This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json) Hash identifier: wotyxgwcDstwjJoQLgUrVsSTA7ogQnagh0r2DsSGvkE= Subject key identifier: D5:F8:36:D4:22:C3:71:5C:37:8E:12:1C:EF:82:2F:F7:71:CA:BB:85 Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c Certificate serial: 019B3231CF7E62C529B8353E80733FC625A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft Manifest number: 0F29 Signing time: Thu 18 Dec 2025 16:01:23 +0000 Manifest this update: Thu 18 Dec 2025 16:01:23 +0000 Manifest next update: Fri 19 Dec 2025 16:01:23 +0000 Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: J1a1h9P7C7IAEgddJkDzZ4ela1TIx8rNT/jsuKOlBuU=) 2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:cf:7e:62:c5:29:b8:35:3e:80:73:3f:c6:25:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c Validity Not Before: Dec 18 16:01:23 2025 GMT Not After : Dec 19 16:01:23 2025 GMT Subject: CN=d5f836d422c3715c378e121cef822ff771cabb85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:06:fb:5b:92:c4:b9:c4:70:3d:a2:a8:b9:31: 25:4a:aa:7a:c6:06:a6:5b:fb:e7:4c:d3:1e:80:47: 60:f7:6b:17:8a:52:ac:e8:bd:25:21:e9:22:64:42: cf:a2:f4:d0:fb:88:c6:dc:e5:a5:04:88:63:b9:45: 48:6e:cb:ab:5e:d1:ad:c5:d5:6a:3f:e3:be:b7:da: b2:77:09:f5:68:46:bb:12:92:5f:c2:e6:7c:a0:83: 60:6f:d7:3f:44:06:fa:0c:a7:e7:b3:01:5f:92:42: 35:6b:48:30:3d:60:d3:22:4f:f9:9a:50:0d:24:8c: ff:09:85:7a:78:45:16:8a:1f:ad:49:a8:a1:a3:28: ce:ff:00:a4:b8:5d:26:f8:50:1d:13:8e:97:51:99: 97:39:bc:36:f0:27:7a:54:27:d0:ea:51:a1:d1:5d: 94:de:b5:d0:75:dc:c8:25:75:96:d6:ba:aa:88:7e: eb:a3:d6:8f:45:27:b0:c7:31:28:b7:96:2a:86:d8: 92:e6:0a:3d:64:b6:25:13:16:bc:c4:ae:00:fa:07: 1a:93:e6:3f:3e:58:57:b7:5d:35:e9:1d:b1:2f:55: 15:d4:a3:2c:0d:13:d3:8f:cd:49:ac:33:8d:07:81: 28:b1:6d:f5:e1:70:9f:36:ca:27:15:3d:f1:4d:d3: 09:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F8:36:D4:22:C3:71:5C:37:8E:12:1C:EF:82:2F:F7:71:CA:BB:85 X509v3 Authority Key Identifier: keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:22:e7:3a:a2:2d:47:c9:33:a0:ac:f5:05:d1:9a:9c:7e:bc: fb:04:85:af:dc:f6:00:bd:40:46:7a:39:31:d1:06:de:60:6f: d2:30:75:ec:9b:9b:78:f0:8e:30:4a:a9:2e:8c:c0:9e:40:cf: e3:c9:c9:f6:58:ce:86:91:bd:3b:47:af:24:6f:ba:eb:b3:2e: c3:21:1a:e1:31:f7:51:40:58:88:52:f1:4d:95:8b:b2:63:18: 6e:58:d7:53:96:e9:91:bd:d7:61:36:28:86:8f:4f:b3:78:c0: eb:bb:b9:d2:0b:bd:41:ec:77:62:ad:0b:af:97:46:2e:a3:c0: 18:e3:f0:c5:e2:f7:6f:64:03:d4:d6:e2:75:9f:32:71:5a:75: 21:e6:16:76:8b:2e:6a:1b:d1:b0:3c:ff:a5:39:d8:92:00:44: 0f:9d:27:d4:83:9f:5e:b2:7c:50:97:0c:65:d4:31:3e:2a:8e: 7b:7c:b7:ec:51:b1:8f:ac:d6:d4:15:19:f5:b0:a6:69:a6:8a: 4a:50:27:e3:ae:51:2f:dd:c3:e1:6c:3d:9d:31:0a:0d:b2:95: c2:df:50:01:c5:ba:f8:98:1e:ed:8f:95:47:e9:20:39:ee:01: 8e:92:11:b7:6b:e7:48:b3:0e:43:2b:94:f1:1d:a1:dc:c1:d7: fe:70:7e:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMc9+YsUpuDU+gHM/xiWnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3 NjEyMGMwHhcNMjUxMjE4MTYwMTIzWhcNMjUxMjE5MTYwMTIzWjAzMTEwLwYDVQQD EyhkNWY4MzZkNDIyYzM3MTVjMzc4ZTEyMWNlZjgyMmZmNzcxY2FiYjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qb7W5LEucRwPaKouTElSqp6xgam W/vnTNMegEdg92sXilKs6L0lIekiZELPovTQ+4jG3OWlBIhjuUVIbsurXtGtxdVq P+O+t9qydwn1aEa7EpJfwuZ8oINgb9c/RAb6DKfnswFfkkI1a0gwPWDTIk/5mlAN JIz/CYV6eEUWih+tSaihoyjO/wCkuF0m+FAdE46XUZmXObw28Cd6VCfQ6lGh0V2U 3rXQddzIJXWW1rqqiH7ro9aPRSewxzEot5YqhtiS5go9ZLYlExa8xK4A+gcak+Y/ PlhXt1016R2xL1UV1KMsDRPTj81JrDONB4EosW314XCfNsonFT3xTdMJ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNX4NtQiw3FcN44SHO+CL/dxyruFMB8GA1UdIwQY MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSLnOqIt R8kzoKz1BdGanH68+wSFr9z2AL1ARno5MdEG3mBv0jB17JubePCOMEqpLozAnkDP 48nJ9ljOhpG9O0evJG+667MuwyEa4TH3UUBYiFLxTZWLsmMYbljXU5bpkb3XYTYo ho9Ps3jA67u50gu9Qex3Yq0Lr5dGLqPAGOPwxeL3b2QD1NbidZ8ycVp1IeYWdosu ahvRsDz/pTnYkgBED50n1IOfXrJ8UJcMZdQxPiqOe3y37FGxj6zW1BUZ9bCmaaaK SlAn465RL93D4Ww9nTEKDbKVwt9QAcW6+Jge7Y+VR+kgOe4BjpIRt2vnSLMOQyuU 8R2h3MHX/nB+Mw== -----END CERTIFICATE-----Generated at Thu Dec 18 21:50:17 2025 by rpki-client