This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
File:                     coYn-VAmUUtCZUBY9J7rm3xI8CA.mft (raw, json)
Hash identifier:          CJnWV87rEWtieZtUq+ou9DmHQA+tTOB8jXTqr27lui0=
Subject key identifier:   26:72:F1:60:83:9B:51:7C:37:F1:C1:04:7C:72:14:F4:98:04:C2:96
Authority key identifier: 72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20
Certificate issuer:       /CN=728627f95026514b42654058f49eeb9b7c48f020
Certificate serial:       019B3DC7BA9FB8928940C036C1F850FD6E50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
Manifest number:          04A2
Signing time:             Sat 20 Dec 2025 22:00:58 +0000
Manifest this update:     Sat 20 Dec 2025 22:00:58 +0000
Manifest next update:     Sun 21 Dec 2025 22:00:58 +0000
Files and hashes:         1: 4q5L0T8IzmyOi7UmyokrDZ0n7yo.roa (hash: rKsZoGXihCrThcqNeLgDUuHM1BM1DfS8QEjoysPba8A=)
                          2: GV_0uBo9U-qXTNCsZ-0ommJTyoU.roa (hash: opWXn12DJLh2jYPAXbqu6bXDVmWJk2qaChEIKh6x3kw=)
                          3: coYn-VAmUUtCZUBY9J7rm3xI8CA.crl (hash: HOuIyuAj6acP/7X4RqxNwwiwuygM4aHdguA4RRBxTuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Dec 2025 22:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:3d:c7:ba:9f:b8:92:89:40:c0:36:c1:f8:50:fd:6e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728627f95026514b42654058f49eeb9b7c48f020
        Validity
            Not Before: Dec 20 22:00:58 2025 GMT
            Not After : Dec 21 22:00:58 2025 GMT
        Subject: CN=2672f160839b517c37f1c1047c7214f49804c296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:06:2c:9f:4e:32:4f:2e:5a:53:76:32:c7:19:
                    d6:ca:16:e3:b7:26:69:6c:ef:fb:42:57:c7:53:d5:
                    b6:3d:15:4a:d9:b2:cb:62:a4:23:bd:1e:a2:d9:6d:
                    c9:79:87:b8:99:32:5d:d4:b9:5f:f9:a4:be:45:ef:
                    73:6c:b3:db:9e:bc:71:54:eb:35:19:a7:f1:94:f7:
                    c1:95:b6:39:d7:05:5c:22:db:bc:54:5f:72:9f:cc:
                    4c:49:00:7f:d8:06:af:98:26:ec:64:15:66:92:61:
                    74:e5:1a:64:fc:82:55:3a:bd:90:07:04:bd:50:e1:
                    66:6d:48:b9:27:b2:2d:77:23:e2:da:72:79:79:cc:
                    9e:aa:31:e3:4a:c1:da:fb:11:f2:d5:9b:14:b3:9d:
                    22:85:9a:65:98:34:9a:72:a8:e8:44:9a:b6:92:1b:
                    4c:60:02:34:f9:0a:1d:53:fc:d6:08:98:0a:05:26:
                    d2:da:6f:a3:16:19:a5:17:89:77:30:6a:f6:b6:c5:
                    d6:cd:a1:dd:1a:d5:b8:04:d5:72:c7:21:ce:1b:d9:
                    f4:8b:eb:31:31:8e:47:15:9f:46:da:62:30:1a:1c:
                    05:29:48:42:08:75:e1:44:01:2e:d0:c3:a2:97:4f:
                    70:5d:f2:b3:c1:39:e7:3d:1b:7b:36:99:e2:18:18:
                    e6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:F1:60:83:9B:51:7C:37:F1:C1:04:7C:72:14:F4:98:04:C2:96
            X509v3 Authority Key Identifier:
                keyid:72:86:27:F9:50:26:51:4B:42:65:40:58:F4:9E:EB:9B:7C:48:F0:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coYn-VAmUUtCZUBY9J7rm3xI8CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b96cee-9009-458b-aa60-b33a4097bcb0/1/coYn-VAmUUtCZUBY9J7rm3xI8CA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5a:2e:e8:20:72:65:d6:3a:65:82:9e:1f:ca:e6:b5:ce:ee:
         60:d7:03:55:89:9d:d1:e7:45:66:80:1a:62:ae:2b:60:72:74:
         01:f4:37:96:89:5e:a8:5a:33:39:2a:a0:6c:d6:14:fa:d9:f2:
         1e:74:9c:84:0d:7f:38:9e:2c:93:8f:bf:64:5a:1e:38:6b:a1:
         f0:9d:ef:13:10:e7:5e:00:9d:bc:4d:e3:e9:5b:aa:8f:6e:33:
         aa:23:98:a2:4d:60:0c:37:ec:c6:fb:30:a2:37:43:37:81:cc:
         ed:0b:a2:0b:97:52:75:08:59:fa:70:09:06:9f:a7:df:1a:f7:
         1d:1f:16:6a:06:f7:15:82:0e:aa:29:9b:44:b2:2c:67:8e:a8:
         fa:08:68:ea:ac:ef:66:37:b6:5e:e5:c6:f4:2f:e2:0b:b6:94:
         7e:fb:7c:4e:b6:89:19:4b:58:81:5b:01:fe:fa:65:35:9b:af:
         2b:13:73:91:56:70:0c:f7:a1:b1:79:fe:3b:43:84:dc:6a:52:
         52:21:38:0c:32:de:fa:8c:41:1f:3e:ad:92:26:d5:7d:f5:5e:
         8f:16:b8:b5:df:ee:79:eb:d7:13:64:f2:03:d8:83:87:76:0a:
         6c:dd:ec:27:ec:29:1f:b0:09:92:55:ea:e5:a7:a4:64:b7:f3:
         90:63:43:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9x7qfuJKJQMA2wfhQ/W5QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyODYyN2Y5NTAyNjUxNGI0MjY1NDA1OGY0OWVlYjliN2M0
OGYwMjAwHhcNMjUxMjIwMjIwMDU4WhcNMjUxMjIxMjIwMDU4WjAzMTEwLwYDVQQD
EygyNjcyZjE2MDgzOWI1MTdjMzdmMWMxMDQ3YzcyMTRmNDk4MDRjMjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgYsn04yTy5aU3YyxxnWyhbjtyZp
bO/7QlfHU9W2PRVK2bLLYqQjvR6i2W3JeYe4mTJd1Llf+aS+Re9zbLPbnrxxVOs1
GafxlPfBlbY51wVcItu8VF9yn8xMSQB/2AavmCbsZBVmkmF05Rpk/IJVOr2QBwS9
UOFmbUi5J7ItdyPi2nJ5ecyeqjHjSsHa+xHy1ZsUs50ihZplmDSacqjoRJq2khtM
YAI0+QodU/zWCJgKBSbS2m+jFhmlF4l3MGr2tsXWzaHdGtW4BNVyxyHOG9n0i+sx
MY5HFZ9G2mIwGhwFKUhCCHXhRAEu0MOil09wXfKzwTnnPRt7NpniGBjmGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZy8WCDm1F8N/HBBHxyFPSYBMKWMB8GA1UdIwQY
MBaAFHKGJ/lQJlFLQmVAWPSe65t8SPAgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY29Zbi1WQW1VVXRDWlVCWTlKN3JtM3hJOENBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTZjZWUtOTAwOS00NThiLWFhNjAt
YjMzYTQwOTdiY2IwLzEvY29Zbi1WQW1VVXRDWlVCWTlKN3JtM3hJOENBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOTZjZWUtOTAwOS00NThiLWFhNjAtYjMzYTQwOTdiY2Iw
LzEvY29Zbi1WQW1VVXRDWlVCWTlKN3JtM3hJOENBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1ou6CBy
ZdY6ZYKeH8rmtc7uYNcDVYmd0edFZoAaYq4rYHJ0AfQ3loleqFozOSqgbNYU+tny
HnSchA1/OJ4sk4+/ZFoeOGuh8J3vExDnXgCdvE3j6Vuqj24zqiOYok1gDDfsxvsw
ojdDN4HM7QuiC5dSdQhZ+nAJBp+n3xr3HR8Wagb3FYIOqimbRLIsZ46o+gho6qzv
Zje2XuXG9C/iC7aUfvt8TraJGUtYgVsB/vplNZuvKxNzkVZwDPehsXn+O0OE3GpS
UiE4DDLe+oxBHz6tkibVffVejxa4td/ueevXE2TyA9iDh3YKbN3sJ+wpH7AJklXq
5aekZLfzkGNDcQ==
-----END CERTIFICATE-----
Generated at Sun Dec 21 06:45:55 2025 by rpki-client