This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft File: Puk-t9S1uv9yBoVbFODuWGET0J8.mft (raw, json) Hash identifier: KlBxlTBLARN2A1Ii2Y1JIgQU8QQGkxKJ+x5IoIfR8Vw= Subject key identifier: 4C:05:0A:75:22:71:BC:35:86:1B:7E:83:10:1C:E8:7A:E6:61:64:16 Authority key identifier: 3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F Certificate issuer: /CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f Certificate serial: 019BF83F208595E6C6D4A16DDAA1FB7FD184 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft Manifest number: 15A9 Signing time: Mon 26 Jan 2026 03:00:45 +0000 Manifest this update: Mon 26 Jan 2026 03:00:45 +0000 Manifest next update: Tue 27 Jan 2026 03:00:45 +0000 Files and hashes: 1: Puk-t9S1uv9yBoVbFODuWGET0J8.crl (hash: h2ufyFbr1TNa/8LzRR6nFR2WHAk08vAwrF/s+YjsCFM=) 2: miIF7cKPQgBw0FAQgFgTnKxWG70.roa (hash: RlEN9ZFVRfvKtRA7xfX2xwkOVgWXXIc6PBrgfB1+iXU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:20:85:95:e6:c6:d4:a1:6d:da:a1:fb:7f:d1:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ee93eb7d4b5baff7206855b14e0ee586113d09f Validity Not Before: Jan 26 03:00:45 2026 GMT Not After : Jan 27 03:00:45 2026 GMT Subject: CN=4c050a752271bc35861b7e83101ce87ae6616416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:17:d2:f1:2f:6a:4d:a1:08:77:a3:be:c8:37: 72:bd:7f:26:bf:e1:9c:83:e7:ce:b7:fd:1e:c1:41: 04:dd:61:cb:d0:6a:83:4e:d5:b0:87:39:66:24:c4: 42:27:c5:23:e2:cb:73:46:63:44:b2:36:8d:14:fb: 5c:95:da:b3:a6:59:a9:44:f8:ef:b1:d7:07:f7:87: c5:d1:8a:ea:44:b5:b9:25:79:00:5e:44:c7:67:d5: 75:a4:b7:9b:af:6c:91:c0:08:2f:88:ec:75:f7:7e: e6:77:9d:59:d5:74:f3:bf:4d:47:94:12:9f:e5:35: 82:a7:a9:a4:02:b1:60:fa:a9:f6:c3:d4:95:0b:86: 9d:dc:24:55:11:63:1b:59:50:5b:9d:46:48:55:1a: d5:08:b1:b9:2d:15:80:75:7f:7d:a3:13:3f:be:76: 6c:e6:cd:5e:fb:09:df:1a:ff:c9:25:c0:26:59:c7: 0c:60:2c:95:8c:46:0d:1e:4f:6f:37:0b:63:b1:6a: d8:18:4e:c9:0a:68:c6:1e:6d:0e:1c:bb:19:c8:1a: 03:3f:02:fa:37:7b:8c:f3:e8:a3:9a:84:03:75:6a: ee:da:69:05:1d:ae:90:87:af:57:e1:98:19:73:f2: 9b:b2:47:ba:3b:32:4e:a2:5b:b5:7d:f2:f3:6a:16: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:05:0A:75:22:71:BC:35:86:1B:7E:83:10:1C:E8:7A:E6:61:64:16 X509v3 Authority Key Identifier: keyid:3E:E9:3E:B7:D4:B5:BA:FF:72:06:85:5B:14:E0:EE:58:61:13:D0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Puk-t9S1uv9yBoVbFODuWGET0J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3c5ddd-d621-4dd0-ad67-98d9046694e7/1/Puk-t9S1uv9yBoVbFODuWGET0J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:1d:e8:01:b6:68:68:55:5f:98:58:ab:3b:a3:8b:20:5a:6b: 5e:d6:e3:41:39:a5:f7:ca:3f:ec:0a:77:18:34:0a:9e:4e:3d: 83:cc:12:a2:eb:4c:74:34:64:5f:38:b3:42:11:3c:7d:a0:e1: 9e:ca:9f:6c:76:68:9a:f5:35:67:73:f4:f1:48:1c:ed:df:0e: 6a:92:4a:18:31:60:14:f7:80:66:d7:6e:25:a4:b0:97:cf:31: 91:7d:00:8a:f6:3c:6f:51:b7:f2:e9:12:d8:ec:d0:6e:4b:77: b9:28:3e:da:e3:7e:94:d1:2b:5d:f6:01:51:69:1d:ba:18:83: 88:8f:0c:fb:01:a7:b9:2e:06:f2:02:8b:e4:2a:9d:f5:d8:c4: 3a:f7:9e:84:e0:a1:8e:5f:4c:90:32:64:74:a5:01:fa:22:a9: 87:f4:7a:82:68:89:36:64:2b:58:87:f8:1e:4d:2b:8a:81:c1: 6f:94:68:e3:9a:6b:6a:16:50:12:2c:d9:94:c7:af:85:9f:cb: 05:25:07:ea:f8:0a:6f:d8:9b:a3:5b:40:9a:d6:fd:28:c3:74: e2:75:00:ec:b6:df:bc:97:26:7d:61:0e:14:7a:79:d9:82:6b: fe:78:be:1a:0f:e4:ad:96:fc:3e:99:2c:29:32:fe:29:51:7d: e7:c5:07:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PyCFlebG1KFt2qH7f9GEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlZTkzZWI3ZDRiNWJhZmY3MjA2ODU1YjE0ZTBlZTU4NjEx M2QwOWYwHhcNMjYwMTI2MDMwMDQ1WhcNMjYwMTI3MDMwMDQ1WjAzMTEwLwYDVQQD Eyg0YzA1MGE3NTIyNzFiYzM1ODYxYjdlODMxMDFjZTg3YWU2NjE2NDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBfS8S9qTaEId6O+yDdyvX8mv+Gc g+fOt/0ewUEE3WHL0GqDTtWwhzlmJMRCJ8Uj4stzRmNEsjaNFPtcldqzplmpRPjv sdcH94fF0YrqRLW5JXkAXkTHZ9V1pLebr2yRwAgviOx1937md51Z1XTzv01HlBKf 5TWCp6mkArFg+qn2w9SVC4ad3CRVEWMbWVBbnUZIVRrVCLG5LRWAdX99oxM/vnZs 5s1e+wnfGv/JJcAmWccMYCyVjEYNHk9vNwtjsWrYGE7JCmjGHm0OHLsZyBoDPwL6 N3uM8+ijmoQDdWru2mkFHa6Qh69X4ZgZc/Kbske6OzJOolu1ffLzahZRLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEwFCnUicbw1hht+gxAc6HrmYWQWMB8GA1UdIwQY MBaAFD7pPrfUtbr/cgaFWxTg7lhhE9CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjct OThkOTA0NjY5NGU3LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8zYzVkZGQtZDYyMS00ZGQwLWFkNjctOThkOTA0NjY5NGU3 LzEvUHVrLXQ5UzF1djl5Qm9WYkZPRHVXR0VUMEo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvR3oAbZo aFVfmFirO6OLIFprXtbjQTml98o/7Ap3GDQKnk49g8wSoutMdDRkXzizQhE8faDh nsqfbHZomvU1Z3P08Ugc7d8OapJKGDFgFPeAZtduJaSwl88xkX0AivY8b1G38ukS 2OzQbkt3uSg+2uN+lNErXfYBUWkduhiDiI8M+wGnuS4G8gKL5Cqd9djEOveehOCh jl9MkDJkdKUB+iKph/R6gmiJNmQrWIf4Hk0rioHBb5Ro45prahZQEizZlMevhZ/L BSUH6vgKb9ibo1tAmtb9KMN04nUA7LbfvJcmfWEOFHp52YJr/ni+Gg/krZb8Ppks KTL+KVF958UHDQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:29 2026 by rpki-client