This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: 76ZZszMLOQk0zj6Nzg65gpW3TTru2GGOIJmCKmKGlaQ= Subject key identifier: 21:1B:19:2C:D1:E8:63:79:AC:CB:77:BF:8E:A0:B9:37:8F:28:D1:8C Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019AF0BF984D5130843AB73574D5174715EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0AC4 Signing time: Fri 05 Dec 2025 23:01:19 +0000 Manifest this update: Fri 05 Dec 2025 23:01:19 +0000 Manifest next update: Sat 06 Dec 2025 23:01:19 +0000 Files and hashes: 1: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 2: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: bg+rXushNvDUt3Wrrv8/sDN+go+ayLKKfIUqjbMN83I=) 3: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 4: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 5: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 6: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 7: PuHKeLRMJrkiCXJNxGhHBPFnVwg.roa (hash: nCHOe9ZJjLQZxfDEYB6bXb9fwxwUmd8KIjQuB7ilPoI=) 8: cRKosgSBIX-RK4V0AEwLvPGnWiA.roa (hash: qLiyOi24iOLjlulI1zWhJAemiEwnwSpq2x31VMlWFzo=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:98:4d:51:30:84:3a:b7:35:74:d5:17:47:15:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Dec 5 23:01:19 2025 GMT Not After : Dec 6 23:01:19 2025 GMT Subject: CN=211b192cd1e86379accb77bf8ea0b9378f28d18c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:0d:34:5c:9a:cb:19:fa:4f:c9:eb:59:c4: 01:65:e7:57:67:58:93:76:e5:fe:f4:d8:45:7f:5e: 12:f2:30:69:f4:c0:1a:b0:c2:16:71:b6:68:6a:4d: 4e:5e:05:e3:3d:8e:b8:6e:43:1d:f0:14:e3:68:8e: 1b:02:3d:0b:18:e5:19:90:96:72:e4:fd:e7:ed:82: 78:7b:de:c2:c7:8f:00:c6:e6:4e:ac:5e:fd:9c:9e: 21:29:79:77:1a:97:14:66:87:b0:6f:da:c0:89:65: 07:b0:14:21:04:59:25:80:72:e3:66:ca:f8:f0:99: f0:d3:1f:7a:28:15:be:d8:be:00:5b:51:47:e7:7a: 6e:34:8f:0d:53:a4:8b:f9:36:c6:db:4c:6c:2e:73: e1:09:42:cf:48:07:0f:5f:8b:e9:6b:f9:3a:e0:c3: e7:a0:a1:33:bd:41:1f:19:9f:04:cc:83:10:1e:78: 9e:76:2a:6c:72:15:54:ee:92:8b:af:a6:94:20:d6: 8f:eb:a7:e7:04:cd:6a:9e:c8:97:b8:65:92:d6:63: 2b:41:83:58:07:6a:1f:38:84:de:be:cc:f2:73:ba: f8:e4:12:99:65:d7:ba:b4:5d:8b:8a:fb:13:80:67: b8:2a:25:40:ee:c2:c4:6c:48:bb:5d:2b:44:a9:46: d6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1B:19:2C:D1:E8:63:79:AC:CB:77:BF:8E:A0:B9:37:8F:28:D1:8C X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:78:d0:6e:11:e5:bb:ee:d9:4b:21:61:e8:d7:59:e7:ca:76: e9:d3:b5:b6:17:92:f6:30:68:14:ac:ee:d9:c6:a7:eb:3f:05: 4a:29:2b:bc:e7:b5:0f:42:30:f0:45:08:d7:65:a5:01:a9:30: 84:f6:7d:8a:52:22:75:1b:01:bb:47:ce:6c:9c:53:c5:55:4e: 11:76:e8:47:25:00:1d:4c:10:4c:41:aa:e8:7a:b2:3e:5c:f9: 9e:d8:fb:e5:1b:1e:7f:03:62:3c:58:86:ad:6d:ce:e2:49:bb: 2c:d2:aa:7a:c7:90:a5:bf:06:b2:42:f8:a9:3e:ea:c0:b9:92: 02:8a:40:10:18:dc:2f:39:98:96:fa:95:0b:0e:ea:d6:c1:c5: 27:c0:62:b3:24:a0:87:97:fc:b0:eb:32:81:55:7c:22:c4:ab: 73:43:0e:23:af:2b:19:5b:a0:59:32:f2:e9:39:a7:51:b5:bc: 68:b9:9f:7e:2f:5c:66:8e:78:94:04:c8:4a:1a:c0:b9:06:c5: 2b:9c:6e:ae:ae:99:62:54:99:01:a6:83:bc:f2:9b:21:47:af: cb:30:d4:1b:84:53:09:37:12:a5:38:4d:59:17:1b:84:42:cd: 8b:93:0b:ad:ae:e6:b5:b7:47:72:7f:a1:bd:cc:f8:d1:6f:ae: 0f:81:83:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5hNUTCEOrc1dNUXRxXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUxMjA1MjMwMTE5WhcNMjUxMjA2MjMwMTE5WjAzMTEwLwYDVQQD EygyMTFiMTkyY2QxZTg2Mzc5YWNjYjc3YmY4ZWEwYjkzNzhmMjhkMThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrsNNFyayxn6T8nrWcQBZedXZ1iT duX+9NhFf14S8jBp9MAasMIWcbZoak1OXgXjPY64bkMd8BTjaI4bAj0LGOUZkJZy 5P3n7YJ4e97Cx48AxuZOrF79nJ4hKXl3GpcUZoewb9rAiWUHsBQhBFklgHLjZsr4 8Jnw0x96KBW+2L4AW1FH53puNI8NU6SL+TbG20xsLnPhCULPSAcPX4vpa/k64MPn oKEzvUEfGZ8EzIMQHniedipschVU7pKLr6aUINaP66fnBM1qnsiXuGWS1mMrQYNY B2ofOITevszyc7r45BKZZde6tF2LivsTgGe4KiVA7sLEbEi7XStEqUbWNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEbGSzR6GN5rMt3v46guTePKNGMMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3jQbhHl u+7ZSyFh6NdZ58p26dO1theS9jBoFKzu2can6z8FSikrvOe1D0Iw8EUI12WlAakw hPZ9ilIidRsBu0fObJxTxVVOEXboRyUAHUwQTEGq6HqyPlz5ntj75RsefwNiPFiG rW3O4km7LNKqeseQpb8GskL4qT7qwLmSAopAEBjcLzmYlvqVCw7q1sHFJ8BisySg h5f8sOsygVV8IsSrc0MOI68rGVugWTLy6TmnUbW8aLmffi9cZo54lATIShrAuQbF K5xurq6ZYlSZAaaDvPKbIUevyzDUG4RTCTcSpThNWRcbhELNi5MLra7mtbdHcn+h vcz40W+uD4GDVg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:22 2025 by rpki-client