This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft File: DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json) Hash identifier: sAOgnK6LbokiZdZzKDUpBz7ZtgatBZfeSV0nGITBhKU= Subject key identifier: C2:3E:36:27:0D:8B:BE:A1:6F:45:20:BA:AC:F3:A6:53:63:6D:E8:63 Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 Certificate issuer: /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353 Certificate serial: 019B378E66967A1D749B30C23A47DDC54143 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft Manifest number: 06EF Signing time: Fri 19 Dec 2025 17:00:37 +0000 Manifest this update: Fri 19 Dec 2025 17:00:37 +0000 Manifest next update: Sat 20 Dec 2025 17:00:37 +0000 Files and hashes: 1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: Fv1tITNPgpC5n0RtZpTuKCTYJhlko5Fys/yRVQ/Bt1Q=) 2: tDD9B-lEcyqNvoNAET5cpeS9CP4.roa (hash: rKwo3X/3AKqFNwDQChvvjw66ToIOE4+PnSG73JsvhIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8e:66:96:7a:1d:74:9b:30:c2:3a:47:dd:c5:41:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353 Validity Not Before: Dec 19 17:00:37 2025 GMT Not After : Dec 20 17:00:37 2025 GMT Subject: CN=c23e36270d8bbea16f4520baacf3a653636de863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:38:4a:9d:c0:df:90:7a:42:fa:e5:ef:d7:49: 42:ce:fc:6f:a9:ef:cf:54:c5:03:a1:aa:be:40:0f: 8e:5d:2f:62:70:3b:a8:da:bd:cb:ca:9e:b7:f4:e2: 8b:1d:03:6d:bf:7e:8b:17:6c:c5:49:d5:a5:59:e1: e5:74:1b:96:72:d8:fa:0b:40:d6:5b:d2:96:37:e9: 78:f7:23:d6:20:5b:9d:46:b4:30:ac:3d:06:c2:6b: ae:d7:52:d3:48:47:08:f4:16:77:95:45:d6:2c:ef: 25:30:a5:f0:69:e1:28:0b:45:b4:90:bf:23:be:a5: cd:c8:3c:e4:51:77:4c:00:70:34:62:74:8b:c2:67: 06:c6:35:ad:6c:5d:7e:59:d9:de:f1:37:5e:d9:7a: 81:a1:aa:64:42:5a:38:8c:11:7b:28:18:f3:f2:8b: c0:37:c5:c2:24:42:c0:f4:09:e9:47:15:20:74:8d: ad:52:e6:29:11:ab:4c:72:4d:c5:bf:c3:ee:0f:20: a6:51:4b:aa:2c:33:b1:ca:fe:73:7f:6a:bd:b3:f0: d7:d9:63:09:f0:ae:c7:3e:3a:c8:ee:3a:15:b0:c7: c6:ec:5b:f3:b4:7e:0f:48:88:cb:c3:2a:1d:ed:f6: ac:8c:ec:0e:ca:7a:a5:82:4e:79:96:40:db:6c:85: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3E:36:27:0D:8B:BE:A1:6F:45:20:BA:AC:F3:A6:53:63:6D:E8:63 X509v3 Authority Key Identifier: keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fc:25:49:dd:cf:36:e8:5a:f8:3c:ca:3e:ce:c0:1e:fc:a1: b3:93:86:31:4b:1b:f2:21:f2:2a:12:5c:a7:ce:4b:bd:b1:9e: 91:c0:1d:bf:00:8d:7c:37:82:dc:d8:45:b7:0d:23:df:9b:07: d0:33:e1:45:1e:46:cd:1d:a0:47:3e:3f:d0:8a:84:8c:e4:4e: 9e:94:bd:ff:64:14:78:60:a8:88:b4:42:1b:c2:9f:75:07:5c: 19:2d:3c:ba:d8:6a:b9:71:cb:7a:5e:3f:41:fb:e5:d8:b9:8c: 9c:4a:b2:54:1e:e9:05:c0:9c:10:38:52:51:ce:14:e5:ab:6b: 9b:48:ba:55:aa:fb:2b:f6:17:95:8c:4a:1c:e6:b0:49:d0:6c: 71:09:95:cd:87:4f:75:e0:7a:01:67:7e:95:c0:0b:e9:30:9a: b4:f8:ea:3f:90:4f:30:68:48:9a:bc:03:64:54:f0:12:1e:d4: 9f:16:d4:a1:fb:e2:08:54:51:d5:f8:45:69:ba:5e:b2:21:15: 5f:59:e8:7b:74:c6:02:bf:8c:4e:56:01:df:f4:4e:40:06:ad: 34:1a:52:2d:81:7a:a3:74:9c:fd:70:36:ce:a9:72:cc:75:20: 30:18:a7:e5:12:a9:cc:26:87:dd:b2:0d:58:b5:ca:43:9b:e1: d5:e5:c3:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jmaWeh10mzDCOkfdxUFDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDM3ZGQyMmI3YWFiZTI4MjIyNWFmYjI1NmI4ZDlkY2Jl YmEzNTMwHhcNMjUxMjE5MTcwMDM3WhcNMjUxMjIwMTcwMDM3WjAzMTEwLwYDVQQD EyhjMjNlMzYyNzBkOGJiZWExNmY0NTIwYmFhY2YzYTY1MzYzNmRlODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDhKncDfkHpC+uXv10lCzvxvqe/P VMUDoaq+QA+OXS9icDuo2r3Lyp639OKLHQNtv36LF2zFSdWlWeHldBuWctj6C0DW W9KWN+l49yPWIFudRrQwrD0Gwmuu11LTSEcI9BZ3lUXWLO8lMKXwaeEoC0W0kL8j vqXNyDzkUXdMAHA0YnSLwmcGxjWtbF1+Wdne8Tde2XqBoapkQlo4jBF7KBjz8ovA N8XCJELA9AnpRxUgdI2tUuYpEatMck3Fv8PuDyCmUUuqLDOxyv5zf2q9s/DX2WMJ 8K7HPjrI7joVsMfG7FvztH4PSIjLwyod7fasjOwOynqlgk55lkDbbIX6+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMI+NicNi76hb0UguqzzplNjbehjMB8GA1UdIwQY MBaAFAwDfdIreqvigiJa+yVrjZ3L66NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWIt ZThmM2E2NmVmNTU4LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWItZThmM2E2NmVmNTU4 LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfwlSd3P Nuha+DzKPs7AHvyhs5OGMUsb8iHyKhJcp85LvbGekcAdvwCNfDeC3NhFtw0j35sH 0DPhRR5GzR2gRz4/0IqEjOROnpS9/2QUeGCoiLRCG8KfdQdcGS08uthquXHLel4/ Qfvl2LmMnEqyVB7pBcCcEDhSUc4U5atrm0i6Var7K/YXlYxKHOawSdBscQmVzYdP deB6AWd+lcAL6TCatPjqP5BPMGhImrwDZFTwEh7UnxbUofviCFRR1fhFabpesiEV X1noe3TGAr+MTlYB3/ROQAatNBpSLYF6o3Sc/XA2zqlyzHUgMBin5RKpzCaH3bIN WLXKQ5vh1eXDZQ== -----END CERTIFICATE-----Generated at Fri Dec 19 23:46:10 2025 by rpki-client