This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json) Hash identifier: QnHbtA2KgakIowcL9dvukBKgp29su9SxFroy6gxPehs= Subject key identifier: 13:5F:4B:DB:66:70:67:69:5A:26:B7:8A:31:3A:9E:65:0A:EB:E5:2B Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353 Certificate serial: 019BAE6F363717E66A230D57384D7D6E1662 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft Manifest number: 072D Signing time: Sun 11 Jan 2026 19:01:22 +0000 Manifest this update: Sun 11 Jan 2026 19:01:22 +0000 Manifest next update: Mon 12 Jan 2026 19:01:22 +0000 Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: kaJZmYYhvw3JhgvL3fftArpkiMNO/xhS5bG6MQPRR6g=) 2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:6f:36:37:17:e6:6a:23:0d:57:38:4d:7d:6e:16:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353 Validity Not Before: Jan 11 19:01:22 2026 GMT Not After : Jan 12 19:01:22 2026 GMT Subject: CN=135f4bdb667067695a26b78a313a9e650aebe52b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2b:d5:58:5a:33:84:ca:3e:4f:28:35:90:19: c6:56:ee:a8:f2:ca:cc:82:84:0a:82:3a:bb:57:c1: 43:e2:53:4f:7a:d4:c8:7d:1a:cc:b8:d8:e8:fd:e4: 8c:b6:83:3e:51:6b:15:bd:5b:84:46:47:f2:66:5e: 6f:d1:33:60:7e:8c:80:71:b2:0e:26:7c:36:46:80: 2e:94:5c:32:4e:ed:41:93:f6:f3:0c:68:9c:62:27: 90:7b:f5:ec:08:ab:6d:48:85:f7:9f:47:26:b3:a0: b3:90:8b:2e:09:d0:c2:7c:b1:2f:0d:78:ad:86:5c: ba:f3:0b:ba:9c:5e:df:eb:81:76:74:00:02:83:ba: 24:be:41:5a:a8:52:0a:88:e6:a5:36:6c:39:2b:6d: 89:06:d6:38:82:75:7f:07:f7:6d:96:fe:e0:49:ac: 16:29:94:59:b4:f6:2b:30:4c:30:b8:3d:f0:b2:9b: 76:23:90:2f:89:19:6c:00:ad:c9:6e:e1:d9:b8:af: 63:e4:bb:fe:e8:f3:24:ba:03:7f:96:b1:c6:e6:37: e9:39:4e:1f:12:4c:2f:9e:b5:f4:46:5d:19:2e:82: 3c:ed:6d:90:ec:af:77:31:cb:3c:03:10:9d:88:66: 07:be:63:2c:0a:0b:39:98:3d:e7:e9:d6:75:7e:6b: b3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5F:4B:DB:66:70:67:69:5A:26:B7:8A:31:3A:9E:65:0A:EB:E5:2B X509v3 Authority Key Identifier: keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:9c:ac:0f:30:72:04:c8:69:83:12:54:50:8d:68:3d:00:c4: 67:4d:97:9e:da:71:a0:2a:8e:e2:7d:4c:21:b9:a0:f6:97:e1: 82:23:49:eb:d4:c7:8f:c9:2e:88:42:7b:25:f3:51:1e:47:4a: a2:18:58:8e:5a:7a:03:93:d0:83:e0:62:66:fd:6c:58:28:ac: d3:29:fd:81:5a:71:94:3a:12:c2:e5:8e:7c:7b:e0:39:71:58: 95:6d:1e:d2:dc:ac:a7:63:17:f4:84:f5:1f:08:f3:f6:fe:bc: c6:5a:10:dd:f0:e0:d5:c7:35:b7:ee:f6:86:ea:83:1e:17:47: 40:05:e6:13:78:10:2a:ba:11:aa:31:15:aa:8b:b8:48:ec:e2: 57:f9:dc:bf:de:8b:6e:91:4f:e4:1d:89:3b:2d:75:0e:52:20: 9f:0a:77:e6:ff:01:47:b2:0a:ab:3a:39:6b:58:1a:1d:b2:c9: f8:83:20:cd:fc:c4:42:45:db:55:84:36:af:ae:22:8b:8a:b7: d9:3d:f0:41:42:4c:80:36:fa:d5:e5:5f:ac:77:95:c3:b2:52: 49:e3:a9:97:6d:77:b3:5a:33:b0:9a:0d:81:62:75:ed:0b:59: 4b:5f:3b:85:c8:5d:81:90:02:df:79:3c:83:92:ff:93:3e:11: b0:47:e6:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuubzY3F+ZqIw1XOE19bhZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDM3ZGQyMmI3YWFiZTI4MjIyNWFmYjI1NmI4ZDlkY2Jl YmEzNTMwHhcNMjYwMTExMTkwMTIyWhcNMjYwMTEyMTkwMTIyWjAzMTEwLwYDVQQD EygxMzVmNGJkYjY2NzA2NzY5NWEyNmI3OGEzMTNhOWU2NTBhZWJlNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SvVWFozhMo+Tyg1kBnGVu6o8srM goQKgjq7V8FD4lNPetTIfRrMuNjo/eSMtoM+UWsVvVuERkfyZl5v0TNgfoyAcbIO Jnw2RoAulFwyTu1Bk/bzDGicYieQe/XsCKttSIX3n0cms6CzkIsuCdDCfLEvDXit hly68wu6nF7f64F2dAACg7okvkFaqFIKiOalNmw5K22JBtY4gnV/B/dtlv7gSawW KZRZtPYrMEwwuD3wspt2I5AviRlsAK3JbuHZuK9j5Lv+6PMkugN/lrHG5jfpOU4f EkwvnrX0Rl0ZLoI87W2Q7K93Mcs8AxCdiGYHvmMsCgs5mD3n6dZ1fmuzFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNfS9tmcGdpWia3ijE6nmUK6+UrMB8GA1UdIwQY MBaAFAwDfdIreqvigiJa+yVrjZ3L66NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWIt ZThmM2E2NmVmNTU4LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWItZThmM2E2NmVmNTU4 LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJysDzBy BMhpgxJUUI1oPQDEZ02XntpxoCqO4n1MIbmg9pfhgiNJ69THj8kuiEJ7JfNRHkdK ohhYjlp6A5PQg+BiZv1sWCis0yn9gVpxlDoSwuWOfHvgOXFYlW0e0tysp2MX9IT1 Hwjz9v68xloQ3fDg1cc1t+72huqDHhdHQAXmE3gQKroRqjEVqou4SOziV/ncv96L bpFP5B2JOy11DlIgnwp35v8BR7IKqzo5a1gaHbLJ+IMgzfzEQkXbVYQ2r64ii4q3 2T3wQUJMgDb61eVfrHeVw7JSSeOpl213s1ozsJoNgWJ17QtZS187hchdgZAC33k8 g5L/kz4RsEfmwA== -----END CERTIFICATE-----Generated at Mon Jan 12 01:47:32 2026 by rpki-client