This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json) Hash identifier: ypmiP61DWJmpVy5qVNtU/VagoI4HwBQ5CXTdV7xyPtE= Subject key identifier: A4:85:EA:EF:DF:D2:DA:99:EA:3C:6A:ED:76:5F:FD:70:BA:D7:2E:F4 Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c Certificate serial: 019B4F298A9F6F30577D76FF30203F75A9AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft Manifest number: 0F38 Signing time: Wed 24 Dec 2025 07:01:20 +0000 Manifest this update: Wed 24 Dec 2025 07:01:20 +0000 Manifest next update: Thu 25 Dec 2025 07:01:20 +0000 Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: f9xGf/KEeeGDRXR0vAXvXgrm/pW+vCgM845ZnY7zCpA=) 2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:8a:9f:6f:30:57:7d:76:ff:30:20:3f:75:a9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c Validity Not Before: Dec 24 07:01:20 2025 GMT Not After : Dec 25 07:01:20 2025 GMT Subject: CN=a485eaefdfd2da99ea3c6aed765ffd70bad72ef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4b:66:88:b0:2d:ee:ab:c5:75:85:ff:de:6e: c6:61:4e:10:6a:69:c2:db:20:65:1a:ea:fa:ca:bb: 97:e2:2d:c5:f6:c6:61:eb:3e:c4:a6:d3:ee:08:de: 31:0d:07:d1:dc:cb:e1:9e:f7:05:0b:a7:a0:65:07: a3:ca:64:88:c9:58:7e:91:b0:d3:6f:c0:66:7a:52: 11:42:9b:fb:84:03:7e:0a:90:24:ac:eb:27:f1:96: b2:48:80:9d:03:28:82:85:60:bd:05:a7:10:74:ed: 88:c3:14:07:20:b8:e3:13:f8:d3:47:cf:36:b6:94: 9f:3f:e1:ff:7d:2a:eb:d9:6a:7c:4c:88:f9:83:17: 2d:ea:ae:74:c5:0e:de:eb:b8:ce:86:83:49:f0:7a: 81:df:60:3b:eb:e3:94:e1:da:38:8c:07:fc:e6:93: 5d:99:32:52:1f:53:25:46:53:55:5b:5c:60:1c:86: 35:ce:f0:22:ce:9b:35:39:c0:e2:49:0d:6f:de:f3: 45:f4:be:77:f2:cc:af:1b:e9:df:62:d0:f1:6d:4f: 08:f6:33:80:a6:ef:db:f2:7c:71:61:c7:98:6a:60: a7:d8:0d:aa:c6:f7:0d:2e:4b:cf:22:0d:dd:82:46: 76:f2:9d:11:7c:b6:ce:60:93:fa:be:ba:b0:57:cc: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:85:EA:EF:DF:D2:DA:99:EA:3C:6A:ED:76:5F:FD:70:BA:D7:2E:F4 X509v3 Authority Key Identifier: keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:0c:da:b6:dd:d4:12:d3:06:4d:8c:62:94:8b:df:99:10:76: b0:ff:19:e1:71:28:c8:89:d9:71:f8:ed:16:f3:ba:46:4a:64: 1b:ef:92:ca:b7:c8:2b:17:bb:af:54:b4:25:78:de:e6:f7:21: 59:ef:fb:cd:ce:ce:6e:e9:6c:47:3a:1e:d2:cf:d3:98:e8:9d: d2:4b:3a:46:b9:c1:0e:5c:de:bb:40:48:c2:72:ac:7b:c0:20: 53:68:ef:29:3f:1e:59:95:f5:89:5d:0c:dd:ea:fd:96:d0:46: c5:15:8e:1e:1f:f8:10:40:a2:b5:9f:2d:6e:ce:91:e8:0f:d7: 81:9f:d4:43:70:c4:7e:60:7d:88:99:10:49:24:be:28:0d:4a: 0a:1d:e3:b2:e7:cb:5e:7b:79:ff:15:e3:8a:cf:49:71:e5:b9: cb:29:c8:ce:b9:ed:8f:98:a0:c2:db:f7:5e:e4:40:bb:67:80: 5a:7d:67:9f:4e:43:b6:70:9e:5c:77:bc:a9:01:52:18:00:bf: 84:d8:2c:fb:ca:12:aa:9c:58:40:80:1a:a1:9d:77:24:9c:7d: 35:01:c7:86:ce:39:3d:73:fe:51:fb:27:42:f6:51:29:37:0c: 2a:5f:ad:dd:56:ea:4a:6d:9d:9c:09:2e:50:a9:76:84:0b:b4: 42:08:b0:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKYqfbzBXfXb/MCA/damqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3 NjEyMGMwHhcNMjUxMjI0MDcwMTIwWhcNMjUxMjI1MDcwMTIwWjAzMTEwLwYDVQQD EyhhNDg1ZWFlZmRmZDJkYTk5ZWEzYzZhZWQ3NjVmZmQ3MGJhZDcyZWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+EtmiLAt7qvFdYX/3m7GYU4QamnC 2yBlGur6yruX4i3F9sZh6z7EptPuCN4xDQfR3MvhnvcFC6egZQejymSIyVh+kbDT b8BmelIRQpv7hAN+CpAkrOsn8ZaySICdAyiChWC9BacQdO2IwxQHILjjE/jTR882 tpSfP+H/fSrr2Wp8TIj5gxct6q50xQ7e67jOhoNJ8HqB32A76+OU4do4jAf85pNd mTJSH1MlRlNVW1xgHIY1zvAizps1OcDiSQ1v3vNF9L538syvG+nfYtDxbU8I9jOA pu/b8nxxYceYamCn2A2qxvcNLkvPIg3dgkZ28p0RfLbOYJP6vrqwV8w42wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSF6u/f0tqZ6jxq7XZf/XC61y70MB8GA1UdIwQY MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQzatt3U EtMGTYxilIvfmRB2sP8Z4XEoyInZcfjtFvO6RkpkG++SyrfIKxe7r1S0JXje5vch We/7zc7ObulsRzoe0s/TmOid0ks6RrnBDlzeu0BIwnKse8AgU2jvKT8eWZX1iV0M 3er9ltBGxRWOHh/4EECitZ8tbs6R6A/XgZ/UQ3DEfmB9iJkQSSS+KA1KCh3jsufL Xnt5/xXjis9JceW5yynIzrntj5igwtv3XuRAu2eAWn1nn05DtnCeXHe8qQFSGAC/ hNgs+8oSqpxYQIAaoZ13JJx9NQHHhs45PXP+UfsnQvZRKTcMKl+t3VbqSm2dnAku UKl2hAu0QgiwTQ== -----END CERTIFICATE-----Generated at Wed Dec 24 11:26:46 2025 by rpki-client