This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json) Hash identifier: ViKBJnVqEUqu4G/QKtha6C1Y7cXA2SlTNk0MTiNgevI= Subject key identifier: B8:80:40:ED:1A:E7:00:F9:62:FD:BB:18:6A:69:07:17:0A:9B:C4:C2 Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66 Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66 Certificate serial: 019B25BFD33020F485807EF381C898AD16D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft Manifest number: 30 Signing time: Tue 16 Dec 2025 06:01:26 +0000 Manifest this update: Tue 16 Dec 2025 06:01:26 +0000 Manifest next update: Wed 17 Dec 2025 06:01:26 +0000 Files and hashes: 1: fefy6snOGkYKz4BcC7pQsNK-PvE.asa (hash: SWtJqNFXQTI8LCAh4pXA3VcFga+kZdL/HJ4STKPzIpY=) 2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: wNmS+7k+DUssJVLnbt1uZmV51FwsEnmxtNEmr/0t1dk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:d3:30:20:f4:85:80:7e:f3:81:c8:98:ad:16:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66 Validity Not Before: Dec 16 06:01:26 2025 GMT Not After : Dec 17 06:01:26 2025 GMT Subject: CN=b88040ed1ae700f962fdbb186a6907170a9bc4c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:de:50:5b:de:5f:6d:f5:cd:94:23:9c:70:f4: 9f:10:9c:06:d2:89:5d:30:6c:ae:fe:64:e6:48:b2: 93:7e:a4:fd:2c:92:70:62:27:96:98:c3:ad:9d:11: eb:ca:35:40:9d:56:cd:11:24:67:60:15:1a:e1:cd: e1:d8:47:d1:74:e4:cf:c2:c7:34:30:d5:f5:19:a0: 16:a1:74:1b:37:73:1f:d1:99:a9:88:3a:a4:41:ae: e1:24:d5:98:6a:26:36:d5:e6:59:ce:ec:46:3e:49: e3:fe:b5:30:9d:fd:d5:4f:32:15:b0:78:80:b2:b9: f0:30:38:32:5f:d7:20:43:0e:01:f8:dc:d2:37:95: cb:2f:8f:cd:cd:cc:60:48:8b:45:4e:97:31:de:b0: ba:0a:c4:62:71:67:d8:c4:73:2e:5a:ef:90:e6:55: e1:1c:d7:d1:80:73:96:09:1e:41:c0:a6:4d:18:06: 0c:67:59:ca:8d:a2:0f:3e:86:38:c2:c3:a1:90:b9: 48:4f:07:36:fd:3b:33:54:a9:45:31:3b:db:3c:ef: f1:61:b8:b5:82:78:bb:86:78:77:28:50:cd:c8:e1: 5c:a5:ed:e8:ef:8a:ac:6a:da:51:b6:0f:74:52:98: 6a:64:e1:e9:5d:bc:0e:6e:02:05:35:09:a9:db:0c: 03:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:80:40:ED:1A:E7:00:F9:62:FD:BB:18:6A:69:07:17:0A:9B:C4:C2 X509v3 Authority Key Identifier: keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:6f:b0:bb:1c:30:a3:d2:9c:b9:7b:49:8f:5a:20:bc:35:0f: fb:c6:a9:15:17:ce:b9:76:05:cd:b0:a5:2b:1a:56:5e:d4:b1: 52:39:f3:cc:7f:ea:41:02:99:7b:62:9a:7a:98:ce:a2:8f:9a: 38:c6:c8:f8:e1:3b:0d:c0:c0:f1:9d:f1:13:ef:2c:94:dd:59: ef:90:37:90:d6:67:75:43:9e:18:1d:c5:f2:91:47:c7:36:4d: 7f:f2:a0:ce:10:1c:31:c3:5b:42:1d:62:b4:1a:e3:9c:15:49: cc:54:c1:38:6b:4c:ec:9f:01:92:55:7e:31:79:ea:c2:de:5d: 08:bf:3b:f8:dd:eb:44:6d:d6:1f:85:e5:8e:d4:44:ab:38:f1: 82:66:96:b2:6c:c3:60:91:29:c9:64:68:b8:b1:37:f5:25:41: 24:11:da:13:a1:f2:71:d1:2b:cc:6f:ec:84:4a:9a:8a:38:8f: a2:7e:03:db:a7:ac:ac:b0:f7:45:c5:ee:33:0a:20:b2:2b:1c: d8:86:31:b2:55:ac:58:da:3d:9e:49:0d:de:1d:5d:d5:29:15: 84:7c:ea:b6:57:c0:3f:6b:27:6a:9b:99:96:e6:1b:ba:20:09: 01:76:27:94:4d:a3:33:f5:88:96:9c:61:9f:4f:21:ca:5a:6e: cb:6f:41:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv9MwIPSFgH7zgciYrRbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZjZiZjBlOGM2ZWZjNGFmZmFmNzI2Mjg4NDY5Y2FmZjQx N2RlNjYwHhcNMjUxMjE2MDYwMTI2WhcNMjUxMjE3MDYwMTI2WjAzMTEwLwYDVQQD EyhiODgwNDBlZDFhZTcwMGY5NjJmZGJiMTg2YTY5MDcxNzBhOWJjNGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst5QW95fbfXNlCOccPSfEJwG0old MGyu/mTmSLKTfqT9LJJwYieWmMOtnRHryjVAnVbNESRnYBUa4c3h2EfRdOTPwsc0 MNX1GaAWoXQbN3Mf0ZmpiDqkQa7hJNWYaiY21eZZzuxGPknj/rUwnf3VTzIVsHiA srnwMDgyX9cgQw4B+NzSN5XLL4/NzcxgSItFTpcx3rC6CsRicWfYxHMuWu+Q5lXh HNfRgHOWCR5BwKZNGAYMZ1nKjaIPPoY4wsOhkLlITwc2/TszVKlFMTvbPO/xYbi1 gni7hnh3KFDNyOFcpe3o74qsatpRtg90UphqZOHpXbwObgIFNQmp2wwDLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiAQO0a5wD5Yv27GGppBxcKm8TCMB8GA1UdIwQY MBaAFJn2vw6MbvxK/69yYohGnK/0F95mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMzI1MTQtMzljMy00YjZjLWEwZTEt ZTg4Njk1OTU0NzBkLzEvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jMzI1MTQtMzljMy00YjZjLWEwZTEtZTg4Njk1OTU0NzBk LzEvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACW+wuxww o9KcuXtJj1ogvDUP+8apFRfOuXYFzbClKxpWXtSxUjnzzH/qQQKZe2KaepjOoo+a OMbI+OE7DcDA8Z3xE+8slN1Z75A3kNZndUOeGB3F8pFHxzZNf/KgzhAcMcNbQh1i tBrjnBVJzFTBOGtM7J8BklV+MXnqwt5dCL87+N3rRG3WH4XljtREqzjxgmaWsmzD YJEpyWRouLE39SVBJBHaE6HycdErzG/shEqaijiPon4D26esrLD3RcXuMwogsisc 2IYxslWsWNo9nkkN3h1d1SkVhHzqtlfAP2snapuZluYbuiAJAXYnlE2jM/WIlpxh n08hylpuy29Byg== -----END CERTIFICATE-----Generated at Tue Dec 16 09:38:09 2025 by rpki-client