This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier: dGpRxQGZGrE517LH/yRxunQkEQ1QYGYnOrcFbmul4/0=
Subject key identifier: DB:F0:10:FE:1F:DF:72:64:19:88:E0:26:1C:7C:0A:54:AA:38:43:2F
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial: 019BF9C014EBB4369B1E041A3AE068D95463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number: 0754
Signing time: Mon 26 Jan 2026 10:01:13 +0000
Manifest this update: Mon 26 Jan 2026 10:01:13 +0000
Manifest next update: Tue 27 Jan 2026 10:01:13 +0000
Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: jH6/68zMbdwYdMjQVTeHj3LWPmXgWVPvwqlR8S0t4uQ=)
2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f9:c0:14:eb:b4:36:9b:1e:04:1a:3a:e0:68:d9:54:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Validity
Not Before: Jan 26 10:01:13 2026 GMT
Not After : Jan 27 10:01:13 2026 GMT
Subject: CN=dbf010fe1fdf72641988e0261c7c0a54aa38432f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:bb:58:a1:79:e7:d6:74:56:d7:62:38:c0:f3:
a9:19:c2:19:53:c7:5e:73:01:10:a6:54:a6:f7:41:
ab:5c:53:61:60:3d:4b:90:ba:69:a8:e6:4b:bb:3f:
4e:a9:86:10:f7:33:94:da:ba:cd:87:a0:bd:ea:44:
21:43:87:03:b1:dd:75:64:a4:45:74:0a:8c:bd:99:
38:ba:a3:0d:8f:b3:9d:85:fc:c6:ae:ed:d9:a8:5d:
37:2e:0c:f6:92:2e:28:5b:92:51:5d:dc:e2:b2:8d:
bc:9c:84:64:c7:a7:f7:13:67:2f:13:91:a3:e4:a1:
0c:79:cd:dd:f2:ce:78:f2:85:9a:17:1e:cf:20:85:
f6:de:c6:04:a1:8b:24:b7:0e:a1:97:eb:56:5f:bf:
9b:5a:a6:2b:51:0a:c6:a1:5e:4d:37:39:bf:ec:82:
e0:f2:2d:8b:c4:76:bb:eb:74:d5:2b:2c:36:93:bc:
ac:31:eb:30:d6:d1:75:bd:19:a0:18:4a:bd:e2:98:
ed:8a:65:10:5a:f8:a9:da:20:8f:68:42:6a:58:5d:
ac:e6:e1:4d:3b:3e:de:29:9c:8e:30:ef:28:4f:84:
9c:4d:68:5b:b5:8a:db:8c:5b:00:5b:b4:67:ae:80:
b6:1a:d8:a3:2f:a2:69:01:3c:71:bb:ac:57:f6:01:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F0:10:FE:1F:DF:72:64:19:88:E0:26:1C:7C:0A:54:AA:38:43:2F
X509v3 Authority Key Identifier:
keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f0:2a:25:50:6b:0d:8b:20:d0:1c:e7:df:c8:c4:22:82:dc:
f8:7c:80:78:7d:c5:48:5f:69:0d:7f:e1:50:0f:29:d7:30:85:
a9:a6:a5:56:74:05:3e:81:14:91:bf:b4:99:12:81:6e:fd:fe:
93:fa:2d:26:e1:72:9e:48:f3:99:53:b6:62:be:ec:8e:0e:88:
cf:d4:9a:8d:aa:d3:79:ea:69:30:b2:0a:bf:df:32:e0:4e:c1:
e9:44:44:70:76:52:34:99:98:b7:63:7d:d3:88:15:99:55:a7:
e6:a5:4e:7c:33:c7:7b:de:da:de:56:87:9c:a5:82:d2:06:fb:
90:65:10:29:50:df:3d:a9:bd:56:86:a8:8a:e0:cc:34:1f:82:
0c:e2:71:38:3d:ca:9b:27:49:0a:1e:3c:f8:77:91:72:f6:d8:
6b:54:52:a3:6a:50:18:59:67:49:44:32:85:2e:a2:3d:8a:7f:
d9:25:2c:98:2c:20:97:ea:8b:64:3a:47:b6:53:19:2a:13:92:
ad:74:93:1a:62:a7:6d:a8:43:79:a2:58:00:89:1f:7d:da:bb:
56:16:33:69:3c:a0:73:22:cd:7c:2c:b2:60:bf:92:70:89:86:
f8:1b:9f:5f:7d:aa:8b:57:56:6c:5c:0a:94:48:2e:aa:b4:0a:
6f:b9:ee:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:03:37 2026 by rpki-client