This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json)
Hash identifier: WT3Q2IhngE6sKJsfr+uO2t8pykGXNcNzSfbQQ6btKrI=
Subject key identifier: BC:F5:5C:5B:C2:B4:18:EE:66:A0:BE:4E:0E:5A:41:0F:85:DE:C6:24
Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Certificate serial: 019C435951B65AE1CA3387AADC979C1FC7C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
Manifest number: 0FB7
Signing time: Mon 09 Feb 2026 17:00:52 +0000
Manifest this update: Mon 09 Feb 2026 17:00:52 +0000
Manifest next update: Tue 10 Feb 2026 17:00:52 +0000
Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: oFOQlz6z1WNHQ0wTFvNxhS9ZSlYanB03LFJpLRRx9Q0=)
2: rimlBIzCj6ChW12tijpiuaL0iyE.roa (hash: E3T7lvNJ5GTCh5ypS2tgSuaQDxK4k6bvIKVv4pmyjmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:51:b6:5a:e1:ca:33:87:aa:dc:97:9c:1f:c7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c
Validity
Not Before: Feb 9 17:00:52 2026 GMT
Not After : Feb 10 17:00:52 2026 GMT
Subject: CN=bcf55c5bc2b418ee66a0be4e0e5a410f85dec624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:66:e7:bc:58:52:d7:05:56:ba:3f:5b:59:
57:5b:71:df:1d:61:61:af:56:47:ca:3d:af:c9:8f:
57:3a:89:7c:4f:5e:0d:60:4d:29:ec:3a:40:29:36:
fa:65:ef:2f:34:1f:f6:32:98:92:3b:c9:5d:d6:01:
e5:1d:2e:05:ba:8c:b0:4c:b1:9c:8a:b3:66:23:52:
d7:12:71:fb:88:c6:bb:f1:58:92:cf:ba:fa:cc:5d:
a1:78:46:c3:d1:52:f2:88:91:d8:99:90:3c:ef:d4:
08:9e:0a:97:af:5f:fd:12:be:ae:1d:53:ea:67:bd:
17:35:d6:0f:9f:9a:31:1b:5d:ce:b0:dc:4d:87:ec:
5e:94:3e:47:ea:97:36:ee:0d:e3:f5:ee:d8:a1:d3:
c4:32:6e:c4:f8:ae:7b:7c:37:f7:42:12:7b:bc:cb:
1c:78:12:b5:c7:5e:a6:15:eb:3a:53:09:f4:35:3c:
e1:aa:da:b7:07:da:9f:87:19:7b:67:15:8a:22:5f:
69:57:30:61:df:f9:8f:b9:69:07:17:3b:36:ca:07:
83:6d:32:fb:6f:2e:d5:49:6a:4c:ea:06:ea:39:b5:
99:67:13:f3:56:72:6e:a8:90:df:ee:81:d7:e9:7a:
f6:af:ec:31:6a:96:33:31:2f:d2:63:cd:67:0c:32:
44:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F5:5C:5B:C2:B4:18:EE:66:A0:BE:4E:0E:5A:41:0F:85:DE:C6:24
X509v3 Authority Key Identifier:
keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:cf:7d:f4:ac:a8:66:15:1e:cb:51:30:f5:3c:78:b4:32:20:
58:b3:f7:d4:71:33:ef:f5:0b:1b:21:54:ce:55:5b:15:f6:5c:
e7:f7:43:76:87:a9:ef:65:ed:2f:87:9a:7e:9b:48:9c:83:fc:
8c:9c:72:7d:92:ed:5a:81:00:bc:c1:94:50:df:5b:40:c6:c0:
2e:49:44:be:86:a8:6f:32:33:b8:a2:2b:fb:89:06:1a:c3:c8:
80:b1:3b:49:2a:ca:f3:f8:ea:c3:0e:9a:7a:d8:11:4a:ab:f1:
c4:c1:9e:b2:7a:c3:2e:1f:0d:5d:aa:3c:13:d4:91:09:08:51:
a9:c5:e0:4a:64:b9:89:72:a9:9d:7e:b4:bd:c2:47:3a:6c:f0:
72:c5:3a:78:84:13:ff:8f:f7:7c:2c:86:15:27:32:c1:f3:e2:
43:18:06:83:c9:7c:42:55:d6:e3:f7:23:95:45:25:47:a3:78:
98:8a:7a:25:2d:e1:7d:89:a7:41:b5:41:81:8c:5e:bf:4a:2c:
60:be:dc:60:ad:a2:91:6b:f2:14:1f:0e:81:c2:12:24:dc:8e:
09:ed:b0:82:f9:9e:b7:fa:19:99:bb:31:d6:9d:92:e9:1b:a5:
9e:49:53:1f:28:c9:52:43:48:e9:1c:4b:af:44:97:f9:d0:7f:
d7:dc:95:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:08 2026 by rpki-client