This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: Y20NN1Fqzj1DORgFXlc3H11O7WWWTDJ/XREHy6qCnfc= Subject key identifier: 8B:91:5A:C7:59:C9:36:38:20:7E:B4:F6:D9:06:A8:33:27:AF:84:95 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019B26D284026A27B5938B37C66477E82A05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0AE0 Signing time: Tue 16 Dec 2025 11:01:29 +0000 Manifest this update: Tue 16 Dec 2025 11:01:29 +0000 Manifest next update: Wed 17 Dec 2025 11:01:29 +0000 Files and hashes: 1: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 2: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: gG4zMqUhhycI7K60Nvt5pqVk35z1Ash9vgN+AEZ8v28=) 3: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 4: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 5: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 6: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 7: PuHKeLRMJrkiCXJNxGhHBPFnVwg.roa (hash: nCHOe9ZJjLQZxfDEYB6bXb9fwxwUmd8KIjQuB7ilPoI=) 8: cRKosgSBIX-RK4V0AEwLvPGnWiA.roa (hash: qLiyOi24iOLjlulI1zWhJAemiEwnwSpq2x31VMlWFzo=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:84:02:6a:27:b5:93:8b:37:c6:64:77:e8:2a:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Dec 16 11:01:29 2025 GMT Not After : Dec 17 11:01:29 2025 GMT Subject: CN=8b915ac759c93638207eb4f6d906a83327af8495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:85:5d:2c:ca:cf:ff:5b:df:af:6c:83:b1:c2: c6:dd:43:f7:ad:43:9c:3c:f6:bf:fa:64:4f:26:27: 95:d7:59:36:33:5f:29:37:48:1d:a1:58:05:76:15: 9c:d9:2a:ae:4a:72:6c:11:4d:b3:25:9d:83:89:de: eb:88:2f:7e:ff:9e:fe:34:ab:dd:c7:c3:e6:c8:c2: 38:e6:16:43:b2:b6:4b:21:6b:34:e1:51:76:b0:bd: cd:af:a1:2c:58:9c:4a:50:ac:75:b2:d2:20:56:00: cf:ed:ba:0e:39:9b:c1:d6:a0:74:85:c1:1a:97:99: 6e:cb:66:5b:55:26:46:af:1f:65:04:9a:56:1e:08: 88:56:18:93:4b:b0:b6:2c:a8:b8:d5:54:80:c8:f1: 94:50:d4:eb:02:0a:2f:55:35:c9:ec:e4:e2:e7:1e: 39:98:e9:8d:d7:2f:99:cd:eb:ce:18:7b:64:db:c8: d0:0f:b8:ad:ed:96:db:52:2a:bb:92:80:d0:c4:19: 84:dc:28:13:25:42:e8:15:92:4b:4b:f2:9a:a2:50: 9e:d3:f9:1a:7e:e2:94:60:0b:61:3c:6a:29:42:d2: 43:d5:0e:19:ad:dc:d8:d1:b1:7d:37:34:f4:b3:1c: 42:89:c0:ca:d0:45:fc:90:85:70:25:de:95:d8:49: f9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:91:5A:C7:59:C9:36:38:20:7E:B4:F6:D9:06:A8:33:27:AF:84:95 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:65:4c:e4:63:92:c7:41:6c:8f:a6:e5:1b:4f:c6:a8:49:13: 86:16:8c:f6:97:d3:6f:0e:5a:fb:04:f6:a3:7b:02:c9:96:c0: e2:1b:31:98:a4:0a:09:79:ad:37:8d:cf:ec:89:b9:12:a9:d8: bc:fd:5f:cc:6e:55:9d:54:68:59:e7:fb:4a:0d:06:ef:e6:ed: c2:0c:23:67:9b:4b:6d:c3:d0:ef:51:ee:90:11:56:3b:17:0e: 4d:33:99:d7:51:ad:12:b5:77:d1:e6:4d:9a:1c:e8:24:88:b6: 7e:c6:ec:46:89:69:88:9e:f3:51:47:ae:2e:98:03:da:7f:bd: fb:01:c6:0c:56:f1:86:05:6e:08:be:b0:13:21:f3:f4:fd:75: d7:93:08:6a:5e:3f:83:4b:da:5f:27:94:d9:f1:01:55:43:af: 14:82:12:7d:3e:f1:a2:3b:18:8b:52:b8:80:13:4d:c1:2a:8a: 45:dc:0f:bf:0b:ff:0e:3c:88:df:08:03:42:5a:e4:1b:2a:41: 80:f5:96:8b:35:10:9c:72:70:c7:c7:73:78:e4:03:44:27:b1: a9:fe:27:15:08:e3:b6:a5:cc:b4:13:2a:5a:16:7d:cf:7f:94: d3:b7:2b:09:ee:60:9c:0a:2a:b6:76:83:10:66:30:8d:f8:e8: eb:42:35:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0oQCaie1k4s3xmR36CoFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUxMjE2MTEwMTI5WhcNMjUxMjE3MTEwMTI5WjAzMTEwLwYDVQQD Eyg4YjkxNWFjNzU5YzkzNjM4MjA3ZWI0ZjZkOTA2YTgzMzI3YWY4NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4VdLMrP/1vfr2yDscLG3UP3rUOc PPa/+mRPJieV11k2M18pN0gdoVgFdhWc2SquSnJsEU2zJZ2Did7riC9+/57+NKvd x8PmyMI45hZDsrZLIWs04VF2sL3Nr6EsWJxKUKx1stIgVgDP7boOOZvB1qB0hcEa l5luy2ZbVSZGrx9lBJpWHgiIVhiTS7C2LKi41VSAyPGUUNTrAgovVTXJ7OTi5x45 mOmN1y+ZzevOGHtk28jQD7it7ZbbUiq7koDQxBmE3CgTJULoFZJLS/KaolCe0/ka fuKUYAthPGopQtJD1Q4ZrdzY0bF9NzT0sxxCicDK0EX8kIVwJd6V2En5VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuRWsdZyTY4IH609tkGqDMnr4SVMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2VM5GOS x0Fsj6blG0/GqEkThhaM9pfTbw5a+wT2o3sCyZbA4hsxmKQKCXmtN43P7Im5EqnY vP1fzG5VnVRoWef7Sg0G7+btwgwjZ5tLbcPQ71HukBFWOxcOTTOZ11GtErV30eZN mhzoJIi2fsbsRolpiJ7zUUeuLpgD2n+9+wHGDFbxhgVuCL6wEyHz9P1115MIal4/ g0vaXyeU2fEBVUOvFIISfT7xojsYi1K4gBNNwSqKRdwPvwv/DjyI3wgDQlrkGypB gPWWizUQnHJwx8dzeOQDRCexqf4nFQjjtqXMtBMqWhZ9z3+U07crCe5gnAoqtnaD EGYwjfjo60I19A== -----END CERTIFICATE-----Generated at Tue Dec 16 19:10:21 2025 by rpki-client