This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json) Hash identifier: PhpDQhl846t8TCruUcdHB82sJXto9DY9nc9KPtE/c+0= Subject key identifier: 45:36:9A:B0:EE:D6:41:D4:91:F0:63:D1:AD:A9:5C:08:D7:83:43:1C Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353 Certificate serial: 019AF208C0A0D585F8E8FA04CF35242B3107 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft Manifest number: 06CB Signing time: Sat 06 Dec 2025 05:00:51 +0000 Manifest this update: Sat 06 Dec 2025 05:00:51 +0000 Manifest next update: Sun 07 Dec 2025 05:00:51 +0000 Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: f1Sg1ab7bSESnkadNM3hA1TT/dXfBLe3ZRwrOoL9rrE=) 2: tDD9B-lEcyqNvoNAET5cpeS9CP4.roa (hash: rKwo3X/3AKqFNwDQChvvjw66ToIOE4+PnSG73JsvhIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:c0:a0:d5:85:f8:e8:fa:04:cf:35:24:2b:31:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353 Validity Not Before: Dec 6 05:00:51 2025 GMT Not After : Dec 7 05:00:51 2025 GMT Subject: CN=45369ab0eed641d491f063d1ada95c08d783431c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:96:0f:a2:f8:95:84:3f:b7:69:35:b7:2b:8c: f5:e4:e6:2c:fd:4b:6e:52:53:19:f3:99:e0:e0:27: 52:3a:57:21:d8:5b:72:77:9c:b6:30:ab:1b:d9:8e: 2c:42:71:86:28:c1:91:d1:98:1f:ae:85:22:83:2f: 02:78:78:42:f8:7d:b1:3a:a4:6b:8f:e5:fa:59:f0: c1:90:d2:42:13:32:1f:9e:57:79:b5:aa:00:3f:78: 5a:26:28:42:5e:44:d7:d7:0b:c6:1e:b1:72:11:03: 38:80:d2:a3:94:3e:5b:97:cb:00:d0:a5:41:af:7b: cd:98:43:36:25:db:c3:b7:db:d0:5f:0e:b4:ec:ce: c4:a4:ce:94:34:21:2d:05:27:49:cb:ac:43:06:37: 4e:72:7d:83:e6:57:0b:b2:8f:9b:5f:9a:da:23:90: aa:c3:22:fd:2b:72:97:89:1e:c0:ff:e3:1b:82:8e: 2a:d6:c9:1f:0e:16:f7:e5:2d:5d:6a:ad:ca:2e:6d: 06:b2:38:d8:26:07:ce:bb:a8:16:4c:c4:9c:bb:69: b4:1b:91:0e:4e:2a:5c:ac:1e:9a:7b:c1:82:85:7a: 14:86:8c:71:9f:ba:80:fe:04:38:ab:df:da:da:38: 05:52:c6:96:8a:3b:b2:ca:e9:69:c9:e0:7c:2a:87: e0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:36:9A:B0:EE:D6:41:D4:91:F0:63:D1:AD:A9:5C:08:D7:83:43:1C X509v3 Authority Key Identifier: keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:de:cd:31:fb:31:b9:25:33:9f:af:cb:e2:51:7f:f6:84:16: ad:3d:ac:be:ea:0d:02:33:66:8f:04:5d:cf:f8:07:bc:b3:ce: d9:ec:d9:98:48:6b:6d:e3:7d:78:75:13:09:0e:8f:eb:71:00: e3:4c:85:13:94:5e:43:b5:e0:2d:fa:45:09:45:7b:3e:bd:df: 76:8a:60:17:4a:71:b8:3f:d1:a7:9b:01:41:e2:ef:54:c3:3e: 37:d7:40:24:1a:0b:28:32:17:b4:2e:8d:b3:70:1a:7e:44:cf: 74:59:ee:b5:e8:1a:d2:c7:a7:ec:10:e7:27:12:ff:11:90:31: b8:60:ea:9f:5b:eb:d4:2d:14:66:8a:61:74:62:ab:d6:fd:81: 7e:b7:da:77:67:f1:13:33:00:6f:0e:2a:b9:1b:11:23:b7:2c: 9a:db:20:d5:08:05:a9:13:01:84:4a:db:fd:6e:55:3b:f2:54: ba:2f:6c:f4:b6:98:cb:eb:c7:0d:80:1c:dd:32:28:f5:71:92: 47:6c:0b:fa:9f:36:ed:a1:a4:e0:32:df:b4:ee:89:88:a4:10: b7:e3:ec:9d:21:c7:70:67:74:75:2b:ab:4c:34:68:3d:68:21: ae:d2:cc:4c:8b:3b:16:69:93:a7:d8:17:55:80:da:94:1e:a5: fc:18:c4:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCMCg1YX46PoEzzUkKzEHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDM3ZGQyMmI3YWFiZTI4MjIyNWFmYjI1NmI4ZDlkY2Jl YmEzNTMwHhcNMjUxMjA2MDUwMDUxWhcNMjUxMjA3MDUwMDUxWjAzMTEwLwYDVQQD Eyg0NTM2OWFiMGVlZDY0MWQ0OTFmMDYzZDFhZGE5NWMwOGQ3ODM0MzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpYPoviVhD+3aTW3K4z15OYs/Utu UlMZ85ng4CdSOlch2Ftyd5y2MKsb2Y4sQnGGKMGR0ZgfroUigy8CeHhC+H2xOqRr j+X6WfDBkNJCEzIfnld5taoAP3haJihCXkTX1wvGHrFyEQM4gNKjlD5bl8sA0KVB r3vNmEM2JdvDt9vQXw607M7EpM6UNCEtBSdJy6xDBjdOcn2D5lcLso+bX5raI5Cq wyL9K3KXiR7A/+Mbgo4q1skfDhb35S1daq3KLm0GsjjYJgfOu6gWTMScu2m0G5EO TipcrB6ae8GChXoUhoxxn7qA/gQ4q9/a2jgFUsaWijuyyulpyeB8KofgWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEU2mrDu1kHUkfBj0a2pXAjXg0McMB8GA1UdIwQY MBaAFAwDfdIreqvigiJa+yVrjZ3L66NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWIt ZThmM2E2NmVmNTU4LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWItZThmM2E2NmVmNTU4 LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAct7NMfsx uSUzn6/L4lF/9oQWrT2svuoNAjNmjwRdz/gHvLPO2ezZmEhrbeN9eHUTCQ6P63EA 40yFE5ReQ7XgLfpFCUV7Pr3fdopgF0pxuD/Rp5sBQeLvVMM+N9dAJBoLKDIXtC6N s3AafkTPdFnutega0sen7BDnJxL/EZAxuGDqn1vr1C0UZophdGKr1v2Bfrfad2fx EzMAbw4quRsRI7csmtsg1QgFqRMBhErb/W5VO/JUui9s9LaYy+vHDYAc3TIo9XGS R2wL+p827aGk4DLftO6JiKQQt+PsnSHHcGd0dSurTDRoPWghrtLMTIs7FmmTp9gX VYDalB6l/BjE6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:16 2025 by rpki-client