This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json) Hash identifier: dGpRxQGZGrE517LH/yRxunQkEQ1QYGYnOrcFbmul4/0= Subject key identifier: DB:F0:10:FE:1F:DF:72:64:19:88:E0:26:1C:7C:0A:54:AA:38:43:2F Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353 Certificate serial: 019BF9C014EBB4369B1E041A3AE068D95463 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft Manifest number: 0754 Signing time: Mon 26 Jan 2026 10:01:13 +0000 Manifest this update: Mon 26 Jan 2026 10:01:13 +0000 Manifest next update: Tue 27 Jan 2026 10:01:13 +0000 Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: jH6/68zMbdwYdMjQVTeHj3LWPmXgWVPvwqlR8S0t4uQ=) 2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:c0:14:eb:b4:36:9b:1e:04:1a:3a:e0:68:d9:54:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353 Validity Not Before: Jan 26 10:01:13 2026 GMT Not After : Jan 27 10:01:13 2026 GMT Subject: CN=dbf010fe1fdf72641988e0261c7c0a54aa38432f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:bb:58:a1:79:e7:d6:74:56:d7:62:38:c0:f3: a9:19:c2:19:53:c7:5e:73:01:10:a6:54:a6:f7:41: ab:5c:53:61:60:3d:4b:90:ba:69:a8:e6:4b:bb:3f: 4e:a9:86:10:f7:33:94:da:ba:cd:87:a0:bd:ea:44: 21:43:87:03:b1:dd:75:64:a4:45:74:0a:8c:bd:99: 38:ba:a3:0d:8f:b3:9d:85:fc:c6:ae:ed:d9:a8:5d: 37:2e:0c:f6:92:2e:28:5b:92:51:5d:dc:e2:b2:8d: bc:9c:84:64:c7:a7:f7:13:67:2f:13:91:a3:e4:a1: 0c:79:cd:dd:f2:ce:78:f2:85:9a:17:1e:cf:20:85: f6:de:c6:04:a1:8b:24:b7:0e:a1:97:eb:56:5f:bf: 9b:5a:a6:2b:51:0a:c6:a1:5e:4d:37:39:bf:ec:82: e0:f2:2d:8b:c4:76:bb:eb:74:d5:2b:2c:36:93:bc: ac:31:eb:30:d6:d1:75:bd:19:a0:18:4a:bd:e2:98: ed:8a:65:10:5a:f8:a9:da:20:8f:68:42:6a:58:5d: ac:e6:e1:4d:3b:3e:de:29:9c:8e:30:ef:28:4f:84: 9c:4d:68:5b:b5:8a:db:8c:5b:00:5b:b4:67:ae:80: b6:1a:d8:a3:2f:a2:69:01:3c:71:bb:ac:57:f6:01: 08:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:F0:10:FE:1F:DF:72:64:19:88:E0:26:1C:7C:0A:54:AA:38:43:2F X509v3 Authority Key Identifier: keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f0:2a:25:50:6b:0d:8b:20:d0:1c:e7:df:c8:c4:22:82:dc: f8:7c:80:78:7d:c5:48:5f:69:0d:7f:e1:50:0f:29:d7:30:85: a9:a6:a5:56:74:05:3e:81:14:91:bf:b4:99:12:81:6e:fd:fe: 93:fa:2d:26:e1:72:9e:48:f3:99:53:b6:62:be:ec:8e:0e:88: cf:d4:9a:8d:aa:d3:79:ea:69:30:b2:0a:bf:df:32:e0:4e:c1: e9:44:44:70:76:52:34:99:98:b7:63:7d:d3:88:15:99:55:a7: e6:a5:4e:7c:33:c7:7b:de:da:de:56:87:9c:a5:82:d2:06:fb: 90:65:10:29:50:df:3d:a9:bd:56:86:a8:8a:e0:cc:34:1f:82: 0c:e2:71:38:3d:ca:9b:27:49:0a:1e:3c:f8:77:91:72:f6:d8: 6b:54:52:a3:6a:50:18:59:67:49:44:32:85:2e:a2:3d:8a:7f: d9:25:2c:98:2c:20:97:ea:8b:64:3a:47:b6:53:19:2a:13:92: ad:74:93:1a:62:a7:6d:a8:43:79:a2:58:00:89:1f:7d:da:bb: 56:16:33:69:3c:a0:73:22:cd:7c:2c:b2:60:bf:92:70:89:86: f8:1b:9f:5f:7d:aa:8b:57:56:6c:5c:0a:94:48:2e:aa:b4:0a: 6f:b9:ee:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5wBTrtDabHgQaOuBo2VRjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDM3ZGQyMmI3YWFiZTI4MjIyNWFmYjI1NmI4ZDlkY2Jl YmEzNTMwHhcNMjYwMTI2MTAwMTEzWhcNMjYwMTI3MTAwMTEzWjAzMTEwLwYDVQQD EyhkYmYwMTBmZTFmZGY3MjY0MTk4OGUwMjYxYzdjMGE1NGFhMzg0MzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LtYoXnn1nRW12I4wPOpGcIZU8de cwEQplSm90GrXFNhYD1LkLppqOZLuz9OqYYQ9zOU2rrNh6C96kQhQ4cDsd11ZKRF dAqMvZk4uqMNj7OdhfzGru3ZqF03Lgz2ki4oW5JRXdziso28nIRkx6f3E2cvE5Gj 5KEMec3d8s548oWaFx7PIIX23sYEoYsktw6hl+tWX7+bWqYrUQrGoV5NNzm/7ILg 8i2LxHa763TVKyw2k7ysMesw1tF1vRmgGEq94pjtimUQWvip2iCPaEJqWF2s5uFN Oz7eKZyOMO8oT4ScTWhbtYrbjFsAW7RnroC2GtijL6JpATxxu6xX9gEI/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvwEP4f33JkGYjgJhx8ClSqOEMvMB8GA1UdIwQY MBaAFAwDfdIreqvigiJa+yVrjZ3L66NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWIt ZThmM2E2NmVmNTU4LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWItZThmM2E2NmVmNTU4 LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvAqJVBr DYsg0Bzn38jEIoLc+HyAeH3FSF9pDX/hUA8p1zCFqaalVnQFPoEUkb+0mRKBbv3+ k/otJuFynkjzmVO2Yr7sjg6Iz9SajarTeeppMLIKv98y4E7B6UREcHZSNJmYt2N9 04gVmVWn5qVOfDPHe97a3laHnKWC0gb7kGUQKVDfPam9VoaoiuDMNB+CDOJxOD3K mydJCh48+HeRcvbYa1RSo2pQGFlnSUQyhS6iPYp/2SUsmCwgl+qLZDpHtlMZKhOS rXSTGmKnbahDeaJYAIkffdq7VhYzaTygcyLNfCyyYL+ScImG+BufX32qi1dWbFwK lEguqrQKb7nuGQ== -----END CERTIFICATE-----Generated at Mon Jan 26 13:03:37 2026 by rpki-client