This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft File: mfa_Doxu_Er_r3JiiEacr_QX3mY.mft (raw, json) Hash identifier: Mhc8LXraHoFQKSHMKqmiV8Gbsu5u1v67PqeINBD9QdM= Subject key identifier: 51:9A:A0:DB:84:B3:83:5E:F9:3F:37:10:2E:06:67:4D:B3:4D:DA:5D Authority key identifier: 99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66 Certificate issuer: /CN=99f6bf0e8c6efc4affaf726288469caff417de66 Certificate serial: 019AF19B7B25014E897319F20E329F952AD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft Manifest number: 15 Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: fefy6snOGkYKz4BcC7pQsNK-PvE.asa (hash: SWtJqNFXQTI8LCAh4pXA3VcFga+kZdL/HJ4STKPzIpY=) 2: mfa_Doxu_Er_r3JiiEacr_QX3mY.crl (hash: 5n+tG9gUontKFIa7Hb6LDtsIqOSsJZ1WrdgAMdo0Xj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:7b:25:01:4e:89:73:19:f2:0e:32:9f:95:2a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99f6bf0e8c6efc4affaf726288469caff417de66 Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=519aa0db84b3835ef93f37102e06674db34dda5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:42:3c:c5:6d:94:95:dd:04:fd:a3:4a:93:84: 9b:be:ec:17:83:21:9a:d9:5c:86:d3:08:b1:9b:da: 69:3b:f2:f6:f5:90:24:11:6a:8c:88:10:09:f8:5f: 41:f6:ff:fc:02:4a:95:64:2b:a3:4b:c1:b9:46:cc: e2:89:44:8d:d0:8e:70:e3:20:24:dc:56:ca:c2:6d: c2:ed:15:88:b3:ba:62:f4:49:44:df:5e:30:09:88: 50:77:e9:5f:96:57:09:3f:33:db:3a:ba:e5:3f:c7: 5b:df:b7:b7:83:cb:fc:81:36:d5:78:bf:22:97:44: 6a:97:b1:84:7e:5b:a5:4f:29:ee:49:ea:be:e2:aa: ef:01:5f:65:5b:23:dd:db:35:65:1b:ac:3f:2a:34: 84:2a:31:ca:3f:66:f6:cd:3d:b7:d1:67:cd:24:bd: 52:a7:8d:c7:bd:2a:3a:b6:71:0c:42:59:53:bc:ec: 08:c4:56:2c:76:5b:8e:28:e7:a0:31:82:d4:26:7c: f8:4e:20:2b:00:af:d7:43:fa:81:3b:da:90:06:ce: bb:e5:25:74:f4:e3:88:49:4a:be:dc:a0:a6:01:de: e9:9f:71:64:36:c0:53:e4:d8:87:79:c6:65:c8:80: 5d:7b:6d:ad:da:9f:b8:b9:95:7b:03:29:ab:30:3e: 93:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9A:A0:DB:84:B3:83:5E:F9:3F:37:10:2E:06:67:4D:B3:4D:DA:5D X509v3 Authority Key Identifier: keyid:99:F6:BF:0E:8C:6E:FC:4A:FF:AF:72:62:88:46:9C:AF:F4:17:DE:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfa_Doxu_Er_r3JiiEacr_QX3mY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c32514-39c3-4b6c-a0e1-e8869595470d/1/mfa_Doxu_Er_r3JiiEacr_QX3mY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d6:07:1a:3f:e1:32:57:d4:1d:6f:13:fe:ee:42:da:63:7f: 56:ac:04:50:75:ad:26:72:f6:43:c6:d7:3a:32:2f:d3:ff:53: 96:cf:fd:7b:04:81:fb:ea:a9:99:73:c6:74:26:40:fd:83:f2: 52:c8:42:4e:1b:ec:3e:64:77:3d:db:c4:0b:70:7c:c0:5c:aa: 3f:b4:8b:2f:b6:0a:c0:27:44:27:0a:59:3e:16:14:d7:46:e9: ff:d1:ab:2b:fb:3b:ad:cd:c8:dd:79:b1:96:41:eb:d0:ca:6d: 6a:bb:41:c5:be:c5:da:1d:94:9e:fe:83:57:9a:83:42:b8:12: b5:27:c7:b3:e3:64:d4:57:c9:ef:09:bd:5f:b6:29:54:9d:84: 47:49:b8:d8:a0:b9:32:41:b0:6c:1b:67:f1:d4:3b:89:df:7f: b0:2a:a5:33:c3:1a:2c:ed:06:60:7c:49:54:af:a5:5b:21:fd: 3d:a4:32:00:80:63:45:18:9b:21:32:c1:67:4e:77:21:71:f6: d0:0d:c6:e9:98:f9:8d:2c:0f:42:73:90:e2:c1:50:7c:fe:83: a7:ea:cf:31:79:88:81:fd:48:53:92:17:f6:38:05:27:e1:cb: 45:a0:d7:08:49:88:27:b4:e4:97:29:8b:b5:32:a0:3d:2a:dd: 0d:a9:63:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3slAU6JcxnyDjKflSrQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZjZiZjBlOGM2ZWZjNGFmZmFmNzI2Mjg4NDY5Y2FmZjQx N2RlNjYwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD Eyg1MTlhYTBkYjg0YjM4MzVlZjkzZjM3MTAyZTA2Njc0ZGIzNGRkYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0I8xW2Uld0E/aNKk4SbvuwXgyGa 2VyG0wixm9ppO/L29ZAkEWqMiBAJ+F9B9v/8AkqVZCujS8G5RsziiUSN0I5w4yAk 3FbKwm3C7RWIs7pi9ElE314wCYhQd+lfllcJPzPbOrrlP8db37e3g8v8gTbVeL8i l0Rql7GEflulTynuSeq+4qrvAV9lWyPd2zVlG6w/KjSEKjHKP2b2zT230WfNJL1S p43HvSo6tnEMQllTvOwIxFYsdluOKOegMYLUJnz4TiArAK/XQ/qBO9qQBs675SV0 9OOISUq+3KCmAd7pn3FkNsBT5NiHecZlyIBde22t2p+4uZV7AymrMD6T1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGaoNuEs4Ne+T83EC4GZ02zTdpdMB8GA1UdIwQY MBaAFJn2vw6MbvxK/69yYohGnK/0F95mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMzI1MTQtMzljMy00YjZjLWEwZTEt ZTg4Njk1OTU0NzBkLzEvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jMzI1MTQtMzljMy00YjZjLWEwZTEtZTg4Njk1OTU0NzBk LzEvbWZhX0RveHVfRXJfcjNKaWlFYWNyX1FYM21ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNYHGj/h MlfUHW8T/u5C2mN/VqwEUHWtJnL2Q8bXOjIv0/9Tls/9ewSB++qpmXPGdCZA/YPy UshCThvsPmR3PdvEC3B8wFyqP7SLL7YKwCdEJwpZPhYU10bp/9GrK/s7rc3I3Xmx lkHr0MptartBxb7F2h2Unv6DV5qDQrgStSfHs+Nk1FfJ7wm9X7YpVJ2ER0m42KC5 MkGwbBtn8dQ7id9/sCqlM8MaLO0GYHxJVK+lWyH9PaQyAIBjRRibITLBZ053IXH2 0A3G6Zj5jSwPQnOQ4sFQfP6Dp+rPMXmIgf1IU5IX9jgFJ+HLRaDXCEmIJ7TklymL tTKgPSrdDaljzg== -----END CERTIFICATE-----Generated at Sat Dec 6 05:37:24 2025 by rpki-client