This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft File: datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json) Hash identifier: j/zhkevtvAg5hs0hYcAp4dyTKWb/tP/POyVz0INjDUI= Subject key identifier: 04:DF:DD:43:89:F4:5C:2C:CE:53:68:D1:F8:8D:F2:FC:72:EB:CE:55 Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40 Certificate issuer: /CN=75ab408aa9f71a81e883f8d14965f773538b5a40 Certificate serial: 019B2C2F93EDF74361BA62A24C10707ACB44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft Manifest number: 0463 Signing time: Wed 17 Dec 2025 12:01:14 +0000 Manifest this update: Wed 17 Dec 2025 12:01:14 +0000 Manifest next update: Thu 18 Dec 2025 12:01:14 +0000 Files and hashes: 1: 14NM_hJ73U6vGuk5H4RP54-eZBY.roa (hash: lie+0t/dSukUm9OoNgztT3EnggVtNQOhf9gAShVS0rI=) 2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: dV2BDkeop6KeWhaphvvyfKz5+3Y/37/LG0bqmogY9Hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:93:ed:f7:43:61:ba:62:a2:4c:10:70:7a:cb:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40 Validity Not Before: Dec 17 12:01:14 2025 GMT Not After : Dec 18 12:01:14 2025 GMT Subject: CN=04dfdd4389f45c2cce5368d1f88df2fc72ebce55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:98:95:09:d0:27:90:96:1b:bf:26:96:7e:57: c5:a5:72:cb:55:31:7c:88:a2:d1:da:3f:7c:08:f0: 21:8a:81:f1:f5:84:4f:02:88:e5:e9:0e:db:f5:73: 1e:28:a9:7d:1e:9f:94:17:fe:f6:e7:bd:f7:2b:c8: 72:3a:2b:a1:b6:a7:35:00:f1:d2:3d:cb:15:71:29: 8d:b0:93:a0:a8:7c:c4:cb:2e:ec:56:fa:62:37:b1: bd:06:52:13:74:e7:2f:6a:2a:16:04:5a:cb:b8:44: 95:a5:34:f2:94:d5:1f:fc:44:e5:38:68:bd:a7:f0: b6:ba:cf:b0:29:0f:39:76:89:a6:af:55:0b:e5:6a: ab:59:87:ca:b9:74:6e:fa:03:1c:03:8a:05:af:82: 67:03:38:3a:06:8c:8e:fc:a6:c0:83:3e:54:dd:ed: 38:ba:6a:a8:13:91:db:7a:01:b2:7d:01:e1:31:86: 18:95:34:4f:ed:ad:52:7e:0e:3c:04:e5:f8:63:7b: 86:a5:dd:6e:ca:8c:39:d2:72:c2:b3:64:01:e2:d2: fa:79:49:10:50:66:19:4d:2c:75:8f:69:eb:e6:e1: b7:8c:3a:57:da:d9:7c:cc:9a:4e:84:ce:c9:48:73: e2:ca:52:d0:0a:68:19:d7:4c:95:3f:dd:3c:c8:3c: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DF:DD:43:89:F4:5C:2C:CE:53:68:D1:F8:8D:F2:FC:72:EB:CE:55 X509v3 Authority Key Identifier: keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d6:af:31:49:d8:ae:5d:47:86:c5:5d:f6:7c:9e:ba:58:40: fc:ce:dc:27:e1:42:51:fe:74:52:72:bf:2a:a3:f6:40:a7:5e: 87:6a:fa:26:21:06:5b:23:46:d6:80:93:a0:95:1b:7e:38:55: a7:e3:75:5e:56:86:d5:73:4b:d4:14:db:cb:fe:97:64:fb:3e: d7:3e:c1:74:e4:b6:49:c5:bc:da:cc:4f:78:2c:c3:09:a3:e4: ac:35:17:0b:80:9e:a6:fe:24:f2:f5:7c:ac:60:2b:12:ad:66: 4f:47:f8:99:db:7d:74:11:5f:7f:2e:ee:b6:c6:23:8c:66:fc: 01:2e:0c:da:53:23:7f:4e:02:89:d7:c5:59:d6:c4:77:76:65: 2e:17:05:50:9b:38:5d:53:f6:ad:5c:bd:6b:39:7b:59:ad:64: ee:9f:cf:4a:0e:07:0a:0a:27:aa:18:69:89:d9:ab:35:6e:ab: e0:6a:7a:70:09:fd:00:0d:0b:27:f3:ad:21:c1:50:4d:72:e4: 76:c4:77:a1:93:e4:c1:12:f5:29:b6:bf:27:4a:c9:99:8f:16: 9d:7f:f8:ed:d8:65:2f:12:35:8e:91:97:1c:ab:09:2a:9f:48: a0:cf:5c:6e:b1:90:1d:da:14:b5:a9:3e:66:3b:c6:01:c6:e0: 64:ea:9d:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL5Pt90NhumKiTBBwestEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YWI0MDhhYTlmNzFhODFlODgzZjhkMTQ5NjVmNzczNTM4 YjVhNDAwHhcNMjUxMjE3MTIwMTE0WhcNMjUxMjE4MTIwMTE0WjAzMTEwLwYDVQQD EygwNGRmZGQ0Mzg5ZjQ1YzJjY2U1MzY4ZDFmODhkZjJmYzcyZWJjZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZiVCdAnkJYbvyaWflfFpXLLVTF8 iKLR2j98CPAhioHx9YRPAojl6Q7b9XMeKKl9Hp+UF/725733K8hyOiuhtqc1APHS PcsVcSmNsJOgqHzEyy7sVvpiN7G9BlITdOcvaioWBFrLuESVpTTylNUf/ETlOGi9 p/C2us+wKQ85dommr1UL5WqrWYfKuXRu+gMcA4oFr4JnAzg6BoyO/KbAgz5U3e04 umqoE5HbegGyfQHhMYYYlTRP7a1Sfg48BOX4Y3uGpd1uyow50nLCs2QB4tL6eUkQ UGYZTSx1j2nr5uG3jDpX2tl8zJpOhM7JSHPiylLQCmgZ10yVP908yDx6+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATf3UOJ9FwszlNo0fiN8vxy685VMB8GA1UdIwQY MBaAFHWrQIqp9xqB6IP40Ull93NTi1pAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85ZGI0MWEtOGYxYy00NmM1LWEyZTEt OGUyM2IwMjZjNmI1LzEvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85ZGI0MWEtOGYxYy00NmM1LWEyZTEtOGUyM2IwMjZjNmI1 LzEvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaNavMUnY rl1HhsVd9nyeulhA/M7cJ+FCUf50UnK/KqP2QKdeh2r6JiEGWyNG1oCToJUbfjhV p+N1XlaG1XNL1BTby/6XZPs+1z7BdOS2ScW82sxPeCzDCaPkrDUXC4Cepv4k8vV8 rGArEq1mT0f4mdt9dBFffy7utsYjjGb8AS4M2lMjf04CidfFWdbEd3ZlLhcFUJs4 XVP2rVy9azl7Wa1k7p/PSg4HCgonqhhpidmrNW6r4Gp6cAn9AA0LJ/OtIcFQTXLk dsR3oZPkwRL1Kba/J0rJmY8WnX/47dhlLxI1jpGXHKsJKp9IoM9cbrGQHdoUtak+ ZjvGAcbgZOqd+g== -----END CERTIFICATE-----Generated at Wed Dec 17 20:49:13 2025 by rpki-client