNjZjQwZjY5MWYxNGIzNWNhNjU3MDMyOTM0ODAyMDA1 Y2ZhODgwHhcNMjYwMTI2MDAwMDQyWhcNMjYwMTI3MDAwMDQyWjAzMTEwLwYDVQQD EygyN2ZiNzUyNDY5NTE0ZmM1MWVmNzcxNzg2ZjI5M2ZlMDY0OGYzZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9AkOKy8hodmaq3zcWP8iR8iTkhqA URqPbUYZBqU+mY4C5Py9PbwJmhFxWs+WIlsG0Ac3igbGm5yJ7FoLNXBUtzX/n4Rn bFZ3FDwafoZNFmDy95itNBTJKsAIw2bEMcOUxGbdJy+s4lTPtvFoNgYd1MgIcFRH AMZaXf5yhYNlL3xPNauJBaV4+c53oDjBT6Bbpv9afesZpT/ejjG5Q/QVTpNsWFhs pF+TsmvfBMKdMCaVrISCaC9pHjtNLgBduLtpA4R7MxtcCN5siLyPt0IeHLlXzGqc aPnm7NDG+Wx4cY2zl/spq8vuJacMlyzqrn3LlwdrvFUzs4p19j5HxvwXbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCf7dSRpUU/FHvdxeG8pP+Bkjz27MB8GA1UdIwQY MBaAFD1Dz0D2kfFLNcplcDKTSAIAXPqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2It MDdmYjYxNzFmMThmLzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2ItMDdmYjYxNzFmMThm LzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDMdRf9A 30Ae652/DXlv0Vy80vKiXSSlgVK8i3nVXuIMnT9M1fCfLxbif/R1vy46B6/tP9jW BzrrXUoVmSFztGEXrP3CtkjEeD1ot5/kDVvCyvYPuQf0NHblAbxD4fae/6+w6h/e DK2YbUQchiqzgaD0nS4m8ktVsEa5E+Aet7aOmKuR0Gxc0CyHkbZjsY95Bi1n3psP VgTFEtca4ib+VSzINnyMK0cqPsMA+eBuXwoLvuetY+0SsPYRmlSLbCtyb+WGZrSk 950jyZ4oAwibpqjLWxUFnCDWuLg6vFIwfKJPL6yiglI7fRtgQBMKRKBfOw8QHfvH RN0/+/WlKGDGTA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:42:33 2026 by rpki-client