This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
File:                     datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json)
Hash identifier:          TxLOXHDjXL0QJn1xuuxyOS0BlttBS9V5PqcacJ7pxcc=
Subject key identifier:   A6:0C:80:47:23:3D:17:CD:53:1D:A0:99:21:1C:97:D0:50:DC:FB:C3
Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40
Certificate issuer:       /CN=75ab408aa9f71a81e883f8d14965f773538b5a40
Certificate serial:       019C42463A66E2572041E3DB26594D6531B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
Manifest number:          04F4
Signing time:             Mon 09 Feb 2026 12:00:24 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:24 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:24 +0000
Files and hashes:         1: ajNgz3i4R4z9MoH7g9Gh2FsCAiM.roa (hash: ak7eVyyVkmWQATGl9IjiTOWOerTXTRW7k0wkBuX7rhg=)
                          2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: u78AC7/EG4OfJO84tk4SRlxknu4FToiWttzBLWck9/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:3a:66:e2:57:20:41:e3:db:26:59:4d:65:31:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40
        Validity
            Not Before: Feb  9 12:00:24 2026 GMT
            Not After : Feb 10 12:00:24 2026 GMT
        Subject: CN=a60c8047233d17cd531da099211c97d050dcfbc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:c2:40:2d:b7:a4:6b:75:05:b2:60:82:e0:
                    fe:10:4f:c9:58:99:97:14:cb:3f:21:b6:13:0a:65:
                    14:d9:60:c5:c8:3e:a9:0f:0b:b1:16:dd:47:a8:97:
                    02:db:22:3b:5b:45:68:53:60:6a:e9:e7:05:5c:a0:
                    e3:fd:a7:cd:4b:1c:cb:b2:9b:64:58:c5:f8:eb:a5:
                    7f:34:b2:25:ee:ce:b5:77:b9:ce:5e:6e:9f:02:8b:
                    4c:bf:a4:22:ae:93:c8:fd:ba:eb:37:fb:c9:3d:bc:
                    5c:1d:97:26:a8:c8:a0:ad:21:30:5a:3f:69:8e:29:
                    ef:2f:5d:79:0d:0e:74:d8:9e:56:0b:52:14:db:5c:
                    d3:a7:d1:77:fd:e1:20:95:09:98:d3:4c:8f:6c:29:
                    5d:e6:ab:44:00:64:a5:4b:2f:4a:34:37:6c:a0:ed:
                    88:a3:c2:cd:71:a7:8f:af:13:0c:1a:98:fc:25:ea:
                    41:50:7b:0c:09:15:8f:f9:79:c4:dc:e7:3e:25:4e:
                    f3:35:e9:78:96:33:cf:81:16:39:a7:e0:d2:37:a3:
                    9f:70:42:90:e4:67:d9:fb:9d:e9:ff:22:28:18:d7:
                    ef:e9:c7:f4:03:12:96:4b:a3:fb:ce:db:5f:c7:49:
                    b2:43:8e:3b:8a:e7:5d:71:53:0c:ed:e4:7f:47:8c:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:0C:80:47:23:3D:17:CD:53:1D:A0:99:21:1C:97:D0:50:DC:FB:C3
            X509v3 Authority Key Identifier:
                keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:02:48:79:a9:4e:69:f9:93:26:1e:e6:1c:76:9d:a5:0a:f3:
         72:5d:c7:55:15:af:fe:d6:ff:4d:6c:84:6d:40:e6:ed:87:f7:
         a2:bc:94:9a:03:4a:b4:87:99:f6:55:53:59:70:59:ba:db:6f:
         f2:61:b7:6c:f2:69:54:a5:9e:bb:01:92:55:6d:ac:25:80:5f:
         87:d8:2f:57:51:3e:b3:8c:d4:7c:a9:3c:42:7b:ca:63:08:c1:
         96:f8:5b:67:84:b6:82:72:4f:36:53:1b:68:54:94:b0:5d:67:
         af:28:5f:a4:0f:56:89:a5:db:26:b1:bf:f4:4e:6c:86:85:db:
         ee:4d:da:fc:08:aa:5a:f0:d3:04:e6:2f:d9:49:5f:48:98:b6:
         e7:83:ac:62:53:94:bc:6d:34:5b:fb:77:e3:e6:ae:c5:7b:67:
         67:2f:bc:09:17:04:49:ea:83:11:e6:4d:23:ec:12:7d:60:49:
         6f:d9:7e:7b:95:14:1e:d7:f7:45:2b:87:4d:0c:7e:e7:06:86:
         d8:77:39:9a:9e:f4:46:92:cd:82:04:07:4a:06:32:de:01:09:
         75:50:fe:4b:a0:a3:ad:b0:31:90:64:0c:25:1e:51:bd:38:58:
         d4:b8:da:c0:58:b3:fc:11:e2:8c:12:8a:3c:79:16:57:f5:f6:
         06:77:17:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:05:28 2026 by rpki-client