This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: 7uwlOyHm2mY78Mlc76H5DU5d1TYtw+gGabW8BXa+sYQ= Subject key identifier: 39:82:AD:17:62:7D:7F:7F:B4:DA:E1:9E:A0:41:4C:D8:79:95:B5:63 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 019B194DC50B6D81DB860398DD5C9A474395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0AD9 Signing time: Sat 13 Dec 2025 20:01:25 +0000 Manifest this update: Sat 13 Dec 2025 20:01:25 +0000 Manifest next update: Sun 14 Dec 2025 20:01:25 +0000 Files and hashes: 1: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=) 2: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: kxjN33p4YmiwmwFf61HtW4UhZjGRgHsWa+02R76pOo0=) 3: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=) 4: FstRBv2kO53NDHW81Q9Mg07SWg4.roa (hash: +uStvYqgj5hn3d6BL0rwAnmTzIsGb1x7W+G4jAHTkdA=) 5: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=) 6: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=) 7: PuHKeLRMJrkiCXJNxGhHBPFnVwg.roa (hash: nCHOe9ZJjLQZxfDEYB6bXb9fwxwUmd8KIjQuB7ilPoI=) 8: cRKosgSBIX-RK4V0AEwLvPGnWiA.roa (hash: qLiyOi24iOLjlulI1zWhJAemiEwnwSpq2x31VMlWFzo=) 9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=) 10: i1bI7bZVKfcJ9vCnWPYEzcCSqOc.roa (hash: I9SME80ARJLDqvqmW5BBXCvNlxHc4Su4PKuf6AZPdG4=) 11: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=) 12: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=) 13: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=) 14: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:c5:0b:6d:81:db:86:03:98:dd:5c:9a:47:43:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Dec 13 20:01:25 2025 GMT Not After : Dec 14 20:01:25 2025 GMT Subject: CN=3982ad17627d7f7fb4dae19ea0414cd87995b563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:55:18:5f:bd:05:75:cb:0b:3f:94:2e:f6:1b: 76:83:a2:5a:8b:0c:ca:78:7a:ad:f3:6d:2c:70:9a: 52:2e:f4:c4:0e:4d:48:42:99:ab:a6:6a:02:64:7a: f9:65:61:98:67:e5:90:e3:af:59:e7:12:66:7b:1b: 1d:69:79:41:72:7b:7e:5f:e2:60:f1:a3:fc:50:ae: 76:25:4a:58:af:7b:e7:78:bd:d1:57:24:20:54:dc: 25:14:65:4d:94:54:51:0e:d9:a7:fb:85:0c:83:27: 89:fb:25:6b:c8:25:08:c7:4d:98:51:73:74:63:b4: 9a:8c:8b:5c:e8:73:58:71:7a:b3:65:cb:7e:3e:18: fa:07:57:92:e8:2d:be:28:85:72:8b:ae:d3:49:23: f9:64:75:d2:b9:cf:5e:10:e0:04:e9:d5:7f:0c:ce: 91:32:b4:04:93:f9:eb:3c:18:2d:c5:e8:29:37:8b: 27:ef:d3:b7:7b:c7:18:57:f3:50:b2:b9:2e:bf:0c: 62:73:07:99:00:1a:95:9f:ad:94:41:cd:3e:ed:d1: d3:44:89:84:2f:f3:ec:21:c3:43:a0:38:cb:fd:9f: 67:f5:04:b5:7e:99:6d:c7:1f:ab:af:04:15:aa:d2: a2:a7:61:f7:54:5a:5a:13:ac:41:c0:d0:25:87:af: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:82:AD:17:62:7D:7F:7F:B4:DA:E1:9E:A0:41:4C:D8:79:95:B5:63 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d6:4b:fa:3d:e0:35:fc:6c:43:1e:8b:94:bf:3c:14:d1:a3: 7e:e9:b4:60:69:17:42:82:0b:74:0a:e2:f1:07:dc:96:63:89: 8a:8d:65:45:23:68:6f:3c:3c:5a:ef:2c:e6:55:18:ca:b3:50: 12:c9:8c:87:e9:75:4b:45:42:a9:33:63:5a:05:fd:ba:d3:86: b9:a5:ee:75:dc:bb:b5:04:f5:3e:ce:a1:c7:60:99:56:ee:3a: 1a:0c:26:51:67:5e:41:38:fe:a8:89:56:f0:e5:22:61:68:27: 81:f1:6f:fd:db:1d:b0:67:85:d6:10:51:56:d7:56:14:9d:a1: 3a:f5:c6:fb:ed:6b:6f:9a:94:37:f1:94:77:b2:4e:2d:7b:5b: cb:3b:49:61:51:33:6e:6f:5d:9f:00:fe:7b:53:59:38:9f:8b: 58:76:f3:ec:30:c8:e5:95:c6:46:c6:ea:a6:06:82:a1:e3:1e: 83:dc:01:be:66:55:3e:86:94:44:b4:c6:a3:c9:0e:f1:fa:7d: 41:da:78:c1:92:ee:f8:79:a7:0a:e6:16:a3:12:6a:bf:e7:89: a8:3e:d6:fc:0d:ad:a1:66:65:a4:05:a1:4a:29:9f:37:37:21: e1:30:8d:1b:30:ea:12:72:e0:51:e8:17:2c:af:d6:60:fe:0a: 4d:a4:1e:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTcULbYHbhgOY3VyaR0OVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjUxMjEzMjAwMTI1WhcNMjUxMjE0MjAwMTI1WjAzMTEwLwYDVQQD EygzOTgyYWQxNzYyN2Q3ZjdmYjRkYWUxOWVhMDQxNGNkODc5OTViNTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFUYX70FdcsLP5Qu9ht2g6JaiwzK eHqt820scJpSLvTEDk1IQpmrpmoCZHr5ZWGYZ+WQ469Z5xJmexsdaXlBcnt+X+Jg 8aP8UK52JUpYr3vneL3RVyQgVNwlFGVNlFRRDtmn+4UMgyeJ+yVryCUIx02YUXN0 Y7SajItc6HNYcXqzZct+Phj6B1eS6C2+KIVyi67TSSP5ZHXSuc9eEOAE6dV/DM6R MrQEk/nrPBgtxegpN4sn79O3e8cYV/NQsrkuvwxicweZABqVn62UQc0+7dHTRImE L/PsIcNDoDjL/Z9n9QS1fpltxx+rrwQVqtKip2H3VFpaE6xBwNAlh6+28QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmCrRdifX9/tNrhnqBBTNh5lbVjMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9ZL+j3g NfxsQx6LlL88FNGjfum0YGkXQoILdAri8QfclmOJio1lRSNobzw8Wu8s5lUYyrNQ EsmMh+l1S0VCqTNjWgX9utOGuaXuddy7tQT1Ps6hx2CZVu46GgwmUWdeQTj+qIlW 8OUiYWgngfFv/dsdsGeF1hBRVtdWFJ2hOvXG++1rb5qUN/GUd7JOLXtbyztJYVEz bm9dnwD+e1NZOJ+LWHbz7DDI5ZXGRsbqpgaCoeMeg9wBvmZVPoaURLTGo8kO8fp9 Qdp4wZLu+HmnCuYWoxJqv+eJqD7W/A2toWZlpAWhSimfNzch4TCNGzDqEnLgUegX LK/WYP4KTaQeYA== -----END CERTIFICATE-----Generated at Sun Dec 14 01:56:19 2025 by rpki-client