This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft File: coe8FdmVjihdWllYuOZJfl_OkfU.mft (raw, json) Hash identifier: wRK9GxXV+S8dnxDOZ1rJrJhcyhcXC7Zk4pyjd3Moe0s= Subject key identifier: 39:AC:09:DE:94:5C:27:B0:EB:33:60:7C:5D:B3:20:A9:0E:D0:B4:12 Authority key identifier: 72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5 Certificate issuer: /CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5 Certificate serial: 019AF19AEFF75CB2E8977BC00279A04F2088 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft Manifest number: 0C41 Signing time: Sat 06 Dec 2025 03:00:54 +0000 Manifest this update: Sat 06 Dec 2025 03:00:54 +0000 Manifest next update: Sun 07 Dec 2025 03:00:54 +0000 Files and hashes: 1: coe8FdmVjihdWllYuOZJfl_OkfU.crl (hash: Yo9THIurcaprAzKEumAkto3Y3uYHc/3jfdWKkIvxaVM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ef:f7:5c:b2:e8:97:7b:c0:02:79:a0:4f:20:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7287bc15d9958e285d5a5958b8e6497e5fce91f5 Validity Not Before: Dec 6 03:00:54 2025 GMT Not After : Dec 7 03:00:54 2025 GMT Subject: CN=39ac09de945c27b0eb33607c5db320a90ed0b412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:56:bc:c4:1e:29:ee:96:d2:35:6a:68:55:b4: 6f:23:2a:cb:31:b5:eb:46:c5:47:bb:df:1d:27:24: c4:20:94:8b:7b:be:9b:2b:1a:34:ec:bc:85:4b:0b: e2:a8:2d:38:2a:38:44:15:7f:d3:ba:aa:db:6a:b1: a0:11:c2:e5:79:b2:c6:90:d0:37:24:b8:f4:22:a3: c3:12:19:c3:2c:8e:61:b1:f7:8d:43:a8:f0:a1:9e: 86:f2:8a:76:88:87:ed:b0:9d:e3:6e:a3:10:b2:14: ad:93:98:d3:5b:1f:3e:70:0d:f4:d4:8c:b8:67:41: f6:0f:64:35:57:6f:19:50:0f:b3:9e:d8:07:10:c4: ae:07:7c:65:39:5a:a3:9c:db:ad:aa:dc:15:41:28: 01:f7:1d:83:66:ca:e9:51:1b:5c:3c:98:e1:f7:97: 91:88:b0:5e:91:a6:b0:ad:8f:40:0d:06:be:ec:31: 40:2e:0f:9f:0d:de:34:bd:58:86:43:5c:8c:51:a1: 75:cd:94:41:75:bc:c3:44:f4:3c:e3:f0:83:f9:41: de:c0:d6:d2:07:57:3b:b1:28:e3:84:68:47:aa:98: b6:d6:15:06:9c:88:34:94:dc:bd:7f:8d:ad:60:be: 0d:c5:66:8d:b7:60:14:9b:bc:92:3e:d5:da:bf:b3: 16:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:AC:09:DE:94:5C:27:B0:EB:33:60:7C:5D:B3:20:A9:0E:D0:B4:12 X509v3 Authority Key Identifier: keyid:72:87:BC:15:D9:95:8E:28:5D:5A:59:58:B8:E6:49:7E:5F:CE:91:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coe8FdmVjihdWllYuOZJfl_OkfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e5de4-f650-44d7-bd30-7ec213cb115f/1/coe8FdmVjihdWllYuOZJfl_OkfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:38:07:19:f1:fa:29:a7:30:52:2c:61:84:d5:de:68:0a:c2: c2:85:ee:fc:c0:e7:e0:0a:67:9e:34:0f:6f:68:df:c8:35:40: d1:98:6f:e5:35:8c:fd:32:2c:61:e8:85:bc:68:3f:72:c5:fc: 29:c1:66:6b:ec:d7:5a:f2:b7:be:61:ef:94:cc:ea:f7:80:70: 3c:f6:3b:c3:6f:6c:e6:7b:d9:1a:5b:89:02:fd:5d:80:7b:59: f4:42:63:eb:82:6a:69:1c:45:60:c5:91:34:15:d2:3f:2b:2c: 38:00:b8:56:e1:10:aa:a2:b3:19:38:3d:c0:cf:7f:29:f3:0f: 64:69:01:2a:75:de:59:fa:b5:96:35:a2:ca:4f:de:85:31:12: 6d:78:8c:5d:8e:2e:69:1c:55:dc:29:20:ea:f0:6c:a5:0e:a4: c6:57:60:fc:9c:da:67:79:aa:e8:18:5b:c0:67:ad:7b:0b:6e: 73:e6:e9:47:1d:44:16:b5:62:f4:ab:8e:52:15:67:1b:4f:ab: 6c:98:ef:cd:66:4e:f2:01:0f:a5:54:9a:eb:fe:28:10:2d:d5: 08:73:cc:94:8f:31:d5:b8:08:45:c1:8a:f8:72:d9:a6:d2:40: 9e:a8:37:4b:78:81:68:8f:fc:9c:ae:3d:8a:0e:b8:8b:81:e1: 7e:ce:59:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmu/3XLLol3vAAnmgTyCIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyODdiYzE1ZDk5NThlMjg1ZDVhNTk1OGI4ZTY0OTdlNWZj ZTkxZjUwHhcNMjUxMjA2MDMwMDU0WhcNMjUxMjA3MDMwMDU0WjAzMTEwLwYDVQQD EygzOWFjMDlkZTk0NWMyN2IwZWIzMzYwN2M1ZGIzMjBhOTBlZDBiNDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1a8xB4p7pbSNWpoVbRvIyrLMbXr RsVHu98dJyTEIJSLe76bKxo07LyFSwviqC04KjhEFX/TuqrbarGgEcLlebLGkNA3 JLj0IqPDEhnDLI5hsfeNQ6jwoZ6G8op2iIftsJ3jbqMQshStk5jTWx8+cA301Iy4 Z0H2D2Q1V28ZUA+zntgHEMSuB3xlOVqjnNutqtwVQSgB9x2DZsrpURtcPJjh95eR iLBekaawrY9ADQa+7DFALg+fDd40vViGQ1yMUaF1zZRBdbzDRPQ84/CD+UHewNbS B1c7sSjjhGhHqpi21hUGnIg0lNy9f42tYL4NxWaNt2AUm7ySPtXav7MWMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmsCd6UXCew6zNgfF2zIKkO0LQSMB8GA1UdIwQY MBaAFHKHvBXZlY4oXVpZWLjmSX5fzpH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY29lOEZkbVZqaWhkV2xsWXVPWkpmbF9Pa2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85ZTVkZTQtZjY1MC00NGQ3LWJkMzAt N2VjMjEzY2IxMTVmLzEvY29lOEZkbVZqaWhkV2xsWXVPWkpmbF9Pa2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy85ZTVkZTQtZjY1MC00NGQ3LWJkMzAtN2VjMjEzY2IxMTVm LzEvY29lOEZkbVZqaWhkV2xsWXVPWkpmbF9Pa2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvTgHGfH6 KacwUixhhNXeaArCwoXu/MDn4ApnnjQPb2jfyDVA0Zhv5TWM/TIsYeiFvGg/csX8 KcFma+zXWvK3vmHvlMzq94BwPPY7w29s5nvZGluJAv1dgHtZ9EJj64JqaRxFYMWR NBXSPyssOAC4VuEQqqKzGTg9wM9/KfMPZGkBKnXeWfq1ljWiyk/ehTESbXiMXY4u aRxV3Ckg6vBspQ6kxldg/JzaZ3mq6BhbwGetewtuc+bpRx1EFrVi9KuOUhVnG0+r bJjvzWZO8gEPpVSa6/4oEC3VCHPMlI8x1bgIRcGK+HLZptJAnqg3S3iBaI/8nK49 ig64i4Hhfs5Z6A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:16 2025 by rpki-client