This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft File: mcoxPONE16H95lvEpDIZoLN2Egw.mft (raw, json) Hash identifier: Cql3QWryjb8WQOLVK8H7MztcZWB2NG7n7AE0BOrobV4= Subject key identifier: 35:10:AF:65:38:BE:21:8B:D9:8E:64:D7:4C:82:78:AD:07:3D:5B:E3 Authority key identifier: 99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C Certificate issuer: /CN=99ca313ce344d7a1fde65bc4a43219a0b376120c Certificate serial: 019B269B73FB622151B7BC8DA1FF9B0E4C80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft Manifest number: 0F23 Signing time: Tue 16 Dec 2025 10:01:20 +0000 Manifest this update: Tue 16 Dec 2025 10:01:20 +0000 Manifest next update: Wed 17 Dec 2025 10:01:20 +0000 Files and hashes: 1: mcoxPONE16H95lvEpDIZoLN2Egw.crl (hash: s9eTu1RIqt2/INPiyUUabGNzbJfwymWQ1v/DweMLW80=) 2: tEi5vuv1eLPj-3VnZOBDfOuaqlo.roa (hash: 8uihYN23ifte2oFPdIuQAy0N/nJNzlURQ/IFD78Lv/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:73:fb:62:21:51:b7:bc:8d:a1:ff:9b:0e:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ca313ce344d7a1fde65bc4a43219a0b376120c Validity Not Before: Dec 16 10:01:20 2025 GMT Not After : Dec 17 10:01:20 2025 GMT Subject: CN=3510af6538be218bd98e64d74c8278ad073d5be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:24:a3:3c:ab:d1:97:c8:17:6d:cf:61:3a:d1: 82:57:72:b7:46:bc:e0:9b:f2:c0:5e:bf:b0:a8:c9: 33:10:6b:4b:f5:40:cb:d5:f4:2c:9c:36:ef:d9:c9: 48:3f:0f:ce:5a:c2:6e:5c:06:5d:89:fa:51:91:97: 91:4f:ed:5b:0e:e7:58:18:d7:47:b3:f2:0c:16:e2: 87:e5:0d:b0:3e:d1:f7:77:e3:15:ba:c1:2d:e3:80: 5c:f6:32:9c:b5:e5:c7:ce:bd:3e:c8:5a:56:6d:2e: 03:54:9e:b7:d6:ca:90:02:6b:b2:dd:37:1b:ee:71: d2:b0:9e:12:3a:96:b3:49:5c:17:1d:f1:3d:d6:f3: 9d:ec:b6:7d:4a:dd:69:4b:77:62:3e:03:ff:80:bb: 2a:dc:d8:ad:5e:cd:83:86:60:6b:8b:1a:a9:b2:c8: dc:7c:da:b0:0b:5d:aa:a1:69:dd:ec:20:95:f9:8d: 83:10:28:d8:47:61:db:e4:41:d5:a9:51:1d:e6:45: c4:2a:b1:40:5f:88:df:1c:8e:b6:5e:54:61:4c:aa: c8:6a:5a:c1:88:33:ef:65:d1:36:8f:40:a8:0d:e8: df:8d:96:c3:dd:f3:9c:7a:fc:cb:1e:19:79:61:d0: 40:51:d3:49:6b:79:fd:4d:5f:d0:01:77:f7:05:2a: fa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:10:AF:65:38:BE:21:8B:D9:8E:64:D7:4C:82:78:AD:07:3D:5B:E3 X509v3 Authority Key Identifier: keyid:99:CA:31:3C:E3:44:D7:A1:FD:E6:5B:C4:A4:32:19:A0:B3:76:12:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcoxPONE16H95lvEpDIZoLN2Egw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c90ef8-cc7f-45df-8eac-e8604439407f/1/mcoxPONE16H95lvEpDIZoLN2Egw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:14:a3:c9:ee:03:72:45:3f:5d:c0:e3:e1:2e:f3:e6:89:33: ce:eb:0c:b8:f7:31:6f:a4:f4:52:58:d9:5f:07:78:76:d1:6e: fb:c0:6c:23:1d:52:d6:99:77:a8:60:1c:1d:c2:4c:03:03:77: cf:40:3f:10:5a:fc:7e:33:98:34:f5:fb:5a:21:a3:f0:e7:e3: 5b:be:d2:b2:85:cb:66:79:b6:62:98:df:b0:fd:d0:48:d0:64: ce:ee:d6:1c:e4:da:1b:b1:1b:09:f4:c5:ef:75:05:d3:ef:d1: 91:0a:7b:1f:b7:28:75:51:9a:d3:ab:76:37:76:dd:f9:4e:e9: 34:30:c6:d0:44:d8:48:97:0f:28:ca:92:dc:07:69:18:8b:82: 4e:60:24:6d:0b:66:ea:9a:4a:54:b6:af:60:5c:e9:e9:e7:94: f5:70:31:25:9d:4d:23:fc:7c:f5:e8:e3:cb:ab:3b:68:53:4e: ec:e9:98:d2:55:4e:73:75:86:1f:f5:5b:c2:d1:c9:6a:78:af: b6:50:a8:7e:30:21:bc:d1:03:e1:92:cf:19:d3:bb:41:69:88: eb:a0:8f:9f:3a:0a:78:03:55:e8:99:2a:45:de:6e:20:bb:ad: be:f7:c5:4d:53:a5:d3:91:9a:a2:7f:e5:0e:34:b8:a7:5d:9c: b6:a5:ed:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm3P7YiFRt7yNof+bDkyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2EzMTNjZTM0NGQ3YTFmZGU2NWJjNGE0MzIxOWEwYjM3 NjEyMGMwHhcNMjUxMjE2MTAwMTIwWhcNMjUxMjE3MTAwMTIwWjAzMTEwLwYDVQQD EygzNTEwYWY2NTM4YmUyMThiZDk4ZTY0ZDc0YzgyNzhhZDA3M2Q1YmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SSjPKvRl8gXbc9hOtGCV3K3Rrzg m/LAXr+wqMkzEGtL9UDL1fQsnDbv2clIPw/OWsJuXAZdifpRkZeRT+1bDudYGNdH s/IMFuKH5Q2wPtH3d+MVusEt44Bc9jKcteXHzr0+yFpWbS4DVJ631sqQAmuy3Tcb 7nHSsJ4SOpazSVwXHfE91vOd7LZ9St1pS3diPgP/gLsq3NitXs2DhmBrixqpssjc fNqwC12qoWnd7CCV+Y2DECjYR2Hb5EHVqVEd5kXEKrFAX4jfHI62XlRhTKrIalrB iDPvZdE2j0CoDejfjZbD3fOcevzLHhl5YdBAUdNJa3n9TV/QAXf3BSr6vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUQr2U4viGL2Y5k10yCeK0HPVvjMB8GA1UdIwQY MBaAFJnKMTzjRNeh/eZbxKQyGaCzdhIMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMt ZTg2MDQ0Mzk0MDdmLzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jOTBlZjgtY2M3Zi00NWRmLThlYWMtZTg2MDQ0Mzk0MDdm LzEvbWNveFBPTkUxNkg5NWx2RXBESVpvTE4yRWd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRSjye4D ckU/XcDj4S7z5okzzusMuPcxb6T0UljZXwd4dtFu+8BsIx1S1pl3qGAcHcJMAwN3 z0A/EFr8fjOYNPX7WiGj8OfjW77SsoXLZnm2YpjfsP3QSNBkzu7WHOTaG7EbCfTF 73UF0+/RkQp7H7codVGa06t2N3bd+U7pNDDG0ETYSJcPKMqS3AdpGIuCTmAkbQtm 6ppKVLavYFzp6eeU9XAxJZ1NI/x89ejjy6s7aFNO7OmY0lVOc3WGH/VbwtHJaniv tlCofjAhvNED4ZLPGdO7QWmI66CPnzoKeANV6JkqRd5uILutvvfFTVOl05Gaon/l DjS4p12ctqXtWQ== -----END CERTIFICATE-----Generated at Tue Dec 16 18:43:08 2025 by rpki-client