This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json) Hash identifier: 2jjtOK+r8IEmJnoOqbikkDehPelv32bxOzzTTaKaceU= Subject key identifier: B0:A0:52:B2:72:93:C8:59:E4:A2:81:E9:8D:B4:23:47:D3:CC:36:B5 Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c Certificate serial: 019AF46552E5B3272D066EB23FEAE9557768 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft Manifest number: 0F09 Signing time: Sat 06 Dec 2025 16:01:12 +0000 Manifest this update: Sat 06 Dec 2025 16:01:12 +0000 Manifest next update: Sun 07 Dec 2025 16:01:12 +0000 Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: yjMN/L7b0KKAkjfrlOl/Ak5YnRWga7OQo0obQde4aow=) 2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:52:e5:b3:27:2d:06:6e:b2:3f:ea:e9:55:77:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c Validity Not Before: Dec 6 16:01:12 2025 GMT Not After : Dec 7 16:01:12 2025 GMT Subject: CN=b0a052b27293c859e4a281e98db42347d3cc36b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4a:44:b7:82:2c:52:61:64:cd:67:90:61:66: c8:05:5f:cc:90:dc:66:d2:3a:91:3a:b7:2f:82:82: 52:c8:82:b0:6c:5c:5a:ed:19:2d:13:9c:9c:97:88: c8:ce:c7:e9:e2:88:4d:4b:8f:ed:89:2d:17:e2:79: 3f:aa:e5:05:c9:fd:29:d9:ff:31:ae:de:8e:54:7b: fb:49:6d:5c:00:50:60:6a:97:4c:b5:40:de:1d:99: 4f:6d:c2:64:95:2d:f2:33:13:51:c2:d3:2b:85:70: 82:e3:19:66:cc:f2:f4:03:9d:a7:73:f4:b7:54:25: 1c:88:23:4f:0c:a5:99:c1:62:f8:e2:6b:9f:c3:d8: 7e:14:ed:88:24:25:78:3a:87:c6:13:cf:e4:cf:0e: 75:7b:d4:85:a7:0b:a5:fc:36:65:d7:89:3b:17:f9: 5b:0c:0e:3a:13:b4:26:e4:a6:b4:34:ee:f1:96:83: 62:56:8f:71:e3:44:54:d7:53:69:fa:32:e9:6c:34: a3:91:55:36:e0:e4:05:61:c4:be:ab:36:c4:b2:52: 00:e9:af:b1:e5:db:e3:73:32:70:0c:3a:49:03:9f: 06:7b:51:25:a6:fb:dd:d0:0c:55:71:cc:5a:4b:9b: f2:25:c4:81:67:09:7d:28:64:05:d9:79:75:02:b7: 8f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A0:52:B2:72:93:C8:59:E4:A2:81:E9:8D:B4:23:47:D3:CC:36:B5 X509v3 Authority Key Identifier: keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:d6:12:d9:82:4a:b2:46:e4:64:56:09:e1:f1:18:71:03:6f: d3:76:dd:47:5f:85:69:92:18:23:f6:0f:0c:3e:be:3a:f7:bb: bd:2f:83:61:78:60:fb:8f:1e:74:44:cb:f2:68:41:14:65:53: 37:75:ce:3e:63:7f:7f:b6:67:bf:d9:63:76:1f:30:5e:ba:2b: 1b:b5:29:57:40:e5:69:03:24:b7:a9:43:b3:17:8a:bb:3e:05: 76:90:37:49:b0:ca:75:e1:b9:3d:7f:b0:6b:73:4a:5f:26:90: 12:86:76:17:8e:cc:e5:04:fa:3e:cb:0c:17:3a:f8:7a:df:3c: cd:5e:0e:88:13:ae:bd:e6:4a:8c:d6:14:d1:53:08:18:5a:89: f8:97:fa:b3:0a:d8:58:28:67:5b:71:e4:86:da:87:b9:39:b3: 07:51:f2:90:84:dd:d3:48:75:54:a9:c2:b0:f7:1d:3c:42:1a: 9d:f3:99:e5:48:28:87:5b:91:ee:c9:b7:5a:0f:bc:83:4f:98: 3f:9c:51:07:2a:fd:c1:35:7f:3c:b7:49:ed:57:1b:ce:91:c8: 23:9c:52:d1:d1:b0:e0:2c:39:96:85:59:24:bd:53:f3:06:5e: 8a:33:d3:4d:ed:f4:3f:ee:0b:32:c0:26:21:94:89:c7:0d:53: 83:57:37:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVLlsyctBm6yP+rpVXdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3 NjEyMGMwHhcNMjUxMjA2MTYwMTEyWhcNMjUxMjA3MTYwMTEyWjAzMTEwLwYDVQQD EyhiMGEwNTJiMjcyOTNjODU5ZTRhMjgxZTk4ZGI0MjM0N2QzY2MzNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukpEt4IsUmFkzWeQYWbIBV/MkNxm 0jqROrcvgoJSyIKwbFxa7RktE5ycl4jIzsfp4ohNS4/tiS0X4nk/quUFyf0p2f8x rt6OVHv7SW1cAFBgapdMtUDeHZlPbcJklS3yMxNRwtMrhXCC4xlmzPL0A52nc/S3 VCUciCNPDKWZwWL44mufw9h+FO2IJCV4OofGE8/kzw51e9SFpwul/DZl14k7F/lb DA46E7Qm5Ka0NO7xloNiVo9x40RU11Np+jLpbDSjkVU24OQFYcS+qzbEslIA6a+x 5dvjczJwDDpJA58Ge1Elpvvd0AxVccxaS5vyJcSBZwl9KGQF2Xl1AreP0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCgUrJyk8hZ5KKB6Y20I0fTzDa1MB8GA1UdIwQY MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeNYS2YJK skbkZFYJ4fEYcQNv03bdR1+FaZIYI/YPDD6+Ove7vS+DYXhg+48edETL8mhBFGVT N3XOPmN/f7Znv9ljdh8wXrorG7UpV0DlaQMkt6lDsxeKuz4FdpA3SbDKdeG5PX+w a3NKXyaQEoZ2F47M5QT6PssMFzr4et88zV4OiBOuveZKjNYU0VMIGFqJ+Jf6swrY WChnW3HkhtqHuTmzB1HykITd00h1VKnCsPcdPEIanfOZ5Ugoh1uR7sm3Wg+8g0+Y P5xRByr9wTV/PLdJ7VcbzpHII5xS0dGw4Cw5loVZJL1T8wZeijPTTe30P+4LMsAm IZSJxw1Tg1c3Bg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:26 2025 by rpki-client