This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft File: PUPPQPaR8Us1ymVwMpNIAgBc-og.mft (raw, json) Hash identifier: YnlDzwz8F6OpQdzBiHB33l4Cuk451Se/Ym7kP1YjpC8= Subject key identifier: 9C:7F:D9:EC:7F:20:40:25:64:AF:6A:0C:21:64:9F:11:90:17:6F:9E Authority key identifier: 3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88 Certificate issuer: /CN=3d43cf40f691f14b35ca657032934802005cfa88 Certificate serial: 019B631E702EEB6AC4B54042B8A865476B79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft Manifest number: 0824 Signing time: Sun 28 Dec 2025 04:01:37 +0000 Manifest this update: Sun 28 Dec 2025 04:01:37 +0000 Manifest next update: Mon 29 Dec 2025 04:01:37 +0000 Files and hashes: 1: 846C_HHWsmfMuTteTAyqZtSs9uU.roa (hash: tRlhHsbjfBDjcdUQyF9uDZ6h5rAZGUSUYhMVpEGLRx8=) 2: PUPPQPaR8Us1ymVwMpNIAgBc-og.crl (hash: 3AY+qV7NR3dmO0kW9BZLp1Zh0VjYf1jjY7kkGfkAHK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1e:70:2e:eb:6a:c4:b5:40:42:b8:a8:65:47:6b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d43cf40f691f14b35ca657032934802005cfa88 Validity Not Before: Dec 28 04:01:37 2025 GMT Not After : Dec 29 04:01:37 2025 GMT Subject: CN=9c7fd9ec7f20402564af6a0c21649f1190176f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5b:d7:0e:58:3e:81:d5:87:25:3e:f7:62:d3: 2f:8c:27:6a:3d:36:12:69:1a:03:d4:0e:49:22:76: 87:d9:08:7a:d0:e5:0b:fc:0c:2d:33:ec:f1:e2:b0: 9a:94:9b:ac:c6:3f:3a:82:2c:ef:64:13:72:a2:c7: 98:9b:7f:34:ed:79:35:07:70:5d:f7:87:5e:4d:64: 20:89:0a:8a:51:60:4c:b1:27:0d:c7:77:18:49:b8: 2c:0f:bb:a8:e5:e1:05:89:11:9d:8b:ae:cf:a0:db: a7:4c:68:0a:a3:eb:5e:2b:a4:a6:18:21:2b:d6:42: 65:f6:d4:35:2f:55:83:13:d4:32:8e:db:43:25:d2: ef:cd:5b:65:6a:3a:0c:89:a3:0c:42:6b:52:25:62: ab:2d:88:78:24:f1:00:3a:43:84:4a:1b:f7:83:d1: 7e:d5:7f:a8:67:11:51:a5:8d:ca:02:be:67:e1:17: 45:f4:34:d6:c6:82:23:73:65:57:00:af:4d:6a:14: e8:88:1e:da:0c:88:5c:6d:4f:d8:a2:ce:13:d0:36: 3c:b1:7c:d6:95:41:b1:f6:5d:d0:f9:9a:51:2c:24: 4b:f9:c2:5e:6e:44:fd:5f:ca:c5:30:d4:9f:82:9d: e5:1e:48:f5:63:d1:3b:20:2e:c4:ae:fd:48:6a:0c: 78:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:7F:D9:EC:7F:20:40:25:64:AF:6A:0C:21:64:9F:11:90:17:6F:9E X509v3 Authority Key Identifier: keyid:3D:43:CF:40:F6:91:F1:4B:35:CA:65:70:32:93:48:02:00:5C:FA:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUPPQPaR8Us1ymVwMpNIAgBc-og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/43f7ac-6788-490b-9b3b-07fb6171f18f/1/PUPPQPaR8Us1ymVwMpNIAgBc-og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:2b:13:66:cc:25:2c:85:0f:3a:83:86:9a:39:44:92:61:96: d0:36:cc:42:87:25:05:21:59:34:13:b0:84:80:62:17:e4:c4: 86:e7:71:43:5b:5f:72:a1:48:76:07:ec:06:ed:e2:e9:b2:3c: 4a:d2:fe:b5:32:ed:65:4a:59:a0:8e:49:ab:0e:07:30:8b:43: d6:00:05:c0:b7:af:d4:43:74:f3:a1:68:c7:b2:61:b5:42:25: 00:8c:2a:ec:7d:7e:5a:7c:b7:a5:52:43:c3:ed:28:29:c6:4d: a0:1f:1e:b0:ed:bf:2e:95:4a:a9:01:c8:7e:91:86:bf:09:52: ab:c5:97:1c:57:a3:c6:bc:2b:11:1a:29:b1:53:ed:59:d6:28: 58:b6:14:0c:ca:c7:06:7d:d1:3f:8c:04:be:4d:42:48:a0:a6: be:64:1f:76:68:da:f2:dc:e1:73:90:ff:4e:15:58:e2:c8:61: 18:21:1d:0e:4c:ab:fc:f1:0d:64:2a:50:ad:3d:8f:a7:de:d4: 9f:66:ec:73:67:33:5b:35:c6:3c:fc:27:69:10:4e:dc:f2:04: 9a:43:ec:6b:f9:93:cb:ad:3f:30:65:6e:34:20:31:06:79:f4: 8c:86:a3:b6:65:cf:e4:39:95:a6:3f:4c:02:2e:50:d1:41:dd: 28:b9:7d:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHnAu62rEtUBCuKhlR2t5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkNDNjZjQwZjY5MWYxNGIzNWNhNjU3MDMyOTM0ODAyMDA1 Y2ZhODgwHhcNMjUxMjI4MDQwMTM3WhcNMjUxMjI5MDQwMTM3WjAzMTEwLwYDVQQD Eyg5YzdmZDllYzdmMjA0MDI1NjRhZjZhMGMyMTY0OWYxMTkwMTc2ZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlvXDlg+gdWHJT73YtMvjCdqPTYS aRoD1A5JInaH2Qh60OUL/AwtM+zx4rCalJusxj86gizvZBNyoseYm3807Xk1B3Bd 94deTWQgiQqKUWBMsScNx3cYSbgsD7uo5eEFiRGdi67PoNunTGgKo+teK6SmGCEr 1kJl9tQ1L1WDE9QyjttDJdLvzVtlajoMiaMMQmtSJWKrLYh4JPEAOkOEShv3g9F+ 1X+oZxFRpY3KAr5n4RdF9DTWxoIjc2VXAK9NahToiB7aDIhcbU/Yos4T0DY8sXzW lUGx9l3Q+ZpRLCRL+cJebkT9X8rFMNSfgp3lHkj1Y9E7IC7Erv1Iagx4ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJx/2ex/IEAlZK9qDCFknxGQF2+eMB8GA1UdIwQY MBaAFD1Dz0D2kfFLNcplcDKTSAIAXPqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2It MDdmYjYxNzFmMThmLzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC80M2Y3YWMtNjc4OC00OTBiLTliM2ItMDdmYjYxNzFmMThm LzEvUFVQUFFQYVI4VXMxeW1Wd01wTklBZ0JjLW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlisTZswl LIUPOoOGmjlEkmGW0DbMQoclBSFZNBOwhIBiF+TEhudxQ1tfcqFIdgfsBu3i6bI8 StL+tTLtZUpZoI5Jqw4HMItD1gAFwLev1EN086Fox7JhtUIlAIwq7H1+Wny3pVJD w+0oKcZNoB8esO2/LpVKqQHIfpGGvwlSq8WXHFejxrwrERopsVPtWdYoWLYUDMrH Bn3RP4wEvk1CSKCmvmQfdmja8tzhc5D/ThVY4shhGCEdDkyr/PENZCpQrT2Pp97U n2bsc2czWzXGPPwnaRBO3PIEmkPsa/mTy60/MGVuNCAxBnn0jIajtmXP5DmVpj9M Ai5Q0UHdKLl9AQ== -----END CERTIFICATE-----Generated at Sun Dec 28 05:53:42 2025 by rpki-client