This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json) Hash identifier: pmtXB3K8FM3QYSMtnIEYn2qR5JT/ijprwmnnqhapi/Y= Subject key identifier: 40:D7:DD:F5:1D:42:04:3A:EB:7B:9C:9C:0E:1D:BE:CB:5E:08:62:89 Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c Certificate serial: 019B3FB645A706F598A3F800E245403D37D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft Manifest number: 0F30 Signing time: Sun 21 Dec 2025 07:01:08 +0000 Manifest this update: Sun 21 Dec 2025 07:01:08 +0000 Manifest next update: Mon 22 Dec 2025 07:01:08 +0000 Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: /EQrCTflgpR/Cc7py90Y5Sn2K361k8av1z5jGevtYlQ=) 2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:45:a7:06:f5:98:a3:f8:00:e2:45:40:3d:37:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c Validity Not Before: Dec 21 07:01:08 2025 GMT Not After : Dec 22 07:01:08 2025 GMT Subject: CN=40d7ddf51d42043aeb7b9c9c0e1dbecb5e086289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5f:9c:c3:15:d6:70:55:62:08:75:9b:4d:bb: 39:9c:1d:06:7f:99:4a:38:d2:35:b8:7d:bc:a7:3a: 06:f7:a7:90:66:8a:51:7e:75:eb:32:b0:35:df:ed: 67:21:d3:90:3d:54:32:b5:0c:f7:43:e7:a9:1d:56: e1:c2:06:da:e5:91:8e:77:ac:ba:15:b4:54:04:e9: 67:ab:c1:5c:bb:7c:ab:31:5a:fd:77:ef:25:da:ae: bb:a2:ed:84:bc:8a:7a:1d:d6:d2:73:f5:08:03:fe: d1:6f:e6:67:46:9f:e8:53:12:d8:29:9c:54:e8:a9: be:87:1c:1c:0e:70:76:56:c3:a5:9c:c9:a5:d1:3a: 21:e0:8d:3a:4d:7d:2e:60:3c:f1:88:e8:77:c0:c6: d5:b0:29:23:fa:3c:f9:b3:38:4b:ad:81:60:be:6a: 11:c4:3c:3a:ee:c4:d5:ea:a0:5a:d5:5b:e6:f7:9b: e4:fe:1c:c8:40:90:1b:aa:99:f8:78:f8:d7:88:27: ae:b7:3c:26:f6:98:75:0f:b2:94:b8:c0:77:30:ba: 18:a0:d6:65:ee:ce:6b:95:d7:fa:47:e6:0f:9a:3c: 97:70:78:e2:35:a4:b1:a1:7e:36:e9:89:e5:72:fa: a0:06:a2:a9:40:c7:5a:65:8c:c8:4f:7e:84:ae:7c: 2f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D7:DD:F5:1D:42:04:3A:EB:7B:9C:9C:0E:1D:BE:CB:5E:08:62:89 X509v3 Authority Key Identifier: keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a2:25:d7:59:8a:bd:34:8a:7c:f5:6c:64:ff:31:f7:1f:a6: 0b:7b:aa:7c:ab:8d:02:a9:f5:3f:a7:3e:ae:15:cb:51:ba:e9: 67:ea:d1:ef:e3:62:61:a6:50:00:dc:69:54:7d:d1:64:30:a5: 19:25:3b:6e:92:fc:07:62:ec:b6:47:63:b0:53:f8:21:8b:af: b2:4d:bd:4c:e9:ad:ca:2e:3f:9a:ac:82:b6:a1:8b:e9:06:f3: 49:12:d0:49:eb:79:51:0b:5c:6d:c1:6e:26:a7:15:9c:38:30: ef:c7:ee:cb:e4:3c:5f:9d:f5:36:9b:ea:e9:ca:53:5a:0b:b3: 33:45:c1:a9:ee:ca:1a:67:c6:6c:b0:1e:8f:6a:93:20:41:45: 52:1e:b7:e5:2d:61:1f:aa:80:f5:b2:2c:e3:6f:91:7e:72:e9: 97:66:25:4e:70:72:09:57:3f:78:83:95:9f:0d:00:24:a9:3b: 6d:ca:57:8f:1a:64:c4:72:ca:df:14:85:8b:86:80:5f:00:28: ab:7a:a8:9e:aa:d7:7b:f9:a1:a4:b9:f8:b1:a8:12:f0:18:43: 91:04:1e:40:0b:f2:63:3e:72:6f:05:9a:cd:f0:ba:49:7d:66: 06:36:91:d1:b3:f9:fb:19:5c:9a:82:47:d6:9c:0b:a8:01:f2: 8b:e3:b7:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tkWnBvWYo/gA4kVAPTfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3 NjEyMGMwHhcNMjUxMjIxMDcwMTA4WhcNMjUxMjIyMDcwMTA4WjAzMTEwLwYDVQQD Eyg0MGQ3ZGRmNTFkNDIwNDNhZWI3YjljOWMwZTFkYmVjYjVlMDg2Mjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl+cwxXWcFViCHWbTbs5nB0Gf5lK ONI1uH28pzoG96eQZopRfnXrMrA13+1nIdOQPVQytQz3Q+epHVbhwgba5ZGOd6y6 FbRUBOlnq8Fcu3yrMVr9d+8l2q67ou2EvIp6HdbSc/UIA/7Rb+ZnRp/oUxLYKZxU 6Km+hxwcDnB2VsOlnMml0Toh4I06TX0uYDzxiOh3wMbVsCkj+jz5szhLrYFgvmoR xDw67sTV6qBa1Vvm95vk/hzIQJAbqpn4ePjXiCeutzwm9ph1D7KUuMB3MLoYoNZl 7s5rldf6R+YPmjyXcHjiNaSxoX426YnlcvqgBqKpQMdaZYzIT36ErnwvhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDX3fUdQgQ663ucnA4dvsteCGKJMB8GA1UdIwQY MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqIl11mK vTSKfPVsZP8x9x+mC3uqfKuNAqn1P6c+rhXLUbrpZ+rR7+NiYaZQANxpVH3RZDCl GSU7bpL8B2LstkdjsFP4IYuvsk29TOmtyi4/mqyCtqGL6QbzSRLQSet5UQtcbcFu JqcVnDgw78fuy+Q8X531Npvq6cpTWguzM0XBqe7KGmfGbLAej2qTIEFFUh635S1h H6qA9bIs42+RfnLpl2YlTnByCVc/eIOVnw0AJKk7bcpXjxpkxHLK3xSFi4aAXwAo q3qonqrXe/mhpLn4sagS8BhDkQQeQAvyYz5ybwWazfC6SX1mBjaR0bP5+xlcmoJH 1pwLqAHyi+O3rA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:52:17 2025 by rpki-client