This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft File: datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json) Hash identifier: y1ddqjowVYl9gdi9jSXqFObJ1Z9F2xjQY01tgoSaZNc= Subject key identifier: D1:A6:09:0D:B3:54:BF:CE:E6:2F:23:7E:1F:B9:33:4D:03:CC:F2:AF Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40 Certificate issuer: /CN=75ab408aa9f71a81e883f8d14965f773538b5a40 Certificate serial: 019B18DF41735AD39FE85869B3C49ACD035D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft Manifest number: 0459 Signing time: Sat 13 Dec 2025 18:00:42 +0000 Manifest this update: Sat 13 Dec 2025 18:00:42 +0000 Manifest next update: Sun 14 Dec 2025 18:00:42 +0000 Files and hashes: 1: 14NM_hJ73U6vGuk5H4RP54-eZBY.roa (hash: lie+0t/dSukUm9OoNgztT3EnggVtNQOhf9gAShVS0rI=) 2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: 4j6Mkxsjz2EUhf1/gQ5YyJGSKOEpLP7/f8i7lZ/h6Sc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:41:73:5a:d3:9f:e8:58:69:b3:c4:9a:cd:03:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40 Validity Not Before: Dec 13 18:00:42 2025 GMT Not After : Dec 14 18:00:42 2025 GMT Subject: CN=d1a6090db354bfcee62f237e1fb9334d03ccf2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:73:5b:8f:d3:ea:5d:d8:80:eb:09:81:52:53: 24:c9:6d:d8:31:79:e8:d8:e1:14:4c:7a:20:a8:49: 1e:13:7a:68:79:c5:cc:4b:01:bd:99:4c:8f:03:9d: 01:43:25:48:5e:14:d9:30:19:46:40:b4:b1:62:76: 65:aa:82:bd:35:bf:41:6c:06:33:51:ef:61:fd:79: b8:1f:f0:a7:5a:9b:07:00:8e:ab:7e:cb:7d:bf:fa: e3:3b:a8:d5:c9:b0:96:30:34:0f:13:fb:5f:26:d3: af:5c:e3:c3:a8:d2:d5:7c:22:fc:78:b9:34:e7:a2: 07:b2:77:6d:fb:45:c0:ce:29:82:a2:cb:ee:66:e2: e2:23:b9:dc:d0:8c:45:ee:9a:ec:79:ef:2f:c6:a3: f4:8e:e5:7e:eb:79:db:46:d3:99:ce:01:06:07:40: d3:16:3f:f8:0d:e0:89:94:58:0b:65:f2:3e:3a:e6: ee:d6:5f:c3:eb:36:f8:ff:af:d6:93:53:27:bd:0b: 0a:3e:cd:a2:26:0e:c8:f3:5f:13:d4:b4:e7:b7:c1: 11:b8:c6:f1:d4:1c:fc:3f:98:24:d5:39:a0:6e:5e: 40:6d:f5:20:00:d8:59:9e:98:92:59:70:f0:69:33: 12:a9:97:8e:37:90:5c:17:cf:32:9c:e6:eb:89:59: 38:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A6:09:0D:B3:54:BF:CE:E6:2F:23:7E:1F:B9:33:4D:03:CC:F2:AF X509v3 Authority Key Identifier: keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:cc:40:a0:cf:b2:01:ce:29:df:df:72:4e:01:16:e4:92:c3: fb:f7:34:0f:36:18:af:ea:16:01:c6:f0:4f:fe:cc:5d:58:eb: ce:ab:c3:b8:b4:25:a6:c9:5c:41:c2:2f:9b:21:e5:d2:c4:a8: 85:ca:e6:4b:7e:87:a3:99:b5:56:c2:2a:91:2d:72:b7:2a:5a: 75:c1:ff:26:1c:76:31:c1:3c:54:e2:2d:e2:d9:4c:40:2c:67: cd:4b:fb:d3:1a:61:aa:a1:20:9c:43:ee:b4:68:05:5f:c8:67: b1:f1:bc:00:ba:3a:6f:7d:ae:ed:fb:f8:66:0b:15:c1:42:1e: 1a:02:49:2a:4b:db:e3:1f:e3:1c:35:a8:fc:dc:26:41:36:af: da:1e:90:22:8f:9a:72:2e:c9:1e:16:3b:33:9d:4e:28:4a:a8: 5b:2b:cc:22:ae:53:ce:c4:dd:fa:44:42:af:d8:17:5e:46:7d: 33:4b:ec:37:2e:9f:68:6f:5d:a9:e6:6c:aa:db:9f:16:30:ef: 0e:a7:bc:77:6c:4f:43:4f:68:2e:3c:81:1c:9a:9f:a5:f9:35: fd:fc:f5:6c:1c:03:26:a3:2b:af:0b:f0:c0:28:00:c8:05:48: f5:07:f5:44:e0:b7:da:d9:bd:71:e2:9e:63:08:0c:9e:c3:09: 2b:98:07:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY30FzWtOf6Fhps8SazQNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YWI0MDhhYTlmNzFhODFlODgzZjhkMTQ5NjVmNzczNTM4 YjVhNDAwHhcNMjUxMjEzMTgwMDQyWhcNMjUxMjE0MTgwMDQyWjAzMTEwLwYDVQQD EyhkMWE2MDkwZGIzNTRiZmNlZTYyZjIzN2UxZmI5MzM0ZDAzY2NmMmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonNbj9PqXdiA6wmBUlMkyW3YMXno 2OEUTHogqEkeE3poecXMSwG9mUyPA50BQyVIXhTZMBlGQLSxYnZlqoK9Nb9BbAYz Ue9h/Xm4H/CnWpsHAI6rfst9v/rjO6jVybCWMDQPE/tfJtOvXOPDqNLVfCL8eLk0 56IHsndt+0XAzimCosvuZuLiI7nc0IxF7prsee8vxqP0juV+63nbRtOZzgEGB0DT Fj/4DeCJlFgLZfI+Oubu1l/D6zb4/6/Wk1MnvQsKPs2iJg7I818T1LTnt8ERuMbx 1Bz8P5gk1Tmgbl5AbfUgANhZnpiSWXDwaTMSqZeON5BcF88ynObriVk43QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGmCQ2zVL/O5i8jfh+5M00DzPKvMB8GA1UdIwQY MBaAFHWrQIqp9xqB6IP40Ull93NTi1pAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85ZGI0MWEtOGYxYy00NmM1LWEyZTEt OGUyM2IwMjZjNmI1LzEvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85ZGI0MWEtOGYxYy00NmM1LWEyZTEtOGUyM2IwMjZjNmI1 LzEvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABsxAoM+y Ac4p399yTgEW5JLD+/c0DzYYr+oWAcbwT/7MXVjrzqvDuLQlpslcQcIvmyHl0sSo hcrmS36Ho5m1VsIqkS1ytypadcH/Jhx2McE8VOIt4tlMQCxnzUv70xphqqEgnEPu tGgFX8hnsfG8ALo6b32u7fv4ZgsVwUIeGgJJKkvb4x/jHDWo/NwmQTav2h6QIo+a ci7JHhY7M51OKEqoWyvMIq5TzsTd+kRCr9gXXkZ9M0vsNy6faG9dqeZsqtufFjDv Dqe8d2xPQ09oLjyBHJqfpfk1/fz1bBwDJqMrrwvwwCgAyAVI9Qf1ROC32tm9ceKe YwgMnsMJK5gHDw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:03:41 2025 by rpki-client