This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft File: datAiqn3GoHog_jRSWX3c1OLWkA.mft (raw, json) Hash identifier: +FmYKmUv1st1/f1qLDgRXGBUME9CcjtNOwTr81NVj8g= Subject key identifier: DE:A6:03:A5:D3:7C:4A:92:2C:F5:9F:6A:77:CE:F5:EE:D7:9B:5A:09 Authority key identifier: 75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40 Certificate issuer: /CN=75ab408aa9f71a81e883f8d14965f773538b5a40 Certificate serial: 019AF240235B67F166C1531EC73E7AB96EC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft Manifest number: 0445 Signing time: Sat 06 Dec 2025 06:01:20 +0000 Manifest this update: Sat 06 Dec 2025 06:01:20 +0000 Manifest next update: Sun 07 Dec 2025 06:01:20 +0000 Files and hashes: 1: 14NM_hJ73U6vGuk5H4RP54-eZBY.roa (hash: lie+0t/dSukUm9OoNgztT3EnggVtNQOhf9gAShVS0rI=) 2: datAiqn3GoHog_jRSWX3c1OLWkA.crl (hash: xtyvwVpj83r+rWoxWWWBPcUXc73JTtOF3uwL9fmkr+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:23:5b:67:f1:66:c1:53:1e:c7:3e:7a:b9:6e:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75ab408aa9f71a81e883f8d14965f773538b5a40 Validity Not Before: Dec 6 06:01:20 2025 GMT Not After : Dec 7 06:01:20 2025 GMT Subject: CN=dea603a5d37c4a922cf59f6a77cef5eed79b5a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0f:83:b3:de:79:7c:10:4b:27:d0:fc:fe:b1: 90:03:17:66:0f:86:5b:f1:05:c4:b9:17:2e:a7:04: f2:f8:7b:e1:4f:26:d6:b4:b5:54:12:c6:24:c0:32: 60:34:17:c7:f7:80:48:4e:e9:21:66:49:1f:2d:43: 6d:07:62:e1:db:50:7b:fa:c9:a8:80:31:3c:5b:82: d0:4a:a2:e8:ef:d7:f6:58:cc:91:6c:68:c6:8f:22: 71:45:3c:a9:1d:c4:f4:b5:75:4c:94:d0:50:16:5d: 01:3f:e2:c2:a7:bc:86:22:81:6b:b0:7a:98:3f:81: 3b:34:9a:72:59:ad:53:05:b0:e4:bb:4e:8a:ff:80: 2d:56:41:be:33:93:8a:3f:aa:d9:49:02:49:c4:ed: db:4b:23:26:16:24:20:94:44:92:73:17:7c:1f:98: da:d6:1a:a3:39:a9:24:81:b5:a8:71:39:b2:97:43: a4:83:54:67:91:8e:9e:78:8a:18:b4:fe:7d:e2:8c: 77:98:d5:ba:90:3f:72:b8:26:07:2a:dc:ee:3a:ef: 75:0b:af:9a:21:73:b9:2f:53:bb:96:9b:19:8f:1f: 5d:c1:df:e2:b9:ea:89:71:16:10:c5:6f:6c:01:be: a9:b7:e4:5e:a8:1a:e8:54:29:d9:84:a4:5b:56:f1: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A6:03:A5:D3:7C:4A:92:2C:F5:9F:6A:77:CE:F5:EE:D7:9B:5A:09 X509v3 Authority Key Identifier: keyid:75:AB:40:8A:A9:F7:1A:81:E8:83:F8:D1:49:65:F7:73:53:8B:5A:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/datAiqn3GoHog_jRSWX3c1OLWkA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9db41a-8f1c-46c5-a2e1-8e23b026c6b5/1/datAiqn3GoHog_jRSWX3c1OLWkA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b8:13:90:eb:93:2a:9e:7d:e7:71:57:0f:4c:95:92:29:f8: 6f:e4:13:00:70:58:3d:ac:df:fc:fb:fc:c3:07:9d:20:3e:39: dc:11:a2:e0:d2:7a:fc:53:ec:4b:45:e6:9d:05:9d:0c:9f:05: 6d:2d:a8:e6:07:aa:93:a7:e0:7e:d4:9f:67:8c:e0:b6:6b:87: 73:64:6a:0d:e3:07:55:c5:03:de:67:d2:db:1e:e4:08:1f:ed: 87:1d:13:e4:19:ea:da:8d:0e:96:f4:da:15:11:33:fe:a6:95: 53:b8:d9:9a:64:af:1c:a9:30:2d:ac:49:77:2d:95:b2:5c:6e: 2e:be:38:99:36:62:99:d5:c6:18:2a:15:87:67:7b:08:e7:9e: cf:51:f9:5b:b4:73:7c:51:24:53:3b:90:26:de:75:ee:0b:c6: 11:aa:a8:62:23:b1:a6:c9:ef:bc:4a:94:1e:12:cc:06:04:44: 5b:15:27:aa:5b:b8:4f:cd:9a:01:de:a1:a9:08:4d:a2:ff:70: 20:63:cc:a8:6a:bd:76:4d:c0:26:28:f3:06:02:be:e5:bf:7f: 62:25:4d:a0:8f:75:5d:2c:b2:f3:2e:64:3a:34:e6:43:55:40: ea:ae:90:7a:10:e2:5e:d0:59:ce:b2:42:e9:c9:d0:f0:f6:27: c9:29:a9:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCNbZ/FmwVMexz56uW7FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YWI0MDhhYTlmNzFhODFlODgzZjhkMTQ5NjVmNzczNTM4 YjVhNDAwHhcNMjUxMjA2MDYwMTIwWhcNMjUxMjA3MDYwMTIwWjAzMTEwLwYDVQQD EyhkZWE2MDNhNWQzN2M0YTkyMmNmNTlmNmE3N2NlZjVlZWQ3OWI1YTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A+Ds955fBBLJ9D8/rGQAxdmD4Zb 8QXEuRcupwTy+HvhTybWtLVUEsYkwDJgNBfH94BITukhZkkfLUNtB2Lh21B7+smo gDE8W4LQSqLo79f2WMyRbGjGjyJxRTypHcT0tXVMlNBQFl0BP+LCp7yGIoFrsHqY P4E7NJpyWa1TBbDku06K/4AtVkG+M5OKP6rZSQJJxO3bSyMmFiQglESScxd8H5ja 1hqjOakkgbWocTmyl0Okg1RnkY6eeIoYtP594ox3mNW6kD9yuCYHKtzuOu91C6+a IXO5L1O7lpsZjx9dwd/iueqJcRYQxW9sAb6pt+ReqBroVCnZhKRbVvGa9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6mA6XTfEqSLPWfanfO9e7Xm1oJMB8GA1UdIwQY MBaAFHWrQIqp9xqB6IP40Ull93NTi1pAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85ZGI0MWEtOGYxYy00NmM1LWEyZTEt OGUyM2IwMjZjNmI1LzEvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni85ZGI0MWEtOGYxYy00NmM1LWEyZTEtOGUyM2IwMjZjNmI1 LzEvZGF0QWlxbjNHb0hvZ19qUlNXWDNjMU9MV2tBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7gTkOuT Kp5953FXD0yVkin4b+QTAHBYPazf/Pv8wwedID453BGi4NJ6/FPsS0XmnQWdDJ8F bS2o5geqk6fgftSfZ4zgtmuHc2RqDeMHVcUD3mfS2x7kCB/thx0T5Bnq2o0OlvTa FREz/qaVU7jZmmSvHKkwLaxJdy2VslxuLr44mTZimdXGGCoVh2d7COeez1H5W7Rz fFEkUzuQJt517gvGEaqoYiOxpsnvvEqUHhLMBgREWxUnqlu4T82aAd6hqQhNov9w IGPMqGq9dk3AJijzBgK+5b9/YiVNoI91XSyy8y5kOjTmQ1VA6q6QehDiXtBZzrJC 6cnQ8PYnySmpNg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:50:59 2025 by rpki-client